$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: TZgyMHc+YRXWAd5F3fC4Hrbq/qbBjTpKEtI7d5VnPYg= Subject key identifier: 03:CA:9A:73:A7:7A:AB:C3:95:74:1D:E3:93:81:FA:C7:19:21:08:AE Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 2A728B4E5BE40516153D4490C963A1D956AFDE50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0288 Signing time: Tue 21 Apr 2026 01:41:21 +0000 Manifest this update: Tue 21 Apr 2026 01:36:21 +0000 Manifest next update: Fri 24 Apr 2026 08:57:21 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: rlSBzWAyS+DeX/R7PiaMFPfif3jQR9dTwdsYFrd+G5A=) 2: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=) 3: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: BgFgmH5jU+LRrTrgwlopaW2g0oi0zIzrx7nTuzaPyLk=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: kaLOnVcH2eiN/bRpUUdlc2RBWfunbSbF+3c/cmkKp/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:57:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:72:8b:4e:5b:e4:05:16:15:3d:44:90:c9:63:a1:d9:56:af:de:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Apr 21 01:36:21 2026 GMT Not After : Apr 24 08:57:21 2026 GMT Subject: CN=03CA9A73A77AABC395741DE39381FAC7192108AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b5:5b:15:07:26:c1:27:b1:ad:42:b0:41:46: 44:e3:0b:a1:53:7f:a4:5c:18:58:c6:2c:72:f8:2b: b0:a1:ee:76:7f:43:60:5f:2e:4c:a5:4e:d9:48:b9: 3e:85:86:70:6e:f1:01:d7:c0:4b:04:bb:21:ef:99: 71:e7:03:88:c2:c3:30:ac:2a:96:5f:5c:02:89:4b: 55:87:f3:0c:ec:ff:e8:b0:21:90:2b:35:5b:9f:a8: b4:4c:a0:ae:68:14:2b:41:bc:f8:70:ab:e1:e0:14: d2:eb:37:1e:2a:81:85:94:1b:fe:85:db:94:9a:04: 81:f7:15:05:fb:46:cd:60:e2:bd:07:da:a5:f2:32: 8c:a7:0b:a1:a2:f1:1a:00:d4:4a:57:49:02:26:fe: 8b:4b:c5:11:b8:0e:fd:81:0f:6e:45:84:bf:dc:89: e7:fd:be:b4:06:18:5a:17:1a:91:86:9a:f0:a9:27: 0c:c8:d2:3f:e8:8d:6e:2b:19:06:a2:64:c3:7e:37: 7c:59:76:01:41:fa:b4:14:70:d4:c0:e4:c5:83:04: 46:e5:13:61:ad:66:dd:d2:57:0b:39:dc:7f:21:ff: 1d:b7:41:c6:c9:dd:33:af:1e:d2:41:88:98:94:da: c9:8d:2d:4b:52:5c:ed:dd:81:af:d3:08:7c:b1:9e: 67:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:CA:9A:73:A7:7A:AB:C3:95:74:1D:E3:93:81:FA:C7:19:21:08:AE X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:ff:1e:d6:23:58:1c:46:8c:b8:e1:6b:52:58:58:db:a8:c1: 51:4a:8a:6a:a4:1b:71:b1:b1:ba:b9:3e:80:25:cd:75:1a:5e: 3c:1f:4f:5b:46:2a:48:a6:b5:7b:d0:8e:c1:28:54:90:c5:3e: d7:37:f9:c5:3d:ba:7c:30:23:c7:de:17:b4:ca:24:19:b8:b9: bd:2b:62:82:a7:0a:4f:8d:39:b1:b3:64:6f:29:20:11:7c:27: 29:be:f5:95:23:59:8e:39:9c:50:f2:7e:45:6d:89:25:c1:d2: f1:95:d8:70:50:47:b5:37:f8:83:7b:dc:71:8b:e2:34:46:01: 3c:08:f3:68:12:e4:a9:0d:15:0b:12:25:65:f2:ae:42:3c:fb: 62:24:f4:e2:69:1e:3d:67:04:c7:f1:7f:21:ed:d6:9b:f7:ca: 08:c8:2b:d3:9c:b6:c9:a3:db:b2:77:30:86:b4:72:96:f3:37: bf:68:ad:ff:02:58:9f:c5:7b:0d:69:28:90:1d:14:d9:14:fb: 38:68:77:86:5c:45:a1:6e:21:3a:fa:0c:1c:a6:36:22:07:1b: 88:11:45:24:58:b0:81:d3:2c:b7:88:dd:79:ba:e7:45:90:cc: 93:d5:13:62:a3:93:d5:99:58:92:18:db:03:16:7d:29:71:48: cb:90:98:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKnKLTlvkBRYVPUSQyWOh2Vav3lAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNjA0MjEwMTM2MjFaFw0yNjA0MjQwODU3MjFaMDMxMTAvBgNV BAMTKDAzQ0E5QTczQTc3QUFCQzM5NTc0MURFMzkzODFGQUM3MTkyMTA4QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttVsVBybBJ7GtQrBBRkTjC6FT f6RcGFjGLHL4K7Ch7nZ/Q2BfLkylTtlIuT6FhnBu8QHXwEsEuyHvmXHnA4jCwzCs KpZfXAKJS1WH8wzs/+iwIZArNVufqLRMoK5oFCtBvPhwq+HgFNLrNx4qgYWUG/6F 25SaBIH3FQX7Rs1g4r0H2qXyMoynC6Gi8RoA1EpXSQIm/otLxRG4Dv2BD25FhL/c ief9vrQGGFoXGpGGmvCpJwzI0j/ojW4rGQaiZMN+N3xZdgFB+rQUcNTA5MWDBEbl E2GtZt3SVws53H8h/x23QcbJ3TOvHtJBiJiU2smNLUtSXO3dga/TCHyxnmc/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA8qac6d6q8OVdB3jk4H6xxkhCK4wHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHv/HtYjWBxGjLjha1JYWNuowVFKimqkG3Gx sbq5PoAlzXUaXjwfT1tGKkimtXvQjsEoVJDFPtc3+cU9unwwI8feF7TKJBm4ub0r YoKnCk+NObGzZG8pIBF8Jym+9ZUjWY45nFDyfkVtiSXB0vGV2HBQR7U3+IN73HGL 4jRGATwI82gS5KkNFQsSJWXyrkI8+2Ik9OJpHj1nBMfxfyHt1pv3ygjIK9Octsmj 27J3MIa0cpbzN79orf8CWJ/Few1pKJAdFNkU+zhod4ZcRaFuITr6DBymNiIHG4gR RSRYsIHTLLeI3Xm650WQzJPVE2Kjk9WZWJIY2wMWfSlxSMuQmNY= -----END CERTIFICATE-----Generated at Wed Apr 22 09:59:52 2026 by rpki-client