$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft File: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft (raw, json) Hash identifier: Y/Fj4R8hmGLpK0EABKKmDXNXMYtSV1jFyIsClSYkQsU= Subject key identifier: D7:D5:6C:5C:D2:CF:0B:BA:B7:6E:70:F7:56:09:B6:1D:F2:01:BB:39 Authority key identifier: 69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E Certificate issuer: /CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Certificate serial: 07ECFB2379891E889AC30CFA91B47F53F87CB1EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft Manifest number: 025C Signing time: Fri 17 Apr 2026 03:00:07 +0000 Manifest this update: Fri 17 Apr 2026 02:55:07 +0000 Manifest next update: Mon 20 Apr 2026 03:04:07 +0000 Files and hashes: 1: 323430303a666230303a3a2f33322d3438203d3e203535363730.roa (hash: FVA48wGL4/cskX5JvDPv5QyssORBEsld3N+rmhCU4Gc=) 2: 3130332e31322e32382e302f32322d3234203d3e203535363730.roa (hash: 56/u0yMrkC94FdPOEf+mn1+2joJi+oVC5l6/K3alTgQ=) 3: 3130332e31322e32382e302f32322d3234203d3e203438343635.roa (hash: hq6fcTyLZ0Befnc7SCHGWV/VgoDOfnIfMb9/pRr7Usc=) 4: 3130312e302e342e302f32322d3234203d3e203535363730.roa (hash: 7ECSmeZAaiWw7xemuyw220yGHio1fDg8eukqs4CuhkU=) 5: 6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl (hash: 7G2ZvDp/O3EtDyHT7AoOxlncm2uA2f0r6zNy5qIUd5c=) 6: 3130312e302e342e302f32322d3234203d3e203438343635.roa (hash: 0Vbzbdds4DlTIQ/frtEsWuiBQ6OCjLTHiqaNJsXbu/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:04:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:ec:fb:23:79:89:1e:88:9a:c3:0c:fa:91:b4:7f:53:f8:7c:b1:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E Validity Not Before: Apr 17 02:55:07 2026 GMT Not After : Apr 20 03:04:07 2026 GMT Subject: CN=D7D56C5CD2CF0BBAB76E70F75609B61DF201BB39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:a2:eb:00:fa:17:40:62:46:64:e5:88:4d:04: bf:b2:07:e2:3c:1e:a3:95:30:91:6f:36:7c:5f:92: 37:e0:27:b5:4e:e2:f5:08:1d:3b:70:65:21:14:45: d6:5c:01:3d:b0:ef:f8:c1:af:a7:9b:41:de:d9:8d: 90:ee:4c:3b:ee:5a:10:33:42:94:1a:29:7d:40:f8: e3:90:f9:80:ca:6d:7c:4b:25:aa:9b:e1:1a:a4:98: 80:63:45:63:a8:92:4f:a2:bb:6b:a0:c7:3a:82:d9: 7c:40:44:78:ef:e6:88:2d:2a:34:06:bb:9e:de:67: 1a:76:93:f5:7f:a3:61:9b:6a:35:f0:32:73:39:18: 66:28:eb:ef:49:2e:ae:7e:03:7d:07:a8:36:a5:52: 25:03:b7:b9:2f:d8:47:b1:78:1d:ff:ff:fd:87:06: 0e:eb:b2:59:21:4f:b4:4c:48:39:75:d7:0d:c4:cc: 8e:b6:91:ac:9e:be:05:a5:71:61:85:9e:ba:b9:97: 59:97:fb:b6:e2:01:30:b0:b9:0a:ca:ba:d3:a2:42: f4:ce:12:75:5e:de:dd:ad:12:4e:ed:89:b1:fb:4c: 23:5e:16:82:7e:3d:10:8a:8b:44:41:ab:d7:5e:b1: 99:85:b9:90:05:a5:3b:3d:48:14:37:1e:f9:44:f5: 04:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D5:6C:5C:D2:CF:0B:BA:B7:6E:70:F7:56:09:B6:1D:F2:01:BB:39 X509v3 Authority Key Identifier: keyid:69:67:01:2E:FC:A4:36:98:E8:E1:B7:24:B9:1D:FC:5E:FE:3E:7C:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6ea7fa-94d2-4ddc-a8e6-5dc626c291d4/0/6967012EFCA43698E8E1B724B91DFC5EFE3E7C3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:97:75:33:e1:ce:e4:03:df:fd:98:4d:f8:49:fd:6d:b1:d1: 0c:41:d4:ad:99:c7:ec:66:4e:33:02:40:6c:77:8a:b9:40:a3: 23:ab:66:c4:1f:0c:a5:96:f1:9c:65:c9:6a:17:51:6f:09:20: b9:71:50:90:16:1d:9e:7a:d5:b5:d0:c2:f5:30:1a:9f:97:17: 40:27:dc:55:80:7c:c5:99:2b:31:b7:35:34:48:a6:36:1e:08: e4:b8:2f:e2:b7:76:f5:f0:c9:61:7a:91:49:82:26:25:30:df: 46:8f:17:4f:62:a4:29:b6:6f:d1:bf:72:ef:7c:74:ec:53:ed: 62:3a:47:b4:14:4b:b3:49:45:09:5e:f3:e1:de:90:e3:25:ad: 99:64:d7:93:71:8c:29:78:79:6c:5c:23:33:a0:e6:ce:09:bd: b4:ea:a5:05:cb:4d:a8:18:34:33:f4:f3:d8:c0:41:0e:bc:7c: 63:cb:f5:e1:2e:c3:c0:c3:0e:51:d7:81:11:9f:cd:f4:93:7f: 70:b6:b4:fc:b8:d8:26:17:34:2d:36:37:7f:c0:97:68:44:7c: e6:19:1e:c2:ac:05:04:8c:57:68:ad:96:de:9e:6a:94:4a:b2: 5e:79:5f:81:75:d3:20:dc:61:67:a1:1c:d0:fd:fb:89:50:fe: c7:2f:db:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB+z7I3mJHoiawwz6kbR/U/h8seswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVG RTNFN0MzRTAeFw0yNjA0MTcwMjU1MDdaFw0yNjA0MjAwMzA0MDdaMDMxMTAvBgNV BAMTKEQ3RDU2QzVDRDJDRjBCQkFCNzZFNzBGNzU2MDlCNjFERjIwMUJCMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdousA+hdAYkZk5YhNBL+yB+I8 HqOVMJFvNnxfkjfgJ7VO4vUIHTtwZSEURdZcAT2w7/jBr6ebQd7ZjZDuTDvuWhAz QpQaKX1A+OOQ+YDKbXxLJaqb4RqkmIBjRWOokk+iu2ugxzqC2XxARHjv5ogtKjQG u57eZxp2k/V/o2GbajXwMnM5GGYo6+9JLq5+A30HqDalUiUDt7kv2EexeB3///2H Bg7rslkhT7RMSDl11w3EzI62kayevgWlcWGFnrq5l1mX+7biATCwuQrKutOiQvTO EnVe3t2tEk7tibH7TCNeFoJ+PRCKi0RBq9desZmFuZAFpTs9SBQ3HvlE9QTzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19VsXNLPC7q3bnD3Vgm2HfIBuzkwHwYDVR0j BBgwFoAUaWcBLvykNpjo4bckuR38Xv4+fD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDZlYTdmYS05NGQyLTRkZGMtYThlNi01ZGM2MjZjMjkxZDQvMC82OTY3MDEyRUZD QTQzNjk4RThFMUI3MjRCOTFERkM1RUZFM0U3QzNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZDNUVGRTNF N0MzRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q2ZWE3ZmEtOTRkMi00ZGRjLWE4 ZTYtNWRjNjI2YzI5MWQ0LzAvNjk2NzAxMkVGQ0E0MzY5OEU4RTFCNzI0QjkxREZD NUVGRTNFN0MzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACGXdTPhzuQD3/2YTfhJ/W2x0QxB1K2Zx+xm TjMCQGx3irlAoyOrZsQfDKWW8ZxlyWoXUW8JILlxUJAWHZ561bXQwvUwGp+XF0An 3FWAfMWZKzG3NTRIpjYeCOS4L+K3dvXwyWF6kUmCJiUw30aPF09ipCm2b9G/cu98 dOxT7WI6R7QUS7NJRQle8+HekOMlrZlk15NxjCl4eWxcIzOg5s4JvbTqpQXLTagY NDP089jAQQ68fGPL9eEuw8DDDlHXgRGfzfSTf3C2tPy42CYXNC02N3/Al2hEfOYZ HsKsBQSMV2itlt6eapRKsl55X4F10yDcYWehHND9+4lQ/scv2yo= -----END CERTIFICATE-----Generated at Fri Apr 17 14:10:22 2026 by rpki-client