$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: mlq3ffzOA4XLA9KJuAi3FSKl1WIHH8qhfSkanNEiPDw= Subject key identifier: A9:47:7E:7B:BE:A0:5A:E3:39:C0:3F:0B:75:EC:C3:28:BF:28:81:45 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 7642148963032F1FAC1CECFE373C009A97798C81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 011B Signing time: Tue 21 Apr 2026 04:10:00 +0000 Manifest this update: Tue 21 Apr 2026 04:05:00 +0000 Manifest next update: Fri 24 Apr 2026 06:18:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: 7NF7oI5XWL/OPViodZyNBQ4euFHDS1F5BQiA1hz7OqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 06:18:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:42:14:89:63:03:2f:1f:ac:1c:ec:fe:37:3c:00:9a:97:79:8c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Apr 21 04:05:00 2026 GMT Not After : Apr 24 06:18:00 2026 GMT Subject: CN=A9477E7BBEA05AE339C03F0B75ECC328BF288145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:fe:16:63:49:e2:8a:75:6f:7b:89:a0:7f:d4: 24:9c:ad:0a:69:a3:4f:d6:4e:e0:06:c8:5e:30:5d: 06:33:53:1c:17:6e:5a:d7:6e:64:1b:39:43:44:5f: 3a:78:4d:ff:82:13:51:72:85:4b:ee:ea:1f:4f:c7: e4:ad:4b:4d:83:f2:e9:fe:52:9f:31:bf:c0:f2:c6: 05:7a:08:d4:95:c5:c2:65:c9:9d:0f:2f:09:0f:ef: 35:38:a6:a1:ab:27:a1:20:d8:fe:56:01:9c:76:8e: d3:c7:26:7a:6e:7e:43:a5:f1:1f:e1:55:cf:5e:b8: 06:7e:bb:f6:a9:dd:b5:5e:3b:81:f4:48:43:d1:bc: df:50:3c:16:18:4e:96:e2:72:53:4f:32:97:0e:f5: 35:76:19:f6:7c:f0:98:c3:a0:cf:2b:63:1b:da:0b: 55:d2:52:71:92:ef:3f:fb:03:7e:7c:82:59:f3:86: 14:78:0b:e4:d0:ba:46:eb:ce:94:18:af:55:6b:0a: a2:57:49:04:d5:79:f2:ec:1a:f3:bc:90:3f:90:d9: 06:89:85:fc:df:bd:f9:30:99:4b:15:ab:a9:2e:b3: f5:6d:e5:94:46:af:c3:cb:8b:a0:e7:07:d1:bd:97: 0c:8a:f1:56:59:fb:e9:d2:69:a4:f5:84:9a:11:7a: ac:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:47:7E:7B:BE:A0:5A:E3:39:C0:3F:0B:75:EC:C3:28:BF:28:81:45 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:9f:83:5b:b5:48:23:b7:9a:d5:6d:b4:94:63:7e:51:a9:4f: 75:ae:f4:42:7a:a1:dd:a9:7f:7c:35:d5:4d:5a:37:9a:93:7b: 51:62:f2:20:70:83:3f:5b:9e:15:e9:84:e0:f7:1f:40:2b:1b: 3f:96:48:b4:e8:63:dc:26:6e:82:fd:7a:90:fb:76:53:73:57: a3:9c:dc:55:2f:8e:8c:9f:19:77:5f:1b:e7:4c:a8:b2:37:50: 21:f2:c2:dc:76:2b:e3:b2:93:ee:0b:37:d7:09:5f:98:01:b5: dd:c9:09:28:8f:9f:08:58:69:d9:7e:d3:08:9a:5b:22:79:71: 7a:d4:22:3a:86:77:c5:f1:c1:2a:3d:2c:58:b1:d0:a8:bf:13: a3:e1:af:53:5c:b0:78:fd:3c:a9:fe:7a:3e:e7:33:8a:16:47: 0e:f6:85:48:2b:a9:c6:c8:18:65:4d:b1:51:0e:04:06:d9:90: 9f:98:89:4d:24:d3:28:e6:98:6b:ae:00:58:1a:a1:cb:79:16: 38:61:af:ad:a9:64:ce:2b:7c:bb:1c:65:13:6a:17:7f:25:03: bf:6e:b7:72:23:b4:69:ba:f6:85:2e:30:ac:0d:46:cc:33:b6: 35:38:bb:5e:60:99:d9:1a:e7:03:db:1a:f0:d2:31:b8:f2:6c: 71:2d:8a:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdkIUiWMDLx+sHOz+NzwAmpd5jIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNjA0MjEwNDA1MDBaFw0yNjA0MjQwNjE4MDBaMDMxMTAvBgNV BAMTKEE5NDc3RTdCQkVBMDVBRTMzOUMwM0YwQjc1RUNDMzI4QkYyODgxNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt/hZjSeKKdW97iaB/1CScrQpp o0/WTuAGyF4wXQYzUxwXblrXbmQbOUNEXzp4Tf+CE1FyhUvu6h9Px+StS02D8un+ Up8xv8DyxgV6CNSVxcJlyZ0PLwkP7zU4pqGrJ6Eg2P5WAZx2jtPHJnpufkOl8R/h Vc9euAZ+u/ap3bVeO4H0SEPRvN9QPBYYTpbiclNPMpcO9TV2GfZ88JjDoM8rYxva C1XSUnGS7z/7A358glnzhhR4C+TQukbrzpQYr1VrCqJXSQTVefLsGvO8kD+Q2QaJ hfzfvfkwmUsVq6kus/Vt5ZRGr8PLi6DnB9G9lwyK8VZZ++nSaaT1hJoReqwHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqUd+e76gWuM5wD8LdezDKL8ogUUwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALefg1u1SCO3mtVttJRjflGpT3Wu9EJ6od2p f3w11U1aN5qTe1Fi8iBwgz9bnhXphOD3H0ArGz+WSLToY9wmboL9epD7dlNzV6Oc 3FUvjoyfGXdfG+dMqLI3UCHywtx2K+Oyk+4LN9cJX5gBtd3JCSiPnwhYadl+0wia WyJ5cXrUIjqGd8XxwSo9LFix0Ki/E6Phr1NcsHj9PKn+ej7nM4oWRw72hUgrqcbI GGVNsVEOBAbZkJ+YiU0k0yjmmGuuAFgaoct5Fjhhr62pZM4rfLscZRNqF38lA79u t3IjtGm69oUuMKwNRswztjU4u15gmdka5wPbGvDSMbjybHEtii8= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:21 2026 by rpki-client