$ rpki-client -vvf repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft File: D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft (raw, json) Hash identifier: DiyJJ6OoTyVWBJAssS8zVtB+dlBIp7xu8UxRoIOAJDg= Subject key identifier: 7D:B7:E0:69:28:B8:7A:AD:91:AF:35:5F:F3:FD:6E:C9:61:70:60:7A Authority key identifier: D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C Certificate issuer: /CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Certificate serial: 78B0E90AD7914BC8408A4F484092CB5EE919D402 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft Manifest number: 022E Signing time: Thu 26 Mar 2026 12:11:54 +0000 Manifest this update: Thu 26 Mar 2026 12:06:54 +0000 Manifest next update: Sun 29 Mar 2026 19:14:54 +0000 Files and hashes: 1: 3130332e3138312e38302e302f32342d3234203d3e20313439373032.roa (hash: 4tLHfUAaxrKkU1/ID8Cs3rzd8UlebdYrCEqhL3fN6eQ=) 2: D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl (hash: GsnXpTnDwB/CNI1QShbaikWVW9zz+x+XrYupsr4eShk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:b0:e9:0a:d7:91:4b:c8:40:8a:4f:48:40:92:cb:5e:e9:19:d4:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7D98B5F7BCA3741F01911488372E855D91DBF9C Validity Not Before: Mar 26 12:06:54 2026 GMT Not After : Mar 29 19:14:54 2026 GMT Subject: CN=7DB7E06928B87AAD91AF355FF3FD6EC96170607A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:43:a5:ce:15:2d:b5:e6:55:49:ee:6f:1a:f1: 37:1c:80:d8:1c:a1:79:9f:c0:25:42:5c:13:b8:3d: 23:87:c0:92:23:c4:e7:fc:f0:61:dd:46:a7:4c:99: 89:01:01:17:e2:38:35:0f:29:46:ec:00:7a:de:21: ca:6f:ca:28:0a:14:db:7a:41:15:93:54:67:5b:08: 32:22:80:ed:48:7c:5a:aa:bb:8d:b6:e0:bc:bb:8e: a7:31:cc:24:ea:75:0f:53:15:c5:0c:cc:f6:d1:a0: a8:0a:46:4e:3b:81:5d:b8:ab:e2:79:a2:50:bb:2f: 79:b2:17:fb:ab:06:f8:d1:2b:17:76:a3:6f:5d:d6: 6f:18:d7:de:a4:8e:92:ec:06:88:5b:15:9e:5a:93: ac:3f:54:6f:42:b7:5f:14:c7:2f:a7:5b:1f:f3:4f: 47:61:f3:8f:a2:53:31:88:57:4f:7c:bf:4f:53:b8: ff:f0:be:28:93:bc:17:3e:71:db:d3:3d:8d:aa:4d: 95:cc:e2:c2:bc:2d:0e:c3:a8:b7:fc:6e:83:60:77: 47:00:db:ff:04:cc:f6:af:9a:18:91:f0:8e:24:a0: 0e:b9:8b:46:a4:60:16:49:5f:99:5d:06:5a:16:06: 65:39:c1:8b:60:1a:9c:51:5d:16:b0:19:3b:24:08: f4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:B7:E0:69:28:B8:7A:AD:91:AF:35:5F:F3:FD:6E:C9:61:70:60:7A X509v3 Authority Key Identifier: keyid:D7:D9:8B:5F:7B:CA:37:41:F0:19:11:48:83:72:E8:55:D9:1D:BF:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7D98B5F7BCA3741F01911488372E855D91DBF9C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/134d8277-2910-4075-b937-66f943518e29/0/D7D98B5F7BCA3741F01911488372E855D91DBF9C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:60:50:38:e2:13:10:ca:9d:a4:89:20:97:24:04:11:85:b0: 18:92:02:44:31:a1:cb:eb:7c:80:b1:36:ff:70:76:19:19:0a: ca:43:98:12:fc:58:a2:b8:da:0c:52:8d:8a:ae:78:e2:e3:fe: 8f:57:ae:7b:f0:87:17:02:6e:fe:50:64:b5:e8:28:1d:57:97: cd:5f:2e:1b:0b:5d:17:3b:d1:9a:be:20:bd:58:cb:5a:5c:f4: 49:96:da:64:1b:61:38:00:54:98:89:54:3c:0a:eb:37:c6:52: 19:0b:f0:7b:8b:8d:24:6b:95:71:d0:bb:83:95:1f:51:5d:68: 9d:87:a0:3d:30:2e:ba:24:14:df:af:b5:c4:32:56:fc:81:68: 41:92:e5:76:73:07:05:ac:3f:06:ac:9a:a8:b2:21:0e:03:c1: 9a:ed:0f:80:17:0a:5e:b0:ec:82:54:d9:78:37:d3:01:58:7f: 79:ff:86:0b:2b:a7:7b:0f:dc:b5:01:6b:13:04:f6:d3:db:e7: 83:d3:d0:39:7c:0a:ca:2f:42:46:24:02:28:7c:5d:5e:80:92: 3e:68:af:52:12:58:1b:cf:77:f0:31:32:f2:df:b8:00:96:ab: 57:f2:a0:bb:5f:ab:36:32:a4:aa:e5:e8:93:15:bc:86:a1:26: f3:cf:10:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeLDpCteRS8hAik9IQJLLXukZ1AIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVE OTFEQkY5QzAeFw0yNjAzMjYxMjA2NTRaFw0yNjAzMjkxOTE0NTRaMDMxMTAvBgNV BAMTKDdEQjdFMDY5MjhCODdBQUQ5MUFGMzU1RkYzRkQ2RUM5NjE3MDYwN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdQ6XOFS215lVJ7m8a8TccgNgc oXmfwCVCXBO4PSOHwJIjxOf88GHdRqdMmYkBARfiODUPKUbsAHreIcpvyigKFNt6 QRWTVGdbCDIigO1IfFqqu4224Ly7jqcxzCTqdQ9TFcUMzPbRoKgKRk47gV24q+J5 olC7L3myF/urBvjRKxd2o29d1m8Y196kjpLsBohbFZ5ak6w/VG9Ct18Uxy+nWx/z T0dh84+iUzGIV098v09TuP/wviiTvBc+cdvTPY2qTZXM4sK8LQ7DqLf8boNgd0cA 2/8EzPavmhiR8I4koA65i0akYBZJX5ldBloWBmU5wYtgGpxRXRawGTskCPS9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbfgaSi4eq2RrzVf8/1uyWFwYHowHwYDVR0j BBgwFoAU19mLX3vKN0HwGRFIg3LoVdkdv5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzRkODI3Ny0yOTEwLTQwNzUtYjkzNy02NmY5NDM1MThlMjkvMC9EN0Q5OEI1RjdC Q0EzNzQxRjAxOTExNDg4MzcyRTg1NUQ5MURCRjlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4NTVEOTFE QkY5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0ZDgyNzctMjkxMC00MDc1LWI5 MzctNjZmOTQzNTE4ZTI5LzAvRDdEOThCNUY3QkNBMzc0MUYwMTkxMTQ4ODM3MkU4 NTVEOTFEQkY5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFJgUDjiExDKnaSJIJckBBGFsBiSAkQxocvr fICxNv9wdhkZCspDmBL8WKK42gxSjYqueOLj/o9XrnvwhxcCbv5QZLXoKB1Xl81f LhsLXRc70Zq+IL1Yy1pc9EmW2mQbYTgAVJiJVDwK6zfGUhkL8HuLjSRrlXHQu4OV H1FdaJ2HoD0wLrokFN+vtcQyVvyBaEGS5XZzBwWsPwasmqiyIQ4DwZrtD4AXCl6w 7IJU2Xg30wFYf3n/hgsrp3sP3LUBaxME9tPb54PT0Dl8CsovQkYkAih8XV6Akj5o r1ISWBvPd/AxMvLfuACWq1fyoLtfqzYypKrl6JMVvIahJvPPEEI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:52:07 2026 by rpki-client