$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: kS56TxgKumvPFF4Ldn4ALwmtfmGY44tPoAZIA5ku92o= Subject key identifier: DD:AC:4C:51:8A:4F:3F:86:61:D8:3C:53:D0:FE:E5:64:3D:F4:D1:2F Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 5030F8815805B0534F92938E00CA694C0940233E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 0259 Signing time: Thu 16 Apr 2026 18:52:27 +0000 Manifest this update: Thu 16 Apr 2026 18:47:27 +0000 Manifest next update: Mon 20 Apr 2026 03:08:27 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: YevEYsnpyXjpiEIMiyxhrulrrR0dSrjcBVrRlWG52Uk=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) 3: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: h3F9Llj9O7Xku7uQRgTprbQZ0BqnZP4nbNoiUb3SuDY=) 4: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: YxooFDicfneGqekV1rWH0zKcDjkXNQh9UReOslkc1Ps=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:08:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:30:f8:81:58:05:b0:53:4f:92:93:8e:00:ca:69:4c:09:40:23:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Apr 16 18:47:27 2026 GMT Not After : Apr 20 03:08:27 2026 GMT Subject: CN=DDAC4C518A4F3F8661D83C53D0FEE5643DF4D12F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:8d:14:ad:9f:b7:76:6a:04:5b:84:37:40:6b: f7:1f:38:e5:a6:3f:d9:72:7f:05:a5:6a:db:9f:00: 0f:1d:67:3b:6e:d5:6b:d3:c7:80:9d:86:82:df:76: b1:ef:59:d7:83:48:fb:92:8b:7f:84:d3:79:59:cb: 06:2f:70:d5:ed:aa:54:a8:83:db:90:ad:96:1a:1f: 2b:42:a5:82:9c:ac:f8:6f:f4:80:20:06:37:dc:13: ac:66:7b:9f:32:9f:4e:be:c4:8f:13:b0:4e:06:63: 46:7a:cd:14:cd:23:b9:16:c2:11:0e:93:62:50:5d: f8:55:a4:16:52:1c:33:fd:6a:95:62:b0:1a:74:e0: e0:a5:d7:25:2a:af:e6:75:1b:25:7a:6b:bd:9a:f5: 4d:b7:07:67:9a:ab:6f:91:52:7b:f1:86:dd:7f:91: c7:8c:53:5e:01:31:8d:e7:f8:1a:f2:cc:d9:ad:94: b2:71:35:99:ef:d4:52:71:01:50:0d:1d:a7:4b:9b: e8:a5:3d:9e:a8:02:be:40:4c:e6:0f:04:dd:8f:b7: a3:5f:0b:59:a7:ba:ba:94:86:df:4a:25:da:8c:9e: f7:96:3d:2c:12:c0:5a:84:5f:3a:16:1f:c7:de:2b: 32:58:23:06:38:51:0b:dd:e5:65:83:8f:a1:ec:52: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AC:4C:51:8A:4F:3F:86:61:D8:3C:53:D0:FE:E5:64:3D:F4:D1:2F X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:68:8e:97:91:92:8c:e0:48:eb:16:57:00:71:b0:6c:d0:0f: 0e:de:da:0c:70:cf:fd:dd:70:d7:06:5d:6d:cd:e1:40:1b:3f: eb:75:61:0d:68:5e:3d:c5:1d:99:68:e3:53:98:4f:bb:32:f3: c7:16:76:fc:2b:10:5e:6d:6e:3e:8b:41:55:92:96:0e:21:27: c2:8f:a2:92:28:e7:1f:fb:38:3a:c6:4f:b1:9e:0f:5e:d7:1c: fa:06:09:76:4f:6f:35:65:24:d7:40:1f:3d:cc:1b:67:20:cd: 7f:f9:cb:7c:59:32:54:cf:8d:b8:22:3c:33:9d:45:ca:22:ad: 9c:13:df:71:c9:39:19:d8:72:41:42:76:6c:a7:72:dd:65:58: e0:06:85:9f:19:c8:ce:e9:44:8e:e0:4f:cc:5d:2c:f8:93:f2: 00:d1:9b:20:a1:a6:5e:9e:3a:09:06:73:4c:d9:93:c7:e8:cd: 96:11:2a:7a:8d:b2:f1:34:22:5a:3a:db:fe:dc:f3:bf:b9:11: c0:1b:17:25:9e:24:7d:57:fe:9b:c3:a1:3b:89:21:dd:68:76: 50:67:78:df:28:af:48:f5:90:6f:8a:fd:cd:93:18:8c:de:07: bb:f9:ca:80:0c:9e:17:7f:c9:97:23:6e:b7:91:bb:a5:1b:68: 9a:62:18:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUDD4gVgFsFNPkpOOAMppTAlAIz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNjA0MTYxODQ3MjdaFw0yNjA0MjAwMzA4MjdaMDMxMTAvBgNV BAMTKEREQUM0QzUxOEE0RjNGODY2MUQ4M0M1M0QwRkVFNTY0M0RGNEQxMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmjRStn7d2agRbhDdAa/cfOOWm P9lyfwWlatufAA8dZztu1WvTx4CdhoLfdrHvWdeDSPuSi3+E03lZywYvcNXtqlSo g9uQrZYaHytCpYKcrPhv9IAgBjfcE6xme58yn06+xI8TsE4GY0Z6zRTNI7kWwhEO k2JQXfhVpBZSHDP9apVisBp04OCl1yUqr+Z1GyV6a72a9U23B2eaq2+RUnvxht1/ kceMU14BMY3n+BryzNmtlLJxNZnv1FJxAVANHadLm+ilPZ6oAr5ATOYPBN2Pt6Nf C1mnurqUht9KJdqMnveWPSwSwFqEXzoWH8feKzJYIwY4UQvd5WWDj6HsUj0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3axMUYpPP4Zh2DxT0P7lZD300S8wHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFdojpeRkozgSOsWVwBxsGzQDw7e2gxwz/3d cNcGXW3N4UAbP+t1YQ1oXj3FHZlo41OYT7sy88cWdvwrEF5tbj6LQVWSlg4hJ8KP opIo5x/7ODrGT7GeD17XHPoGCXZPbzVlJNdAHz3MG2cgzX/5y3xZMlTPjbgiPDOd RcoirZwT33HJORnYckFCdmynct1lWOAGhZ8ZyM7pRI7gT8xdLPiT8gDRmyChpl6e OgkGc0zZk8fozZYRKnqNsvE0Ilo62/7c87+5EcAbFyWeJH1X/pvDoTuJId1odlBn eN8or0j1kG+K/c2TGIzeB7v5yoAMnhd/yZcjbreRu6UbaJpiGN4= -----END CERTIFICATE-----Generated at Fri Apr 17 18:37:00 2026 by rpki-client