$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: 7agaWxjGbS2E5AXL5M1z1b8Q5bGSrHKyQpuxOYcHrWI= Subject key identifier: 1B:C2:36:32:94:DF:C5:A0:8A:CB:7A:F7:A1:DC:0F:30:0C:7F:57:52 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 48D736F7FF02B8270B84F1A7C8BF6C570F457E1D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: D6 Signing time: Thu 26 Mar 2026 08:51:08 +0000 Manifest this update: Thu 26 Mar 2026 08:46:08 +0000 Manifest next update: Sun 29 Mar 2026 15:33:08 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: +zP5XnHXowNFKL+g8gmuaj6rO81OsubzJK/FEfSLl0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:33:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:d7:36:f7:ff:02:b8:27:0b:84:f1:a7:c8:bf:6c:57:0f:45:7e:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Mar 26 08:46:08 2026 GMT Not After : Mar 29 15:33:08 2026 GMT Subject: CN=1BC2363294DFC5A08ACB7AF7A1DC0F300C7F5752 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:f2:dd:a2:6a:f8:80:34:5a:41:0c:a3:99:f4: e1:47:af:08:4b:4c:6f:af:4e:af:f3:5f:fc:32:92: 51:45:21:af:a9:37:d6:22:a8:08:c9:12:42:33:cc: ae:e7:7a:23:f6:d1:09:cf:6b:4c:ea:48:b7:e6:32: 73:c4:89:96:8a:cb:cf:52:89:0e:c9:f4:71:b0:74: 3e:5e:25:38:a9:c6:82:4f:7f:27:f9:ee:a0:68:0a: 08:54:f6:2a:e9:6a:b9:43:42:95:fa:6a:c6:f4:f7: fd:b3:e7:96:40:56:c8:da:3a:50:a4:e2:8a:74:49: 4a:b6:06:0c:d3:41:56:f5:69:9f:f2:56:3b:47:36: c6:ae:7d:b9:3d:09:25:c9:b2:3f:6e:0d:44:60:ec: f7:c4:34:47:6a:82:4a:3b:ab:4c:a2:62:27:0c:c3: 9c:f0:37:f5:c4:a0:6e:49:be:39:bd:82:47:ab:e4: 1c:aa:fe:3d:a9:a5:99:3d:fa:48:fd:25:b8:8a:9a: f6:b8:2a:4c:d3:9b:17:ff:a7:75:87:0a:ee:10:23: 12:20:1b:e1:90:6a:77:cc:b8:4e:70:46:c0:6e:a8: 0e:74:cc:b5:9d:7e:7c:04:32:3f:f0:b3:50:0f:6d: aa:6a:e9:e4:c6:10:ca:bd:eb:ab:cf:6c:91:d5:cc: 9b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:C2:36:32:94:DF:C5:A0:8A:CB:7A:F7:A1:DC:0F:30:0C:7F:57:52 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:15:e4:31:b0:0a:4c:7e:fa:2e:03:dd:e9:63:36:95:01:18: 0f:13:6a:26:81:21:0d:3d:24:12:93:59:0f:0b:45:61:0a:85: 2a:55:fe:8a:a5:d2:3c:de:ab:03:4b:90:b2:84:95:8e:4f:ff: c0:b3:09:7e:ce:18:03:5b:39:60:d6:61:7d:6b:79:00:2e:9d: 73:f3:d3:32:35:f1:8f:e0:2d:95:93:5b:eb:ae:68:e7:4e:b3: ba:48:46:04:ad:02:96:c8:78:62:96:98:a7:e9:ba:4a:cc:17: ec:87:28:cf:5c:a4:10:73:52:6f:a3:1f:13:c2:55:7f:96:52: 69:c9:ef:2a:c9:30:36:b4:c8:ed:3b:f7:87:53:38:30:bf:62: 36:aa:40:04:75:3a:17:27:ed:1d:7b:f5:cd:39:ee:6d:c0:23: b0:4b:08:2c:56:8f:7d:d9:65:43:80:14:83:b2:d6:66:b2:8d: f8:14:81:4b:eb:6e:95:b6:62:8a:11:ed:fc:8a:f3:1c:39:71: 1f:29:12:23:b4:3f:08:51:67:91:17:1f:96:21:3f:b1:9e:cc: d9:49:d2:98:91:3a:4a:2b:bf:cb:43:0e:d9:0f:41:ac:dc:3c: 25:09:8d:f3:63:f5:de:2e:c1:3e:df:cc:94:5e:b4:96:52:24: 0b:ec:3b:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNc29/8CuCcLhPGnyL9sVw9Ffh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNjAzMjYwODQ2MDhaFw0yNjAzMjkxNTMzMDhaMDMxMTAvBgNV BAMTKDFCQzIzNjMyOTRERkM1QTA4QUNCN0FGN0ExREMwRjMwMEM3RjU3NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG8t2iaviANFpBDKOZ9OFHrwhL TG+vTq/zX/wyklFFIa+pN9YiqAjJEkIzzK7neiP20QnPa0zqSLfmMnPEiZaKy89S iQ7J9HGwdD5eJTipxoJPfyf57qBoCghU9irparlDQpX6asb09/2z55ZAVsjaOlCk 4op0SUq2BgzTQVb1aZ/yVjtHNsaufbk9CSXJsj9uDURg7PfENEdqgko7q0yiYicM w5zwN/XEoG5Jvjm9gker5Byq/j2ppZk9+kj9JbiKmva4KkzTmxf/p3WHCu4QIxIg G+GQanfMuE5wRsBuqA50zLWdfnwEMj/ws1APbapq6eTGEMq966vPbJHVzJu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG8I2MpTfxaCKy3r3odwPMAx/V1IwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEV5DGwCkx++i4D3eljNpUBGA8TaiaBIQ09 JBKTWQ8LRWEKhSpV/oql0jzeqwNLkLKElY5P/8CzCX7OGANbOWDWYX1reQAunXPz 0zI18Y/gLZWTW+uuaOdOs7pIRgStApbIeGKWmKfpukrMF+yHKM9cpBBzUm+jHxPC VX+WUmnJ7yrJMDa0yO0794dTODC/YjaqQAR1Ohcn7R179c057m3AI7BLCCxWj33Z ZUOAFIOy1mayjfgUgUvrbpW2YooR7fyK8xw5cR8pEiO0PwhRZ5EXH5YhP7GezNlJ 0piROkorv8tDDtkPQazcPCUJjfNj9d4uwT7fzJRetJZSJAvsO+4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:42:39 2026 by rpki-client