$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: vj3rINKvyQvGKRGIH0cbC86Izahztqf7RXlhY5LOw3U= Subject key identifier: DC:AD:07:DD:CD:6D:F0:22:C8:CB:EB:AC:47:C1:93:AF:29:B1:52:D7 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 61468982CE91A1BF07A625DAD69932088B1BFD9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0180 Signing time: Fri 17 Apr 2026 01:01:44 +0000 Manifest this update: Fri 17 Apr 2026 00:56:44 +0000 Manifest next update: Mon 20 Apr 2026 02:48:44 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: XysKai9x/l50B9GA9oywLehoXxIGOGbwmWNwhwBcLO8=) 2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 02:48:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:46:89:82:ce:91:a1:bf:07:a6:25:da:d6:99:32:08:8b:1b:fd:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Apr 17 00:56:44 2026 GMT Not After : Apr 20 02:48:44 2026 GMT Subject: CN=DCAD07DDCD6DF022C8CBEBAC47C193AF29B152D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f3:95:cd:d8:89:8b:f9:fb:4e:c3:e7:87:b9:68: 01:d4:11:9d:20:9e:2b:32:b4:17:eb:fd:e7:9b:11: 49:b8:8a:37:a0:50:b9:9d:a7:1f:25:a3:4b:19:52: d1:a2:dc:c5:aa:46:51:eb:3e:15:fb:8a:7f:36:95: 31:8d:7c:33:32:14:9e:cd:23:5e:18:4e:b7:e0:12: 1c:3f:df:42:15:73:e8:eb:11:78:a3:50:fc:db:4e: 58:1c:f3:ea:e5:0b:a1:c4:c2:bc:02:e3:7b:de:80: 20:3d:57:43:ba:46:bd:15:e8:21:40:8f:45:0c:7e: a8:10:22:12:43:a5:70:04:05:b7:f8:d4:ab:82:6b: c7:c3:32:92:39:02:cf:3f:3f:6c:09:75:f0:8d:fe: 0c:38:70:c6:df:ed:e3:c2:9d:32:13:e0:5f:d0:66: ef:f2:42:8a:da:fb:86:45:77:6c:e1:c4:0f:23:97: 6a:02:18:82:91:ad:f8:4e:18:51:f6:7a:78:ba:bd: bd:85:19:22:49:cf:1c:ca:32:df:5f:a9:75:72:3f: 1a:ba:32:7d:7b:cf:fc:ed:82:78:68:68:3b:93:25: ac:c8:e7:42:0c:59:6d:e2:eb:87:d5:77:88:cc:2d: a6:38:8d:6b:c7:75:c5:30:45:b8:f6:7c:ed:67:da: f4:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:AD:07:DD:CD:6D:F0:22:C8:CB:EB:AC:47:C1:93:AF:29:B1:52:D7 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:df:64:2f:d2:db:ee:f7:5f:b8:df:ea:cb:64:ae:f7:56: 23:4c:d1:d7:eb:a7:59:c7:e6:fd:24:27:05:63:53:9f:f9:59: 69:04:07:e6:e5:13:39:2f:d3:7a:be:97:a4:0a:ca:c6:fa:ff: d5:29:c9:03:e0:ea:0b:96:fe:48:7a:58:7c:1c:2c:4d:60:c0: eb:0e:f3:2a:3b:fc:64:ea:3f:28:5e:40:97:4b:c9:45:e2:60: de:6f:26:35:66:fd:11:9a:ff:00:82:a8:3a:4b:d4:7f:ae:57: a9:2f:02:cf:8d:65:02:74:32:6a:a4:02:c3:27:0d:2c:ef:4d: 39:4e:38:15:65:2f:2c:f6:94:dc:e3:93:57:9c:a8:5d:5a:fa: 53:ab:21:ca:d1:0a:42:58:72:2c:a2:f7:1f:31:f8:f9:43:bc: 6b:83:43:68:18:cc:52:87:b6:76:9c:5a:64:5f:ac:41:f0:93: 74:54:c2:c9:64:3e:17:61:98:fb:08:55:68:bb:31:f5:84:ec: 81:a1:2d:91:b9:42:14:a4:ee:24:a7:9b:d9:b1:ed:bc:e6:40: 6d:26:bd:27:d1:7a:8a:06:a2:90:bb:5d:4f:64:89:53:ff:53: 58:9d:8d:f4:de:32:ed:c9:0b:cc:cd:63:fb:cc:61:b2:c6:3d: 6b:98:4a:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYUaJgs6Rob8HpiXa1pkyCIsb/ZowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNjA0MTcwMDU2NDRaFw0yNjA0MjAwMjQ4NDRaMDMxMTAvBgNV BAMTKERDQUQwN0REQ0Q2REYwMjJDOENCRUJBQzQ3QzE5M0FGMjlCMTUyRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDzlc3YiYv5+07D54e5aAHUEZ0g nisytBfr/eebEUm4ijegULmdpx8lo0sZUtGi3MWqRlHrPhX7in82lTGNfDMyFJ7N I14YTrfgEhw/30IVc+jrEXijUPzbTlgc8+rlC6HEwrwC43vegCA9V0O6Rr0V6CFA j0UMfqgQIhJDpXAEBbf41KuCa8fDMpI5As8/P2wJdfCN/gw4cMbf7ePCnTIT4F/Q Zu/yQora+4ZFd2zhxA8jl2oCGIKRrfhOGFH2eni6vb2FGSJJzxzKMt9fqXVyPxq6 Mn17z/ztgnhoaDuTJazI50IMWW3i64fVd4jMLaY4jWvHdcUwRbj2fO1n2vTfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3K0H3c1t8CLIy+usR8GTrymxUtcwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4Q32Qv0tvu91+43+rLZK73ViNM0dfrp1nH 5v0kJwVjU5/5WWkEB+blEzkv03q+l6QKysb6/9UpyQPg6guW/kh6WHwcLE1gwOsO 8yo7/GTqPyheQJdLyUXiYN5vJjVm/RGa/wCCqDpL1H+uV6kvAs+NZQJ0MmqkAsMn DSzvTTlOOBVlLyz2lNzjk1ecqF1a+lOrIcrRCkJYciyi9x8x+PlDvGuDQ2gYzFKH tnacWmRfrEHwk3RUwslkPhdhmPsIVWi7MfWE7IGhLZG5QhSk7iSnm9mx7bzmQG0m vSfReooGopC7XU9kiVP/U1idjfTeMu3JC8zNY/vMYbLGPWuYSqs= -----END CERTIFICATE-----Generated at Fri Apr 17 18:11:40 2026 by rpki-client