$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: CkZs+oftR+PVBHoKC/O2jm/CkrQowzgWu7oHnqGe+PY= Subject key identifier: 9D:7F:E5:46:0D:02:ED:09:9C:A8:67:59:1E:21:30:31:4D:3F:4F:19 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 5505C1BE2E8385017D8B9B665CB00C54D6B375D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: E4 Signing time: Tue 24 Mar 2026 02:01:22 +0000 Manifest this update: Tue 24 Mar 2026 01:56:22 +0000 Manifest next update: Fri 27 Mar 2026 12:28:22 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: xrDel+BLTy43LhAZhSS/eqbR8j7dGZEmjjoNYJPpWGQ=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:28:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:05:c1:be:2e:83:85:01:7d:8b:9b:66:5c:b0:0c:54:d6:b3:75:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Mar 24 01:56:22 2026 GMT Not After : Mar 27 12:28:22 2026 GMT Subject: CN=9D7FE5460D02ED099CA867591E2130314D3F4F19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:c3:a4:e1:51:ff:1a:84:a0:6b:84:45:94:75: 75:a4:39:5f:bc:e0:9b:be:9c:18:11:3d:a8:43:8c: bf:48:4d:3f:fe:51:44:34:02:6c:c4:f9:11:95:02: 49:03:37:44:5f:24:5d:32:e9:b9:27:ee:82:da:03: 3f:96:63:89:a4:2c:94:0b:9a:c4:7a:7d:03:5c:b3: 88:21:70:c5:0b:87:3b:69:28:63:e9:ca:c1:dd:1e: 04:62:3e:9f:3e:c7:56:91:5b:ba:60:ce:92:88:b0: d5:52:f1:77:3a:7a:a0:6c:21:a8:58:5f:2d:85:c9: 88:de:d7:7e:85:2a:b8:bc:2b:72:08:13:52:09:08: d8:88:df:f9:11:b3:12:e5:a7:7c:53:d5:fb:08:66: 50:7a:c8:61:17:da:6c:5a:cf:cb:6f:76:6e:66:f9: 33:73:14:36:c0:13:b2:56:4a:ff:f5:a0:a8:e6:77: b6:6b:61:73:4d:6f:cf:2c:80:41:d9:75:74:c5:93: 08:6f:4b:74:91:c0:67:36:83:f8:57:a3:35:6b:b9: 93:88:e6:c2:01:b0:7d:da:88:1d:9b:a2:cf:2c:a4: 06:2f:c7:a2:46:12:83:59:3a:82:3a:cd:4e:32:ea: 2b:7a:78:41:54:c4:e0:41:83:e3:33:29:60:3b:5a: 4d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:7F:E5:46:0D:02:ED:09:9C:A8:67:59:1E:21:30:31:4D:3F:4F:19 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:1c:f4:a1:01:f7:24:af:cf:06:6a:fc:d3:87:a8:98:0c:86: 8d:c7:aa:d1:30:c9:05:62:0c:e7:d0:fe:f6:49:35:37:bc:7f: 3c:15:da:f0:b5:d0:60:1d:49:9f:e8:b1:5f:37:1a:5c:45:5c: c2:5e:e5:3a:18:24:63:9d:d6:d6:65:ea:cc:ca:c9:80:be:4d: 50:08:83:ef:80:78:01:3b:3e:fc:d9:b7:8e:0b:2c:ce:19:fe: ba:46:40:7d:73:c9:43:25:72:2b:df:8f:36:4b:7b:97:6d:ce: 09:75:b4:88:dc:0d:d5:b3:fc:32:1e:10:d3:2b:6a:ad:ba:ff: 02:5e:87:b7:a2:c1:81:53:3e:27:06:d5:71:dd:76:21:98:f3: 14:30:35:23:ac:91:ff:35:66:b5:cf:ce:0f:eb:7a:25:07:df: cd:be:f9:a9:f1:22:84:27:d7:ac:5f:91:b2:36:bc:3c:89:0e: 54:85:4a:1d:97:ba:c7:5e:37:76:d8:cf:be:4c:05:2b:1e:1d: 3a:70:34:bf:f5:de:7d:03:ca:ed:3e:c7:b9:c2:36:96:7c:a8: 8c:b4:63:42:17:0e:e5:a4:8d:63:d8:8b:6f:83:02:53:f8:71: 98:ec:ce:95:32:f3:42:05:84:0c:c3:1d:af:20:7a:e9:47:b4: 1e:d7:f0:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVQXBvi6DhQF9i5tmXLAMVNazddcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNjAzMjQwMTU2MjJaFw0yNjAzMjcxMjI4MjJaMDMxMTAvBgNV BAMTKDlEN0ZFNTQ2MEQwMkVEMDk5Q0E4Njc1OTFFMjEzMDMxNEQzRjRGMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMw6ThUf8ahKBrhEWUdXWkOV+8 4Ju+nBgRPahDjL9ITT/+UUQ0AmzE+RGVAkkDN0RfJF0y6bkn7oLaAz+WY4mkLJQL msR6fQNcs4ghcMULhztpKGPpysHdHgRiPp8+x1aRW7pgzpKIsNVS8Xc6eqBsIahY Xy2FyYje136FKri8K3IIE1IJCNiI3/kRsxLlp3xT1fsIZlB6yGEX2mxaz8tvdm5m +TNzFDbAE7JWSv/1oKjmd7ZrYXNNb88sgEHZdXTFkwhvS3SRwGc2g/hXozVruZOI 5sIBsH3aiB2bos8spAYvx6JGEoNZOoI6zU4y6it6eEFUxOBBg+MzKWA7Wk0tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnX/lRg0C7QmcqGdZHiEwMU0/TxkwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFsc9KEB9ySvzwZq/NOHqJgMho3HqtEwyQVi DOfQ/vZJNTe8fzwV2vC10GAdSZ/osV83GlxFXMJe5ToYJGOd1tZl6szKyYC+TVAI g++AeAE7PvzZt44LLM4Z/rpGQH1zyUMlcivfjzZLe5dtzgl1tIjcDdWz/DIeENMr aq26/wJeh7eiwYFTPicG1XHddiGY8xQwNSOskf81ZrXPzg/reiUH382++anxIoQn 16xfkbI2vDyJDlSFSh2XusdeN3bYz75MBSseHTpwNL/13n0Dyu0+x7nCNpZ8qIy0 Y0IXDuWkjWPYi2+DAlP4cZjszpUy80IFhAzDHa8geulHtB7X8Ng= -----END CERTIFICATE-----Generated at Thu Mar 26 13:53:33 2026 by rpki-client