$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: +GUE3bGVx/o9MIcbjgxgo+M9cdzWxx0zl+3U51ZSX0w= Subject key identifier: 58:28:AA:99:4F:6A:04:7D:A1:05:F5:96:C0:7E:5F:4E:97:C5:02:97 Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 09107D3BA0976BCAA6DCE6250445413CE344CFFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 0191 Signing time: Wed 25 Mar 2026 12:01:56 +0000 Manifest this update: Wed 25 Mar 2026 11:56:55 +0000 Manifest next update: Sat 28 Mar 2026 16:35:55 +0000 Files and hashes: 1: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: YOGZVl1pxBeHfHLB3kw7JsNB/ueNC1i2F+bIqbAKZQY=) 2: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 0CJAWZ02vSckzRoE57ZpZjjAeFM8kHecSgDHcs3TTPQ=) 3: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: L1QXmmmYL7avongM7Z18LqYgTBveJl41ce19oTEBc90=) 4: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: utZwLnyR/q3WENGa0qXbm4V9vyWrQYfeHgWR4qf+7yk=) 5: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: AGikL5mf3R6SUcLntlNendJ/c7wVC1wVAVxWd0F74Ys=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:10:7d:3b:a0:97:6b:ca:a6:dc:e6:25:04:45:41:3c:e3:44:cf:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Mar 25 11:56:55 2026 GMT Not After : Mar 28 16:35:55 2026 GMT Subject: CN=5828AA994F6A047DA105F596C07E5F4E97C50297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e4:42:8e:7b:80:fc:5e:a9:91:ef:cb:53:de: 78:80:1c:a2:81:69:3c:ee:0d:4f:62:82:1a:41:9e: 13:8f:d6:ac:30:8d:7b:fe:10:09:42:70:33:22:b1: 61:a4:cf:4c:5d:dc:a4:85:9c:77:be:06:cd:c2:11: f6:75:4a:6e:34:33:03:df:0b:8b:e6:b2:7b:32:cb: de:37:ae:41:3c:47:0b:93:c5:36:2f:c1:5c:f9:ed: 7d:a8:45:ed:5c:25:c9:64:9a:4e:7b:7b:10:2b:b9: 14:c9:cd:f3:8a:6d:35:b0:8f:9d:32:d6:44:63:23: f4:f8:1a:f3:24:01:cf:ec:8c:8f:38:ee:79:82:79: 40:6c:49:9c:17:f7:18:79:5e:b3:8a:55:08:e7:94: 2d:b5:87:8f:51:ad:0a:83:89:58:be:11:ba:07:b9: 6f:73:74:d0:59:1b:5d:9c:58:9e:98:e0:53:3e:93: 5e:e1:9d:da:1f:e5:9f:19:54:03:a1:f2:91:9d:f3: 99:16:ae:f7:f5:84:4b:91:31:ce:4d:ee:38:82:d5: 8e:98:ef:3f:d6:b1:cc:5e:e4:3e:24:8e:b3:fd:47: 55:9e:03:8e:b5:8c:d8:ef:d7:ee:0f:bd:e5:4a:bc: 4a:3e:da:9b:d1:8e:c5:95:de:4c:7b:06:94:f6:d7: a8:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:28:AA:99:4F:6A:04:7D:A1:05:F5:96:C0:7E:5F:4E:97:C5:02:97 X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:1c:a8:a1:6f:85:88:8a:ac:08:58:42:81:d5:a9:77:df:23: 0c:4c:f9:3a:50:ca:13:5e:fe:14:ff:ee:cb:87:24:21:14:f3: c9:1b:02:e9:d9:a2:46:02:37:f6:65:ea:b2:32:43:f2:33:07: e8:cd:dc:9d:77:88:f8:ee:0c:d2:bd:86:2f:3d:63:83:24:11: 93:ee:c9:c3:84:22:7f:36:3d:59:ab:c6:a0:6a:29:d7:ac:a3: 0c:ac:38:f9:bc:0a:a2:4a:08:9c:d5:00:2a:fd:b2:f6:98:63: 0b:00:84:e6:ab:3b:62:e5:f4:c0:3b:b6:a7:b3:5b:0e:21:d1: b9:93:85:89:ae:2c:b3:77:46:de:0c:48:67:36:98:fc:99:40: 9b:ee:f3:83:e9:43:42:84:a1:46:5a:01:44:c4:db:2a:e8:14: 41:54:2d:77:24:53:21:fd:3f:e8:6e:60:7b:4d:c8:4e:8a:e7: be:fe:27:20:36:71:0c:65:ac:07:82:90:5c:57:46:6e:a1:6b: df:29:5b:3e:a0:d5:91:2f:de:3e:21:98:60:2e:04:f6:e9:39: 01:e3:f6:e0:db:17:61:69:ab:d7:d5:5d:f7:fc:42:78:b7:c0: bd:2f:f9:18:20:d9:9e:b5:f8:46:bf:54:60:b3:d0:f0:a7:89: b7:d4:06:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRB9O6CXa8qm3OYlBEVBPONEz/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNjAzMjUxMTU2NTVaFw0yNjAzMjgxNjM1NTVaMDMxMTAvBgNV BAMTKDU4MjhBQTk5NEY2QTA0N0RBMTA1RjU5NkMwN0U1RjRFOTdDNTAyOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5EKOe4D8XqmR78tT3niAHKKB aTzuDU9ighpBnhOP1qwwjXv+EAlCcDMisWGkz0xd3KSFnHe+Bs3CEfZ1Sm40MwPf C4vmsnsyy943rkE8RwuTxTYvwVz57X2oRe1cJclkmk57exAruRTJzfOKbTWwj50y 1kRjI/T4GvMkAc/sjI847nmCeUBsSZwX9xh5XrOKVQjnlC21h49RrQqDiVi+EboH uW9zdNBZG12cWJ6Y4FM+k17hndof5Z8ZVAOh8pGd85kWrvf1hEuRMc5N7jiC1Y6Y 7z/Wscxe5D4kjrP9R1WeA461jNjv1+4PveVKvEo+2pvRjsWV3kx7BpT216jDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWCiqmU9qBH2hBfWWwH5fTpfFApcwHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwcqKFvhYiKrAhYQoHVqXffIwxM+TpQyhNe /hT/7suHJCEU88kbAunZokYCN/Zl6rIyQ/IzB+jN3J13iPjuDNK9hi89Y4MkEZPu ycOEIn82PVmrxqBqKdesowysOPm8CqJKCJzVACr9svaYYwsAhOarO2Ll9MA7tqez Ww4h0bmThYmuLLN3Rt4MSGc2mPyZQJvu84PpQ0KEoUZaAUTE2yroFEFULXckUyH9 P+huYHtNyE6K577+JyA2cQxlrAeCkFxXRm6ha98pWz6g1ZEv3j4hmGAuBPbpOQHj 9uDbF2Fpq9fVXff8Qni3wL0v+Rgg2Z61+Ea/VGCz0PCnibfUBrU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:22 2026 by rpki-client