$ rpki-client -vvf repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft File: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft (raw, json) Hash identifier: zsNVkFvXP3fVqV29bn4iKCn+eX0TJ9o+7q9H9zbZnYw= Subject key identifier: 2C:D6:BC:CA:9E:6B:C4:58:AA:4F:5D:63:73:DD:55:A5:98:CA:29:D7 Authority key identifier: 7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 Certificate issuer: /CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Certificate serial: 420E52B203DD788F1A629FC92B0913C20319EA2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft Manifest number: 01D0 Signing time: Thu 26 Mar 2026 07:52:21 +0000 Manifest this update: Thu 26 Mar 2026 07:47:21 +0000 Manifest next update: Sun 29 Mar 2026 11:32:21 +0000 Files and hashes: 1: 323030313a6466313a393863303a3a2f34382d3438203d3e20313432333836.roa (hash: wD0JopqzbNO0LV3/fAHMD/SLip1rejuAXcmbuFwf6Mg=) 2: 3130332e3137322e37302e302f32332d3234203d3e20313432333836.roa (hash: PN7woaDe1VcAHp93rJDDFu2lHlYOzHq+B+FfhIvH/ME=) 3: 7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl (hash: K+e2zPG7LI3WI8+b9KONeOK/Jdrw5kvqq5cMFt1OaB0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:32:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:0e:52:b2:03:dd:78:8f:1a:62:9f:c9:2b:09:13:c2:03:19:ea:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E46C2EE5082354F1494DE6AEA6CDA642769EDF1 Validity Not Before: Mar 26 07:47:21 2026 GMT Not After : Mar 29 11:32:21 2026 GMT Subject: CN=2CD6BCCA9E6BC458AA4F5D6373DD55A598CA29D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:10:f2:c9:29:6c:4a:95:1a:3b:1e:9e:b7:70: bf:fd:96:b0:6f:ea:c0:a6:59:16:fa:ec:22:b9:b0: 81:9e:fa:aa:b4:ab:e1:e2:c2:30:f7:e7:81:ba:49: 50:81:50:b9:98:5c:2a:d8:e7:77:8e:a7:fe:b0:b7: 90:bb:b7:de:17:24:5c:01:07:50:37:70:6c:a4:a9: 70:51:6d:fe:39:1f:be:4c:06:b9:e0:06:a8:45:1d: 28:26:36:0e:ba:ce:0c:75:c7:74:a1:81:5a:ad:9a: 1e:4c:8c:71:6b:dd:a4:62:4b:c8:84:4c:bb:c9:5e: 43:3c:c0:e7:a0:87:9a:d7:78:cc:2f:3a:25:11:21: ab:be:98:52:07:a7:41:9d:be:d0:10:45:0f:2c:3a: 49:77:45:d2:06:5b:b2:cf:e6:e1:2d:8c:fb:9d:c8: 89:ff:48:4a:02:35:72:2e:1f:b2:29:33:a3:13:b5: da:22:9d:a8:52:5c:68:86:6c:92:07:ab:93:50:f7: 70:0f:08:3a:0e:97:1b:a8:c3:78:47:00:7a:5b:b6: 9c:8f:4b:90:8d:72:76:8e:2d:27:ff:04:8f:b5:f8: 6e:4d:5c:75:e9:01:a2:58:b3:72:01:9b:81:2b:73: 1c:f3:75:51:67:17:6b:56:db:f8:77:d6:77:68:51: 76:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:D6:BC:CA:9E:6B:C4:58:AA:4F:5D:63:73:DD:55:A5:98:CA:29:D7 X509v3 Authority Key Identifier: keyid:7E:46:C2:EE:50:82:35:4F:14:94:DE:6A:EA:6C:DA:64:27:69:ED:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10ff022a-9b16-4b4c-98a2-534994f589d0/0/7E46C2EE5082354F1494DE6AEA6CDA642769EDF1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:49:1e:41:5f:31:48:15:06:da:16:73:2d:62:8f:f1:93:53: 2f:dd:ba:eb:4b:0a:b1:ac:f4:b3:ad:16:1d:05:d1:37:aa:7a: fc:b6:85:58:73:8a:bf:cf:5b:4b:9c:3d:c4:f0:0c:9e:64:4b: d2:e2:1f:49:94:06:35:62:6e:51:62:d0:91:e6:aa:05:1e:4a: 5b:4b:69:7f:29:7b:05:ba:65:d8:d8:25:ee:73:af:fa:fc:67: ff:40:ce:8b:9a:91:61:54:9c:0e:8b:4d:4b:f6:92:9e:79:04: 41:ba:15:30:5f:8d:93:58:9c:b0:10:4a:61:9b:8c:03:e5:95: 6a:b6:f8:86:48:d4:4c:99:2b:10:22:eb:56:f8:45:bb:de:61: 30:2d:47:88:d3:d8:12:ea:d8:90:31:68:51:86:c2:f0:e1:3c: 86:00:5a:75:8f:68:53:ef:3d:d1:e0:62:92:cd:92:3e:12:a9: ff:2c:ba:0f:03:0e:c0:31:f8:8d:da:24:b1:07:de:cd:34:c3: dd:4e:bc:23:42:43:c2:a0:ca:5a:12:45:96:0a:df:39:21:c7: c6:f0:8a:5a:21:ef:93:9e:d6:34:09:71:e8:b9:cc:b1:8f:a8: 38:57:21:5b:78:e7:b2:97:80:34:de:0c:2f:23:f5:f8:0e:05: 09:57:e3:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQg5SsgPdeI8aYp/JKwkTwgMZ6iwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQy NzY5RURGMTAeFw0yNjAzMjYwNzQ3MjFaFw0yNjAzMjkxMTMyMjFaMDMxMTAvBgNV BAMTKDJDRDZCQ0NBOUU2QkM0NThBQTRGNUQ2MzczREQ1NUE1OThDQTI5RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEPLJKWxKlRo7Hp63cL/9lrBv 6sCmWRb67CK5sIGe+qq0q+HiwjD354G6SVCBULmYXCrY53eOp/6wt5C7t94XJFwB B1A3cGykqXBRbf45H75MBrngBqhFHSgmNg66zgx1x3ShgVqtmh5MjHFr3aRiS8iE TLvJXkM8wOegh5rXeMwvOiURIau+mFIHp0GdvtAQRQ8sOkl3RdIGW7LP5uEtjPud yIn/SEoCNXIuH7IpM6MTtdoinahSXGiGbJIHq5NQ93APCDoOlxuow3hHAHpbtpyP S5CNcnaOLSf/BI+1+G5NXHXpAaJYs3IBm4ErcxzzdVFnF2tW2/h31ndoUXarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULNa8yp5rxFiqT11jc91VpZjKKdcwHwYDVR0j BBgwFoAUfkbC7lCCNU8UlN5q6mzaZCdp7fEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGZmMDIyYS05YjE2LTRiNGMtOThhMi01MzQ5OTRmNTg5ZDAvMC83RTQ2QzJFRTUw ODIzNTRGMTQ5NERFNkFFQTZDREE2NDI3NjlFREYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RBNjQyNzY5 RURGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBmZjAyMmEtOWIxNi00YjRjLTk4 YTItNTM0OTk0ZjU4OWQwLzAvN0U0NkMyRUU1MDgyMzU0RjE0OTRERTZBRUE2Q0RB NjQyNzY5RURGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIdJHkFfMUgVBtoWcy1ij/GTUy/duutLCrGs 9LOtFh0F0Teqevy2hVhzir/PW0ucPcTwDJ5kS9LiH0mUBjViblFi0JHmqgUeSltL aX8pewW6ZdjYJe5zr/r8Z/9AzouakWFUnA6LTUv2kp55BEG6FTBfjZNYnLAQSmGb jAPllWq2+IZI1EyZKxAi61b4RbveYTAtR4jT2BLq2JAxaFGGwvDhPIYAWnWPaFPv PdHgYpLNkj4Sqf8sug8DDsAx+I3aJLEH3s00w91OvCNCQ8KgyloSRZYK3zkhx8bw iloh75Oe1jQJcei5zLGPqDhXIVt457KXgDTeDC8j9fgOBQlX46k= -----END CERTIFICATE-----Generated at Thu Mar 26 18:56:26 2026 by rpki-client