$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: Z3s4b5m5ProqKTV5oRCyIhZKYJROR8glOATv57s4wfk= Subject key identifier: 27:1D:A1:62:C4:4F:18:E4:0D:68:FD:6C:AF:30:F8:7B:F5:23:30:99 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 0C10D5F5678DAFDC14E1A12C8D205E6A8CB82EAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01FE Signing time: Fri 17 Apr 2026 20:23:09 +0000 Manifest this update: Fri 17 Apr 2026 20:18:09 +0000 Manifest next update: Tue 21 Apr 2026 07:27:09 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: Z9W9Lla8boPmTjxJbJXii71yguMCddEEC24jKYccBmo=) 2: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) 4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Apr 2026 07:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:10:d5:f5:67:8d:af:dc:14:e1:a1:2c:8d:20:5e:6a:8c:b8:2e:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Apr 17 20:18:09 2026 GMT Not After : Apr 21 07:27:09 2026 GMT Subject: CN=271DA162C44F18E40D68FD6CAF30F87BF5233099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:f0:7b:8d:1d:98:e9:f5:d4:06:2c:af:a6:b4: 21:91:78:1a:b0:47:ed:23:45:d8:ea:7e:fe:e3:99: d9:8c:b1:80:56:6c:f6:79:3e:cf:3c:f2:79:a2:0e: eb:2e:37:08:21:f1:58:c6:0e:97:55:cb:42:f6:51: 23:25:1d:65:be:9b:d7:d9:b5:e1:f5:b9:e1:8c:1e: 02:66:28:bc:f2:5c:70:74:10:a6:0c:9b:20:7e:8e: fc:b7:cf:a8:00:70:08:f6:08:48:e0:75:4b:10:f7: 44:11:cb:6f:41:a3:b1:83:ed:cd:30:1a:7f:f3:5b: c4:3c:1c:fa:50:3e:d0:66:4c:cc:95:20:12:4d:f0: 0f:90:16:ff:05:c0:8f:ea:5a:44:97:2a:ed:14:e8: 29:7c:09:a2:98:f4:f7:d0:36:29:98:8d:ad:92:d2: bc:38:81:c4:5a:ab:5c:6e:66:19:2a:c3:fe:4d:20: 93:e7:be:d9:43:04:ed:a8:99:77:c5:fe:f9:d7:e8: f9:68:7c:b7:fd:d3:50:ff:b6:c1:95:02:4d:98:e7: 73:48:a8:08:68:d7:c5:9f:0b:58:0c:0e:aa:f0:46: ca:b9:e4:32:ef:63:98:d6:4f:31:cc:96:7d:7b:cd: 5e:d0:67:43:e2:13:9b:94:df:e4:e9:7e:46:fb:82: 3f:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:1D:A1:62:C4:4F:18:E4:0D:68:FD:6C:AF:30:F8:7B:F5:23:30:99 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:af:d9:b0:e4:3a:70:5b:ca:1f:a9:75:b7:81:26:36:42:e6: e2:be:30:10:b0:04:dd:ff:99:6e:42:9e:eb:34:7f:eb:dd:3a: b8:f9:d1:11:83:50:08:80:68:60:e9:ce:c8:f4:9b:29:ba:48: 02:4e:c7:73:59:3f:67:44:51:5a:12:45:d4:79:f4:cf:e7:20: dd:ae:b0:42:45:fb:ce:51:26:6c:1e:5d:b1:a9:9c:20:4f:b4: f9:3f:34:87:0e:89:ed:4c:69:f9:4b:f7:ff:6f:ae:f0:b5:99: 55:54:cf:01:fa:7c:f4:8d:f9:20:36:d2:34:a9:42:4f:fa:3c: bd:7b:dd:86:df:aa:07:66:64:2d:90:8d:40:88:12:96:63:fc: 16:2c:fc:3d:66:f5:c9:dd:24:e5:36:62:61:b7:4a:b1:ac:d4: c7:96:96:fc:90:d3:4c:69:7d:dc:07:19:57:f7:50:a9:a7:63: c8:10:21:2b:db:57:1d:6a:35:6a:6b:5d:d8:03:d7:c4:3b:11: 7f:35:f5:2c:dd:64:dd:d4:c9:70:54:e2:87:b7:de:e1:21:8f: 31:bd:02:1b:3b:4f:b4:14:5c:29:26:83:5c:6c:3b:4f:cd:67: 67:59:dc:29:08:eb:91:1e:38:75:72:6d:01:a3:28:dc:48:53: e7:b1:bc:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDBDV9WeNr9wU4aEsjSBeaoy4Lq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNjA0MTcyMDE4MDlaFw0yNjA0MjEwNzI3MDlaMDMxMTAvBgNV BAMTKDI3MURBMTYyQzQ0RjE4RTQwRDY4RkQ2Q0FGMzBGODdCRjUyMzMwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj8HuNHZjp9dQGLK+mtCGReBqw R+0jRdjqfv7jmdmMsYBWbPZ5Ps888nmiDusuNwgh8VjGDpdVy0L2USMlHWW+m9fZ teH1ueGMHgJmKLzyXHB0EKYMmyB+jvy3z6gAcAj2CEjgdUsQ90QRy29Bo7GD7c0w Gn/zW8Q8HPpQPtBmTMyVIBJN8A+QFv8FwI/qWkSXKu0U6Cl8CaKY9PfQNimYja2S 0rw4gcRaq1xuZhkqw/5NIJPnvtlDBO2omXfF/vnX6PlofLf901D/tsGVAk2Y53NI qAho18WfC1gMDqrwRsq55DLvY5jWTzHMln17zV7QZ0PiE5uU3+Tpfkb7gj+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJx2hYsRPGOQNaP1srzD4e/UjMJkwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+v2bDkOnBbyh+pdbeBJjZC5uK+MBCwBN3/ mW5Cnus0f+vdOrj50RGDUAiAaGDpzsj0mym6SAJOx3NZP2dEUVoSRdR59M/nIN2u sEJF+85RJmweXbGpnCBPtPk/NIcOie1MaflL9/9vrvC1mVVUzwH6fPSN+SA20jSp Qk/6PL173YbfqgdmZC2QjUCIEpZj/BYs/D1m9cndJOU2YmG3SrGs1MeWlvyQ00xp fdwHGVf3UKmnY8gQISvbVx1qNWprXdgD18Q7EX819SzdZN3UyXBU4oe33uEhjzG9 Ahs7T7QUXCkmg1xsO0/NZ2dZ3CkI65EeOHVybQGjKNxIU+exvDk= -----END CERTIFICATE-----Generated at Sun Apr 19 14:06:03 2026 by rpki-client