$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: MfS55p1BnquRc+EYJlnL5TNRPOPCD4ExMeOeLFTTVlU= Subject key identifier: B5:9B:5B:71:9A:B3:14:4D:04:32:B0:BE:DF:29:1A:87:E1:5F:97:DC Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 79A4B1FAD717D17E2FA9565169EB47449269D34E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 0265 Signing time: Sat 18 Apr 2026 05:11:08 +0000 Manifest this update: Sat 18 Apr 2026 05:06:08 +0000 Manifest next update: Tue 21 Apr 2026 10:03:08 +0000 Files and hashes: 1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: kTrFLDCi/3VQV7a7pkmW+dWv+0RMpkZ4AhkZOzoo+gg=) 2: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: 1+JoRi6qpwhWJUkV4nHOIk1vO73ymq3EN+usX/QjTUM=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: BRm0NDg5Ybly7ATWBG9rULlosyYIWi0TQ0o34qTg0tE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 10:03:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:a4:b1:fa:d7:17:d1:7e:2f:a9:56:51:69:eb:47:44:92:69:d3:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Apr 18 05:06:08 2026 GMT Not After : Apr 21 10:03:08 2026 GMT Subject: CN=B59B5B719AB3144D0432B0BEDF291A87E15F97DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:b7:e3:89:75:96:73:39:ff:db:77:6b:74:43: aa:6a:d9:fc:1c:6f:0e:c4:7f:cb:28:2d:c6:ae:c7: a7:2c:58:1e:83:1b:1c:e7:c4:a3:52:45:4b:fd:ea: 53:ee:5e:9d:88:2d:43:a8:0e:d4:b8:df:4d:8e:83: 7a:a9:59:00:f8:c9:4a:2b:aa:f8:e6:28:e3:05:f4: e6:1c:01:2c:5b:fa:64:b4:c0:28:68:e1:29:a9:3f: 89:af:34:0e:4e:60:df:0d:22:ec:fd:b5:40:e5:5b: 7c:97:c0:c0:ee:4a:b8:05:f2:eb:94:62:22:a4:3c: 33:94:31:51:36:a4:c9:ff:04:7d:4b:b6:aa:e2:da: 21:3b:09:63:6e:1f:8a:06:05:20:52:c0:ce:7a:28: 28:c6:ff:f5:58:bd:13:c5:63:84:29:b7:24:dc:38: 2a:89:56:c4:4b:a1:29:12:66:de:60:fe:85:40:ef: c6:74:11:3a:83:2d:49:4e:5e:29:7b:5e:f0:27:d7: 41:16:f0:fd:4f:2c:22:ef:52:1f:d1:98:4c:01:ad: 97:1c:bb:c0:18:05:9a:05:42:dd:fd:f0:41:06:ed: 5c:f9:7f:42:30:60:f5:2a:5b:ac:36:20:ed:35:92: cd:29:7a:60:54:80:02:0d:bb:85:6b:76:37:f5:8c: e9:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9B:5B:71:9A:B3:14:4D:04:32:B0:BE:DF:29:1A:87:E1:5F:97:DC X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:a2:c6:e1:72:99:10:1d:a1:51:e9:a1:d4:af:47:69:ec:18: ac:c2:f2:e5:0c:c1:36:d7:da:cf:e1:32:9d:78:4d:c6:fd:e9: cd:96:57:a6:a1:49:b3:5d:00:fa:f4:54:b5:6a:b0:aa:a6:fc: e3:c2:5d:ff:f7:e9:4c:d4:76:01:5b:4f:39:cf:6f:2a:f9:05: bb:7a:cd:a0:9c:35:25:15:1f:72:30:5f:a7:5c:2a:02:56:1f: b6:c0:23:84:e6:51:cc:73:97:5f:7c:cd:40:c8:12:c1:40:d3: 44:93:e8:9e:72:36:10:5a:b0:2d:d5:b9:64:6c:dd:51:e5:dc: f9:3d:56:ea:f6:dc:e1:83:56:6e:5b:d1:0b:3b:4c:14:99:f7: f8:ff:13:3d:55:96:fb:10:f8:0b:6f:7d:7e:f7:45:9a:12:73: fd:0d:92:f7:4e:0a:cb:e9:bc:40:ed:27:79:95:54:aa:6d:d7: 93:b0:01:d6:74:f6:d4:10:c2:c9:5e:75:14:b2:fd:e5:b6:cc: c9:9c:d2:73:91:2c:2f:9f:f7:bd:57:23:81:fd:62:f4:9b:be: f3:47:5c:4f:0c:a3:e5:af:3a:ef:ef:5e:c9:e0:f1:68:1b:8e: 3d:ef:9e:b6:99:9d:a0:22:8a:4d:78:2b:4b:20:3c:83:2d:a0: 21:45:f4:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaSx+tcX0X4vqVZRaetHRJJp004wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNjA0MTgwNTA2MDhaFw0yNjA0MjExMDAzMDhaMDMxMTAvBgNV BAMTKEI1OUI1QjcxOUFCMzE0NEQwNDMyQjBCRURGMjkxQTg3RTE1Rjk3REMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnt+OJdZZzOf/bd2t0Q6pq2fwc bw7Ef8soLcaux6csWB6DGxznxKNSRUv96lPuXp2ILUOoDtS4302Og3qpWQD4yUor qvjmKOMF9OYcASxb+mS0wCho4SmpP4mvNA5OYN8NIuz9tUDlW3yXwMDuSrgF8uuU YiKkPDOUMVE2pMn/BH1Ltqri2iE7CWNuH4oGBSBSwM56KCjG//VYvRPFY4QptyTc OCqJVsRLoSkSZt5g/oVA78Z0ETqDLUlOXil7XvAn10EW8P1PLCLvUh/RmEwBrZcc u8AYBZoFQt398EEG7Vz5f0IwYPUqW6w2IO01ks0pemBUgAINu4Vrdjf1jOntAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZtbcZqzFE0EMrC+3ykah+Ffl9wwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2ixuFymRAdoVHpodSvR2nsGKzC8uUMwTbX 2s/hMp14Tcb96c2WV6ahSbNdAPr0VLVqsKqm/OPCXf/36UzUdgFbTznPbyr5Bbt6 zaCcNSUVH3IwX6dcKgJWH7bAI4TmUcxzl198zUDIEsFA00ST6J5yNhBasC3VuWRs 3VHl3Pk9Vur23OGDVm5b0Qs7TBSZ9/j/Ez1VlvsQ+AtvfX73RZoSc/0NkvdOCsvp vEDtJ3mVVKpt15OwAdZ09tQQwsledRSy/eW2zMmc0nORLC+f971XI4H9YvSbvvNH XE8Mo+WvOu/vXsng8Wgbjj3vnraZnaAiik14K0sgPIMtoCFF9NI= -----END CERTIFICATE-----Generated at Sun Apr 19 09:44:08 2026 by rpki-client