$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: fNhif+tYttuMI+HTeRBRJs8FU09B4RDBF56IVnSQd1M= Subject key identifier: BE:8D:A0:36:28:F6:9A:CC:5F:E9:5A:40:92:E6:5E:D3:E5:BC:74:9F Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 78AE16FFBE630C11030C09193C84C29FC8C7922A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: F7 Signing time: Tue 21 Apr 2026 19:21:10 +0000 Manifest this update: Tue 21 Apr 2026 19:16:10 +0000 Manifest next update: Fri 24 Apr 2026 23:02:10 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: 0Jgwd4pigHVWNOIDQuqahgRZ8Gr82MediDc2tYPO3Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:ae:16:ff:be:63:0c:11:03:0c:09:19:3c:84:c2:9f:c8:c7:92:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Apr 21 19:16:10 2026 GMT Not After : Apr 24 23:02:10 2026 GMT Subject: CN=BE8DA03628F69ACC5FE95A4092E65ED3E5BC749F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:49:6f:45:bd:8d:c7:80:13:e6:7e:37:32:db: fe:33:f3:f8:e8:24:d6:e5:8d:04:ac:dc:9a:dd:73: 31:34:6b:0f:d5:dc:b0:d4:96:83:00:f1:36:33:a4: 30:7f:c0:ab:23:23:8a:e1:0d:63:a2:36:68:82:78: e7:8d:a2:b3:61:42:6f:3a:db:f5:50:c2:50:75:2f: c8:7d:6b:7b:33:ea:11:3e:ef:0e:33:15:da:79:5c: a0:4d:c1:d3:c5:c9:17:8b:7d:c8:c6:a9:37:ee:d4: f8:c2:8c:67:9a:ed:2d:20:08:dd:d7:48:12:35:0f: 2e:62:c3:8c:dc:7d:57:49:2e:0d:73:a9:a5:21:4a: 57:29:14:84:40:54:77:ca:ef:2d:76:24:0a:ad:80: 52:c9:70:a2:6a:28:b7:e4:ff:92:fb:f6:54:0e:0f: 42:28:ce:c2:73:2d:2d:8e:e4:7e:a2:c5:d5:01:39: b0:82:18:91:7e:ea:6a:37:44:7f:85:8b:db:4b:e4: 94:f7:3e:9e:4a:81:50:be:e8:80:5d:d5:fe:ee:61: 9f:d8:98:1c:70:8c:9b:ee:08:c8:fd:e6:82:fd:51: a4:c8:6c:bb:16:79:36:7f:a4:85:ea:c1:be:77:f5: b8:40:b5:c8:58:6f:03:9a:36:08:5d:9c:f2:71:0a: 73:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:8D:A0:36:28:F6:9A:CC:5F:E9:5A:40:92:E6:5E:D3:E5:BC:74:9F X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:9a:ca:d2:89:fb:39:0e:b7:e7:04:cd:97:76:34:a5:b6:57: d7:90:a9:80:be:71:73:8c:17:19:20:d0:23:19:8e:30:67:4c: 38:07:b0:53:1c:3b:2a:8f:1d:2d:86:94:69:e1:1f:1f:2a:09: 9c:a1:89:62:bc:de:be:6f:bf:54:39:66:02:e3:c8:f0:6a:a6: 27:97:05:27:4b:84:ef:e1:b6:22:a8:65:b8:34:18:b1:98:b9: 31:5a:47:0e:e8:40:7f:b0:f5:04:85:b6:45:aa:e2:c4:df:57: b3:16:b0:9d:66:5c:6a:ac:3e:a3:b3:3c:ff:1c:57:57:2c:3a: 3e:00:88:64:12:02:94:02:fd:4a:a6:96:5f:e5:a3:d7:27:9a: 86:bc:d5:e6:cf:1b:a4:51:15:19:6f:ca:d9:fd:be:99:37:76: e4:4e:a9:f7:10:62:80:81:64:10:4c:3c:1a:66:32:ee:98:31: 39:ea:b3:3f:da:19:99:b4:21:a1:92:d3:7e:64:bf:76:bc:7c: 99:23:a9:6e:7d:51:bf:2a:97:30:8b:6e:1d:a5:10:23:5a:cc: d2:b1:dd:0f:15:7a:21:e7:11:42:97:39:5a:82:19:88:d2:89: 0a:d5:3b:96:d0:77:3b:e0:13:3e:1b:3e:65:42:c5:e5:fd:79: 40:98:f8:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeK4W/75jDBEDDAkZPITCn8jHkiowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNjA0MjExOTE2MTBaFw0yNjA0MjQyMzAyMTBaMDMxMTAvBgNV BAMTKEJFOERBMDM2MjhGNjlBQ0M1RkU5NUE0MDkyRTY1RUQzRTVCQzc0OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzSW9FvY3HgBPmfjcy2/4z8/jo JNbljQSs3JrdczE0aw/V3LDUloMA8TYzpDB/wKsjI4rhDWOiNmiCeOeNorNhQm86 2/VQwlB1L8h9a3sz6hE+7w4zFdp5XKBNwdPFyReLfcjGqTfu1PjCjGea7S0gCN3X SBI1Dy5iw4zcfVdJLg1zqaUhSlcpFIRAVHfK7y12JAqtgFLJcKJqKLfk/5L79lQO D0IozsJzLS2O5H6ixdUBObCCGJF+6mo3RH+Fi9tL5JT3Pp5KgVC+6IBd1f7uYZ/Y mBxwjJvuCMj95oL9UaTIbLsWeTZ/pIXqwb539bhAtchYbwOaNghdnPJxCnPNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvo2gNij2msxf6VpAkuZe0+W8dJ8wHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKaytKJ+zkOt+cEzZd2NKW2V9eQqYC+cXOM Fxkg0CMZjjBnTDgHsFMcOyqPHS2GlGnhHx8qCZyhiWK83r5vv1Q5ZgLjyPBqpieX BSdLhO/htiKoZbg0GLGYuTFaRw7oQH+w9QSFtkWq4sTfV7MWsJ1mXGqsPqOzPP8c V1csOj4AiGQSApQC/Uqmll/lo9cnmoa81ebPG6RRFRlvytn9vpk3duROqfcQYoCB ZBBMPBpmMu6YMTnqsz/aGZm0IaGS035kv3a8fJkjqW59Ub8qlzCLbh2lECNazNKx 3Q8VeiHnEUKXOVqCGYjSiQrVO5bQdzvgEz4bPmVCxeX9eUCY+FU= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:24 2026 by rpki-client