$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: zs+2fPkcMAV/Oh03xm8PModQtEbpw+rXgtVWcyRpALc= Subject key identifier: DE:EA:12:14:CD:2C:84:2C:07:6E:C9:A6:7F:7A:1E:18:4A:65:44:4C Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 445106D16015BC449B049CE4BE4D9A728D60B2C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 011D Signing time: Fri 17 Apr 2026 13:42:15 +0000 Manifest this update: Fri 17 Apr 2026 13:37:15 +0000 Manifest next update: Mon 20 Apr 2026 23:09:15 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: AqNp0cyyKkUlXZS0tisbTvbRRDYfCbb/5HIGex2+cK0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:09:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:51:06:d1:60:15:bc:44:9b:04:9c:e4:be:4d:9a:72:8d:60:b2:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Apr 17 13:37:15 2026 GMT Not After : Apr 20 23:09:15 2026 GMT Subject: CN=DEEA1214CD2C842C076EC9A67F7A1E184A65444C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:83:ef:d1:6d:77:f8:54:46:87:17:e9:db:ca: bd:23:19:a7:a6:89:58:fe:d4:7a:da:31:b8:24:f5: 66:95:d0:74:2c:95:f0:25:d9:2b:62:c6:fd:63:aa: dc:08:d1:8a:7c:7b:ea:41:38:df:a4:a6:83:46:b4: af:5e:63:20:a3:10:40:4a:ab:56:8e:5a:0c:2a:a7: 47:88:78:3c:3d:8c:20:e8:02:9b:a0:8e:11:fd:4b: 04:15:a7:22:c0:a4:02:b6:af:73:76:76:94:57:24: cb:b2:06:66:be:75:d9:57:5f:8f:27:b5:bf:50:fc: fb:9c:69:1c:f3:1a:22:7d:37:0c:4b:9a:8a:e3:35: bb:17:0f:0d:9b:74:c7:1f:de:26:04:5d:b7:b2:0e: a4:84:5d:7c:7d:1b:3e:00:62:ab:a1:5a:99:26:2c: ad:8b:3d:73:d1:f5:e0:cb:31:9b:f7:11:c7:fc:df: 14:fc:f2:f7:ed:18:8b:e2:65:37:d5:d9:15:77:06: e1:5e:53:37:fc:6f:9a:68:0b:24:37:c7:a9:66:d0: ba:6e:5b:fa:f1:36:3f:bd:3d:31:64:fc:9e:98:bd: d9:88:cd:c7:83:82:87:34:00:c2:83:2d:1b:6b:ab: b4:f8:49:52:2e:d0:e0:f4:bc:6b:4e:b2:90:c6:0f: 96:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:EA:12:14:CD:2C:84:2C:07:6E:C9:A6:7F:7A:1E:18:4A:65:44:4C X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:6e:8b:10:62:98:39:57:4b:28:f7:b5:a4:ab:f0:27:d9:ce: 2b:21:91:33:80:84:c6:d6:5d:81:4b:cd:fe:a4:89:fe:32:e7: 56:67:61:ed:f6:36:80:f1:6a:4d:00:cf:d6:c9:af:3c:33:24: 05:b4:e1:6f:e7:42:32:5e:50:7f:ee:bf:f1:05:5b:01:36:a4: 5b:62:e2:1f:c9:d4:97:9b:f4:1e:6d:76:1b:37:00:7d:4a:87: 22:75:b2:30:16:ab:a4:b0:9d:1a:37:a1:51:68:4a:b7:ba:1a: 6a:27:1c:0c:5d:bd:94:61:d1:f4:7f:85:dd:02:20:09:d0:e1: fe:52:87:01:a0:91:0f:8e:e6:7f:61:04:a0:ee:fe:37:7b:e3: 77:62:d8:c8:45:5a:da:91:ce:f5:c7:1f:7e:0c:1c:12:00:2a: db:d8:7a:bd:c6:4d:67:2c:b3:07:11:b6:c3:f8:1d:e4:d6:77: 71:da:d4:64:03:27:70:00:c8:a3:85:5f:6d:54:b2:bd:0a:8b: 80:64:73:e3:32:76:ac:06:82:69:b5:94:e7:76:68:76:eb:af: de:2e:40:de:20:63:da:cc:d0:f9:19:ae:2e:dc:e4:a8:51:50: bf:c8:74:fd:b5:9f:8f:6e:a7:8d:4f:14:ce:be:ea:9d:85:94: 3b:d3:10:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFEG0WAVvESbBJzkvk2aco1gssQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNjA0MTcxMzM3MTVaFw0yNjA0MjAyMzA5MTVaMDMxMTAvBgNV BAMTKERFRUExMjE0Q0QyQzg0MkMwNzZFQzlBNjdGN0ExRTE4NEE2NTQ0NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKg+/RbXf4VEaHF+nbyr0jGaem iVj+1HraMbgk9WaV0HQslfAl2Stixv1jqtwI0Yp8e+pBON+kpoNGtK9eYyCjEEBK q1aOWgwqp0eIeDw9jCDoApugjhH9SwQVpyLApAK2r3N2dpRXJMuyBma+ddlXX48n tb9Q/PucaRzzGiJ9NwxLmorjNbsXDw2bdMcf3iYEXbeyDqSEXXx9Gz4AYquhWpkm LK2LPXPR9eDLMZv3Ecf83xT88vftGIviZTfV2RV3BuFeUzf8b5poCyQ3x6lm0Lpu W/rxNj+9PTFk/J6YvdmIzceDgoc0AMKDLRtrq7T4SVIu0OD0vGtOspDGD5Y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3uoSFM0shCwHbsmmf3oeGEplREwwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChuixBimDlXSyj3taSr8CfZzishkTOAhMbW XYFLzf6kif4y51ZnYe32NoDxak0Az9bJrzwzJAW04W/nQjJeUH/uv/EFWwE2pFti 4h/J1Jeb9B5tdhs3AH1KhyJ1sjAWq6SwnRo3oVFoSre6GmonHAxdvZRh0fR/hd0C IAnQ4f5ShwGgkQ+O5n9hBKDu/jd743di2MhFWtqRzvXHH34MHBIAKtvYer3GTWcs swcRtsP4HeTWd3Ha1GQDJ3AAyKOFX21Usr0Ki4Bkc+MydqwGgmm1lOd2aHbrr94u QN4gY9rM0PkZri7c5KhRUL/IdP21n49up41PFM6+6p2FlDvTEPI= -----END CERTIFICATE-----Generated at Fri Apr 17 23:38:21 2026 by rpki-client