$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: FC/juew6q7quh3RsPd4wwbe08fvPwtvhLjhTnMq3NLk= Subject key identifier: 97:D3:3F:00:06:81:0B:1D:01:4F:C9:3D:74:57:4D:0D:B0:AD:18:FD Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 7A8668682C9DE30F614B50A920C620606202FAAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: F5 Signing time: Wed 25 Mar 2026 22:51:14 +0000 Manifest this update: Wed 25 Mar 2026 22:46:14 +0000 Manifest next update: Sun 29 Mar 2026 05:10:14 +0000 Files and hashes: 1: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: Uhgmngv4ByqrME903VOKeyyv6GGJitvuPzj6zCGF80c=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:10:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:86:68:68:2c:9d:e3:0f:61:4b:50:a9:20:c6:20:60:62:02:fa:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Mar 25 22:46:14 2026 GMT Not After : Mar 29 05:10:14 2026 GMT Subject: CN=97D33F0006810B1D014FC93D74574D0DB0AD18FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:01:a6:b6:9c:cf:af:02:eb:37:a2:d4:59:0a: 38:ff:44:6d:79:31:2d:c6:dc:d3:bb:e0:fc:8c:43: 19:7d:54:f1:84:1b:2a:0a:28:f9:45:66:b4:4b:28: 38:af:46:d7:f9:74:22:43:f0:ee:7b:75:99:e2:a7: b4:f3:97:ea:c3:d6:72:87:5c:f5:06:09:08:d1:9e: cd:58:b5:ef:f3:cc:27:ea:29:ab:b4:a7:99:aa:6f: ac:27:a0:02:af:bc:66:d6:b7:cb:b3:41:c6:d9:c4: 1c:45:a3:16:9c:1c:22:bb:f7:b5:a4:11:d6:84:4f: df:10:f0:d1:c6:b6:ca:31:6b:61:57:38:27:cd:55: 8f:c6:38:38:ff:11:9b:84:e3:30:1f:ce:49:ff:82: e2:a9:90:fe:fb:01:fd:31:2b:95:4b:0a:ed:c5:63: df:b6:c5:74:c7:ea:76:b7:ef:15:b9:ac:29:27:9b: c5:c3:f3:c0:75:51:12:d9:f4:90:ac:25:2d:f7:03: e9:29:c3:d7:e9:50:51:31:be:3d:11:8a:dc:52:14: 1e:c0:24:46:5e:5d:94:71:10:b0:44:cd:7c:97:8d: 94:b8:13:a2:e2:ed:43:65:82:b6:40:77:b3:77:24: 92:e0:94:2c:3b:e6:82:9d:74:85:6e:89:6d:24:1d: b8:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:D3:3F:00:06:81:0B:1D:01:4F:C9:3D:74:57:4D:0D:B0:AD:18:FD X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:a7:5b:d4:40:ea:f1:51:cb:84:fc:44:dc:ed:93:4c:d5:74: c3:16:7a:7f:2b:6d:a6:2f:a1:33:60:a1:5c:39:b3:f8:77:6f: fb:1b:f4:08:b5:5e:f8:96:5a:4d:da:13:d6:1c:4f:c4:e2:d7: c4:19:85:a3:29:5e:4b:1b:22:38:ee:3d:0a:a8:19:c2:a7:48: 4b:05:08:bb:07:87:db:41:00:5b:90:06:a1:0a:a7:59:0d:80: 2f:ef:c6:f5:b5:0a:a4:8d:0c:b3:82:f6:0d:d5:fc:57:bb:24: f0:a5:c9:87:21:c9:f5:6a:2f:01:e0:f3:48:9c:f6:9a:b1:4f: ad:93:98:fc:e1:2e:e9:e0:cb:40:3d:10:9d:a6:43:f5:af:e2: 43:47:0d:dc:58:89:e5:1f:12:60:dd:78:28:12:13:cd:d7:d1: 97:e3:0d:fa:b9:b5:38:ed:17:39:48:6e:6c:5e:df:d7:ad:ce: f3:f2:00:d8:02:3a:24:fa:96:8d:75:e3:e7:e6:d3:bf:0a:ef: 28:df:e7:7b:b6:fb:93:7e:8c:9d:0e:ea:ad:cc:5d:05:ef:3c: ca:cb:87:f2:43:4b:11:c1:b0:35:2b:d0:57:29:9b:76:51:8f: 4d:0f:cb:5d:41:31:08:40:21:3b:ea:f8:bc:40:b5:54:eb:ea: a5:9e:f8:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeoZoaCyd4w9hS1CpIMYgYGIC+q8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNjAzMjUyMjQ2MTRaFw0yNjAzMjkwNTEwMTRaMDMxMTAvBgNV BAMTKDk3RDMzRjAwMDY4MTBCMUQwMTRGQzkzRDc0NTc0RDBEQjBBRDE4RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJAaa2nM+vAus3otRZCjj/RG15 MS3G3NO74PyMQxl9VPGEGyoKKPlFZrRLKDivRtf5dCJD8O57dZnip7Tzl+rD1nKH XPUGCQjRns1Yte/zzCfqKau0p5mqb6wnoAKvvGbWt8uzQcbZxBxFoxacHCK797Wk EdaET98Q8NHGtsoxa2FXOCfNVY/GODj/EZuE4zAfzkn/guKpkP77Af0xK5VLCu3F Y9+2xXTH6na37xW5rCknm8XD88B1URLZ9JCsJS33A+kpw9fpUFExvj0RitxSFB7A JEZeXZRxELBEzXyXjZS4E6Li7UNlgrZAd7N3JJLglCw75oKddIVuiW0kHbhNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl9M/AAaBCx0BT8k9dFdNDbCtGP0wHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGSnW9RA6vFRy4T8RNztk0zVdMMWen8rbaYv oTNgoVw5s/h3b/sb9Ai1XviWWk3aE9YcT8Ti18QZhaMpXksbIjjuPQqoGcKnSEsF CLsHh9tBAFuQBqEKp1kNgC/vxvW1CqSNDLOC9g3V/Fe7JPClyYchyfVqLwHg80ic 9pqxT62TmPzhLungy0A9EJ2mQ/Wv4kNHDdxYieUfEmDdeCgSE83X0ZfjDfq5tTjt FzlIbmxe39etzvPyANgCOiT6lo114+fm078K7yjf53u2+5N+jJ0O6q3MXQXvPMrL h/JDSxHBsDUr0Fcpm3ZRj00Py11BMQhAITvq+LxAtVTr6qWe+LE= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:13 2026 by rpki-client