$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: hMJtjF5TXb/8Q1lPAj4DR6P0KSubTKGF3nVMMd9Lbno= Subject key identifier: 7B:71:4F:66:E1:74:B5:D9:1C:94:A8:62:E5:7C:6D:DE:F6:14:6B:8B Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 01336FFE084C0013AC5937A0FA902D79B6F7F8E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: F0 Signing time: Mon 20 Apr 2026 12:31:24 +0000 Manifest this update: Mon 20 Apr 2026 12:26:24 +0000 Manifest next update: Thu 23 Apr 2026 13:17:24 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: 65DQK1QG/30wCkFN9bz2H0nthPJ1RQlEmPEdKlstFUU=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: YgsdLMT3Yt6jH21ofsKszlnSUGDMzJapWd6ICs+7gAY=) 3: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: Fpu+v/2gR9gfHaIOVsscba4TjGF4czU0k6td/oJg7+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 13:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:33:6f:fe:08:4c:00:13:ac:59:37:a0:fa:90:2d:79:b6:f7:f8:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Apr 20 12:26:24 2026 GMT Not After : Apr 23 13:17:24 2026 GMT Subject: CN=7B714F66E174B5D91C94A862E57C6DDEF6146B8B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:fd:e9:b4:18:a8:7e:1f:ef:94:66:ba:87:91: 48:05:4d:9b:2e:02:f7:51:6b:69:48:e7:fb:4d:26: 74:e9:d2:cd:6e:08:cd:1d:9c:d6:6d:2f:d3:15:60: 92:21:79:f4:6b:99:6a:d2:17:91:b9:a9:c0:8d:1f: 33:04:b4:74:d2:71:11:d7:04:1d:11:ff:1a:d7:01: 5d:89:3d:47:e4:59:7d:24:77:ba:f5:de:6b:98:0d: 2c:38:92:3a:5a:2a:02:59:90:17:07:0c:15:9e:84: 61:86:e2:17:84:ab:ab:ef:35:c6:61:e6:fe:b1:59: 29:f1:75:08:a3:d8:e7:cd:1e:53:6d:d9:35:7d:31: 8d:c8:ac:5b:c4:96:4f:7e:a8:d5:a9:d0:52:b1:bd: 90:c2:6d:3b:72:cd:35:fb:66:a1:ae:66:eb:29:ff: e2:38:e4:c0:6d:f8:a4:a8:d7:8e:ce:a2:14:1f:86: cd:7a:e0:c1:53:d5:c8:96:6f:fb:f8:10:ba:a6:d4: cc:0f:a9:c9:55:b7:01:06:8f:95:5a:88:cf:00:ff: 9f:8d:c1:57:7f:6f:c6:f1:58:24:88:7f:a3:c9:49: 6b:78:61:23:6a:80:33:33:84:f9:da:e9:b3:55:0a: 70:16:39:ef:53:7d:d5:a2:c5:4b:50:1e:fe:ba:0f: b3:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:71:4F:66:E1:74:B5:D9:1C:94:A8:62:E5:7C:6D:DE:F6:14:6B:8B X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:12:3b:17:3b:c5:f6:15:bb:41:00:b2:09:95:d4:c6:22:f4: 75:67:c3:99:d0:5d:4e:02:f8:a1:d5:1f:82:00:3c:ae:63:f4: 43:e7:6b:0b:b7:91:73:a5:dd:b6:dd:30:ae:b0:0c:3a:03:ff: 7e:5c:12:60:c7:22:6c:5d:5f:cb:ea:c8:dd:8f:67:72:41:56: 5e:d3:c1:ee:eb:6c:3e:43:c8:eb:68:71:3c:c0:85:a2:29:28: eb:26:ec:a0:a6:91:29:ea:ee:7d:90:38:8c:d7:85:7e:d3:67: d1:ba:07:f3:e4:9e:3f:40:03:9a:6e:4d:03:9b:8d:ec:54:d6: bb:6c:8e:1b:97:b5:06:e7:8a:7c:c9:b6:9d:ea:dd:8b:75:b7: b4:b6:7f:7d:d6:ba:11:59:de:c9:8e:b9:76:0b:79:26:e9:ba: 12:b5:53:c6:5c:20:60:fa:4e:22:21:23:6c:9b:a1:4c:37:45: 9d:75:b0:8a:63:60:7a:67:e9:99:57:75:1e:6a:a3:e4:7a:00: e4:59:14:18:7a:f3:9b:d3:22:8f:2d:b4:f8:95:69:1e:e9:4b: 24:be:0d:dd:f0:a5:62:c0:c2:5e:e9:2b:e2:f2:a3:2d:8c:f0: f9:9a:6e:5c:ed:b0:ac:e1:3a:d2:51:e3:94:27:a7:7b:35:08: ea:c2:0f:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUATNv/ghMABOsWTeg+pAtebb3+OQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNjA0MjAxMjI2MjRaFw0yNjA0MjMxMzE3MjRaMDMxMTAvBgNV BAMTKDdCNzE0RjY2RTE3NEI1RDkxQzk0QTg2MkU1N0M2RERFRjYxNDZCOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr/em0GKh+H++UZrqHkUgFTZsu AvdRa2lI5/tNJnTp0s1uCM0dnNZtL9MVYJIhefRrmWrSF5G5qcCNHzMEtHTScRHX BB0R/xrXAV2JPUfkWX0kd7r13muYDSw4kjpaKgJZkBcHDBWehGGG4heEq6vvNcZh 5v6xWSnxdQij2OfNHlNt2TV9MY3IrFvElk9+qNWp0FKxvZDCbTtyzTX7ZqGuZusp /+I45MBt+KSo147OohQfhs164MFT1ciWb/v4ELqm1MwPqclVtwEGj5VaiM8A/5+N wVd/b8bxWCSIf6PJSWt4YSNqgDMzhPna6bNVCnAWOe9TfdWixUtQHv66D7NTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3FPZuF0tdkclKhi5Xxt3vYUa4swHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEsSOxc7xfYVu0EAsgmV1MYi9HVnw5nQXU4C +KHVH4IAPK5j9EPnawu3kXOl3bbdMK6wDDoD/35cEmDHImxdX8vqyN2PZ3JBVl7T we7rbD5DyOtocTzAhaIpKOsm7KCmkSnq7n2QOIzXhX7TZ9G6B/Pknj9AA5puTQOb jexU1rtsjhuXtQbninzJtp3q3Yt1t7S2f33WuhFZ3smOuXYLeSbpuhK1U8ZcIGD6 TiIhI2yboUw3RZ11sIpjYHpn6ZlXdR5qo+R6AORZFBh685vTIo8ttPiVaR7pSyS+ Dd3wpWLAwl7pK+Lyoy2M8PmablztsKzhOtJR45Qnp3s1COrCDx4= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:23 2026 by rpki-client