$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: +y51+JxVyteA7zWm/ouDw/vUqhKdruChoE7vX10+NrI= Subject key identifier: 2F:06:65:EC:C3:3D:8A:B4:25:BF:D8:5B:0D:2D:74:91:C5:A4:55:D6 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 579035F78801416245DE77490A14425E5B9AB728 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: E2 Signing time: Wed 22 Apr 2026 06:51:10 +0000 Manifest this update: Wed 22 Apr 2026 06:46:10 +0000 Manifest next update: Sat 25 Apr 2026 17:32:10 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: /d1AtSMoGCu/lwL8GUxv9s970c48chlgzzif9WqJSYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 16:10:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:90:35:f7:88:01:41:62:45:de:77:49:0a:14:42:5e:5b:9a:b7:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Apr 22 06:46:10 2026 GMT Not After : Apr 25 17:32:10 2026 GMT Subject: CN=2F0665ECC33D8AB425BFD85B0D2D7491C5A455D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:04:71:e6:45:89:17:7f:aa:23:8c:78:69:4f: 64:2c:6c:24:60:67:35:3a:51:34:0f:67:e4:98:7e: 77:81:fe:39:00:28:f1:78:dc:f8:c9:32:74:53:87: c8:a1:ca:15:ff:ee:4b:43:45:95:2e:54:31:de:15: 73:1f:4d:94:1c:af:dd:63:68:f2:4e:e9:57:92:2d: 49:4d:f1:89:47:19:35:ed:ca:9e:79:76:a9:aa:99: 62:eb:56:08:bf:7e:90:3c:7a:79:e4:b2:51:26:ff: 21:ac:f8:79:7b:99:68:4b:fe:75:d8:81:db:e5:d4: 7e:c2:c9:8c:ba:a4:3c:3c:7b:7a:9c:e0:cb:20:60: b4:ca:d4:04:f4:aa:c7:39:40:14:10:52:56:ed:bd: 41:0d:dc:7b:68:4a:93:88:e3:2e:4f:03:27:b0:50: 5c:18:b7:30:46:11:83:91:ab:cb:62:da:bd:c8:e4: 18:6f:7e:6e:a7:c4:43:53:00:3e:25:5b:92:bf:d5: 78:10:54:1b:77:dd:22:a6:b4:f1:b0:7e:d6:94:87: 67:92:6c:58:22:e6:c8:c2:21:21:f5:75:fd:0a:ce: c6:3a:34:7c:60:19:95:42:6b:52:84:d5:8c:ad:af: af:db:b7:29:39:d5:58:a5:a4:26:dc:50:dc:82:19: 68:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:06:65:EC:C3:3D:8A:B4:25:BF:D8:5B:0D:2D:74:91:C5:A4:55:D6 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:c9:5d:12:19:c8:a7:f7:7c:19:da:54:d5:76:19:a7:23:3f: 31:33:f7:18:5d:89:4c:5e:ee:45:38:62:c8:56:30:aa:0d:92: d3:5a:da:b1:42:f7:60:6e:af:df:86:cf:70:10:8c:d2:32:54: a0:9e:47:62:44:e8:4e:63:1f:44:fb:c6:78:7a:d2:36:d6:c7: d3:6c:60:66:9d:45:3c:6a:38:b0:84:95:24:3e:ab:e4:2c:7f: fa:65:cc:8a:cb:0c:bc:99:61:cd:40:50:41:16:e3:b8:d3:61: 96:58:d8:4c:48:d5:3e:55:54:e2:16:89:f5:e2:ad:66:fc:ee: e4:0c:a9:d5:0c:72:de:5d:af:b7:3f:43:2a:ec:9f:5c:ef:ae: 51:a4:f2:f2:27:60:7f:1b:04:9a:46:db:b0:b1:f9:34:79:54: 89:73:84:bc:7e:b5:2f:d7:31:9f:10:ee:63:e8:cf:ef:eb:cf: 18:6b:df:bc:aa:38:fb:8f:47:df:a5:73:e4:38:b5:80:7e:93: 1b:12:97:2b:4d:b9:4e:1b:84:2a:e9:ff:74:22:7b:0e:1d:4f: e7:7c:f1:b1:7d:84:f0:a3:bc:26:9f:9e:f2:2e:72:e5:4b:05: a4:2b:79:16:3a:cb:91:a5:ab:e4:e4:fa:ab:1c:3f:73:cf:8f: 29:32:3a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV5A194gBQWJF3ndJChRCXluatygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNjA0MjIwNjQ2MTBaFw0yNjA0MjUxNzMyMTBaMDMxMTAvBgNV BAMTKDJGMDY2NUVDQzMzRDhBQjQyNUJGRDg1QjBEMkQ3NDkxQzVBNDU1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJBHHmRYkXf6ojjHhpT2QsbCRg ZzU6UTQPZ+SYfneB/jkAKPF43PjJMnRTh8ihyhX/7ktDRZUuVDHeFXMfTZQcr91j aPJO6VeSLUlN8YlHGTXtyp55dqmqmWLrVgi/fpA8ennkslEm/yGs+Hl7mWhL/nXY gdvl1H7CyYy6pDw8e3qc4MsgYLTK1AT0qsc5QBQQUlbtvUEN3HtoSpOI4y5PAyew UFwYtzBGEYORq8ti2r3I5Bhvfm6nxENTAD4lW5K/1XgQVBt33SKmtPGwftaUh2eS bFgi5sjCISH1df0KzsY6NHxgGZVCa1KE1Yytr6/btyk51VilpCbcUNyCGWjVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULwZl7MM9irQlv9hbDS10kcWkVdYwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7JXRIZyKf3fBnaVNV2GacjPzEz9xhdiUxe 7kU4YshWMKoNktNa2rFC92Bur9+Gz3AQjNIyVKCeR2JE6E5jH0T7xnh60jbWx9Ns YGadRTxqOLCElSQ+q+Qsf/plzIrLDLyZYc1AUEEW47jTYZZY2ExI1T5VVOIWifXi rWb87uQMqdUMct5dr7c/Qyrsn1zvrlGk8vInYH8bBJpG27Cx+TR5VIlzhLx+tS/X MZ8Q7mPoz+/rzxhr37yqOPuPR9+lc+Q4tYB+kxsSlytNuU4bhCrp/3Qiew4dT+d8 8bF9hPCjvCafnvIucuVLBaQreRY6y5Glq+Tk+qscP3PPjykyOqg= -----END CERTIFICATE-----Generated at Wed Apr 22 08:41:28 2026 by rpki-client