$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: jR2CAs0tQ2xYXn/gWFCGdNdAuZdNwsb1FngtlAItd4M= Subject key identifier: 2F:EA:47:03:7E:4F:56:87:4F:EF:3E:35:DB:8A:F7:A5:FC:C6:E1:37 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 1E8C1227AD6D0AC084CFE7D88822DEB2F76C4DAA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0270 Signing time: Tue 24 Mar 2026 22:40:52 +0000 Manifest this update: Tue 24 Mar 2026 22:35:52 +0000 Manifest next update: Sat 28 Mar 2026 07:27:52 +0000 Files and hashes: 1: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: evN7NhpS1VOatzWSXidmqkdozqNhm2TF69w+BXctVaY=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:8c:12:27:ad:6d:0a:c0:84:cf:e7:d8:88:22:de:b2:f7:6c:4d:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Mar 24 22:35:52 2026 GMT Not After : Mar 28 07:27:52 2026 GMT Subject: CN=2FEA47037E4F56874FEF3E35DB8AF7A5FCC6E137 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ad:3f:ec:c7:26:ab:b0:92:bc:27:ef:a7:a2: b6:8b:f8:9c:b8:3c:60:04:6b:89:2d:c7:b0:cc:84: 55:5a:dd:5b:3e:23:dc:c8:27:7f:d2:73:09:8e:25: 6c:f6:04:7e:6f:b1:fc:8e:07:db:8e:c6:ba:4e:b4: a6:02:e4:2c:da:66:b7:04:23:bb:8b:8a:ec:16:35: 88:35:49:8f:b7:0a:8c:6e:c8:88:8b:61:2a:b8:7a: 72:8e:cf:00:b9:64:01:2c:72:02:57:e5:22:e2:78: a2:8e:9f:a4:49:5b:91:32:89:55:2d:4d:d2:77:d0: 2a:cf:8d:a3:be:00:ad:b4:1f:48:5c:a7:6a:d5:a4: b0:17:62:a0:d7:6b:10:93:7f:7f:2a:73:ad:c3:a8: 04:74:e5:65:37:0c:84:ad:96:45:3b:61:86:f8:86: 22:f4:8a:b0:32:a7:d7:93:de:c5:e3:69:dd:7d:17: 7b:c4:65:77:08:15:08:10:1c:c2:75:6a:5d:96:24: 50:b9:81:f3:9c:d1:e5:5b:e9:09:04:bf:da:0b:06: 81:0a:69:be:6b:cd:b4:c7:50:75:e2:4a:76:71:7a: 76:c1:33:fe:23:06:3d:98:9f:95:83:af:f3:7c:2e: e5:dd:92:40:c7:23:e6:41:9e:51:e9:a7:f7:6f:31: 59:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EA:47:03:7E:4F:56:87:4F:EF:3E:35:DB:8A:F7:A5:FC:C6:E1:37 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:a4:36:87:f6:0f:ed:ca:81:5b:3a:c0:f4:e6:d1:3f:a5:b9: 47:26:6a:88:0c:6f:7a:05:5e:f8:0d:75:dc:10:90:d8:75:0e: 79:86:98:09:da:2b:9d:dd:96:4d:00:a4:14:bc:d1:69:dd:77: 7c:ca:d1:6f:43:21:21:40:fa:2b:04:f2:dc:5b:4d:79:0c:55: 3a:87:a9:fe:93:e5:fd:6e:93:bd:b2:df:45:59:57:4b:d3:6f: 05:09:09:c4:d6:46:1b:ed:46:60:3d:0f:d6:af:ff:63:7e:38: 52:68:4e:a5:47:9f:54:a7:b1:82:76:2b:25:2c:65:99:28:37: 18:0a:b6:93:2b:19:cf:b2:2d:23:62:d9:6c:f8:9b:60:54:cd: ca:64:39:d5:27:c8:92:d1:26:ec:3a:19:04:6a:72:03:6b:c6: 01:d4:7b:9e:bc:fb:09:cd:72:48:b2:3f:44:5e:22:1b:ee:b7: d0:b6:f4:cb:69:59:e4:5d:20:7e:9a:47:7c:df:c4:0d:80:8c: 48:4f:89:1b:94:32:1e:63:29:a8:0e:c6:7e:e4:c1:25:af:a6: e7:f0:8a:f2:82:6d:cc:c8:ea:b4:b4:0b:98:29:0c:87:9b:86: 31:81:d6:99:2f:2a:8b:2e:00:c0:da:61:f9:5e:06:ac:e4:d8: 1b:88:ce:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHowSJ61tCsCEz+fYiCLesvdsTaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNjAzMjQyMjM1NTJaFw0yNjAzMjgwNzI3NTJaMDMxMTAvBgNV BAMTKDJGRUE0NzAzN0U0RjU2ODc0RkVGM0UzNURCOEFGN0E1RkNDNkUxMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrT/sxyarsJK8J++noraL+Jy4 PGAEa4ktx7DMhFVa3Vs+I9zIJ3/ScwmOJWz2BH5vsfyOB9uOxrpOtKYC5CzaZrcE I7uLiuwWNYg1SY+3CoxuyIiLYSq4enKOzwC5ZAEscgJX5SLieKKOn6RJW5EyiVUt TdJ30CrPjaO+AK20H0hcp2rVpLAXYqDXaxCTf38qc63DqAR05WU3DIStlkU7YYb4 hiL0irAyp9eT3sXjad19F3vEZXcIFQgQHMJ1al2WJFC5gfOc0eVb6QkEv9oLBoEK ab5rzbTHUHXiSnZxenbBM/4jBj2Yn5WDr/N8LuXdkkDHI+ZBnlHpp/dvMVmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+pHA35PVodP7z4124r3pfzG4TcwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABOkNof2D+3KgVs6wPTm0T+luUcmaogMb3oF XvgNddwQkNh1DnmGmAnaK53dlk0ApBS80Wndd3zK0W9DISFA+isE8txbTXkMVTqH qf6T5f1uk72y30VZV0vTbwUJCcTWRhvtRmA9D9av/2N+OFJoTqVHn1SnsYJ2KyUs ZZkoNxgKtpMrGc+yLSNi2Wz4m2BUzcpkOdUnyJLRJuw6GQRqcgNrxgHUe568+wnN ckiyP0ReIhvut9C29MtpWeRdIH6aR3zfxA2AjEhPiRuUMh5jKagOxn7kwSWvpufw ivKCbczI6rS0C5gpDIebhjGB1pkvKosuAMDaYfleBqzk2BuIzm8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:53:35 2026 by rpki-client