$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: 17i9mO69PYXSd6jD4jzArnRQ8jmpBCDTQLRCJOW9fK0= Subject key identifier: 08:D3:E9:EE:11:16:F9:63:AD:E6:32:DC:42:61:62:98:B8:F2:9A:C8 Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 4107D738B994A2FC5EAF6425AF18030EC398CEBA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: 0140 Signing time: Mon 20 Apr 2026 10:11:33 +0000 Manifest this update: Mon 20 Apr 2026 10:06:33 +0000 Manifest next update: Thu 23 Apr 2026 12:15:33 +0000 Files and hashes: 1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: AvjuSxuDgYlu9LwOx/YnYwOi+KNWMNxtiFcuZUyTJQo=) 2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: Ra05wkGB2Xe7FfSwCrcRzvRi0nxXzZPjhLkj6+5LETI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 12:15:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:07:d7:38:b9:94:a2:fc:5e:af:64:25:af:18:03:0e:c3:98:ce:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Apr 20 10:06:33 2026 GMT Not After : Apr 23 12:15:33 2026 GMT Subject: CN=08D3E9EE1116F963ADE632DC42616298B8F29AC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f6:0f:bf:11:2e:aa:ec:cb:66:60:db:e4:d2:0c: 6a:ce:c3:e3:7c:72:6a:c7:85:ea:21:cc:a8:b2:d9: ee:5b:1b:18:60:e8:ae:43:31:9d:62:f2:26:d3:56: 73:b9:c6:dd:ec:d8:e3:ff:63:b0:c4:99:c8:3a:f7: 68:d9:c6:db:04:cc:15:90:aa:d4:3e:48:5c:78:ee: e7:3f:8b:51:19:e8:e0:4b:5e:89:66:95:3d:2f:87: d0:2e:02:1a:b7:2b:21:3a:af:cb:1a:61:76:bb:c4: 73:85:65:5b:d8:88:a6:44:54:3e:ad:87:78:cd:20: 22:d4:f4:c3:0d:d8:b7:d5:5f:6b:fe:2c:b7:aa:57: ea:1e:d5:29:ee:e0:13:95:3e:ae:fb:ca:c7:d9:bf: 78:00:9c:d6:22:51:22:b0:07:b2:5e:a7:f2:68:54: 13:85:b3:eb:c7:2d:b6:d1:fb:f5:b7:50:3d:bf:3c: c8:61:c8:34:2b:c9:a9:81:a3:2f:59:b6:d5:12:cc: 20:1e:6d:59:04:11:d8:10:1c:4e:4e:d9:12:5a:08: 9c:53:c6:53:63:58:92:48:79:16:27:08:bc:96:18: 79:78:f5:f3:a3:00:cb:ab:35:b5:e1:9e:c3:22:99: cb:c3:4c:56:bc:d7:d3:98:2f:15:ee:89:fd:e7:35: 56:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D3:E9:EE:11:16:F9:63:AD:E6:32:DC:42:61:62:98:B8:F2:9A:C8 X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:ba:6b:2d:5f:7b:59:17:fc:24:2d:b8:36:fd:dc:8e:64:94: 77:0a:7e:3a:83:6c:63:8f:b2:62:95:64:c7:95:fd:24:01:7a: c3:cf:f8:23:67:98:53:59:06:38:45:ab:46:20:50:61:3e:3b: c8:02:df:df:80:d2:bf:3d:59:a0:61:13:a1:2b:e5:00:e2:93: 18:48:e6:94:f5:5e:42:19:d9:e4:0f:97:6e:be:a4:8a:5c:e2: 8e:b7:d4:ab:2a:ae:4a:2e:c6:1e:bc:c9:e5:33:19:3d:d3:5d: 50:e4:5e:bd:51:9d:ad:7f:5f:5a:2a:30:d1:29:70:9a:88:ab: af:c5:2a:8b:3a:5f:13:cf:f1:97:2b:d7:03:10:40:78:e6:ed: 60:03:24:1a:e9:d0:02:76:bc:72:a3:06:f8:50:a2:a8:1f:82: 6a:ec:54:01:2f:e3:b8:6a:6a:28:c3:b1:8f:8c:b5:4c:dc:f1: e0:ed:09:b0:26:28:94:fe:19:c4:73:73:9f:f9:7a:29:cc:d3: 3f:04:77:29:f5:23:d9:c1:d5:8a:b2:c1:a8:11:cf:de:8e:03: 4a:41:58:e0:b5:f7:66:28:3b:69:70:d3:f7:21:a0:65:fc:eb: a9:14:6c:a1:d3:7b:3e:8f:ca:82:24:0a:98:ab:8d:ac:02:fb: 0a:a1:aa:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQQfXOLmUovxer2QlrxgDDsOYzrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNjA0MjAxMDA2MzNaFw0yNjA0MjMxMjE1MzNaMDMxMTAvBgNV BAMTKDA4RDNFOUVFMTExNkY5NjNBREU2MzJEQzQyNjE2Mjk4QjhGMjlBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD2D78RLqrsy2Zg2+TSDGrOw+N8 cmrHheohzKiy2e5bGxhg6K5DMZ1i8ibTVnO5xt3s2OP/Y7DEmcg692jZxtsEzBWQ qtQ+SFx47uc/i1EZ6OBLXolmlT0vh9AuAhq3KyE6r8saYXa7xHOFZVvYiKZEVD6t h3jNICLU9MMN2LfVX2v+LLeqV+oe1Snu4BOVPq77ysfZv3gAnNYiUSKwB7Jep/Jo VBOFs+vHLbbR+/W3UD2/PMhhyDQryamBoy9ZttUSzCAebVkEEdgQHE5O2RJaCJxT xlNjWJJIeRYnCLyWGHl49fOjAMurNbXhnsMimcvDTFa819OYLxXuif3nNVZhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCNPp7hEW+WOt5jLcQmFimLjymsgwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFi6ay1fe1kX/CQtuDb93I5klHcKfjqDbGOP smKVZMeV/SQBesPP+CNnmFNZBjhFq0YgUGE+O8gC39+A0r89WaBhE6Er5QDikxhI 5pT1XkIZ2eQPl26+pIpc4o631Ksqrkouxh68yeUzGT3TXVDkXr1Rna1/X1oqMNEp cJqIq6/FKos6XxPP8Zcr1wMQQHjm7WADJBrp0AJ2vHKjBvhQoqgfgmrsVAEv47hq aijDsY+MtUzc8eDtCbAmKJT+GcRzc5/5einM0z8Edyn1I9nB1YqywagRz96OA0pB WOC192YoO2lw0/choGX866kUbKHTez6PyoIkCpirjawC+wqhqlE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:19 2026 by rpki-client