$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: 2oRQ+JqkboCm8KyFmcDduiW9KZqlrsdkAMqB49+3l3w= Subject key identifier: 2A:76:68:7A:C1:87:A6:93:7D:1E:1B:55:D0:7D:79:2C:0B:CC:90:EA Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 0DD51D51674A133A126E85225E72DD52E0A3FAC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: 0183 Signing time: Tue 24 Mar 2026 08:03:35 +0000 Manifest this update: Tue 24 Mar 2026 07:58:35 +0000 Manifest next update: Fri 27 Mar 2026 14:15:35 +0000 Files and hashes: 1: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: 1Nn7OBGVQm1ByHkALSk4/qwcAgxIj/ujvPMUNYcNeSw=) 2: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: gvo9V/vnXO5MlNpk1yPiU+0sBfoU6SAVYrLdM0QnX0Q=) 3: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:15:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d5:1d:51:67:4a:13:3a:12:6e:85:22:5e:72:dd:52:e0:a3:fa:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Mar 24 07:58:35 2026 GMT Not After : Mar 27 14:15:35 2026 GMT Subject: CN=2A76687AC187A6937D1E1B55D07D792C0BCC90EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ce:62:68:df:13:5b:2d:a1:4c:94:c1:28:b8: 0d:1b:5a:2e:27:14:a9:d0:95:3a:3d:5a:64:a4:b4: 71:0b:9c:12:62:91:f6:1f:e3:f9:3c:41:bd:d2:b5: a7:40:c3:63:a4:32:50:58:03:c6:de:80:09:a3:27: 80:5e:ea:c3:fd:cd:f3:b2:42:f3:be:27:3c:3c:6f: 79:83:78:a6:cc:35:b2:70:ad:4d:69:b9:f1:28:c4: 44:f2:ed:3a:19:44:3d:b3:43:fe:44:1e:ba:30:6b: 54:6a:f3:e7:0f:a6:de:fe:6e:9c:eb:4e:f6:5a:77: 96:99:06:5a:33:22:9c:fb:3b:bb:e3:5f:ad:7d:b9: d7:4e:c4:c7:fe:8c:6b:da:5c:77:c9:08:4f:96:55: 14:da:71:ee:74:dc:5d:65:ed:c0:c3:d7:66:79:48: 1c:1c:04:13:be:96:36:14:cc:05:d4:a7:eb:14:7f: 00:bc:d4:ea:97:00:ba:fd:0f:0b:2b:71:57:e8:35: 71:4e:17:b8:74:77:a9:64:6b:83:2f:f2:14:f5:4a: f5:75:52:26:d6:f5:c5:d2:ae:1b:79:65:b7:61:34: 35:80:2b:88:16:e8:01:b7:16:8a:d2:b4:97:df:ee: 7f:15:a6:6c:4b:4e:0a:ed:c9:90:35:90:68:91:a8: 43:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:76:68:7A:C1:87:A6:93:7D:1E:1B:55:D0:7D:79:2C:0B:CC:90:EA X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:0e:6f:05:60:f4:b6:bc:72:c2:a6:fd:18:6e:10:c0:1e:15: 55:09:cc:c9:ac:22:23:75:d5:ec:04:8e:23:11:15:e2:50:e3: 56:80:61:24:9c:b4:ab:b0:93:f5:63:56:4b:53:00:e4:c9:4b: 70:16:aa:44:0d:fc:92:94:d8:04:0a:e6:9d:9e:fa:8b:09:e9: e3:3e:9e:fa:d0:7f:1d:d4:b8:2e:84:ea:1e:49:d3:24:76:f5: 52:fa:7e:48:bf:77:f6:3d:74:26:3e:fd:2d:14:6f:b2:7a:fc: d3:0f:4a:ba:11:fe:9f:c8:07:62:92:f1:a0:44:48:c5:99:69: 62:78:8c:31:69:9d:0e:bc:87:12:51:0c:21:31:09:8b:53:bd: 46:bb:54:ee:0b:91:8d:95:7f:f3:62:d2:db:88:8b:da:bf:05: d1:b1:73:d1:1a:35:21:ab:7c:0c:94:be:29:61:9a:49:e1:88: 0e:72:34:7c:6d:11:fe:ac:5d:30:dd:8d:09:e2:b6:a1:bd:6c: fb:11:3a:da:df:cd:0d:d9:3c:85:8a:3c:76:9f:5e:a3:b2:35: c7:23:55:d4:71:51:d1:25:63:28:31:68:1c:4c:42:45:7d:11: b4:b3:66:16:cd:98:54:7e:3e:e2:9f:82:82:6d:74:4f:2a:a6: 19:ce:68:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdUdUWdKEzoSboUiXnLdUuCj+skwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNjAzMjQwNzU4MzVaFw0yNjAzMjcxNDE1MzVaMDMxMTAvBgNV BAMTKDJBNzY2ODdBQzE4N0E2OTM3RDFFMUI1NUQwN0Q3OTJDMEJDQzkwRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9zmJo3xNbLaFMlMEouA0bWi4n FKnQlTo9WmSktHELnBJikfYf4/k8Qb3StadAw2OkMlBYA8begAmjJ4Be6sP9zfOy QvO+Jzw8b3mDeKbMNbJwrU1pufEoxETy7ToZRD2zQ/5EHrowa1Rq8+cPpt7+bpzr TvZad5aZBlozIpz7O7vjX619uddOxMf+jGvaXHfJCE+WVRTace503F1l7cDD12Z5 SBwcBBO+ljYUzAXUp+sUfwC81OqXALr9DwsrcVfoNXFOF7h0d6lka4Mv8hT1SvV1 UibW9cXSrht5ZbdhNDWAK4gW6AG3ForStJff7n8VpmxLTgrtyZA1kGiRqENjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKnZoesGHppN9HhtV0H15LAvMkOowHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF8ObwVg9La8csKm/RhuEMAeFVUJzMmsIiN1 1ewEjiMRFeJQ41aAYSSctKuwk/VjVktTAOTJS3AWqkQN/JKU2AQK5p2e+osJ6eM+ nvrQfx3UuC6E6h5J0yR29VL6fki/d/Y9dCY+/S0Ub7J6/NMPSroR/p/IB2KS8aBE SMWZaWJ4jDFpnQ68hxJRDCExCYtTvUa7VO4LkY2Vf/Ni0tuIi9q/BdGxc9EaNSGr fAyUvilhmknhiA5yNHxtEf6sXTDdjQnitqG9bPsROtrfzQ3ZPIWKPHafXqOyNccj VdRxUdElYygxaBxMQkV9EbSzZhbNmFR+PuKfgoJtdE8qphnOaIU= -----END CERTIFICATE-----Generated at Thu Mar 26 13:39:48 2026 by rpki-client