$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: WTJXFN5nYQpCZ4NqbotRJM2RGr26Rqw7DyCZ8m4BwTY= Subject key identifier: 3E:CE:F1:7D:15:C1:18:44:A3:D1:E0:A0:27:AB:6E:D4:32:F8:9E:F9 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 750673672284DCB4B9530B034C057BCE148963FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 0231 Signing time: Sun 19 Apr 2026 08:21:37 +0000 Manifest this update: Sun 19 Apr 2026 08:16:37 +0000 Manifest next update: Wed 22 Apr 2026 17:08:37 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: boQ8qGbzTMleGqfcNiq2mC/wbsimh8wOt30w2rjAVt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 20:42:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:06:73:67:22:84:dc:b4:b9:53:0b:03:4c:05:7b:ce:14:89:63:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Apr 19 08:16:37 2026 GMT Not After : Apr 22 17:08:37 2026 GMT Subject: CN=3ECEF17D15C11844A3D1E0A027AB6ED432F89EF9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:71:59:ec:43:40:12:90:c7:22:b9:16:3f: 43:1c:a7:87:93:be:a3:bd:b6:87:f7:ab:07:4e:20: ae:bc:52:0f:89:d7:c1:4b:66:83:ec:7c:a9:48:70: f3:a6:e0:b3:16:9a:65:58:c7:8a:c0:a7:48:7b:a8: 83:97:cf:ae:48:b6:db:cf:fd:9f:f6:f6:4e:40:ec: d5:1c:95:6a:13:4f:a2:4a:d2:38:ca:0c:62:e3:cd: a5:ff:f4:c0:03:08:29:b1:5b:5a:1b:3c:3b:c6:f2: 20:d4:5c:7d:18:d7:63:aa:9f:34:0b:fc:ff:e4:98: 1e:ff:30:86:cd:9e:5c:36:94:31:fd:f9:ed:d0:25: 0e:0b:d4:77:92:2c:45:f5:15:f4:19:5f:99:c7:8d: bc:d6:56:9a:fc:4a:c4:f7:6a:a6:4d:da:ce:f2:ca: 84:88:fa:4f:88:af:3d:09:72:2a:ee:6b:b0:72:f2: f9:00:fe:8f:9a:3b:9e:eb:31:9b:7c:06:b8:0a:96: b3:21:43:f0:a5:25:6a:63:e8:4f:c7:5e:ff:e6:59: c8:7c:16:a5:29:95:90:06:d5:2d:fc:11:22:9c:a1: 8d:02:02:3b:23:aa:f3:69:bb:94:fe:7b:ad:12:73: 5d:e6:b9:85:a9:93:2b:e4:62:13:d9:4e:aa:ef:81: ba:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:CE:F1:7D:15:C1:18:44:A3:D1:E0:A0:27:AB:6E:D4:32:F8:9E:F9 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:3e:87:30:f9:f9:33:34:74:b0:43:b1:f1:e7:38:e9:a7:bc: 61:1a:ae:d2:c6:d5:db:df:69:b6:33:4e:1e:d0:da:e9:4a:49: 61:14:8a:e9:a4:d7:5e:50:ab:c9:f5:c7:f0:16:e8:06:0e:e2: 03:61:2d:27:9f:26:32:21:72:18:1e:e0:ae:77:b8:4a:46:71: c2:f4:80:8d:dd:d2:82:8c:02:b2:1f:49:48:dc:b8:04:70:08: bf:f9:c1:27:22:0b:e6:6c:77:a3:d4:2c:6d:08:22:80:f3:04: 0f:4d:6a:c1:c1:57:8b:7a:6c:55:86:92:3f:16:fb:03:66:bf: 3e:82:0b:a2:a5:15:9e:7f:43:57:27:81:bb:1e:85:b1:1c:31: 1e:5e:eb:08:84:a6:11:82:a1:c1:26:5a:37:5b:c4:32:41:ff: a8:54:d3:02:29:bf:37:01:7e:d5:78:13:0c:e0:50:8e:b4:10: 6f:fe:d8:19:60:6f:28:b2:48:72:7f:ea:43:fd:91:29:54:1b: 18:06:3d:ac:55:d4:b4:f3:56:03:22:80:47:2f:e4:82:91:1e: 48:0a:ed:16:3f:60:71:28:a2:cd:9c:73:57:6f:9f:6f:5e:19: 82:35:64:32:3f:cc:44:b5:f4:86:9f:46:78:1a:f0:b8:49:46: a8:37:39:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQZzZyKE3LS5UwsDTAV7zhSJY/4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNjA0MTkwODE2MzdaFw0yNjA0MjIxNzA4MzdaMDMxMTAvBgNV BAMTKDNFQ0VGMTdEMTVDMTE4NDRBM0QxRTBBMDI3QUI2RUQ0MzJGODlFRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClgXFZ7ENAEpDHIrkWP0Mcp4eT vqO9tof3qwdOIK68Ug+J18FLZoPsfKlIcPOm4LMWmmVYx4rAp0h7qIOXz65IttvP /Z/29k5A7NUclWoTT6JK0jjKDGLjzaX/9MADCCmxW1obPDvG8iDUXH0Y12OqnzQL /P/kmB7/MIbNnlw2lDH9+e3QJQ4L1HeSLEX1FfQZX5nHjbzWVpr8SsT3aqZN2s7y yoSI+k+Irz0Jcirua7By8vkA/o+aO57rMZt8BrgKlrMhQ/ClJWpj6E/HXv/mWch8 FqUplZAG1S38ESKcoY0CAjsjqvNpu5T+e60Sc13muYWpkyvkYhPZTqrvgbp7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPs7xfRXBGESj0eCgJ6tu1DL4nvkwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKE+hzD5+TM0dLBDsfHnOOmnvGEartLG1dvf abYzTh7Q2ulKSWEUiumk115Qq8n1x/AW6AYO4gNhLSefJjIhchge4K53uEpGccL0 gI3d0oKMArIfSUjcuARwCL/5wSciC+Zsd6PULG0IIoDzBA9NasHBV4t6bFWGkj8W +wNmvz6CC6KlFZ5/Q1cngbsehbEcMR5e6wiEphGCocEmWjdbxDJB/6hU0wIpvzcB ftV4EwzgUI60EG/+2BlgbyiySHJ/6kP9kSlUGxgGPaxV1LTzVgMigEcv5IKRHkgK 7RY/YHEoos2cc1dvn29eGYI1ZDI/zES19IafRnga8LhJRqg3OZQ= -----END CERTIFICATE-----Generated at Sun Apr 19 10:21:00 2026 by rpki-client