$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: uU7OCPN9sn5Oij86egipTrO51yYl1IefQ41LX39AKco= Subject key identifier: 24:B5:E6:CD:5E:10:A5:71:18:4C:D0:76:E7:DF:6C:C0:D2:60:83:49 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 490367ED6D841D73614F832D8F275C9BFE62A44F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 018E Signing time: Fri 17 Apr 2026 11:31:42 +0000 Manifest this update: Fri 17 Apr 2026 11:26:42 +0000 Manifest next update: Mon 20 Apr 2026 16:51:42 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) 2: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: Bd1RT/2FZZtCFc0Oi5V8qXtw3yy4o+mB2iIXNaml4uU=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 4: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 16:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:03:67:ed:6d:84:1d:73:61:4f:83:2d:8f:27:5c:9b:fe:62:a4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Apr 17 11:26:42 2026 GMT Not After : Apr 20 16:51:42 2026 GMT Subject: CN=24B5E6CD5E10A571184CD076E7DF6CC0D2608349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:7d:ad:0c:7b:6c:54:2a:a7:0a:21:42:98:a5: 95:d2:34:44:60:6b:d6:77:d1:f0:cc:01:77:33:fd: 70:45:c9:6f:0a:0f:9d:77:34:c1:95:ea:b2:bc:d8: 46:ff:d0:bd:1d:92:26:29:dc:e5:ba:79:cb:ab:54: b0:af:26:43:ff:96:78:45:f0:67:61:08:2b:9a:10: 36:05:73:5e:bf:28:ea:a0:41:7a:65:e6:54:d3:be: ca:8d:ab:49:95:20:5d:09:17:85:61:77:ca:91:ac: 3e:f6:04:fb:33:79:4e:b7:94:25:99:2d:dc:b6:04: 1a:05:a6:a8:24:72:a6:fa:76:e6:8d:2e:d8:fd:51: a5:e5:3b:40:c1:80:a5:17:a4:5d:d0:75:19:12:40: b5:8a:3b:b6:f7:ec:32:c3:9f:26:fb:fe:8b:7e:9c: c5:41:03:8d:5c:a2:dd:b4:f7:08:f8:08:7b:b5:a8: a4:c3:54:1d:7e:c7:62:53:3e:52:e4:46:f8:b0:9b: 53:eb:92:a2:c9:e9:28:8e:41:67:bd:37:75:5e:b9: 5e:37:25:c7:f8:31:4d:a2:79:9d:05:09:d7:08:96: ea:55:c7:57:17:f1:4f:4c:6f:d5:a6:d0:c2:6a:85: bc:15:48:e8:af:e5:b1:21:d5:18:30:56:0c:9d:70: 5b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:B5:E6:CD:5E:10:A5:71:18:4C:D0:76:E7:DF:6C:C0:D2:60:83:49 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:f7:68:0f:7b:67:67:f2:d9:88:17:40:20:38:ac:8c:44:8a: 46:38:a6:b9:ae:cf:0a:ec:b2:b0:11:d9:84:f0:14:4f:49:33: ad:69:8c:ac:5c:26:08:55:f3:d2:49:ed:ef:22:ed:6f:55:75: f9:47:67:2d:bd:6d:d8:86:48:70:9f:aa:66:82:28:37:1a:d4: 23:80:31:1e:74:5e:6f:87:e5:e6:86:ff:2c:c2:43:f9:dc:45: be:02:ae:d0:17:bf:bf:66:22:4e:96:64:c5:84:db:5d:6a:2e: 24:a9:76:2a:92:10:cf:21:51:b0:99:c4:30:17:dd:28:9f:9d: 19:5b:33:ec:b3:ac:7c:64:5b:6a:a2:b8:42:9a:4d:a3:1d:aa: f8:ef:0e:2c:c6:c1:3a:f5:67:0b:46:8b:67:f9:3b:de:4b:e1: 28:d6:fe:a8:b3:4f:1f:06:ae:cd:38:6e:de:03:98:12:6e:db: 9b:1b:ed:ee:83:4d:0a:9b:c0:d7:1c:ba:cf:af:8d:24:0a:9d: a3:1b:6f:76:6b:ab:83:99:3c:f4:35:9c:b6:92:c9:ce:70:28: 64:7c:af:ed:d2:50:10:db:19:6d:60:bd:60:f0:f8:52:2d:67: 1c:44:c2:c2:14:1a:b1:c3:2f:6e:a5:69:c5:30:22:7c:ef:bc: 45:98:46:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSQNn7W2EHXNhT4Mtjydcm/5ipE8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNjA0MTcxMTI2NDJaFw0yNjA0MjAxNjUxNDJaMDMxMTAvBgNV BAMTKDI0QjVFNkNENUUxMEE1NzExODRDRDA3NkU3REY2Q0MwRDI2MDgzNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7fa0Me2xUKqcKIUKYpZXSNERg a9Z30fDMAXcz/XBFyW8KD513NMGV6rK82Eb/0L0dkiYp3OW6ecurVLCvJkP/lnhF 8GdhCCuaEDYFc16/KOqgQXpl5lTTvsqNq0mVIF0JF4Vhd8qRrD72BPszeU63lCWZ Ldy2BBoFpqgkcqb6duaNLtj9UaXlO0DBgKUXpF3QdRkSQLWKO7b37DLDnyb7/ot+ nMVBA41cot209wj4CHu1qKTDVB1+x2JTPlLkRviwm1PrkqLJ6SiOQWe9N3VeuV43 Jcf4MU2ieZ0FCdcIlupVx1cX8U9Mb9Wm0MJqhbwVSOiv5bEh1RgwVgydcFv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJLXmzV4QpXEYTNB2599swNJgg0kwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJj3aA97Z2fy2YgXQCA4rIxEikY4prmuzwrs srAR2YTwFE9JM61pjKxcJghV89JJ7e8i7W9VdflHZy29bdiGSHCfqmaCKDca1COA MR50Xm+H5eaG/yzCQ/ncRb4CrtAXv79mIk6WZMWE211qLiSpdiqSEM8hUbCZxDAX 3SifnRlbM+yzrHxkW2qiuEKaTaMdqvjvDizGwTr1ZwtGi2f5O95L4SjW/qizTx8G rs04bt4DmBJu25sb7e6DTQqbwNccus+vjSQKnaMbb3Zrq4OZPPQ1nLaSyc5wKGR8 r+3SUBDbGW1gvWDw+FItZxxEwsIUGrHDL26lacUwInzvvEWYRkA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:24:37 2026 by rpki-client