$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: c9HbwrU/NaxjR9Oy2mO9M4vLPVFNtrlTPY04TSKzxWY= Subject key identifier: A4:7B:7D:FB:3E:25:02:45:40:D3:84:EF:3B:7D:22:7D:EF:E8:1F:57 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 710375B77A010E59F251D200DFF50DCDB726CC3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: E1 Signing time: Mon 20 Apr 2026 01:11:09 +0000 Manifest this update: Mon 20 Apr 2026 01:06:09 +0000 Manifest next update: Thu 23 Apr 2026 06:42:09 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: nLMiNhRSQXS9D0X5ITYnu3QKVmT4G/X+PkmvpYppCCU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 06:42:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:03:75:b7:7a:01:0e:59:f2:51:d2:00:df:f5:0d:cd:b7:26:cc:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Apr 20 01:06:09 2026 GMT Not After : Apr 23 06:42:09 2026 GMT Subject: CN=A47B7DFB3E25024540D384EF3B7D227DEFE81F57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:8a:c4:b5:6d:9b:03:e7:a5:a3:89:b1:c3:6c: c5:07:57:60:0f:c9:24:22:78:2e:0e:21:ee:8d:ce: 14:47:f5:b0:87:f5:39:24:c5:a7:0a:ff:17:65:26: 0d:16:e3:c9:bf:14:8a:28:25:df:1d:c9:8f:0a:e8: a4:e9:d7:b6:82:7b:79:6f:60:a1:89:31:c2:1e:ab: 91:90:7e:a7:f5:b5:1d:1c:e9:c4:d9:66:b1:03:aa: 77:a8:be:03:cf:84:7b:7f:41:1f:7e:0c:e3:fe:e5: db:59:13:70:bc:39:f3:38:88:b8:21:5f:0a:8d:f4: 31:c5:08:47:04:29:c9:00:67:7a:24:fa:7c:5e:24: 04:91:38:30:1b:30:de:2c:f1:a4:3c:2d:09:64:63: 39:07:2a:01:c3:cc:76:22:d4:a6:d2:b8:cc:d1:16: dc:1f:05:59:f9:0a:20:4d:22:32:71:69:3e:d6:e6: d5:9e:3d:69:6b:f9:0d:52:e0:66:d7:6f:c6:21:4b: 17:d7:96:da:51:42:48:b4:09:b8:39:0b:21:ac:30: 2c:6f:90:27:54:c8:7f:45:23:c1:d3:67:e7:d0:1e: 63:ab:3b:14:39:16:75:c9:87:59:c9:cb:9e:5a:cb: 3e:59:12:85:c7:7f:30:2e:3e:8a:02:7c:e5:32:1e: ff:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:7B:7D:FB:3E:25:02:45:40:D3:84:EF:3B:7D:22:7D:EF:E8:1F:57 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:5c:48:cb:e4:a9:1c:9d:b4:52:fd:2a:fe:98:c1:ad:c8:36: 09:c2:50:c7:c2:10:ba:55:07:a5:02:1b:05:ee:52:f6:3e:29: 75:d3:01:7a:19:6f:c0:f1:0a:73:ad:9c:88:9f:84:38:56:5a: ee:49:6f:06:08:29:ab:39:73:01:78:ac:54:ea:a6:03:d3:93: cd:69:72:db:6c:d2:96:e1:a0:cb:d9:23:ea:3b:c7:06:8c:6c: 38:7e:fe:00:3c:18:8f:dd:88:14:d3:78:c4:3b:47:50:80:2f: 66:63:e1:fa:66:2c:8a:f4:34:30:6d:70:57:b7:a9:34:5e:91: 1c:c0:c3:96:33:96:9d:e6:70:ac:96:ff:b5:6f:e4:eb:4e:cd: c9:12:00:a1:e7:18:d2:dd:ab:f7:e7:e7:7c:65:98:60:b0:30: 3b:6f:99:df:36:97:8c:cb:c3:51:b3:1c:b5:72:04:90:8a:e3: 58:82:57:21:d7:cd:ee:42:c4:2e:ea:da:10:f7:06:64:1f:ec: 4d:a0:35:c1:bd:ee:39:87:f7:14:8a:b4:ef:7e:e7:28:8b:99: a4:b6:c5:a4:0a:47:1d:2e:4a:ee:8a:71:92:3f:d0:99:88:ee: 9e:ec:c1:74:be:02:51:18:db:aa:c7:b1:81:3c:1e:51:ac:b7: e6:fb:5b:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQN1t3oBDlnyUdIA3/UNzbcmzDswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNjA0MjAwMTA2MDlaFw0yNjA0MjMwNjQyMDlaMDMxMTAvBgNV BAMTKEE0N0I3REZCM0UyNTAyNDU0MEQzODRFRjNCN0QyMjdERUZFODFGNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcisS1bZsD56WjibHDbMUHV2AP ySQieC4OIe6NzhRH9bCH9TkkxacK/xdlJg0W48m/FIooJd8dyY8K6KTp17aCe3lv YKGJMcIeq5GQfqf1tR0c6cTZZrEDqneovgPPhHt/QR9+DOP+5dtZE3C8OfM4iLgh XwqN9DHFCEcEKckAZ3ok+nxeJASRODAbMN4s8aQ8LQlkYzkHKgHDzHYi1KbSuMzR FtwfBVn5CiBNIjJxaT7W5tWePWlr+Q1S4GbXb8YhSxfXltpRQki0Cbg5CyGsMCxv kCdUyH9FI8HTZ+fQHmOrOxQ5FnXJh1nJy55ayz5ZEoXHfzAuPooCfOUyHv+dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpHt9+z4lAkVA04TvO30ife/oH1cwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN9cSMvkqRydtFL9Kv6Ywa3INgnCUMfCELpV B6UCGwXuUvY+KXXTAXoZb8DxCnOtnIifhDhWWu5JbwYIKas5cwF4rFTqpgPTk81p ctts0pbhoMvZI+o7xwaMbDh+/gA8GI/diBTTeMQ7R1CAL2Zj4fpmLIr0NDBtcFe3 qTRekRzAw5Yzlp3mcKyW/7Vv5OtOzckSAKHnGNLdq/fn53xlmGCwMDtvmd82l4zL w1GzHLVyBJCK41iCVyHXze5CxC7q2hD3BmQf7E2gNcG97jmH9xSKtO9+5yiLmaS2 xaQKRx0uSu6KcZI/0JmI7p7swXS+AlEY26rHsYE8HlGst+b7Wxw= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:54 2026 by rpki-client