$ rpki-client -vvf repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.mft File: 7CFF61C86A6732527928FA8A4E5D49F74E9C397C.mft (raw, json) Hash identifier: XbxwJh0rmDetH/KmD9kwq48E1oNV/Z/oUE/aHDW1Ovs= Subject key identifier: D6:47:EC:E5:E1:D2:B4:BC:8A:BB:AF:69:15:9C:24:56:CB:8B:39:D3 Authority key identifier: 7C:FF:61:C8:6A:67:32:52:79:28:FA:8A:4E:5D:49:F7:4E:9C:39:7C Certificate issuer: /CN=7CFF61C86A6732527928FA8A4E5D49F74E9C397C Certificate serial: 5457848767E292DBA9B99DE38369FE9495709EC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.mft Manifest number: 01 Signing time: Mon 20 Apr 2026 08:09:36 +0000 Manifest this update: Mon 20 Apr 2026 08:04:36 +0000 Manifest next update: Thu 23 Apr 2026 19:45:36 +0000 Files and hashes: 1: 7CFF61C86A6732527928FA8A4E5D49F74E9C397C.crl (hash: ywuXoWFNv/jafasxrqqf/MwhtufPxPq9T9VRuZ/dJms=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.crl rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Apr 2026 19:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:57:84:87:67:e2:92:db:a9:b9:9d:e3:83:69:fe:94:95:70:9e:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CFF61C86A6732527928FA8A4E5D49F74E9C397C Validity Not Before: Apr 20 08:04:36 2026 GMT Not After : Apr 23 19:45:36 2026 GMT Subject: CN=D647ECE5E1D2B4BC8ABBAF69159C2456CB8B39D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c5:a0:12:8a:fb:32:1e:c9:36:05:f2:e3:b7: 89:88:b7:62:af:ce:b6:eb:2b:c9:b2:20:3a:18:78: 60:c7:6a:f1:c8:55:ff:e6:97:38:b1:7d:3e:00:05: fe:58:6e:86:a5:3b:36:cc:94:82:cf:a8:30:1f:b3: 1c:5e:1f:43:ef:aa:e8:f3:7c:bf:0c:fe:6e:1b:17: 8b:1b:af:7a:09:f1:80:6f:84:b1:3f:46:51:02:dd: e6:d8:ee:4b:3b:d5:62:38:84:14:cf:ac:57:14:0c: aa:03:6e:c4:89:34:76:7c:7e:c9:8f:6a:10:fb:4a: 6b:0e:1f:43:e2:51:ce:a0:27:8b:b0:28:be:fc:a6: d7:25:c5:d6:99:9f:db:23:a1:c6:88:9e:81:74:ee: 66:85:e8:7e:04:57:70:3c:4c:93:e8:5b:a5:a9:8a: c4:f8:45:9a:a5:5e:17:be:dd:43:50:e6:16:4d:ee: 55:ec:84:b6:02:f4:d6:92:ad:86:10:52:49:39:c1: 3f:34:bf:c2:3e:84:c6:15:b6:5f:49:03:4e:1b:4f: e0:8c:49:c5:9b:5b:86:f5:10:e5:53:f0:68:5b:3c: 39:88:2f:f5:0f:c0:51:04:05:ae:03:77:b2:de:a3: b1:e2:e4:5e:64:fb:ff:09:59:2d:59:02:f8:97:41: 08:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:47:EC:E5:E1:D2:B4:BC:8A:BB:AF:69:15:9C:24:56:CB:8B:39:D3 X509v3 Authority Key Identifier: keyid:7C:FF:61:C8:6A:67:32:52:79:28:FA:8A:4E:5D:49:F7:4E:9C:39:7C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b238e56e-eda5-405a-abbf-42fe27b5ba00/1/7CFF61C86A6732527928FA8A4E5D49F74E9C397C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:48:b3:da:75:82:42:24:eb:00:7c:4e:46:15:a3:4b:46:40: 4c:43:87:ee:a2:64:7d:46:6d:9a:ba:c1:5b:5c:28:eb:6a:e4: 6a:0f:80:59:03:28:7b:11:d9:4f:ea:7d:90:d0:06:97:b1:ee: d3:e1:8a:c3:ee:66:3d:7c:18:b8:8a:3d:18:58:21:de:d3:97: ce:eb:4a:8d:53:95:9b:80:a3:eb:69:e8:f6:2d:ac:70:22:86: 7b:50:b6:e1:c9:9b:15:2f:87:3d:69:b1:ea:97:bc:8e:10:c2: 79:14:aa:55:9d:6d:cf:c0:35:63:34:79:2f:df:6e:d7:33:c6: 9b:fe:25:33:72:b8:61:aa:60:55:6a:1d:20:f5:8e:d3:df:f2: d8:9d:23:8f:e2:83:56:8f:b1:0b:02:c8:cd:94:ca:12:6f:b7: 67:45:31:30:19:9a:77:3b:15:a0:81:2d:ba:de:74:2a:d7:74: e5:c0:ea:ee:bd:fb:0c:ed:a8:e9:0a:a6:00:ed:9f:ab:b4:19: 4b:de:0d:bc:37:ae:df:f3:df:5e:44:8e:5d:4c:21:7d:2f:da: f8:20:fc:16:9a:91:be:47:14:38:e5:c7:2d:44:39:a1:73:ed: f5:51:d1:a9:d9:58:c0:0e:91:82:d1:87:08:08:0e:cf:f9:c7: 79:07:e2:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVFeEh2fiktupuZ3jg2n+lJVwnsQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NGRjYxQzg2QTY3MzI1Mjc5MjhGQThBNEU1RDQ5Rjc0 RTlDMzk3QzAeFw0yNjA0MjAwODA0MzZaFw0yNjA0MjMxOTQ1MzZaMDMxMTAvBgNV BAMTKEQ2NDdFQ0U1RTFEMkI0QkM4QUJCQUY2OTE1OUMyNDU2Q0I4QjM5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7xaASivsyHsk2BfLjt4mIt2Kv zrbrK8myIDoYeGDHavHIVf/mlzixfT4ABf5YboalOzbMlILPqDAfsxxeH0Pvqujz fL8M/m4bF4sbr3oJ8YBvhLE/RlEC3ebY7ks71WI4hBTPrFcUDKoDbsSJNHZ8fsmP ahD7SmsOH0PiUc6gJ4uwKL78ptclxdaZn9sjocaInoF07maF6H4EV3A8TJPoW6Wp isT4RZqlXhe+3UNQ5hZN7lXshLYC9NaSrYYQUkk5wT80v8I+hMYVtl9JA04bT+CM ScWbW4b1EOVT8GhbPDmIL/UPwFEEBa4Dd7Leo7Hi5F5k+/8JWS1ZAviXQQh1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1kfs5eHStLyKu69pFZwkVsuLOdMwHwYDVR0j BBgwFoAUfP9hyGpnMlJ5KPqKTl1J906cOXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MjM4ZTU2ZS1lZGE1LTQwNWEtYWJiZi00MmZlMjdiNWJhMDAvMS83Q0ZGNjFDODZB NjczMjUyNzkyOEZBOEE0RTVENDlGNzRFOUMzOTdDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0NGRjYxQzg2QTY3MzI1Mjc5MjhGQThBNEU1RDQ5Rjc0RTlD Mzk3Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjIzOGU1NmUtZWRhNS00MDVhLWFi YmYtNDJmZTI3YjViYTAwLzEvN0NGRjYxQzg2QTY3MzI1Mjc5MjhGQThBNEU1RDQ5 Rjc0RTlDMzk3Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBIs9p1gkIk6wB8TkYVo0tGQExDh+6iZH1G bZq6wVtcKOtq5GoPgFkDKHsR2U/qfZDQBpex7tPhisPuZj18GLiKPRhYId7Tl87r So1TlZuAo+tp6PYtrHAihntQtuHJmxUvhz1pseqXvI4QwnkUqlWdbc/ANWM0eS/f btczxpv+JTNyuGGqYFVqHSD1jtPf8tidI4/ig1aPsQsCyM2UyhJvt2dFMTAZmnc7 FaCBLbredCrXdOXA6u69+wztqOkKpgDtn6u0GUveDbw3rt/z315Ejl1MIX0v2vgg /Baakb5HFDjlxy1EOaFz7fVR0anZWMAOkYLRhwgIDs/5x3kH4ho= -----END CERTIFICATE-----Generated at Wed Apr 22 04:49:21 2026 by rpki-client