$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: frYiluUS8qezsOUqs86RCPODxrPHId4GwJktIoFp2W4= Subject key identifier: 31:95:58:B2:35:A1:D6:E6:24:FF:FE:6E:B5:11:3C:83:B2:12:03:BC Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 1968FC0AE001E3FB27F92B9CE05079CBB636C08B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 0567 Signing time: Fri 17 Apr 2026 11:00:42 +0000 Manifest this update: Fri 17 Apr 2026 10:55:42 +0000 Manifest next update: Mon 20 Apr 2026 14:29:42 +0000 Files and hashes: 1: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: tNvFE32S96Sr/yEp7c/d5FN6Yv249/LOXPhvCEgjP8M=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 4: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 14:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:68:fc:0a:e0:01:e3:fb:27:f9:2b:9c:e0:50:79:cb:b6:36:c0:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Apr 17 10:55:42 2026 GMT Not After : Apr 20 14:29:42 2026 GMT Subject: CN=319558B235A1D6E624FFFE6EB5113C83B21203BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3a:1c:6c:d9:88:5b:04:51:00:92:fa:dc:a9: 04:cf:a7:bd:7d:e9:24:c7:8e:05:98:86:eb:d7:32: 73:64:0d:8b:1e:c8:b8:97:7b:a8:73:6d:a8:91:f4: 56:48:c7:69:e4:e4:cb:06:a3:6c:10:52:7f:fa:d8: 9c:69:0b:fa:24:ac:3b:50:9d:51:ae:e8:0c:98:f4: 60:4a:30:73:07:82:0d:68:17:1b:d6:ae:32:13:74: 3d:0e:b8:7d:c9:a7:e4:7e:d7:4d:aa:14:77:0b:74: 58:4b:6f:41:d1:a1:7a:f8:ac:3d:f0:a6:d4:c3:ee: 1b:aa:dc:2c:44:2a:79:4f:1e:53:5c:06:ac:93:8d: c5:bd:a3:61:88:b0:3a:9d:0c:de:4b:fc:4a:40:0b: d3:6c:42:6b:dc:ce:7f:8a:c9:30:b9:dc:e2:35:0b: 3a:e5:73:11:c5:1a:c4:24:0f:fc:76:d4:a9:09:54: cf:ef:bb:2c:bb:74:8b:a5:ae:bc:cb:58:74:98:3d: bb:9f:99:66:ae:f8:bf:8c:3a:38:c8:68:57:b3:1d: 5c:58:b6:0f:3a:45:9c:09:d6:64:d4:ca:3b:8e:10: e1:61:5e:2f:7e:47:a3:57:71:08:e1:70:94:78:43: 45:7b:32:2e:ca:49:3e:7a:7e:a5:d8:86:98:41:e3: a1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:58:B2:35:A1:D6:E6:24:FF:FE:6E:B5:11:3C:83:B2:12:03:BC X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:a7:6f:6c:da:5d:08:dc:f0:33:56:9b:ba:6f:e3:b6:b3:14: c1:d3:62:4a:2b:b3:3e:5a:29:48:f0:0f:d1:61:da:e8:2e:d4: 0b:18:cd:37:09:4d:33:4b:34:16:cf:ae:32:f3:da:81:f7:4d: f4:f9:c0:b4:08:3a:e9:d8:bd:bb:58:f6:0c:0c:11:2e:18:c8: 3a:20:68:60:3d:88:1d:e8:2e:19:38:f7:5a:ee:d9:2c:49:7c: 6b:0b:50:29:d4:44:e8:bc:26:fa:9c:4a:26:01:bb:af:d1:34: 46:bb:73:57:34:4a:52:a1:96:16:53:01:81:82:12:df:7b:0d: 74:3b:de:c1:61:bb:f2:56:cd:15:22:f7:5e:06:a3:6b:c0:19: 00:f7:17:2f:80:d3:e2:bd:fd:b2:b4:89:a1:1b:73:5c:e7:d3: fb:c9:c9:93:e0:78:14:74:87:3d:f7:74:a6:39:ad:9e:b1:f0: da:26:a6:d9:f4:07:29:3a:82:76:9d:8a:d7:70:b2:c6:dc:da: b4:aa:16:94:e0:d2:f5:8c:33:fd:b0:ff:2c:dc:a9:b5:12:b2: c7:60:47:12:c9:b0:20:50:b7:ec:a5:36:98:9f:93:1d:8f:cf: 8f:1b:82:d0:31:30:cf:3c:2f:38:68:dd:01:07:d8:54:13:0e: d9:9b:08:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGWj8CuAB4/sn+Suc4FB5y7Y2wIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNjA0MTcxMDU1NDJaFw0yNjA0MjAxNDI5NDJaMDMxMTAvBgNV BAMTKDMxOTU1OEIyMzVBMUQ2RTYyNEZGRkU2RUI1MTEzQzgzQjIxMjAzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKOhxs2YhbBFEAkvrcqQTPp719 6STHjgWYhuvXMnNkDYseyLiXe6hzbaiR9FZIx2nk5MsGo2wQUn/62JxpC/okrDtQ nVGu6AyY9GBKMHMHgg1oFxvWrjITdD0OuH3Jp+R+102qFHcLdFhLb0HRoXr4rD3w ptTD7huq3CxEKnlPHlNcBqyTjcW9o2GIsDqdDN5L/EpAC9NsQmvczn+KyTC53OI1 CzrlcxHFGsQkD/x21KkJVM/vuyy7dIulrrzLWHSYPbufmWau+L+MOjjIaFezHVxY tg86RZwJ1mTUyjuOEOFhXi9+R6NXcQjhcJR4Q0V7Mi7KST56fqXYhphB46G7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZVYsjWh1uYk//5utRE8g7ISA7wwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABWnb2zaXQjc8DNWm7pv47azFMHTYkorsz5a KUjwD9Fh2ugu1AsYzTcJTTNLNBbPrjLz2oH3TfT5wLQIOunYvbtY9gwMES4YyDog aGA9iB3oLhk491ru2SxJfGsLUCnUROi8JvqcSiYBu6/RNEa7c1c0SlKhlhZTAYGC Et97DXQ73sFhu/JWzRUi914Go2vAGQD3Fy+A0+K9/bK0iaEbc1zn0/vJyZPgeBR0 hz33dKY5rZ6x8Nomptn0Byk6gnaditdwssbc2rSqFpTg0vWMM/2w/yzcqbUSssdg RxLJsCBQt+ylNpifkx2Pz48bgtAxMM88Lzho3QEH2FQTDtmbCHQ= -----END CERTIFICATE-----Generated at Fri Apr 17 16:48:56 2026 by rpki-client