$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: EldWKgeYIFfzSUfmHKzCIARfYeRbJbVjMJDsn/PgMuE= Subject key identifier: 48:3C:77:01:F9:F1:21:42:2A:BB:AA:EF:87:15:C0:CB:B6:19:22:F4 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 1DC41127AA8BE34CDD8CE92895753E83D1D0AA5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 027D Signing time: Tue 24 Mar 2026 14:51:31 +0000 Manifest this update: Tue 24 Mar 2026 14:46:31 +0000 Manifest next update: Sat 28 Mar 2026 01:40:31 +0000 Files and hashes: 1: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: iN+Yu/mM79SjRmsVmc4B7fm5TKJql/UzKG2J+x7lpYc=) 2: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: Wg06GQde+GCq5aqBDprKyhd1BT39yXsvRMMpYz9sEns=) 3: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: S3rzXKlZfTSEv/Pc9qK555wJstPWA1weX2Foh18lnFQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:c4:11:27:aa:8b:e3:4c:dd:8c:e9:28:95:75:3e:83:d1:d0:aa:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Mar 24 14:46:31 2026 GMT Not After : Mar 28 01:40:31 2026 GMT Subject: CN=483C7701F9F121422ABBAAEF8715C0CBB61922F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:30:89:86:de:ff:07:59:71:62:03:21:50:85: c5:d6:b2:98:7e:ee:63:9b:12:64:4f:58:da:19:92: b5:b6:36:9a:d1:8d:57:df:b2:e6:9b:62:b9:eb:64: f8:24:21:9a:7a:9d:30:3a:6f:37:93:a8:3a:16:f9: e3:5a:c7:c8:d7:22:cb:4a:14:f8:53:63:77:4f:93: c9:74:eb:ee:7d:2b:0f:5c:45:99:c6:90:3d:79:65: aa:f8:79:8c:53:cf:7a:91:6b:04:42:dc:e0:58:be: 58:25:b0:c1:38:6c:61:7a:42:5b:88:3c:71:ef:c7: df:3d:a4:54:61:34:ad:66:05:32:6b:b4:e9:29:44: 22:31:18:83:50:0e:8a:ba:0d:a9:b6:6f:ba:db:e4: 3c:82:76:5f:1f:bd:a8:ed:76:a9:83:24:ed:ed:6d: ae:34:20:5e:a9:f6:ef:1a:1d:5b:fb:27:8a:64:d7: 4c:4a:e2:cd:57:49:b0:76:54:b3:d0:e9:9a:57:6c: 93:e1:53:8d:ed:f6:2d:1c:62:05:a0:b1:49:ca:27: f3:bd:42:de:5e:43:d5:c4:00:82:3c:d1:57:06:37: 6a:1b:98:56:53:87:97:1b:ba:aa:49:88:6f:0d:56: f1:76:73:f5:5b:57:fa:f3:5f:a5:96:19:dd:bf:92: ec:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:3C:77:01:F9:F1:21:42:2A:BB:AA:EF:87:15:C0:CB:B6:19:22:F4 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:12:bf:18:92:ce:3e:f4:89:2a:ab:84:44:6d:57:3f:b9:7c: c6:3a:68:cd:e6:dd:2e:c9:77:0c:64:1f:3e:36:bf:b4:b7:e3: 29:52:00:a1:38:54:fd:fb:ea:d5:65:a7:7a:b6:7f:f1:64:50: be:1d:38:f9:81:fd:1c:1e:ab:d2:7d:1f:e9:49:da:20:84:1b: d6:d4:70:11:e2:02:72:3f:ff:7c:23:b4:fc:20:3e:5e:a8:10: 02:1e:2d:f1:e2:c8:b9:18:cb:73:49:7d:65:39:73:78:ea:bd: 91:b0:5e:2d:d4:9b:cd:63:63:6b:6c:84:76:08:cc:0e:93:72: 50:f2:61:0d:2c:ca:5f:9a:fe:a5:ed:78:e2:78:d6:08:27:d9: 47:4a:63:7c:38:3f:6a:e9:d9:53:89:d7:d6:5d:85:88:fa:62: 15:35:fa:9c:ec:4a:92:79:43:31:a4:3d:dc:e2:e9:07:45:5d: 22:62:a1:fc:df:9e:a8:e2:e9:db:ca:28:36:d6:63:9a:fd:f0: c8:8f:9c:f8:c7:2c:ba:6b:31:6e:ad:b1:7b:bf:db:d8:d7:60: f6:eb:42:13:93:3d:37:ee:4a:a7:55:d6:16:12:93:2d:80:39: 5d:25:58:3c:d3:9c:65:1d:c1:11:18:e5:3e:66:1c:93:20:d1: e4:2e:97:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHcQRJ6qL40zdjOkolXU+g9HQqlwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNjAzMjQxNDQ2MzFaFw0yNjAzMjgwMTQwMzFaMDMxMTAvBgNV BAMTKDQ4M0M3NzAxRjlGMTIxNDIyQUJCQUFFRjg3MTVDMENCQjYxOTIyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHMImG3v8HWXFiAyFQhcXWsph+ 7mObEmRPWNoZkrW2NprRjVffsuabYrnrZPgkIZp6nTA6bzeTqDoW+eNax8jXIstK FPhTY3dPk8l06+59Kw9cRZnGkD15Zar4eYxTz3qRawRC3OBYvlglsME4bGF6QluI PHHvx989pFRhNK1mBTJrtOkpRCIxGINQDoq6Dam2b7rb5DyCdl8fvajtdqmDJO3t ba40IF6p9u8aHVv7J4pk10xK4s1XSbB2VLPQ6ZpXbJPhU43t9i0cYgWgsUnKJ/O9 Qt5eQ9XEAII80VcGN2obmFZTh5cbuqpJiG8NVvF2c/VbV/rzX6WWGd2/kuwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDx3AfnxIUIqu6rvhxXAy7YZIvQwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoSvxiSzj70iSqrhERtVz+5fMY6aM3m3S7J dwxkHz42v7S34ylSAKE4VP376tVlp3q2f/FkUL4dOPmB/Rweq9J9H+lJ2iCEG9bU cBHiAnI//3wjtPwgPl6oEAIeLfHiyLkYy3NJfWU5c3jqvZGwXi3Um81jY2tshHYI zA6TclDyYQ0syl+a/qXteOJ41ggn2UdKY3w4P2rp2VOJ19ZdhYj6YhU1+pzsSpJ5 QzGkPdzi6QdFXSJiofzfnqji6dvKKDbWY5r98MiPnPjHLLprMW6tsXu/29jXYPbr QhOTPTfuSqdV1hYSky2AOV0lWDzTnGUdwREY5T5mHJMg0eQul4o= -----END CERTIFICATE-----Generated at Thu Mar 26 16:22:26 2026 by rpki-client