$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: zjBfkbSsGeioOVe0VGMNE6Arax5ihOfzWRntqG8d1Os= Subject key identifier: 07:BB:14:D3:26:2C:50:8D:75:0D:9E:56:C6:38:50:97:AB:C9:CA:E0 Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 050521FD1A974D2068D294AB4DF6DBA10A59D065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 0223 Signing time: Sun 26 Apr 2026 14:19:37 +0000 Manifest this update: Sun 26 Apr 2026 14:14:37 +0000 Manifest next update: Wed 29 Apr 2026 14:40:37 +0000 Files and hashes: 1: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: BvaP5Z4SbVL0jITsyiOPL3TFnAOypFmq4fifeKKF+Hk=) 2: 3130332e3231332e3233312e302f32342d3234203d3e20313339393439.roa (hash: Gg2XBdZbCjnicTKPYokbLhd8LpWmCIW5O5l0UURxCRc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 29 Apr 2026 14:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:05:21:fd:1a:97:4d:20:68:d2:94:ab:4d:f6:db:a1:0a:59:d0:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Apr 26 14:14:37 2026 GMT Not After : Apr 29 14:40:37 2026 GMT Subject: CN=07BB14D3262C508D750D9E56C6385097ABC9CAE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:f6:8c:4d:c3:f8:a6:23:6f:d7:ea:29:f6:42: c0:73:2a:57:cc:37:6b:c7:44:c1:fc:d2:df:9a:d6: 75:62:6a:53:9d:76:3d:83:e2:86:98:a7:91:99:40: d7:46:a7:87:53:d6:1d:45:af:26:7b:69:99:76:81: 24:e3:be:73:a1:ab:32:c5:67:12:98:da:c9:3b:8d: 3b:65:7e:ea:3b:58:fa:99:93:7c:d3:b1:a5:aa:d3: f7:ad:d1:43:6b:68:ab:3e:50:2a:f3:ee:ad:82:15: 61:af:6a:f3:76:35:b2:b2:0e:e6:1d:56:48:64:4e: a2:13:90:7b:9b:e0:bf:07:27:1b:62:80:df:28:c2: 79:b9:3a:48:c0:15:32:04:78:68:be:cd:04:3c:85: 0a:0e:de:81:1a:fe:52:e6:63:47:ad:69:3b:e6:38: c3:dd:8d:14:c8:ef:27:ba:57:84:03:0a:6c:87:17: e2:87:f9:ef:07:75:a5:ae:b0:91:91:e7:4c:91:8c: c8:71:3f:a1:01:dc:67:3b:c1:47:8c:a3:e4:f6:5b: d7:85:ee:31:9b:6d:f9:27:34:6f:30:62:a9:db:80: 65:48:43:ad:3a:df:dd:c9:bf:0b:a0:ea:cf:b5:8b: 4f:c8:1b:01:52:71:7f:a5:7b:9f:1e:d7:96:69:25: 55:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:BB:14:D3:26:2C:50:8D:75:0D:9E:56:C6:38:50:97:AB:C9:CA:E0 X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:0d:cd:fb:78:7c:98:10:47:37:24:75:e5:1a:d0:e5:2e:cb: b9:fa:ee:65:a7:44:bf:91:53:77:8f:6f:a2:48:53:c9:22:06: 6e:dd:04:84:d9:0c:3d:c0:90:06:82:30:9e:7e:db:a2:39:39: 32:51:39:ca:fe:92:00:9a:a2:02:4d:14:48:74:f9:16:45:ed: 0e:ce:44:3f:f6:1c:3e:64:ae:7a:02:97:0d:a2:19:a6:51:5e: c4:78:4b:5d:8b:45:da:d7:51:3a:f2:b9:f4:04:4c:0d:99:d5: 03:e2:3c:34:de:c1:d1:03:ff:a7:15:c7:6f:0c:e4:8f:73:46: 1d:52:28:43:e0:0e:32:0b:d8:26:5d:20:33:3d:a6:77:2f:ae: 4f:9a:2e:c2:41:a5:a3:e5:e4:c6:c2:ad:91:ac:f8:74:45:3e: 30:6d:98:37:1a:b7:b7:9d:f1:44:7a:52:fb:a7:1f:cf:48:19: ee:c6:e1:a3:24:c3:80:f1:26:c8:8f:bb:81:a9:ce:00:c9:99: 16:16:8a:6a:02:28:5f:cf:a6:03:8f:f6:1c:b9:b1:7f:26:f2: 11:5c:d2:59:19:2a:c4:db:2f:6b:b7:3b:b2:91:9c:9b:92:a3: d0:5b:3f:43:24:49:1d:e0:cb:a4:06:88:02:49:ed:e3:07:4e: e9:76:5d:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQUh/RqXTSBo0pSrTfbboQpZ0GUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNjA0MjYxNDE0MzdaFw0yNjA0MjkxNDQwMzdaMDMxMTAvBgNV BAMTKDA3QkIxNEQzMjYyQzUwOEQ3NTBEOUU1NkM2Mzg1MDk3QUJDOUNBRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr9oxNw/imI2/X6in2QsBzKlfM N2vHRMH80t+a1nVialOddj2D4oaYp5GZQNdGp4dT1h1FryZ7aZl2gSTjvnOhqzLF ZxKY2sk7jTtlfuo7WPqZk3zTsaWq0/et0UNraKs+UCrz7q2CFWGvavN2NbKyDuYd VkhkTqITkHub4L8HJxtigN8ownm5OkjAFTIEeGi+zQQ8hQoO3oEa/lLmY0etaTvm OMPdjRTI7ye6V4QDCmyHF+KH+e8HdaWusJGR50yRjMhxP6EB3Gc7wUeMo+T2W9eF 7jGbbfknNG8wYqnbgGVIQ606393Jvwug6s+1i0/IGwFScX+le58e15ZpJVXBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB7sU0yYsUI11DZ5WxjhQl6vJyuAwHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAMNzft4fJgQRzckdeUa0OUuy7n67mWnRL+R U3ePb6JIU8kiBm7dBITZDD3AkAaCMJ5+26I5OTJROcr+kgCaogJNFEh0+RZF7Q7O RD/2HD5krnoClw2iGaZRXsR4S12LRdrXUTryufQETA2Z1QPiPDTewdED/6cVx28M 5I9zRh1SKEPgDjIL2CZdIDM9pncvrk+aLsJBpaPl5MbCrZGs+HRFPjBtmDcat7ed 8UR6UvunH89IGe7G4aMkw4DxJsiPu4GpzgDJmRYWimoCKF/PpgOP9hy5sX8m8hFc 0lkZKsTbL2u3O7KRnJuSo9BbP0MkSR3gy6QGiAJJ7eMHTul2Xfs= -----END CERTIFICATE-----Generated at Mon Apr 27 12:39:28 2026 by rpki-client