$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: b6YvhjP8rO9EatxmhgY6LQwJEPkVo6UxvOXak9GS+k8= Subject key identifier: 69:EE:9E:F5:A1:F6:BF:20:30:44:65:C6:74:7A:55:F2:09:CA:6E:92 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 0A695BA3868BD8288B9821932167D4EE6CD57B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 0100 Signing time: Sun 19 Apr 2026 22:51:14 +0000 Manifest this update: Sun 19 Apr 2026 22:46:14 +0000 Manifest next update: Thu 23 Apr 2026 05:55:14 +0000 Files and hashes: 1: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: UFicemjPrexxoZhVaENFl9/siEaEf6sG4qeaHHsFIcY=) 2: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 3: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 05:55:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:69:5b:a3:86:8b:d8:28:8b:98:21:93:21:67:d4:ee:6c:d5:7b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Apr 19 22:46:14 2026 GMT Not After : Apr 23 05:55:14 2026 GMT Subject: CN=69EE9EF5A1F6BF20304465C6747A55F209CA6E92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:7c:ca:cd:42:cc:22:5a:7f:d3:28:98:cb:c2: 37:b6:a5:3b:44:18:86:81:45:b5:a0:36:0a:81:11: a7:36:4b:6f:61:eb:de:85:8d:df:eb:7a:1f:07:f8: ce:37:f1:48:0b:cb:2f:81:2f:cf:7a:84:cf:45:fa: d9:92:24:de:09:27:be:78:15:40:a7:34:9b:d0:17: bf:25:25:6e:d1:83:c5:2c:78:27:41:42:f7:60:02: da:3f:78:fd:47:8d:4e:6b:80:2a:39:51:f9:e4:62: e1:1f:76:2e:e5:07:0f:e7:6f:4b:2b:1b:81:38:06: 78:9c:db:9c:29:2b:d5:a6:fa:36:7e:0c:27:3b:e9: 7c:30:67:ab:12:57:73:c9:0c:c5:8c:f0:b5:90:cc: 1f:fe:17:27:d9:2d:b0:13:68:7c:04:31:d2:5f:bf: 61:17:ac:9c:b2:a9:9b:c9:19:f2:c1:c2:4d:3d:ac: 3b:9e:2c:7e:44:a2:4a:05:9b:86:4b:33:a8:ae:64: 35:5e:6f:91:a6:a1:9f:cf:e4:83:29:00:8b:f1:36: de:1d:af:e1:55:cb:e8:2f:8c:20:0a:1f:ae:7a:96: 32:0a:d9:38:89:6a:ba:58:87:26:b0:ff:68:30:e5: cd:5d:53:70:7c:7b:14:15:57:63:d3:23:68:4b:76: f0:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:EE:9E:F5:A1:F6:BF:20:30:44:65:C6:74:7A:55:F2:09:CA:6E:92 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:5c:0b:4e:38:e8:6b:4e:62:b3:7c:87:ee:25:f9:41:dd:88: 8a:18:85:87:c1:3d:72:e2:52:ce:98:b9:7f:74:fa:83:b4:63: 6c:1e:0e:bd:73:cf:0a:44:fe:ea:94:f9:5a:a0:97:86:aa:3c: 8f:99:9c:56:18:b0:6d:62:5f:cd:ad:d4:75:67:c4:e8:bb:04: 51:c2:c9:df:63:f0:16:8b:a6:15:2e:3f:66:d5:38:4d:69:39: b6:17:17:4e:6d:0c:5a:5e:60:0a:1b:80:1a:22:27:78:80:b9: e5:2e:e2:d8:4f:ff:4c:af:26:cc:49:ce:e4:a5:4b:a7:cf:be: 55:f8:66:f2:2e:c4:51:81:b3:19:15:48:c2:e7:e3:e2:00:a4: bf:13:0b:2b:c8:d6:df:c6:c5:b0:0c:5a:84:b0:57:fa:25:93: 3a:44:33:f2:5a:a7:b7:3b:16:0d:39:69:97:ba:f3:8a:8c:95: 35:ba:8f:f6:07:25:ca:67:96:f4:02:70:38:2a:c3:91:12:57: 6b:71:e5:a5:73:81:eb:2c:e1:14:fd:ae:1a:fb:12:b3:d7:fb: a1:8c:59:c7:2b:8d:00:dc:a5:fd:34:1d:cd:df:4c:5e:0a:b9: ca:b9:05:a8:b8:b0:9b:3c:01:83:69:2b:d7:46:dc:31:e7:23: a2:cb:34:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCmlbo4aL2CiLmCGTIWfU7mzVe3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNjA0MTkyMjQ2MTRaFw0yNjA0MjMwNTU1MTRaMDMxMTAvBgNV BAMTKDY5RUU5RUY1QTFGNkJGMjAzMDQ0NjVDNjc0N0E1NUYyMDlDQTZFOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZfMrNQswiWn/TKJjLwje2pTtE GIaBRbWgNgqBEac2S29h696Fjd/reh8H+M438UgLyy+BL896hM9F+tmSJN4JJ754 FUCnNJvQF78lJW7Rg8UseCdBQvdgAto/eP1HjU5rgCo5UfnkYuEfdi7lBw/nb0sr G4E4Bnic25wpK9Wm+jZ+DCc76XwwZ6sSV3PJDMWM8LWQzB/+FyfZLbATaHwEMdJf v2EXrJyyqZvJGfLBwk09rDueLH5EokoFm4ZLM6iuZDVeb5GmoZ/P5IMpAIvxNt4d r+FVy+gvjCAKH656ljIK2TiJarpYhyaw/2gw5c1dU3B8exQVV2PTI2hLdvCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUae6e9aH2vyAwRGXGdHpV8gnKbpIwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpcC0446GtOYrN8h+4l+UHdiIoYhYfBPXLi Us6YuX90+oO0Y2weDr1zzwpE/uqU+Vqgl4aqPI+ZnFYYsG1iX82t1HVnxOi7BFHC yd9j8BaLphUuP2bVOE1pObYXF05tDFpeYAobgBoiJ3iAueUu4thP/0yvJsxJzuSl S6fPvlX4ZvIuxFGBsxkVSMLn4+IApL8TCyvI1t/GxbAMWoSwV/olkzpEM/Jap7c7 Fg05aZe684qMlTW6j/YHJcpnlvQCcDgqw5ESV2tx5aVzgess4RT9rhr7ErPX+6GM WccrjQDcpf00Hc3fTF4Kucq5Bai4sJs8AYNpK9dG3DHnI6LLNO4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:45 2026 by rpki-client