$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft File: E07D333345CD7D30F1DC10D98F6E73457739DF18.mft (raw, json) Hash identifier: jkzT6bLYSI1qUxYCfD1HIPncGqsAHFU1dMO+Fr9Tidw= Subject key identifier: 70:64:EF:8E:C6:31:56:E3:2C:1B:44:E9:69:0A:E8:23:F4:44:C8:2F Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 Certificate issuer: /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Certificate serial: 070881BE9FAEB8DE3FBCA504F02A699C2AD3A8FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft Manifest number: 031B Signing time: Mon 20 Apr 2026 08:52:28 +0000 Manifest this update: Mon 20 Apr 2026 08:47:28 +0000 Manifest next update: Thu 23 Apr 2026 19:00:28 +0000 Files and hashes: 1: E07D333345CD7D30F1DC10D98F6E73457739DF18.crl (hash: 2FxC3pSn05TJby/uJ5o9p6vlAHE6rSE6SDhf/toMJTY=) 2: 3130332e3137352e32342e302f32342d3234203d3e20313339393532.roa (hash: Vl/OOphd8TYP/hah6fsBqUcpI92+W6WBwIY9PUcjWfo=) 3: 3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (hash: S9fTdkfTps/6Q59nCYC/yJ1+TjRvCvo04elHUxM7Yz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:08:81:be:9f:ae:b8:de:3f:bc:a5:04:f0:2a:69:9c:2a:d3:a8:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18 Validity Not Before: Apr 20 08:47:28 2026 GMT Not After : Apr 23 19:00:28 2026 GMT Subject: CN=7064EF8EC63156E32C1B44E9690AE823F444C82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:1f:c0:6f:c5:eb:4f:d3:50:c7:94:8c:2c:8f: a2:d6:26:8f:65:92:ec:b2:cd:4f:81:19:b4:07:97: d5:0f:6f:a5:25:26:d1:bf:76:79:29:11:ed:31:48: 47:81:b4:ab:ca:bd:17:3d:c0:62:ca:22:91:00:fd: fe:3c:6e:c4:4c:67:3b:d2:9c:6f:cd:14:b6:c8:d9: 09:39:76:fd:d2:72:c5:8a:30:e9:06:00:88:44:20: 49:fe:a2:19:48:30:1b:16:88:ab:dc:1e:58:dc:9a: af:52:35:36:81:85:78:df:0c:3d:86:ef:01:48:0c: 9f:14:05:a1:cc:9b:bc:a4:de:0b:69:fd:88:61:03: 66:54:72:24:df:82:7f:37:f8:fe:da:b1:ad:b5:f4: c8:3e:60:de:d3:8a:26:53:0b:47:f2:fd:d0:d9:e1: 59:f9:25:f7:14:27:4d:cc:10:cb:83:88:de:ee:87: bd:3e:4c:cd:d7:77:b7:11:fb:af:cc:06:ef:6f:d7: b8:dc:3c:f2:eb:e2:95:ef:3f:2b:3f:35:7c:7a:e7: d0:05:b7:af:b3:aa:a9:a3:25:97:58:8c:aa:c0:2c: 6c:57:62:23:e2:4d:70:2d:f3:d7:3b:fb:86:37:33: 1f:cf:29:20:4d:df:79:37:bc:ef:c1:e7:49:d9:5f: d9:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:64:EF:8E:C6:31:56:E3:2C:1B:44:E9:69:0A:E8:23:F4:44:C8:2F X509v3 Authority Key Identifier: keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:f5:3d:98:8a:58:db:a1:0a:f6:2f:87:03:c8:ac:88:98:92: 84:c6:d3:76:fa:a1:14:b7:d0:37:b1:81:34:53:f0:f2:b2:00: ce:eb:e0:c1:22:9f:31:10:06:17:8e:75:5b:98:e7:de:9e:d7: 59:06:29:d2:ec:12:c1:d6:ac:52:31:46:04:c9:f4:40:87:92: d4:d3:be:d4:f2:2b:34:a0:d7:7c:b0:2a:f9:b6:5d:54:85:b0: 1c:11:71:be:80:00:af:31:c7:5e:9c:0c:79:bf:75:d8:4a:d2: 4c:44:95:dd:48:28:20:15:d5:28:df:5f:d4:d9:89:c3:8d:09: b2:64:78:c4:48:92:51:e2:df:86:cf:17:05:fd:d2:90:e8:d2: 4b:4c:4c:e0:67:8d:c4:96:fa:17:ad:c9:e8:6e:f8:7e:14:b9: 82:ce:8a:cf:9e:2d:42:5c:4a:bc:9a:38:fb:ae:62:23:6e:46: 06:e7:ec:f1:85:38:ea:40:07:f9:95:94:4d:7d:b9:64:0d:4f: 4b:72:ea:5f:b7:4a:36:ba:31:3d:d0:c5:c1:fa:27:15:8c:6c: 6a:d1:2b:4b:77:64:17:21:eb:b7:02:fd:70:e6:03:3d:93:9b: 50:95:69:ac:5d:b7:62:73:d6:08:ba:de:74:4a:85:5f:b5:29: de:6d:f7:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwiBvp+uuN4/vKUE8CppnCrTqPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3 NzM5REYxODAeFw0yNjA0MjAwODQ3MjhaFw0yNjA0MjMxOTAwMjhaMDMxMTAvBgNV BAMTKDcwNjRFRjhFQzYzMTU2RTMyQzFCNDRFOTY5MEFFODIzRjQ0NEM4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7H8BvxetP01DHlIwsj6LWJo9l kuyyzU+BGbQHl9UPb6UlJtG/dnkpEe0xSEeBtKvKvRc9wGLKIpEA/f48bsRMZzvS nG/NFLbI2Qk5dv3ScsWKMOkGAIhEIEn+ohlIMBsWiKvcHljcmq9SNTaBhXjfDD2G 7wFIDJ8UBaHMm7yk3gtp/YhhA2ZUciTfgn83+P7asa219Mg+YN7TiiZTC0fy/dDZ 4Vn5JfcUJ03MEMuDiN7uh70+TM3Xd7cR+6/MBu9v17jcPPLr4pXvPys/NXx659AF t6+zqqmjJZdYjKrALGxXYiPiTXAt89c7+4Y3Mx/PKSBN33k3vO/B50nZX9klAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcGTvjsYxVuMsG0TpaQroI/REyC8wHwYDVR0j BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1 Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5 REYxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmU2Mjg4MGUtZDVmMi00MDY5LTg4 ZmYtMTI2N2I3Y2MwMWM1LzAvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTcz NDU3NzM5REYxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACH1PZiKWNuhCvYvhwPIrIiYkoTG03b6oRS3 0DexgTRT8PKyAM7r4MEinzEQBheOdVuY596e11kGKdLsEsHWrFIxRgTJ9ECHktTT vtTyKzSg13ywKvm2XVSFsBwRcb6AAK8xx16cDHm/ddhK0kxEld1IKCAV1SjfX9TZ icONCbJkeMRIklHi34bPFwX90pDo0ktMTOBnjcSW+hetyehu+H4UuYLOis+eLUJc SryaOPuuYiNuRgbn7PGFOOpAB/mVlE19uWQNT0ty6l+3Sja6MT3QxcH6JxWMbGrR K0t3ZBch67cC/XDmAz2Tm1CVaaxdt2Jz1gi63nRKhV+1Kd5t9wU= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:50 2026 by rpki-client