$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: HCObIGu7qHdewMbZBlN1lSf1ieJ4vQLYliacdW7ZUOs= Subject key identifier: 63:B2:23:0B:14:37:19:21:85:95:60:5B:D3:1D:F8:CD:A9:F6:C7:2B Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 1FA361E38E186614D3D08E9C78EC73EB5038FEED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 010C Signing time: Fri 17 Apr 2026 15:52:35 +0000 Manifest this update: Fri 17 Apr 2026 15:47:35 +0000 Manifest next update: Mon 20 Apr 2026 18:25:35 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: 60vk6vgtCjiNmZHP2gYPs9ijS910n6t7IFmobhcNbco=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 18:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a3:61:e3:8e:18:66:14:d3:d0:8e:9c:78:ec:73:eb:50:38:fe:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Apr 17 15:47:35 2026 GMT Not After : Apr 20 18:25:35 2026 GMT Subject: CN=63B2230B143719218595605BD31DF8CDA9F6C72B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0f:06:6f:3d:23:7f:27:a9:1e:13:9f:44:af: cb:aa:78:95:98:2c:b1:3b:b6:72:7e:49:18:b0:aa: 2e:e0:38:64:bd:85:f3:ed:9c:fb:23:23:de:71:62: 0a:64:22:5b:27:2b:11:5c:19:6a:31:d0:66:cc:17: 10:46:3f:6e:bc:56:e2:5d:44:8a:fd:c2:5f:38:48: 7e:5a:5b:7a:50:c4:c1:1e:4f:82:36:70:93:8a:08: 83:3b:61:34:26:90:14:e0:09:ce:ce:69:e9:b6:9d: 94:b8:ba:e1:06:18:eb:01:fb:7b:99:16:ae:bb:98: 5d:18:41:6c:79:48:51:3c:86:c7:10:f5:1a:a3:a1: fb:6c:90:f3:a0:1f:1d:9d:11:67:b6:9f:db:0c:09: 45:fb:3e:f9:6e:40:b8:07:1e:91:6c:00:a1:70:55: 5a:9e:dd:d4:8f:73:05:92:68:0b:a3:4a:64:1a:c3: 09:53:de:f2:ed:25:44:7d:c1:6a:bb:c4:20:93:9a: 2b:5a:af:6b:68:b2:c8:65:03:48:8e:b1:7d:c2:03: 71:0e:79:2a:ea:2c:1d:be:77:50:c7:53:01:56:89: 7b:3c:5f:b2:3f:6f:8f:c8:63:22:3e:2b:7d:37:e1: 3b:b4:85:47:6a:56:d7:41:12:f8:45:69:b1:a5:6f: 08:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:B2:23:0B:14:37:19:21:85:95:60:5B:D3:1D:F8:CD:A9:F6:C7:2B X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:7f:f0:b1:7f:bf:83:af:eb:66:60:d5:0f:f5:1a:e1:7e:cb: 68:be:18:2f:da:f6:66:4c:a3:af:8b:e4:70:2a:45:ab:7d:35: 34:a8:f2:f0:60:71:d9:e5:b5:dc:16:fa:70:fe:9f:4f:d5:fa: c7:07:b7:00:f4:fc:48:97:c8:b9:4d:92:0c:2a:3b:6d:76:b7: 0b:f6:ed:97:f3:a7:fb:bf:48:57:70:47:bf:fa:e5:e3:42:e9: 2b:00:f8:ac:bf:20:14:52:e0:54:9d:f9:c6:0b:4a:e2:f7:66: f3:cc:04:eb:26:23:12:60:7f:12:77:0f:1e:52:94:06:fa:ea: 11:bf:c2:bc:51:52:ca:c5:4b:79:b2:32:6b:bd:7a:f2:55:a2: 57:cb:c1:3d:6d:14:ad:ca:cf:d2:d9:7c:94:f3:b1:08:e9:b8: 5f:0b:01:e5:48:29:17:46:10:ee:09:10:81:03:53:cd:26:a8: f7:14:de:6a:fc:06:79:c7:99:8c:6d:2a:c4:61:30:45:44:ce: ab:b0:57:d6:ab:b6:85:e0:ae:e5:a5:a5:35:29:3d:f4:41:c2: 03:d9:9c:8d:1d:db:37:b2:63:32:d1:74:a6:ca:d9:f4:8b:59: ce:ec:f7:ab:10:f7:42:fc:30:b1:ed:22:1f:47:01:c7:14:87: dc:ca:ba:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6Nh444YZhTT0I6ceOxz61A4/u0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNjA0MTcxNTQ3MzVaFw0yNjA0MjAxODI1MzVaMDMxMTAvBgNV BAMTKDYzQjIyMzBCMTQzNzE5MjE4NTk1NjA1QkQzMURGOENEQTlGNkM3MkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DwZvPSN/J6keE59Er8uqeJWY LLE7tnJ+SRiwqi7gOGS9hfPtnPsjI95xYgpkIlsnKxFcGWox0GbMFxBGP268VuJd RIr9wl84SH5aW3pQxMEeT4I2cJOKCIM7YTQmkBTgCc7Oaem2nZS4uuEGGOsB+3uZ Fq67mF0YQWx5SFE8hscQ9RqjoftskPOgHx2dEWe2n9sMCUX7PvluQLgHHpFsAKFw VVqe3dSPcwWSaAujSmQawwlT3vLtJUR9wWq7xCCTmitar2tosshlA0iOsX3CA3EO eSrqLB2+d1DHUwFWiXs8X7I/b4/IYyI+K3034Tu0hUdqVtdBEvhFabGlbwihAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY7IjCxQ3GSGFlWBb0x34zan2xyswHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJ/8LF/v4Ov62Zg1Q/1GuF+y2i+GC/a9mZM o6+L5HAqRat9NTSo8vBgcdnltdwW+nD+n0/V+scHtwD0/EiXyLlNkgwqO212twv2 7Zfzp/u/SFdwR7/65eNC6SsA+Ky/IBRS4FSd+cYLSuL3ZvPMBOsmIxJgfxJ3Dx5S lAb66hG/wrxRUsrFS3myMmu9evJVolfLwT1tFK3Kz9LZfJTzsQjpuF8LAeVIKRdG EO4JEIEDU80mqPcU3mr8BnnHmYxtKsRhMEVEzquwV9artoXgruWlpTUpPfRBwgPZ nI0d2zeyYzLRdKbK2fSLWc7s96sQ90L8MLHtIh9HAccUh9zKuqc= -----END CERTIFICATE-----Generated at Fri Apr 17 19:52:56 2026 by rpki-client