$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: 6NYgWm7fXMRXgGM+PG9rPDxCr8reWKLP+c0iRnEltFA= Subject key identifier: 47:6B:9C:11:91:0B:00:9C:CF:BD:D0:50:60:67:89:5F:24:9C:EF:28 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 74A0657268B6394F94F5F2F8E0794541A5CAC0F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 0130 Signing time: Tue 21 Apr 2026 14:21:32 +0000 Manifest this update: Tue 21 Apr 2026 14:16:32 +0000 Manifest next update: Sat 25 Apr 2026 00:22:32 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: ZVc9p/U56xmweGNg2iRKqjXHoLDT3sF+Khe2VVD4xyg=) 2: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: inwmkIvpAohIT7L7WosLh0ZiodH2/p9rKufCcCwS4+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 13:19:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a0:65:72:68:b6:39:4f:94:f5:f2:f8:e0:79:45:41:a5:ca:c0:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Apr 21 14:16:32 2026 GMT Not After : Apr 25 00:22:32 2026 GMT Subject: CN=476B9C11910B009CCFBDD0506067895F249CEF28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:31:c1:9a:18:a9:9f:e3:5c:4d:27:31:f9:55: 18:69:01:9e:19:f3:11:cb:80:73:8b:de:a2:30:8a: a7:1e:36:db:db:47:8f:eb:69:14:bb:aa:89:d2:58: 42:1b:80:a6:8f:13:f1:e1:38:b7:6e:2f:48:06:fa: 88:e3:6f:7e:d7:36:1b:1e:74:b6:3f:af:3e:12:29: f9:dc:b2:09:a3:54:e6:e9:47:a2:db:76:c3:88:88: e0:4e:0e:ff:d9:fa:42:45:97:e0:ed:ee:b3:34:02: 29:5b:08:02:90:5f:57:8b:47:f2:a3:52:f7:0c:5b: 8d:a0:64:8b:b8:3f:33:f4:9b:6b:ce:de:fc:3d:b7: c3:75:de:db:38:09:b2:96:42:e3:d0:7f:31:8a:4e: 09:9c:28:86:36:27:87:51:4a:6a:8e:b7:73:35:64: 79:f8:0c:eb:d0:d6:c1:c1:b9:79:60:e8:90:cd:ad: 15:73:3f:7a:17:44:89:c9:56:9e:24:c2:65:4f:2c: aa:8b:9d:eb:82:c4:36:b3:89:d9:66:59:6e:63:78: 82:bd:1c:0a:09:7e:ae:f7:13:94:93:e8:35:cc:83: b0:65:ae:f3:a3:f3:54:80:46:cb:4c:a0:43:a8:00: 59:df:d6:ec:47:ef:b1:68:74:05:0c:21:b2:da:e1: 5b:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:6B:9C:11:91:0B:00:9C:CF:BD:D0:50:60:67:89:5F:24:9C:EF:28 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:5a:d4:68:f1:e9:c6:c5:54:80:9a:5c:44:be:4a:91:b8:b4: 32:6f:16:46:d0:55:ef:ac:62:bb:47:b8:a2:fd:48:2f:45:67: fc:5a:98:df:4f:6a:e1:61:c4:5e:92:7c:a6:18:2c:da:04:ce: de:98:2c:40:55:2e:71:99:2b:4b:97:bd:4f:c8:42:9e:98:f7: 89:99:0e:4e:b5:0f:a2:99:1c:19:9d:b7:43:2f:27:db:13:bd: d9:cd:84:f8:c7:ff:70:fb:b0:12:bb:5e:7a:a7:8d:40:86:b3: b0:b3:97:22:af:e6:b6:55:5c:f5:de:a6:00:78:d5:50:a6:30: f5:32:e0:33:a6:fc:fd:ed:cc:91:c1:83:ce:60:54:bc:c6:4a: ba:32:b6:d7:cb:1b:51:8f:3f:82:80:af:2b:1e:3b:fd:4c:c6: 87:0e:92:53:5e:15:67:a3:81:4f:e4:48:af:97:6a:e8:23:f4: 3d:96:41:b3:ad:ad:d4:1a:91:ba:02:e0:c9:ee:d9:41:fa:2e: 28:6c:c1:8a:dc:3b:d6:6e:ba:bc:ed:c9:f7:4f:90:02:03:0e: 3d:7d:b2:09:1d:ac:4f:b4:a9:92:9c:bd:d0:3b:a0:f7:76:75: 56:28:ec:c4:06:a4:07:f5:4f:d1:a5:90:17:3a:d0:14:70:13: eb:05:3b:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKBlcmi2OU+U9fL44HlFQaXKwPAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNjA0MjExNDE2MzJaFw0yNjA0MjUwMDIyMzJaMDMxMTAvBgNV BAMTKDQ3NkI5QzExOTEwQjAwOUNDRkJERDA1MDYwNjc4OTVGMjQ5Q0VGMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjMcGaGKmf41xNJzH5VRhpAZ4Z 8xHLgHOL3qIwiqceNtvbR4/raRS7qonSWEIbgKaPE/HhOLduL0gG+ojjb37XNhse dLY/rz4SKfncsgmjVObpR6LbdsOIiOBODv/Z+kJFl+Dt7rM0AilbCAKQX1eLR/Kj UvcMW42gZIu4PzP0m2vO3vw9t8N13ts4CbKWQuPQfzGKTgmcKIY2J4dRSmqOt3M1 ZHn4DOvQ1sHBuXlg6JDNrRVzP3oXRInJVp4kwmVPLKqLneuCxDazidlmWW5jeIK9 HAoJfq73E5ST6DXMg7BlrvOj81SARstMoEOoAFnf1uxH77FodAUMIbLa4VtBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR2ucEZELAJzPvdBQYGeJXySc7ygwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIda1Gjx6cbFVICaXES+SpG4tDJvFkbQVe+s YrtHuKL9SC9FZ/xamN9PauFhxF6SfKYYLNoEzt6YLEBVLnGZK0uXvU/IQp6Y94mZ Dk61D6KZHBmdt0MvJ9sTvdnNhPjH/3D7sBK7XnqnjUCGs7CzlyKv5rZVXPXepgB4 1VCmMPUy4DOm/P3tzJHBg85gVLzGSroyttfLG1GPP4KAryseO/1MxocOklNeFWej gU/kSK+Xaugj9D2WQbOtrdQakboC4Mnu2UH6LihswYrcO9ZuurztyfdPkAIDDj19 sgkdrE+0qZKcvdA7oPd2dVYo7MQGpAf1T9GlkBc60BRwE+sFO6M= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client