$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: fBcbYFF2ZkxF+fw3LZq+ARtfl6e5CAY2MKQqHC+gLXQ= Subject key identifier: 55:7C:CB:F5:00:14:B2:38:E9:61:62:B9:52:8C:31:9B:CD:18:1F:A5 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 27DD8D59224FC440A77791D40E4B75190DB90B9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 0328 Signing time: Fri 17 Apr 2026 15:02:00 +0000 Manifest this update: Fri 17 Apr 2026 14:57:00 +0000 Manifest next update: Tue 21 Apr 2026 01:00:00 +0000 Files and hashes: 1: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 2: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: ie2aVkcGBvpyHvTZRIvr00IO8XIdu6Ng+9HehgFo7MQ=) 3: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: rEf6YjuFCaTZqlCkAFbC2RNVpcLc80nNFxOAo8YH62o=) 4: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: IQnKKlfqoA6pAACvMa2pXpfkdwlnbj5/BDZ9dWLc9ds=) 5: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: 5WqLybKopmU6L6xKkjFYMXKXSaBfW41vPQQA3bh8/qQ=) 6: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 7: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: HdMEaKkRmV4PARMSxcIzB8IIxzpLKv/iS31wiWgTaAM=) 8: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: +nlrtI9AN/zzRQRbSnxtN71LuVqGUhlVEh4O5UiaJPQ=) 9: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 10: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: e/2G8Cbvzg0J07eep0ZBOJL7Iat2J09djGHNrLt/GAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dd:8d:59:22:4f:c4:40:a7:77:91:d4:0e:4b:75:19:0d:b9:0b:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Apr 17 14:57:00 2026 GMT Not After : Apr 21 01:00:00 2026 GMT Subject: CN=557CCBF50014B238E96162B9528C319BCD181FA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:33:14:29:52:c7:4a:af:2c:a4:56:e6:90:70: 63:5b:0f:8c:6f:0b:e6:13:12:e3:9a:84:31:62:6d: ef:da:cb:ff:4d:24:34:d9:9e:0c:ec:02:09:c0:1e: 17:fb:f1:c1:6d:0d:00:1b:b6:b7:b3:d8:1b:51:02: 2a:92:4b:6b:95:fe:7f:32:3b:a8:d5:db:b2:7f:43: ae:5e:54:de:c1:bf:d2:d3:87:05:d2:59:f6:bd:3e: 60:26:40:1d:88:dc:5e:4c:68:1d:41:04:15:30:47: 99:a3:86:c9:8e:84:c6:c6:61:ce:7c:ee:5d:00:49: d4:ec:2e:83:09:b2:77:1a:c0:be:99:5a:b1:fe:a6: 41:02:9d:b2:a7:cb:c2:58:63:ab:39:d3:91:26:4f: 2c:1e:98:6a:cb:1b:60:a5:63:2b:d5:fb:63:50:63: a5:e8:90:ae:05:68:98:7a:23:93:c5:67:0d:58:50: 5b:59:88:c1:18:d9:00:b8:41:3a:5c:ef:12:89:f1: de:35:55:86:42:df:fe:ce:53:33:cc:83:bb:74:45: c8:da:e7:3d:37:3c:ca:d1:f9:6b:a7:b3:2c:a7:27: a2:4d:dd:10:76:70:43:b4:04:8a:c4:ad:b8:cf:f6: 16:20:74:be:89:70:cc:17:ce:6b:87:62:77:c7:06: 3e:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:7C:CB:F5:00:14:B2:38:E9:61:62:B9:52:8C:31:9B:CD:18:1F:A5 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:09:e7:b4:34:d6:2e:60:74:0b:4f:4f:de:07:80:75:2f:2a: 4b:d8:71:be:6a:9e:55:6b:6e:ab:ef:22:95:b5:bc:0d:6d:e9: 03:a7:da:19:96:a9:2a:c9:df:68:9c:b4:f7:23:e5:3c:43:00: 8f:37:5e:8f:d9:d5:a3:fd:86:f7:60:04:30:b4:11:cd:1d:33: 44:e8:a3:40:42:e4:96:a3:2c:28:27:95:5d:c7:32:06:5f:d7: 3c:a9:d4:19:cd:45:8d:11:1a:ac:f9:da:47:83:a8:eb:00:6f: 1b:e4:85:6d:47:1c:9a:15:ab:30:a7:c0:30:c5:57:41:ba:23: c9:00:ef:c5:19:00:11:d3:08:27:33:e3:83:98:ed:d8:8a:b5: fe:ab:6a:ab:d7:a7:c3:a0:d8:33:64:68:c4:d5:ac:17:f3:d8: 94:5c:80:8c:5c:57:c5:ee:e9:db:79:33:7e:95:a3:45:99:6f: 96:2b:8f:93:ba:a4:60:d8:13:16:de:03:db:fe:85:85:ae:6d: 9b:17:1b:c2:2f:03:4b:11:be:70:90:b6:5a:10:28:8f:e3:3f: 48:cf:e2:c9:cb:6a:6f:ad:cc:3d:af:0c:a3:7b:30:44:84:1e: 61:72:7f:f3:82:af:47:96:a1:82:00:14:51:14:13:40:be:49: b5:a8:db:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ92NWSJPxECnd5HUDkt1GQ25C50wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNjA0MTcxNDU3MDBaFw0yNjA0MjEwMTAwMDBaMDMxMTAvBgNV BAMTKDU1N0NDQkY1MDAxNEIyMzhFOTYxNjJCOTUyOEMzMTlCQ0QxODFGQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCMxQpUsdKryykVuaQcGNbD4xv C+YTEuOahDFibe/ay/9NJDTZngzsAgnAHhf78cFtDQAbtrez2BtRAiqSS2uV/n8y O6jV27J/Q65eVN7Bv9LThwXSWfa9PmAmQB2I3F5MaB1BBBUwR5mjhsmOhMbGYc58 7l0ASdTsLoMJsncawL6ZWrH+pkECnbKny8JYY6s505EmTywemGrLG2ClYyvV+2NQ Y6XokK4FaJh6I5PFZw1YUFtZiMEY2QC4QTpc7xKJ8d41VYZC3/7OUzPMg7t0Rcja 5z03PMrR+WunsyynJ6JN3RB2cEO0BIrErbjP9hYgdL6JcMwXzmuHYnfHBj77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVXzL9QAUsjjpYWK5Uowxm80YH6UwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACsJ57Q01i5gdAtPT94HgHUvKkvYcb5qnlVr bqvvIpW1vA1t6QOn2hmWqSrJ32ictPcj5TxDAI83Xo/Z1aP9hvdgBDC0Ec0dM0To o0BC5JajLCgnlV3HMgZf1zyp1BnNRY0RGqz52keDqOsAbxvkhW1HHJoVqzCnwDDF V0G6I8kA78UZABHTCCcz44OY7diKtf6raqvXp8Og2DNkaMTVrBfz2JRcgIxcV8Xu 6dt5M36Vo0WZb5Yrj5O6pGDYExbeA9v+hYWubZsXG8IvA0sRvnCQtloQKI/jP0jP 4snLam+tzD2vDKN7MESEHmFyf/OCr0eWoYIAFFEUE0C+SbWo27Q= -----END CERTIFICATE-----Generated at Sun Apr 19 12:44:25 2026 by rpki-client