$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: bZBSaJy2zecro8x4rN/4iuUFE34jaeDuPf+9CUJE18Y= Subject key identifier: E4:2F:D5:6B:69:B7:19:E3:CB:AE:0C:44:23:29:CD:67:40:A5:5E:35 Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 633DAC69295336BE033EA92BC6A91564B86A5705 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: 0119 Signing time: Wed 25 Mar 2026 11:50:03 +0000 Manifest this update: Wed 25 Mar 2026 11:45:03 +0000 Manifest next update: Sat 28 Mar 2026 15:30:03 +0000 Files and hashes: 1: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) 2: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: ZXhygIFhH1RbIdeI8KXpSrugVaojIh2pHtRIYWRZb6U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:3d:ac:69:29:53:36:be:03:3e:a9:2b:c6:a9:15:64:b8:6a:57:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Mar 25 11:45:03 2026 GMT Not After : Mar 28 15:30:03 2026 GMT Subject: CN=E42FD56B69B719E3CBAE0C442329CD6740A55E35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ec:9a:6f:53:54:e8:c0:03:64:07:db:76:64: 6a:09:1a:fd:b6:84:41:af:82:53:98:d5:06:ec:42: eb:2e:a6:92:a4:75:69:2b:ee:cf:bc:c2:91:cf:2f: 7b:52:26:2b:d7:8e:c6:38:51:05:27:e0:30:6b:9c: 4a:db:00:30:cb:20:3e:5e:ae:7a:2e:85:d1:04:ce: 59:fa:38:83:c6:14:05:d5:dc:02:af:5d:f2:e4:8e: 43:8b:7a:5d:ef:07:14:35:b0:1d:41:08:95:c8:05: 30:b7:fa:62:50:0f:1d:41:ab:38:ba:ae:3a:56:24: 27:ea:ad:08:49:3f:c2:7c:b9:c3:50:62:2e:1f:ec: 6f:dd:56:b9:09:43:53:1c:f5:6d:d3:c6:e5:1a:d8: cb:66:3c:c1:d0:8c:02:69:ac:06:b7:2d:0d:00:21: 75:b7:fc:d0:d5:df:c6:c2:6f:be:33:2c:08:27:11: 81:de:75:52:88:4e:b0:48:bd:66:9e:14:02:f5:94: 1c:82:53:38:72:82:7e:9a:0b:af:49:17:86:cc:ab: d6:20:9d:a7:93:27:f5:62:b8:e7:dc:2d:0a:4a:16: 1c:e2:27:ab:28:3a:ae:b4:ba:70:3b:c7:95:e0:9b: da:66:63:07:d8:ce:72:e6:6c:95:5d:e3:93:aa:7d: db:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:2F:D5:6B:69:B7:19:E3:CB:AE:0C:44:23:29:CD:67:40:A5:5E:35 X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:9f:fa:78:2d:90:4b:08:2c:21:4a:2c:4f:c5:8e:66:80:45: a2:fa:3f:9d:28:d1:bc:37:44:d9:32:28:d0:28:20:f5:c7:6d: 77:08:e3:3a:e8:04:71:7a:01:e9:4b:35:38:13:be:58:71:95: df:9b:2d:3b:78:d8:81:be:6e:53:1a:a9:20:26:0f:f3:40:62: f8:8d:ae:b0:4a:2c:db:ad:8e:f0:23:5d:69:46:c8:ad:01:2e: e3:b3:20:d8:cd:ae:1d:e9:a0:63:4f:d2:5b:e0:21:e0:60:20: 27:7b:ae:7d:e1:6a:5b:a2:27:7c:7d:17:57:63:9b:4e:97:17: a8:dc:a6:2a:08:85:f7:e4:4c:89:bd:76:bf:5c:ec:ec:a5:24: 38:3f:b1:18:b3:e6:8c:2b:31:05:db:d8:bb:25:b4:47:e1:7a: b6:72:cc:7b:c8:06:1b:a9:30:c7:ab:a4:bf:47:4f:a2:73:e2: 39:69:af:05:3e:ad:fe:6b:46:02:74:af:c9:2a:6b:47:14:80: 76:3e:65:b8:e2:fb:c8:8e:35:14:37:8f:10:24:1e:ed:ac:a0: 31:98:a8:2f:1b:f8:a1:97:cd:cc:28:6e:b5:a5:37:f3:2b:72: 8d:22:54:8a:7d:ed:f5:5a:f5:ec:d0:c5:97:ef:c2:c2:c6:40: 15:45:58:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYz2saSlTNr4DPqkrxqkVZLhqVwUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNjAzMjUxMTQ1MDNaFw0yNjAzMjgxNTMwMDNaMDMxMTAvBgNV BAMTKEU0MkZENTZCNjlCNzE5RTNDQkFFMEM0NDIzMjlDRDY3NDBBNTVFMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC57JpvU1TowANkB9t2ZGoJGv22 hEGvglOY1QbsQusuppKkdWkr7s+8wpHPL3tSJivXjsY4UQUn4DBrnErbADDLID5e rnouhdEEzln6OIPGFAXV3AKvXfLkjkOLel3vBxQ1sB1BCJXIBTC3+mJQDx1Bqzi6 rjpWJCfqrQhJP8J8ucNQYi4f7G/dVrkJQ1Mc9W3TxuUa2MtmPMHQjAJprAa3LQ0A IXW3/NDV38bCb74zLAgnEYHedVKITrBIvWaeFAL1lByCUzhygn6aC69JF4bMq9Yg naeTJ/ViuOfcLQpKFhziJ6soOq60unA7x5Xgm9pmYwfYznLmbJVd45OqfdtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5C/Va2m3GePLrgxEIynNZ0ClXjUwHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGf+ngtkEsILCFKLE/FjmaARaL6P50o0bw3 RNkyKNAoIPXHbXcI4zroBHF6AelLNTgTvlhxld+bLTt42IG+blMaqSAmD/NAYviN rrBKLNutjvAjXWlGyK0BLuOzINjNrh3poGNP0lvgIeBgICd7rn3haluiJ3x9F1dj m06XF6jcpioIhffkTIm9dr9c7OylJDg/sRiz5owrMQXb2LsltEfherZyzHvIBhup MMerpL9HT6Jz4jlprwU+rf5rRgJ0r8kqa0cUgHY+Zbji+8iONRQ3jxAkHu2soDGY qC8b+KGXzcwobrWlN/Mrco0iVIp97fVa9ezQxZfvwsLGQBVFWME= -----END CERTIFICATE-----Generated at Thu Mar 26 12:25:14 2026 by rpki-client