$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: RGvekMF9YoEV4kL/ABesEj7V0RYVRKAF5aZuUq6XL2g= Subject key identifier: 83:E9:E6:3A:5D:B2:A9:8F:D9:A3:EE:DE:DB:FD:07:6E:CA:47:66:B7 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 16A84A3F1BAC23B949F10531E77339AEA09C2F6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: 014A Signing time: Wed 15 Apr 2026 21:40:54 +0000 Manifest this update: Wed 15 Apr 2026 21:35:54 +0000 Manifest next update: Sat 18 Apr 2026 22:02:54 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: eQaky8Oqg6zWWDS6nsYOWW+QdwQJL6ZWMvFeCi9tD5w=) 2: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: mTs1PPzkaoDtJqfV0YQUE+K8GUjk5s8Td4+0aazE0ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 22:02:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:a8:4a:3f:1b:ac:23:b9:49:f1:05:31:e7:73:39:ae:a0:9c:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Apr 15 21:35:54 2026 GMT Not After : Apr 18 22:02:54 2026 GMT Subject: CN=83E9E63A5DB2A98FD9A3EEDEDBFD076ECA4766B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:14:51:9e:0a:96:1f:95:d4:a4:41:22:c6:d7: f6:12:fd:f8:d0:14:8b:72:49:2b:f7:7b:1b:62:f3: 53:fa:4c:fc:5f:60:c7:14:c5:d0:f6:09:c8:6a:e0: d8:37:0c:a5:6d:55:b7:72:15:fc:a8:a4:a9:cd:48: 83:0e:f4:62:05:8a:4c:de:b9:ad:27:e6:9c:02:d3: 1e:44:14:cc:ac:ae:b8:0c:33:5e:df:70:15:af:c4: e9:d1:75:c2:51:ae:43:d9:f2:86:59:58:ee:09:cb: a2:39:eb:0c:c1:44:48:f0:68:11:c2:9a:15:f5:8b: 4b:74:09:d6:16:1b:64:df:74:7a:eb:30:dd:3d:eb: a9:ab:dd:f5:cd:7d:57:e3:76:67:e4:f3:40:eb:29: c4:b4:67:18:46:77:9f:f5:d1:35:56:c7:8f:21:2c: 71:b6:f4:fa:e5:ad:c1:2e:57:9a:f3:f8:e7:7d:57: 7e:3d:cf:fd:91:ff:13:86:74:67:2d:d0:1d:f5:3b: c6:d7:a5:29:43:78:01:10:52:93:52:36:39:86:53: 44:1e:bc:ff:6c:9c:1b:59:07:ce:0a:d6:a4:2d:0f: a6:ec:ea:ec:76:ce:69:c8:d0:12:ac:aa:d2:68:77: f7:8f:b4:1e:79:da:23:ed:e8:c0:97:4d:06:3f:ff: 6a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E9:E6:3A:5D:B2:A9:8F:D9:A3:EE:DE:DB:FD:07:6E:CA:47:66:B7 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:d9:25:82:4f:2a:7a:ed:10:3b:01:c8:38:93:ed:58:5b:a3: b3:8b:7f:ed:51:a4:b8:45:42:23:26:07:38:cc:8b:08:19:b8: d5:4b:19:ba:f3:60:a8:c3:70:b5:c0:97:f1:01:eb:e5:01:8c: 56:e8:3d:9f:7d:5a:90:31:e4:eb:89:0e:32:26:2d:39:00:29: f4:ca:65:b0:21:e7:7a:fc:96:1d:f9:a5:de:1a:ef:c7:23:c9: d4:e7:0b:a7:c6:8a:7a:b4:19:29:70:9b:9b:26:57:80:d6:07: 80:9c:c8:4d:fb:5d:c2:8e:65:59:30:3e:c0:bb:db:37:33:d2: f4:04:16:da:ce:05:5e:d5:6a:9e:b2:28:18:00:48:47:ce:e0: 71:d6:10:94:53:52:98:3f:4c:72:a0:77:9a:91:ae:f9:82:e2: 7d:06:62:ca:2f:bb:21:0b:7e:08:e1:d8:f7:5d:43:22:d6:ca: db:f7:24:a5:ef:61:33:3a:ca:31:92:ce:d0:43:fe:41:34:c2: a1:3b:66:c6:ff:59:c8:81:d7:fd:a7:52:02:d9:87:19:01:58: 7b:0e:a6:11:e3:94:e5:3f:85:61:8f:58:c6:02:97:c7:4c:1d: 61:e4:70:8c:a0:f5:47:e4:79:14:fc:ca:ac:06:f2:54:bc:5f: 39:9c:13:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFqhKPxusI7lJ8QUx53M5rqCcL2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNjA0MTUyMTM1NTRaFw0yNjA0MTgyMjAyNTRaMDMxMTAvBgNV BAMTKDgzRTlFNjNBNURCMkE5OEZEOUEzRUVERURCRkQwNzZFQ0E0NzY2QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5FFGeCpYfldSkQSLG1/YS/fjQ FItySSv3exti81P6TPxfYMcUxdD2Cchq4Ng3DKVtVbdyFfyopKnNSIMO9GIFikze ua0n5pwC0x5EFMysrrgMM17fcBWvxOnRdcJRrkPZ8oZZWO4Jy6I56wzBREjwaBHC mhX1i0t0CdYWG2TfdHrrMN0966mr3fXNfVfjdmfk80DrKcS0ZxhGd5/10TVWx48h LHG29PrlrcEuV5rz+Od9V349z/2R/xOGdGct0B31O8bXpSlDeAEQUpNSNjmGU0Qe vP9snBtZB84K1qQtD6bs6ux2zmnI0BKsqtJod/ePtB552iPt6MCXTQY//2o3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+nmOl2yqY/Zo+7e2/0HbspHZrcwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHvZJYJPKnrtEDsByDiT7Vhbo7OLf+1RpLhF QiMmBzjMiwgZuNVLGbrzYKjDcLXAl/EB6+UBjFboPZ99WpAx5OuJDjImLTkAKfTK ZbAh53r8lh35pd4a78cjydTnC6fGinq0GSlwm5smV4DWB4CcyE37XcKOZVkwPsC7 2zcz0vQEFtrOBV7Vap6yKBgASEfO4HHWEJRTUpg/THKgd5qRrvmC4n0GYsovuyEL fgjh2PddQyLWytv3JKXvYTM6yjGSztBD/kE0wqE7Zsb/WciB1/2nUgLZhxkBWHsO phHjlOU/hWGPWMYCl8dMHWHkcIyg9UfkeRT8yqwG8lS8XzmcE5U= -----END CERTIFICATE-----Generated at Fri Apr 17 12:46:45 2026 by rpki-client