$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: SPrdaqRRy5F2rhww1hJ3QeHE7U91jR45uee4ewxYIJ0= Subject key identifier: 76:D7:C3:44:4E:70:01:AA:12:83:B8:3B:F8:91:33:65:DF:87:D5:4B Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 6B5B1393704C9ECAB3296C46CABE3D5912F036B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0275 Signing time: Wed 15 Apr 2026 07:41:33 +0000 Manifest this update: Wed 15 Apr 2026 07:36:33 +0000 Manifest next update: Sat 18 Apr 2026 15:08:33 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: 7aywUIXFUEuMUfYXXNrXCaHCS72hzYp6TKpPIt+Y3+k=) 2: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: XqXu+zF2UgKyMtW0OAtYE2nDCYBvp2qwc9DG/kRcaQc=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: 82YqFhb4/ZH/TVttJfl2TXhpxvQiL0hSWz60Ovq6qlE=) 4: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: ZY6/yTzTB0VPLAu2EmeaFz398YorukpRHSOffB+JUQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:5b:13:93:70:4c:9e:ca:b3:29:6c:46:ca:be:3d:59:12:f0:36:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Apr 15 07:36:33 2026 GMT Not After : Apr 18 15:08:33 2026 GMT Subject: CN=76D7C3444E7001AA1283B83BF8913365DF87D54B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8c:c9:ce:b5:e0:98:4d:df:d0:b8:43:f0:88: 3b:31:49:21:3a:f7:ef:ea:95:f5:42:fe:82:85:d6: 1f:1c:a6:cb:77:38:9a:b7:a0:14:a6:72:6d:ea:9e: e0:5f:c3:a2:ab:b3:e8:06:20:97:89:19:ce:23:1a: 8b:ef:5f:44:c9:f3:4a:f0:51:4c:e6:e6:73:6c:a7: 58:bb:10:36:a6:10:f2:35:8e:75:0f:04:cd:b5:2f: 32:ab:e1:7f:2d:9a:a0:9a:1c:20:1a:b6:f4:8e:2b: b9:d2:3f:69:a6:4a:8b:39:ab:b7:65:a2:09:eb:a0: a8:fd:da:84:12:e1:18:d8:43:6f:87:d3:b0:f7:c1: 31:c3:68:c9:47:f1:6d:15:b0:ac:15:03:57:c7:f1: 67:2d:f7:5f:96:36:8a:1a:50:12:45:52:0e:6d:21: 03:dd:44:a3:5e:97:fd:2d:1a:a6:8f:77:68:a3:52: 28:d5:aa:b5:e7:44:1c:a2:aa:e3:86:61:e1:8e:36: dc:78:6b:d3:51:b3:a3:68:b5:f4:99:6e:0d:a8:53: 9e:e7:38:31:8e:53:eb:3c:cc:6d:3d:b6:f0:96:77: bf:d7:b5:89:9b:24:51:07:c1:13:d8:aa:00:e9:fe: 85:d4:33:90:e7:ef:1d:64:eb:a1:78:7f:08:e5:17: d0:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:D7:C3:44:4E:70:01:AA:12:83:B8:3B:F8:91:33:65:DF:87:D5:4B X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:03:99:36:ad:b7:64:02:12:4c:fa:d6:a9:3a:92:db:25:bf: ba:e9:1d:8a:a8:bd:65:c1:93:ea:84:54:d6:56:73:24:8d:df: e4:9b:f5:09:9e:c6:dd:0d:f2:db:18:65:10:b2:a0:a7:bb:38: 6d:c4:f5:a9:c7:d7:f4:34:25:72:b6:f8:4f:0f:6a:0a:d3:5b: fa:e4:52:e1:91:58:8a:f9:92:c2:75:79:ad:48:fb:82:ea:73: fc:a3:1d:80:53:8e:ce:99:43:ff:b5:2b:62:8f:33:46:99:6a: 9a:d2:cc:37:69:fc:67:9f:f6:d4:12:3b:58:88:98:60:b5:f3: 2f:92:37:c0:fd:96:d8:28:23:cc:81:8d:7d:99:89:fe:c1:51: e6:45:2e:c6:43:4c:6f:6d:e7:e2:2b:0d:fd:05:03:0e:bd:40: 18:03:1e:13:86:b5:e3:48:17:b4:62:48:68:e4:25:54:6b:0a: c5:c6:56:1d:83:5f:9d:42:cb:5d:d3:84:b8:e1:df:f5:af:31: 40:ce:98:44:fd:ee:87:76:3a:59:65:91:83:68:21:84:77:95: 22:85:e6:c0:a1:8b:f5:3d:77:f3:06:83:e5:cb:9c:b5:34:63: ec:72:e6:fa:3b:4f:8f:6a:3b:91:51:89:ce:ce:99:ee:37:9a: f2:1d:80:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa1sTk3BMnsqzKWxGyr49WRLwNrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNjA0MTUwNzM2MzNaFw0yNjA0MTgxNTA4MzNaMDMxMTAvBgNV BAMTKDc2RDdDMzQ0NEU3MDAxQUExMjgzQjgzQkY4OTEzMzY1REY4N0Q1NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxjMnOteCYTd/QuEPwiDsxSSE6 9+/qlfVC/oKF1h8cpst3OJq3oBSmcm3qnuBfw6Krs+gGIJeJGc4jGovvX0TJ80rw UUzm5nNsp1i7EDamEPI1jnUPBM21LzKr4X8tmqCaHCAatvSOK7nSP2mmSos5q7dl ognroKj92oQS4RjYQ2+H07D3wTHDaMlH8W0VsKwVA1fH8Wct91+WNooaUBJFUg5t IQPdRKNel/0tGqaPd2ijUijVqrXnRByiquOGYeGONtx4a9NRs6NotfSZbg2oU57n ODGOU+s8zG09tvCWd7/XtYmbJFEHwRPYqgDp/oXUM5Dn7x1k66F4fwjlF9C7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdtfDRE5wAaoSg7g7+JEzZd+H1UswHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0DmTatt2QCEkz61qk6ktslv7rpHYqovWXB k+qEVNZWcySN3+Sb9Qmext0N8tsYZRCyoKe7OG3E9anH1/Q0JXK2+E8PagrTW/rk UuGRWIr5ksJ1ea1I+4Lqc/yjHYBTjs6ZQ/+1K2KPM0aZaprSzDdp/Gef9tQSO1iI mGC18y+SN8D9ltgoI8yBjX2Zif7BUeZFLsZDTG9t5+IrDf0FAw69QBgDHhOGteNI F7RiSGjkJVRrCsXGVh2DX51Cy13ThLjh3/WvMUDOmET97od2OlllkYNoIYR3lSKF 5sChi/U9d/MGg+XLnLU0Y+xy5vo7T49qO5FRic7Ome43mvIdgBk= -----END CERTIFICATE-----Generated at Fri Apr 17 13:16:23 2026 by rpki-client