$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: Zjq0tSHYr2h/SFvU4cLwtGm7Lu65NyvgKmJ+PpLsb+Y= Subject key identifier: D9:AF:E2:BE:98:14:7F:DA:F6:AC:6B:DC:B3:22:28:0B:47:18:3B:EA Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 4CDAB6DCCB34FF759AFE64385F84E1E3CF99B986 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 011F Signing time: Wed 22 Apr 2026 01:42:15 +0000 Manifest this update: Wed 22 Apr 2026 01:37:15 +0000 Manifest next update: Sat 25 Apr 2026 07:39:15 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: navL9uRoXZLLDhBwHTmc4flcOdnPIhU55DIw/Hu7hSo=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 07:39:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:da:b6:dc:cb:34:ff:75:9a:fe:64:38:5f:84:e1:e3:cf:99:b9:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Apr 22 01:37:15 2026 GMT Not After : Apr 25 07:39:15 2026 GMT Subject: CN=D9AFE2BE98147FDAF6AC6BDCB322280B47183BEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:be:eb:1b:fc:84:5f:79:5e:f7:c4:40:1c:ca: fc:e0:1b:32:aa:c8:e3:1d:1e:c4:6e:e7:c3:f3:05: 1b:e4:ef:98:14:53:37:a2:62:d2:91:f7:a1:ff:5c: 54:1b:33:ab:de:99:83:96:a6:84:80:1c:01:4d:4e: b5:94:be:55:fc:be:fd:04:86:5e:b2:70:8b:6e:05: 57:6d:41:90:6f:d2:eb:1c:f1:92:cd:0c:65:63:64: 19:98:88:ee:95:d0:db:f8:fd:b0:5f:78:ff:a5:27: 63:8d:97:ea:7b:9b:a2:78:9e:1f:a3:a5:65:34:46: e5:26:79:7f:c2:e3:71:57:2b:c8:81:eb:e7:e9:47: 60:e5:72:54:af:2d:0f:1c:dc:07:f8:2c:29:5d:08: ae:a4:19:47:3b:5d:cf:f0:8c:42:3d:ed:53:a9:a8: ba:a5:97:1f:a0:dc:35:be:2b:03:a1:59:5a:8e:51: 93:14:06:33:56:24:0f:44:71:66:0b:9a:b0:0f:84: 55:84:9f:bf:ed:9a:fb:fe:8c:c6:52:db:6a:cb:88: 5c:f7:bc:58:5f:0c:bd:91:e5:76:b7:f3:90:54:a6: 3d:5b:bb:e6:9a:43:c2:b1:f9:2b:20:29:57:19:d2: 72:64:d8:42:2a:d0:10:82:d9:38:34:dc:03:15:b6: 7c:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:AF:E2:BE:98:14:7F:DA:F6:AC:6B:DC:B3:22:28:0B:47:18:3B:EA X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:9f:2b:90:b5:79:c8:90:0c:ae:5d:be:06:8f:c4:72:a6:fd: a6:5e:e5:4d:af:e8:8b:83:78:91:dd:aa:aa:ea:6c:23:21:f9: 76:3b:42:ab:28:7c:c2:79:c1:f3:4d:18:cd:13:04:58:08:58: b2:de:44:0e:b4:8f:41:53:0f:d0:69:fa:43:80:ef:8a:1b:c8: c6:51:cf:d2:0b:77:ba:ae:12:b0:20:23:4e:ad:4c:2e:4e:18: 20:56:63:9d:de:0f:4c:4e:4d:66:15:44:80:2b:91:7f:d2:6e: 36:87:48:ab:47:25:73:ef:fc:81:71:38:47:fb:87:69:3b:e8: cb:f7:47:4f:2e:ed:1d:84:8f:bc:80:48:db:0c:fe:aa:0c:a6: ff:b2:f9:58:0e:e0:7c:ea:3f:1e:b8:7a:c8:eb:9d:75:0f:5b: 25:9c:c4:bd:c6:71:87:71:77:6e:3b:d5:3b:5c:f3:64:33:15: 53:98:49:73:3b:17:f5:f4:c4:b3:df:6f:b0:53:b7:5f:de:1e: 0e:83:64:01:19:c2:27:80:d6:9b:4e:11:2d:b5:99:26:3e:49: 18:80:40:3d:28:72:5c:7e:6f:99:f6:6f:07:f9:59:0e:b7:af: 0e:e5:6e:11:c2:05:c9:9e:29:89:74:7e:c2:1d:30:e6:0a:bc: 3d:8e:9d:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTNq23Ms0/3Wa/mQ4X4Th48+ZuYYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNjA0MjIwMTM3MTVaFw0yNjA0MjUwNzM5MTVaMDMxMTAvBgNV BAMTKEQ5QUZFMkJFOTgxNDdGREFGNkFDNkJEQ0IzMjIyODBCNDcxODNCRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkvusb/IRfeV73xEAcyvzgGzKq yOMdHsRu58PzBRvk75gUUzeiYtKR96H/XFQbM6vemYOWpoSAHAFNTrWUvlX8vv0E hl6ycItuBVdtQZBv0usc8ZLNDGVjZBmYiO6V0Nv4/bBfeP+lJ2ONl+p7m6J4nh+j pWU0RuUmeX/C43FXK8iB6+fpR2DlclSvLQ8c3Af4LCldCK6kGUc7Xc/wjEI97VOp qLqllx+g3DW+KwOhWVqOUZMUBjNWJA9EcWYLmrAPhFWEn7/tmvv+jMZS22rLiFz3 vFhfDL2R5Xa385BUpj1bu+aaQ8Kx+SsgKVcZ0nJk2EIq0BCC2Tg03AMVtnxTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2a/ivpgUf9r2rGvcsyIoC0cYO+owHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJCfK5C1eciQDK5dvgaPxHKm/aZe5U2v6IuD eJHdqqrqbCMh+XY7QqsofMJ5wfNNGM0TBFgIWLLeRA60j0FTD9Bp+kOA74obyMZR z9ILd7quErAgI06tTC5OGCBWY53eD0xOTWYVRIArkX/SbjaHSKtHJXPv/IFxOEf7 h2k76Mv3R08u7R2Ej7yASNsM/qoMpv+y+VgO4HzqPx64esjrnXUPWyWcxL3GcYdx d2471Ttc82QzFVOYSXM7F/X0xLPfb7BTt1/eHg6DZAEZwieA1ptOES21mSY+SRiA QD0oclx+b5n2bwf5WQ63rw7lbhHCBcmeKYl0fsIdMOYKvD2OndI= -----END CERTIFICATE-----Generated at Wed Apr 22 09:58:29 2026 by rpki-client