$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: PwpJaQikC2KPSmhZFRG6zqd4AEsT3EnlnHpBCcLqDBo= Subject key identifier: 4E:E7:BE:7A:02:A7:28:68:EA:79:2A:6F:E2:C8:C0:BB:71:E9:C9:78 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 7F00E6CF7BE4E6F4CCD883ED88864BD565BDF8F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: F5 Signing time: Fri 17 Apr 2026 01:21:07 +0000 Manifest this update: Fri 17 Apr 2026 01:16:07 +0000 Manifest next update: Mon 20 Apr 2026 12:46:07 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: XyzGYxCbFJuOtwb+bQn/kq9BzQIE1ajaXC814hHUKkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 12:46:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:00:e6:cf:7b:e4:e6:f4:cc:d8:83:ed:88:86:4b:d5:65:bd:f8:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Apr 17 01:16:07 2026 GMT Not After : Apr 20 12:46:07 2026 GMT Subject: CN=4EE7BE7A02A72868EA792A6FE2C8C0BB71E9C978 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:06:f8:47:d2:78:d8:c6:de:eb:fa:10:4f:48: ae:23:ed:de:10:33:0b:27:2f:94:94:79:ca:15:3b: 93:9c:4a:0e:54:8c:a6:6a:e8:1d:8d:bc:82:bb:7a: f0:ec:ae:1e:c8:a1:01:95:5a:c3:d5:89:70:d2:2b: 00:a3:de:c6:b4:89:dc:54:57:cc:f3:81:c6:71:9f: d1:b1:42:2b:bc:a8:da:64:f3:8d:00:f9:ac:02:16: 3d:7d:8a:ea:4d:4a:29:11:09:09:15:4d:94:f7:4f: 75:11:62:be:2c:5e:fc:e9:f5:f0:37:6a:85:00:dd: 8b:f0:76:ed:02:9f:d1:2b:2e:c3:b0:35:90:ee:51: 7a:8b:97:ad:82:5c:a3:09:fa:7c:91:d2:8a:d7:91: 63:40:ff:f5:af:6b:17:6a:79:5e:c5:2a:e4:a7:e1: d6:d3:1c:dc:75:9a:2b:62:6c:9d:4d:bc:ff:aa:47: 6e:2a:8c:fb:e3:ba:c4:90:db:f9:3c:c2:07:d2:98: 00:b8:76:4f:af:42:eb:2e:82:03:13:be:51:db:6f: 68:db:6b:78:a5:67:2d:18:cc:71:e9:0a:bd:69:21: 74:87:a1:7c:4e:4c:bc:8a:00:17:64:7c:40:50:2b: b4:51:15:74:46:a0:6a:9e:8a:1a:d2:43:42:ef:b6: 93:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:E7:BE:7A:02:A7:28:68:EA:79:2A:6F:E2:C8:C0:BB:71:E9:C9:78 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:a0:31:49:38:d8:12:bb:e3:62:e6:c0:df:f4:98:d2:64:a8: 79:df:80:57:fe:e1:24:db:c4:0e:e2:75:83:91:a5:ee:0f:40: c4:2d:11:08:41:a6:06:4a:15:73:a5:7c:11:63:4d:44:34:b7: 8c:bb:7a:f8:30:58:86:86:fc:8b:13:90:a7:b4:95:2b:af:e1: 61:6f:1e:bf:f0:14:3b:79:fa:d6:d1:a1:7e:4f:d4:55:42:38: d4:d3:33:df:63:0a:1c:c6:e3:a9:f4:c7:4f:a8:31:6e:59:78: 49:99:49:2b:4e:25:54:1b:44:02:93:c7:8f:28:cb:bd:3b:d3: b5:18:d0:66:ea:ff:38:a2:37:d0:92:69:30:a3:46:3f:aa:4c: 64:8b:c8:87:5a:32:fd:13:f4:76:3a:af:b3:dd:f1:e6:b6:ab: 28:fd:36:39:bc:75:33:bf:b9:20:9c:7f:66:a0:e8:ec:ec:28: cc:d9:7c:2a:d1:7c:38:f4:58:29:bb:90:36:a1:49:91:89:78: 9e:fb:b5:ba:b9:5f:11:ff:de:4b:48:2c:0e:a2:fa:cb:6a:c6: 9c:7e:2b:ae:5a:2f:2e:0d:2c:8a:18:89:68:0e:9a:77:c5:91: 19:e8:f5:41:8f:f3:b2:87:dc:71:57:74:4d:e3:5e:cd:ca:6d: 89:24:24:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwDmz3vk5vTM2IPtiIZL1WW9+PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNjA0MTcwMTE2MDdaFw0yNjA0MjAxMjQ2MDdaMDMxMTAvBgNV BAMTKDRFRTdCRTdBMDJBNzI4NjhFQTc5MkE2RkUyQzhDMEJCNzFFOUM5NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnBvhH0njYxt7r+hBPSK4j7d4Q MwsnL5SUecoVO5OcSg5UjKZq6B2NvIK7evDsrh7IoQGVWsPViXDSKwCj3sa0idxU V8zzgcZxn9GxQiu8qNpk840A+awCFj19iupNSikRCQkVTZT3T3URYr4sXvzp9fA3 aoUA3Yvwdu0Cn9ErLsOwNZDuUXqLl62CXKMJ+nyR0orXkWNA//WvaxdqeV7FKuSn 4dbTHNx1mitibJ1NvP+qR24qjPvjusSQ2/k8wgfSmAC4dk+vQusuggMTvlHbb2jb a3ilZy0YzHHpCr1pIXSHoXxOTLyKABdkfEBQK7RRFXRGoGqeihrSQ0LvtpPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTue+egKnKGjqeSpv4sjAu3HpyXgwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmgMUk42BK742LmwN/0mNJkqHnfgFf+4STb xA7idYORpe4PQMQtEQhBpgZKFXOlfBFjTUQ0t4y7evgwWIaG/IsTkKe0lSuv4WFv Hr/wFDt5+tbRoX5P1FVCONTTM99jChzG46n0x0+oMW5ZeEmZSStOJVQbRAKTx48o y70707UY0Gbq/ziiN9CSaTCjRj+qTGSLyIdaMv0T9HY6r7Pd8ea2qyj9Njm8dTO/ uSCcf2ag6OzsKMzZfCrRfDj0WCm7kDahSZGJeJ77tbq5XxH/3ktILA6i+stqxpx+ K65aLy4NLIoYiWgOmnfFkRno9UGP87KH3HFXdE3jXs3KbYkkJHw= -----END CERTIFICATE-----Generated at Fri Apr 17 14:26:59 2026 by rpki-client