$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: 7yxOLAi6f+wg9l+x0S0P9wrXyifQHKdGnquZ8VbgZS0= Subject key identifier: 3D:1F:90:F3:F9:44:4E:73:64:C5:11:AF:92:E8:9B:1B:8C:E9:F6:CC Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 0ED7A037E08F2D0AD5FBC7A38190FCDE4CFD172B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 0199 Signing time: Sat 18 Apr 2026 02:12:24 +0000 Manifest this update: Sat 18 Apr 2026 02:07:24 +0000 Manifest next update: Tue 21 Apr 2026 11:40:24 +0000 Files and hashes: 1: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: BrXveM40ueABLYmSOQXL2c5+R4X/mJ0RbcOthK4oxSk=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: ubAgdugDvQaB/HJfz4fY63v3MFp+bq+KP7AGcGBA1hw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 11:40:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d7:a0:37:e0:8f:2d:0a:d5:fb:c7:a3:81:90:fc:de:4c:fd:17:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Apr 18 02:07:24 2026 GMT Not After : Apr 21 11:40:24 2026 GMT Subject: CN=3D1F90F3F9444E7364C511AF92E89B1B8CE9F6CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:66:91:a3:93:39:c3:c9:01:4c:84:bf:d3:a7: e8:19:68:e2:7a:0f:17:b2:f8:88:7b:67:e5:4e:9d: 6c:25:7f:6d:1d:7f:ad:a2:1e:1c:11:24:8e:34:76: 80:04:1e:2b:2d:79:e2:75:34:e1:a0:2b:14:c4:86: 35:b2:2a:2c:45:f6:e3:6c:c2:43:2b:40:8a:89:8f: ee:c9:e0:18:1d:08:97:14:b9:db:a7:37:e0:30:a8: 40:da:e7:fc:8b:3b:82:44:fd:a3:9f:25:2c:74:56: 82:79:c7:2f:d1:ac:97:c6:0d:f3:33:d9:2e:71:ce: dd:76:0f:53:85:4c:38:58:32:52:8e:b1:07:75:6e: bf:02:8a:6e:c2:8b:c3:51:3a:08:f4:f1:aa:0e:9f: f9:75:87:90:9f:fe:d2:b1:5f:da:2d:3a:80:d8:3e: d1:a1:a9:37:9f:16:54:8f:a7:57:e0:a9:cd:2a:ad: 42:bd:8e:bb:9e:32:0e:01:05:aa:d4:9f:5f:9f:6e: 16:50:7d:33:3b:da:c0:ee:a9:c3:7b:61:ab:53:0e: b8:59:9e:de:65:bb:1a:8a:36:ff:06:66:ec:06:cf: 15:1a:70:11:39:a7:74:48:bd:d8:53:7d:88:ce:58: e1:17:35:69:d3:ba:f4:bd:b2:89:58:89:c1:30:f2: 34:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:1F:90:F3:F9:44:4E:73:64:C5:11:AF:92:E8:9B:1B:8C:E9:F6:CC X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:23:38:33:62:12:bd:42:3e:a8:cd:17:da:91:98:d2:25:8c: 85:91:ca:49:ab:d6:4d:1d:dd:95:33:9e:4f:43:5a:77:de:b8: 94:64:b7:78:32:31:45:2e:db:88:bb:8a:a7:40:49:3e:52:9d: 92:e8:c5:b6:b6:cc:18:4e:69:8b:18:12:58:26:50:af:14:18: 37:1e:d8:38:68:41:af:fe:bf:73:59:f3:bd:5c:87:b8:70:9d: ac:d6:c4:18:41:d1:2d:c9:2d:f2:28:bd:91:eb:21:2d:24:84: bb:13:fa:09:4d:68:4c:f7:fe:05:cc:4e:86:1d:1f:bd:38:35: 8a:ad:61:d1:0e:ca:99:8e:ec:76:ed:66:9d:a8:90:54:00:85: eb:87:82:37:bc:7f:ad:08:31:93:81:b6:07:be:1f:8c:de:6d: 4c:03:91:2c:f5:9a:02:81:bf:ca:7c:33:ef:d7:81:7b:36:e2: e1:3f:a1:0a:f8:4c:a8:45:66:60:88:ee:3c:41:c5:c7:ff:7d: ce:1d:ea:b2:73:bb:4e:cb:3c:96:da:17:f8:3e:b8:72:1a:99: 29:6e:2e:92:33:2e:5a:e0:7b:57:b0:42:e3:15:1c:37:ca:b2: 53:83:df:e7:05:08:46:96:fb:ab:82:4f:c9:e8:ca:94:22:cb: ba:b8:50:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtegN+CPLQrV+8ejgZD83kz9FyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNjA0MTgwMjA3MjRaFw0yNjA0MjExMTQwMjRaMDMxMTAvBgNV BAMTKDNEMUY5MEYzRjk0NDRFNzM2NEM1MTFBRjkyRTg5QjFCOENFOUY2Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPZpGjkznDyQFMhL/Tp+gZaOJ6 Dxey+Ih7Z+VOnWwlf20df62iHhwRJI40doAEHisteeJ1NOGgKxTEhjWyKixF9uNs wkMrQIqJj+7J4BgdCJcUudunN+AwqEDa5/yLO4JE/aOfJSx0VoJ5xy/RrJfGDfMz 2S5xzt12D1OFTDhYMlKOsQd1br8Cim7Ci8NROgj08aoOn/l1h5Cf/tKxX9otOoDY PtGhqTefFlSPp1fgqc0qrUK9jrueMg4BBarUn1+fbhZQfTM72sDuqcN7YatTDrhZ nt5luxqKNv8GZuwGzxUacBE5p3RIvdhTfYjOWOEXNWnTuvS9solYicEw8jRNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPR+Q8/lETnNkxRGvkuibG4zp9swwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIAjODNiEr1CPqjNF9qRmNIljIWRykmr1k0d 3ZUznk9DWnfeuJRkt3gyMUUu24i7iqdAST5SnZLoxba2zBhOaYsYElgmUK8UGDce 2DhoQa/+v3NZ871ch7hwnazWxBhB0S3JLfIovZHrIS0khLsT+glNaEz3/gXMToYd H704NYqtYdEOypmO7HbtZp2okFQAheuHgje8f60IMZOBtge+H4zebUwDkSz1mgKB v8p8M+/XgXs24uE/oQr4TKhFZmCI7jxBxcf/fc4d6rJzu07LPJbaF/g+uHIamSlu LpIzLlrge1ewQuMVHDfKslOD3+cFCEaW+6uCT8noypQiy7q4UIU= -----END CERTIFICATE-----Generated at Sun Apr 19 12:56:56 2026 by rpki-client