$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: C9chtOqkKuKQd8+sXf1zM1M5j0GZLKyH71zb7EIFVB4= Subject key identifier: F3:5B:C5:D2:95:E6:2F:96:4B:18:C6:B8:45:1A:40:B2:FB:65:EE:09 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 2E0DB7D34BFCFF83A38B3BBE554B72750EA6F452 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 010E Signing time: Wed 22 Apr 2026 01:22:38 +0000 Manifest this update: Wed 22 Apr 2026 01:17:38 +0000 Manifest next update: Sat 25 Apr 2026 01:38:38 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: T3wO4Y1fTNzoI4wEIapjz88WlTYiCwHjyk6PG6uPApc=) 2: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:0d:b7:d3:4b:fc:ff:83:a3:8b:3b:be:55:4b:72:75:0e:a6:f4:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Apr 22 01:17:38 2026 GMT Not After : Apr 25 01:38:38 2026 GMT Subject: CN=F35BC5D295E62F964B18C6B8451A40B2FB65EE09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:ff:bc:de:59:9a:29:c6:f3:9a:f1:e0:8c: 29:fc:c9:f9:e3:d0:b6:ea:22:90:89:29:90:1d:df: 32:2c:45:69:27:86:74:d0:5a:74:0f:d8:5d:f9:e2: 6a:50:ae:bf:7a:71:18:f2:8f:55:27:db:91:da:77: be:fc:31:b8:bc:40:1a:47:59:94:b0:b1:ed:7b:cf: 5b:de:73:ed:ac:4e:8b:00:f7:fc:ef:c7:b7:3c:ab: b3:3d:36:7b:11:8d:4a:d9:9a:2d:1b:31:df:24:d6: a9:a3:33:c0:ef:6e:7e:d6:3d:fd:a7:6f:12:fd:b9: 98:50:7b:15:06:d9:3c:1e:4e:96:fe:c8:11:05:16: aa:e8:93:3a:19:44:ca:e5:48:07:70:78:0f:5b:e3: bd:98:dd:f1:1b:9a:55:44:bc:ea:ec:0b:e4:54:53: a4:25:b0:c3:dd:07:c1:9f:6f:98:6d:69:10:09:0c: e2:a8:c6:06:e3:3f:4e:b7:5e:5d:ad:9c:71:02:ee: 47:71:0f:0e:38:ea:94:a6:94:d7:ca:a6:43:70:20: a5:53:ba:01:d3:51:8e:4c:cc:44:ad:b1:90:fb:15: 56:c6:01:73:0d:92:66:23:30:6c:f6:18:51:01:ea: 88:63:5e:b9:b1:b0:c1:a0:05:b9:ce:66:84:2e:2c: fe:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:5B:C5:D2:95:E6:2F:96:4B:18:C6:B8:45:1A:40:B2:FB:65:EE:09 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:64:35:21:25:a3:2e:24:10:65:86:65:65:32:f8:4a:8a:32: d7:c3:84:be:17:3a:8d:83:5d:a5:23:4b:ba:4e:07:9d:41:63: 8b:69:1e:7c:2b:1e:08:69:b3:67:25:5b:b3:36:86:70:0c:05: 9c:47:ff:99:f1:d1:11:a1:d3:0b:00:d9:21:ac:49:1c:04:68: 72:22:6e:f9:fe:d6:b0:6e:81:53:73:2c:ac:4f:bc:f3:68:f3: 36:f6:44:76:f4:4b:7c:15:83:98:bb:9b:2b:30:95:45:5f:a1: 72:34:78:82:18:18:c9:75:b8:61:e2:2c:fa:5e:ef:3a:69:f8: 12:5f:48:34:06:39:57:3c:39:48:c2:8e:dd:4f:04:2b:64:2e: 7b:de:85:93:c4:64:1e:42:fd:29:04:68:bb:53:a7:fc:30:d6: 77:fc:a9:83:f4:fb:f4:99:60:e5:db:14:3b:82:02:2c:35:11: 6c:40:40:eb:05:76:4c:48:cd:2c:5b:39:85:e8:e4:2b:e1:21: 8a:a7:66:4d:20:7d:5b:ce:3f:3e:96:93:5f:63:e7:91:db:d7: a6:2b:4a:1d:bb:1d:e5:ee:e3:d3:c8:03:08:0d:63:21:53:e0: 5f:a5:17:98:b7:45:df:32:a0:07:ea:75:c4:36:bc:87:99:77: a5:f0:f8:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULg2300v8/4Ojizu+VUtydQ6m9FIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNjA0MjIwMTE3MzhaFw0yNjA0MjUwMTM4MzhaMDMxMTAvBgNV BAMTKEYzNUJDNUQyOTVFNjJGOTY0QjE4QzZCODQ1MUE0MEIyRkI2NUVFMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVf+83lmaKcbzmvHgjCn8yfnj 0LbqIpCJKZAd3zIsRWknhnTQWnQP2F354mpQrr96cRjyj1Un25Had778Mbi8QBpH WZSwse17z1vec+2sTosA9/zvx7c8q7M9NnsRjUrZmi0bMd8k1qmjM8Dvbn7WPf2n bxL9uZhQexUG2TweTpb+yBEFFqrokzoZRMrlSAdweA9b472Y3fEbmlVEvOrsC+RU U6QlsMPdB8Gfb5htaRAJDOKoxgbjP063Xl2tnHEC7kdxDw446pSmlNfKpkNwIKVT ugHTUY5MzEStsZD7FVbGAXMNkmYjMGz2GFEB6ohjXrmxsMGgBbnOZoQuLP7pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU81vF0pXmL5ZLGMa4RRpAsvtl7gkwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxkNSEloy4kEGWGZWUy+EqKMtfDhL4XOo2D XaUjS7pOB51BY4tpHnwrHghps2clW7M2hnAMBZxH/5nx0RGh0wsA2SGsSRwEaHIi bvn+1rBugVNzLKxPvPNo8zb2RHb0S3wVg5i7myswlUVfoXI0eIIYGMl1uGHiLPpe 7zpp+BJfSDQGOVc8OUjCjt1PBCtkLnvehZPEZB5C/SkEaLtTp/ww1nf8qYP0+/SZ YOXbFDuCAiw1EWxAQOsFdkxIzSxbOYXo5CvhIYqnZk0gfVvOPz6Wk19j55Hb16Yr Sh27HeXu49PIAwgNYyFT4F+lF5i3Rd8yoAfqdcQ2vIeZd6Xw+Lw= -----END CERTIFICATE-----Generated at Wed Apr 22 04:54:21 2026 by rpki-client