$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: dZRX31duTvGPxTmMkWde1kd2QqUmaGQa1idmBRLc15M= Subject key identifier: 36:19:47:7E:6D:BF:31:78:DD:06:31:55:57:2F:79:1D:7A:C0:CA:ED Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 647414CBB974601E6033B912FC7E0AB91BFE63B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 01B5 Signing time: Tue 24 Mar 2026 19:32:36 +0000 Manifest this update: Tue 24 Mar 2026 19:27:36 +0000 Manifest next update: Fri 27 Mar 2026 23:30:36 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: m5XxxQxVpocQK82QPfvXBrU42R5ysoSeeBkE/TLH/xc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:30:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:74:14:cb:b9:74:60:1e:60:33:b9:12:fc:7e:0a:b9:1b:fe:63:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Mar 24 19:27:36 2026 GMT Not After : Mar 27 23:30:36 2026 GMT Subject: CN=3619477E6DBF3178DD063155572F791D7AC0CAED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d2:84:54:99:ed:5e:4a:24:e6:82:90:15:68: 82:de:ff:82:b4:00:c1:bc:d5:c3:7b:c3:3a:d6:f8: 1f:09:ef:53:d3:ce:5e:5b:27:65:40:cb:57:19:f6: 6c:7b:81:71:67:be:bd:33:0c:d3:76:9f:0b:1a:f9: e1:28:6d:4c:59:a8:70:a0:5b:e0:76:ba:ff:88:21: 73:59:a7:51:5b:e5:d5:4e:55:1f:7f:51:ad:5e:7d: 99:5a:cf:13:d4:fe:0e:f6:ec:e6:45:2d:1e:c5:86: 76:1b:1a:05:f1:2d:b3:2c:83:f9:00:5c:b2:f2:f8: e9:13:e8:a0:d5:a4:39:cc:8f:64:7b:70:7a:94:91: 33:bf:51:e9:a9:cc:b2:e4:5f:61:f4:89:74:18:dd: 44:fe:02:9b:94:d2:59:c8:86:f7:70:a0:a7:7a:dc: dd:0d:dd:a5:ed:f1:39:74:0f:9d:5f:27:bd:82:6c: f1:4e:e4:68:07:46:73:0b:ed:9a:e0:45:62:3c:ee: 04:b3:50:e8:fd:78:30:32:8f:95:6e:f1:55:3b:69: 2b:ea:9a:f4:c4:87:12:f9:c9:71:b0:2f:06:2b:6f: 66:4a:c2:41:6f:3e:c0:b0:6e:b2:1d:6b:75:17:fc: 60:44:d1:7d:2f:f0:c6:32:7f:cf:73:77:9c:67:ed: 45:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:19:47:7E:6D:BF:31:78:DD:06:31:55:57:2F:79:1D:7A:C0:CA:ED X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:6d:f2:e3:08:4b:77:2d:73:11:9d:d8:dd:9c:77:14:db:4f: 4b:3d:da:83:1a:43:ef:5a:85:9e:cb:77:ea:e6:d9:ba:8b:5b: 64:22:49:81:13:bd:a2:a2:3d:76:6e:1b:ff:4d:b8:92:7a:9c: bb:f9:cf:c1:88:1d:f4:61:2c:eb:11:45:ce:03:3f:14:04:17: 07:d4:29:b3:eb:e8:be:2a:c9:b5:76:2c:5c:04:05:a0:f7:cf: f4:3d:31:76:f6:ff:74:00:80:1f:e5:91:cb:63:d3:c6:b0:f8: 4e:6d:2b:06:18:a9:2e:de:5c:cc:b3:2f:1b:60:1b:dd:ab:76: ff:cf:6e:77:7e:d7:07:22:7f:21:16:f4:21:a7:c6:b8:dc:06: 41:2a:eb:74:3f:16:bd:05:f6:e2:88:47:da:d3:69:4b:3a:5f: 4a:ea:c3:3c:9c:7f:63:3d:df:dc:17:95:6d:9f:1d:b4:21:68: 50:5e:3f:03:c2:cb:87:b4:62:fb:80:1b:39:e9:80:ed:e4:67: 04:b2:23:dc:dd:7b:7d:9a:bd:a4:7a:15:1e:8b:f4:dd:de:4d: 0b:8c:ee:b1:fb:cd:b8:b6:d7:0c:bb:58:fe:9d:20:62:4d:be: 30:a9:c0:7a:c9:a4:93:48:ae:cb:fa:28:98:64:f3:bc:2f:d1: db:7e:54:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZHQUy7l0YB5gM7kS/H4KuRv+Y7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNjAzMjQxOTI3MzZaFw0yNjAzMjcyMzMwMzZaMDMxMTAvBgNV BAMTKDM2MTk0NzdFNkRCRjMxNzhERDA2MzE1NTU3MkY3OTFEN0FDMENBRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+0oRUme1eSiTmgpAVaILe/4K0 AMG81cN7wzrW+B8J71PTzl5bJ2VAy1cZ9mx7gXFnvr0zDNN2nwsa+eEobUxZqHCg W+B2uv+IIXNZp1Fb5dVOVR9/Ua1efZlazxPU/g727OZFLR7FhnYbGgXxLbMsg/kA XLLy+OkT6KDVpDnMj2R7cHqUkTO/UempzLLkX2H0iXQY3UT+ApuU0lnIhvdwoKd6 3N0N3aXt8Tl0D51fJ72CbPFO5GgHRnML7ZrgRWI87gSzUOj9eDAyj5Vu8VU7aSvq mvTEhxL5yXGwLwYrb2ZKwkFvPsCwbrIda3UX/GBE0X0v8MYyf89zd5xn7UU9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNhlHfm2/MXjdBjFVVy95HXrAyu0wHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBt8uMIS3ctcxGd2N2cdxTbT0s92oMaQ+9a hZ7Ld+rm2bqLW2QiSYETvaKiPXZuG/9NuJJ6nLv5z8GIHfRhLOsRRc4DPxQEFwfU KbPr6L4qybV2LFwEBaD3z/Q9MXb2/3QAgB/lkctj08aw+E5tKwYYqS7eXMyzLxtg G92rdv/Pbnd+1wcifyEW9CGnxrjcBkEq63Q/Fr0F9uKIR9rTaUs6X0rqwzycf2M9 39wXlW2fHbQhaFBePwPCy4e0YvuAGznpgO3kZwSyI9zde32avaR6FR6L9N3eTQuM 7rH7zbi21wy7WP6dIGJNvjCpwHrJpJNIrsv6KJhk87wv0dt+VBs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:36 2026 by rpki-client