$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft File: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft (raw, json) Hash identifier: pnbyKo9N8p5Js2yetxhPFbumDAZeRvh/hWZX9qiqh8w= Subject key identifier: 54:5A:F0:DF:E8:00:9C:9E:FF:03:17:86:01:4B:19:C1:4A:2A:9E:C9 Authority key identifier: 07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F Certificate issuer: /CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Certificate serial: 6A833F0F67FC0B64C655B305516BF3F313629968 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft Manifest number: 12 Signing time: Tue 21 Apr 2026 04:11:03 +0000 Manifest this update: Tue 21 Apr 2026 04:06:02 +0000 Manifest next update: Fri 24 Apr 2026 08:21:02 +0000 Files and hashes: 1: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl (hash: grvMp1mVwct7qITprGMQx/XcaCxyxpzOx9yQ+tf7X3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 08:21:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:83:3f:0f:67:fc:0b:64:c6:55:b3:05:51:6b:f3:f3:13:62:99:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Validity Not Before: Apr 21 04:06:02 2026 GMT Not After : Apr 24 08:21:02 2026 GMT Subject: CN=545AF0DFE8009C9EFF031786014B19C14A2A9EC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:c6:84:7f:90:e0:1f:53:31:66:b9:fa:e0:48: c8:24:76:f4:b9:7c:bf:70:e6:9e:89:22:c6:3b:08: f9:bd:ad:5e:56:e8:72:83:f7:97:83:92:1a:4a:92: 10:ae:18:e1:99:cf:53:2b:58:fa:a8:cc:8c:21:9e: 24:14:4d:6a:8f:37:50:d7:ec:91:10:ad:46:f5:fb: 47:69:d1:09:d7:7e:1c:2d:df:01:fe:2f:e5:94:e7: f5:a3:cd:ad:e5:53:d4:4c:71:7f:4d:17:24:89:9a: 27:a5:35:6d:fc:d1:ef:20:34:fe:f7:88:0a:0d:92: 4c:40:da:bc:f4:0d:45:ba:43:c2:76:e8:f9:34:46: 95:17:ae:9f:bd:ff:44:0c:4a:00:5b:7f:e3:e9:de: 6c:3d:18:24:5a:3a:71:02:d6:a7:63:09:a9:7e:73: 84:f5:eb:30:71:e2:c1:54:c7:9d:88:88:42:8d:25: b1:e6:b4:48:96:a2:87:d8:d2:2b:11:b0:cc:10:ac: 1a:7c:40:32:9a:29:c3:10:2d:05:b4:0f:d3:74:64: b2:2d:db:4c:c2:f8:fa:e8:b9:5f:73:33:44:d6:77: ab:88:e8:96:a0:fb:9f:57:54:90:01:55:80:a6:5f: 25:f9:6b:a5:18:ab:43:1f:31:aa:fc:31:73:0b:77: 57:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:5A:F0:DF:E8:00:9C:9E:FF:03:17:86:01:4B:19:C1:4A:2A:9E:C9 X509v3 Authority Key Identifier: keyid:07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:53:18:60:83:34:78:02:72:d2:72:ad:8e:79:8f:9b:35:84: 61:5f:c9:54:5d:f5:5d:aa:2a:5a:3b:e9:a3:b7:bc:cc:91:63: ba:1d:30:6c:4e:eb:fb:e7:42:67:48:bb:44:f5:f2:46:e1:49: 31:42:cb:1a:5d:a9:6b:ac:95:0c:40:ea:6f:3c:68:7a:ce:0a: a5:ad:a7:25:f9:70:63:99:39:53:54:64:e3:44:17:a3:34:f3: 9b:86:a0:a2:1b:d9:7c:4a:7c:11:6e:e4:f4:ea:cf:40:cd:a9: 7b:c4:77:ec:f8:59:8d:af:5b:cd:12:e5:99:f9:3b:40:cc:42: 2b:0b:55:a1:06:32:0c:6d:d8:22:17:e5:54:91:73:39:3f:a2: 68:d8:89:4b:50:a6:a6:17:76:6e:b2:f2:f4:b0:30:8b:59:1a: d9:43:2c:dc:e2:6c:76:ce:57:fc:d5:a1:33:28:87:9e:91:45: 6c:0a:56:31:e8:ed:60:8d:35:f8:bf:e1:54:90:95:5f:9d:50: b5:3c:3d:30:cc:b3:be:59:e7:2c:66:31:df:de:7e:fa:44:02: c6:b1:b0:62:98:fa:10:13:a1:e5:fa:e4:30:f9:0e:44:34:24: a1:22:c5:b4:79:a5:af:e9:ae:dd:f5:97:13:27:29:9a:64:a6: a8:18:4d:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaoM/D2f8C2TGVbMFUWvz8xNimWgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4 NDVGRDA0RjAeFw0yNjA0MjEwNDA2MDJaFw0yNjA0MjQwODIxMDJaMDMxMTAvBgNV BAMTKDU0NUFGMERGRTgwMDlDOUVGRjAzMTc4NjAxNEIxOUMxNEEyQTlFQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xoR/kOAfUzFmufrgSMgkdvS5 fL9w5p6JIsY7CPm9rV5W6HKD95eDkhpKkhCuGOGZz1MrWPqozIwhniQUTWqPN1DX 7JEQrUb1+0dp0QnXfhwt3wH+L+WU5/Wjza3lU9RMcX9NFySJmielNW380e8gNP73 iAoNkkxA2rz0DUW6Q8J26Pk0RpUXrp+9/0QMSgBbf+Pp3mw9GCRaOnEC1qdjCal+ c4T16zBx4sFUx52IiEKNJbHmtEiWoofY0isRsMwQrBp8QDKaKcMQLQW0D9N0ZLIt 20zC+ProuV9zM0TWd6uI6Jag+59XVJABVYCmXyX5a6UYq0MfMar8MXMLd1fNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVFrw3+gAnJ7/AxeGAUsZwUoqnskwHwYDVR0j BBgwFoAUB+mkIgzx1P8NXJmvtQASxoRf0E8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMS8wN0U5QTQyMjBD RjFENEZGMEQ1Qzk5QUZCNTAwMTJDNjg0NUZEMDRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4NDVG RDA0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEy QzY4NDVGRDA0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNTGGCDNHgCctJyrY55j5s1hGFfyVRd9V2q Klo76aO3vMyRY7odMGxO6/vnQmdIu0T18kbhSTFCyxpdqWuslQxA6m88aHrOCqWt pyX5cGOZOVNUZONEF6M085uGoKIb2XxKfBFu5PTqz0DNqXvEd+z4WY2vW80S5Zn5 O0DMQisLVaEGMgxt2CIX5VSRczk/omjYiUtQpqYXdm6y8vSwMItZGtlDLNzibHbO V/zVoTMoh56RRWwKVjHo7WCNNfi/4VSQlV+dULU8PTDMs75Z5yxmMd/efvpEAsax sGKY+hAToeX65DD5DkQ0JKEixbR5pa/prt31lxMnKZpkpqgYTVE= -----END CERTIFICATE-----Generated at Wed Apr 22 04:49:20 2026 by rpki-client