$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: +AfSlQKXwkbT3HTqTJKiexzIVMvQLee3soi2zU28Sl0= Subject key identifier: CD:9A:83:1B:7D:59:90:9E:E0:4B:0C:61:CE:E7:3A:D1:E1:CF:0B:E3 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 01B0E43393F6D2BB80AA205FF6724A0C3B307854 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0281 Signing time: Tue 24 Mar 2026 14:50:03 +0000 Manifest this update: Tue 24 Mar 2026 14:45:03 +0000 Manifest next update: Fri 27 Mar 2026 21:01:03 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: xfBxO1cpwHLH3mPIYYSSSWYs4NXVE5RlSEpIHuIsrj0=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 3ORUUmkJ+o4nnE20LKRWQpDfQUx6WFMnIqRqb1dCAcA=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: PNalk4vA/Rkbr+Ga9Voh4gRAWTRSepvHB28AsR/h9Zs=) 4: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: L4YpTTP2apZliwIxdbm3F/FI8le4mqFYyvL+zswolnk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:b0:e4:33:93:f6:d2:bb:80:aa:20:5f:f6:72:4a:0c:3b:30:78:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Mar 24 14:45:03 2026 GMT Not After : Mar 27 21:01:03 2026 GMT Subject: CN=CD9A831B7D59909EE04B0C61CEE73AD1E1CF0BE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a9:06:5f:22:6e:9c:23:49:68:81:04:ae:fa: 86:e4:c1:b6:df:7b:31:a3:04:62:7c:63:8d:c3:a6: 11:bd:c6:7c:5f:5e:ae:d4:6d:e8:54:96:0f:b5:04: 06:ec:72:29:d4:d2:94:b1:25:9b:ab:bd:8d:e2:78: 8c:69:13:1e:76:68:2c:35:97:eb:b0:13:0e:00:24: 39:92:ba:ff:95:96:57:b1:03:8b:56:34:d1:3b:a2: 5c:3d:c2:c1:29:c5:ce:f8:14:b5:87:22:e0:35:e2: ba:85:c0:f9:af:36:d2:94:47:1a:37:c4:98:f8:c6: 60:e4:4b:f1:61:c0:db:ee:cc:fb:a9:f4:56:fb:5f: 88:9d:39:d9:17:fb:ef:32:03:e8:7f:8c:72:24:23: 15:13:40:72:b2:da:9a:3f:66:bb:d2:3c:a3:14:7e: 19:91:64:33:f8:64:6b:f6:2d:11:f7:09:f5:ca:b5: 93:73:6a:c8:ed:47:bc:8f:26:16:37:4f:39:fc:74: 3c:c1:5c:21:23:c8:93:5a:b6:8e:a7:61:fd:e7:5d: 67:90:cc:2e:92:d3:9b:0d:67:45:0e:6e:be:b8:66: 37:81:65:23:c0:e7:13:05:32:1f:54:73:c6:16:67: ef:e2:41:61:15:57:0f:c1:bf:f5:13:73:2b:33:cd: b6:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:9A:83:1B:7D:59:90:9E:E0:4B:0C:61:CE:E7:3A:D1:E1:CF:0B:E3 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3b:57:5a:34:f2:a0:95:f1:8f:e1:f9:45:a3:f5:5a:f1:cb: 97:fe:9f:27:d7:24:e0:57:01:86:44:c4:70:78:d0:58:90:4d: 73:b9:3b:bf:4f:b2:c9:af:cd:7d:c4:7e:b3:b4:50:31:fa:f1: 94:55:fc:dd:15:f0:b8:e6:cb:de:da:50:13:f4:49:bb:70:c8: 90:d4:fc:12:46:c3:3c:f6:54:df:69:22:8c:e3:02:bd:bf:bc: 4b:87:40:ee:e7:72:32:de:ce:fc:13:9e:1a:3a:28:22:7d:14: 72:7a:76:a5:36:9a:6d:4f:ea:9e:c9:a6:2c:cb:ba:7e:e0:be: 12:23:d2:12:04:94:da:1a:f3:6a:41:17:b9:62:ad:71:8d:30: fa:e4:d6:01:d4:dd:c3:ef:2a:53:16:49:9f:97:3e:86:88:ea: 5d:48:40:a6:f3:a4:b9:9b:3f:3a:9b:11:cb:63:57:e3:55:a7: 7c:69:45:7b:94:d0:cd:21:4d:61:cf:1e:4b:ad:d1:ab:68:d3: ea:42:56:f4:a1:c1:cf:f3:fc:58:05:2f:3a:1d:17:70:d4:8f: 0a:d1:06:48:e5:05:fe:2b:3c:bc:ea:81:a7:e4:b3:94:83:f6: bd:bf:0a:67:59:ba:57:bb:0c:9c:bb:2a:ce:1a:d2:38:4d:cf: b3:30:27:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAbDkM5P20ruAqiBf9nJKDDsweFQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNjAzMjQxNDQ1MDNaFw0yNjAzMjcyMTAxMDNaMDMxMTAvBgNV BAMTKENEOUE4MzFCN0Q1OTkwOUVFMDRCMEM2MUNFRTczQUQxRTFDRjBCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgqQZfIm6cI0logQSu+obkwbbf ezGjBGJ8Y43DphG9xnxfXq7UbehUlg+1BAbscinU0pSxJZurvY3ieIxpEx52aCw1 l+uwEw4AJDmSuv+VllexA4tWNNE7olw9wsEpxc74FLWHIuA14rqFwPmvNtKURxo3 xJj4xmDkS/FhwNvuzPup9Fb7X4idOdkX++8yA+h/jHIkIxUTQHKy2po/ZrvSPKMU fhmRZDP4ZGv2LRH3CfXKtZNzasjtR7yPJhY3Tzn8dDzBXCEjyJNato6nYf3nXWeQ zC6S05sNZ0UObr64ZjeBZSPA5xMFMh9Uc8YWZ+/iQWEVVw/Bv/UTcyszzbZNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzZqDG31ZkJ7gSwxhzuc60eHPC+MwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY7V1o08qCV8Y/h+UWj9Vrxy5f+nyfXJOBX AYZExHB40FiQTXO5O79PssmvzX3EfrO0UDH68ZRV/N0V8Ljmy97aUBP0SbtwyJDU /BJGwzz2VN9pIozjAr2/vEuHQO7ncjLezvwTnho6KCJ9FHJ6dqU2mm1P6p7JpizL un7gvhIj0hIElNoa82pBF7lirXGNMPrk1gHU3cPvKlMWSZ+XPoaI6l1IQKbzpLmb PzqbEctjV+NVp3xpRXuU0M0hTWHPHkut0ato0+pCVvShwc/z/FgFLzodF3DUjwrR BkjlBf4rPLzqgafks5SD9r2/CmdZule7DJy7Ks4a0jhNz7MwJ3M= -----END CERTIFICATE-----Generated at Thu Mar 26 19:59:56 2026 by rpki-client