$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: 4eVTmeuszmLpMAmH6m7TD5vnTt0dW7sfbPZYGsFyBVU= Subject key identifier: A9:78:F5:3F:A8:94:19:BB:F8:C0:7F:39:A9:74:F7:7B:C7:55:B3:79 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 477A67693B5D1B0D27A7D94C86C6F877711DB0EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 027C Signing time: Tue 24 Mar 2026 10:31:17 +0000 Manifest this update: Tue 24 Mar 2026 10:26:17 +0000 Manifest next update: Fri 27 Mar 2026 14:18:17 +0000 Files and hashes: 1: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: McME/dbo6pUSMwDf337mfAJTZsh9zKeBHm2ij6JMlyA=) 2: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: kaLOnVcH2eiN/bRpUUdlc2RBWfunbSbF+3c/cmkKp/Y=) 3: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: +vM9cGZ3D/fP8gpZ0u91LWd+b7eoo163SUoVy99f3E4=) 4: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: BgFgmH5jU+LRrTrgwlopaW2g0oi0zIzrx7nTuzaPyLk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:7a:67:69:3b:5d:1b:0d:27:a7:d9:4c:86:c6:f8:77:71:1d:b0:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Mar 24 10:26:17 2026 GMT Not After : Mar 27 14:18:17 2026 GMT Subject: CN=A978F53FA89419BBF8C07F39A974F77BC755B379 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:44:e9:98:28:21:f3:fe:e4:42:c3:56:74:65: 2b:59:c7:85:ba:2a:64:04:9e:6f:21:63:4b:f2:c6: 57:d8:87:d4:63:52:83:83:2a:3b:49:f3:b6:b1:44: 72:e0:97:77:2d:0c:c7:b8:8a:4b:57:ca:bf:ed:d9: ef:ea:6f:fe:5e:87:81:cc:86:27:cc:e2:67:77:c3: 9e:4a:2a:53:54:f4:85:17:d4:8c:3b:58:9e:31:c1: 26:52:8c:7d:5e:52:7d:f4:8a:cf:0e:53:5d:ed:aa: b7:87:aa:7b:50:e8:9b:01:4c:c6:9b:31:83:7e:e4: c7:89:24:68:91:29:db:60:26:00:ae:89:ab:37:1a: e0:66:22:86:90:06:29:fe:67:69:75:48:83:6c:69: 0b:38:a1:d9:e1:12:15:e9:6b:0c:71:e2:8a:18:55: c0:7b:30:b7:3a:8d:13:36:12:83:9d:13:cd:14:16: b8:af:bc:97:86:3d:a0:17:ce:77:a8:10:2f:8a:4b: 08:10:05:f5:ec:fc:0c:8a:5d:bd:8a:d0:64:a3:30: fd:8b:ec:59:30:75:a0:c4:c2:6f:f4:42:bf:64:13: 3b:dd:22:ec:9a:5c:35:84:ce:d5:50:03:82:39:14: 4d:c6:42:6a:c5:57:03:ea:ac:f5:e2:83:7b:08:8b: 96:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:78:F5:3F:A8:94:19:BB:F8:C0:7F:39:A9:74:F7:7B:C7:55:B3:79 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:6c:68:42:2d:66:07:ec:ba:a0:42:b3:7d:9f:65:0e:0a:f7: d9:31:56:dd:31:dc:2f:bd:44:e9:c5:31:93:d7:ae:fa:20:e0: e4:da:e2:ce:4e:53:87:11:6d:2a:c1:5f:0f:d4:66:aa:95:f5: 2c:58:07:c4:e7:3f:c3:4e:d9:6b:86:03:79:92:d1:a1:1c:6a: 67:c4:55:a6:56:0f:72:bd:e8:b6:46:3a:89:26:82:7d:c5:a0: ae:14:19:2a:8b:6c:b5:bd:cc:f0:21:e8:1c:fe:36:87:fe:0b: e4:1d:60:8b:77:b6:50:2c:00:8b:89:b0:ac:ac:05:b5:32:61: 59:d4:53:41:4c:37:69:9e:14:7b:5b:1c:34:56:d3:e6:c6:65: b0:81:08:41:e6:9c:ff:21:25:61:01:35:af:5a:32:0c:e5:56: 7c:98:ea:7c:1b:eb:89:fe:a9:7d:d0:59:bb:0e:9c:bf:c8:03: 99:cf:e2:62:4f:86:19:51:8c:83:62:ab:19:e9:54:29:89:5a: 05:06:d7:89:74:2a:5c:78:98:4f:cc:49:fe:b0:e9:2c:d1:a3: c9:cf:24:41:0d:ae:d7:d6:68:d7:1b:53:7d:61:ea:0e:60:7c: 75:2f:56:17:46:6f:c7:5b:2f:c7:eb:d7:ac:00:7e:ed:7a:d7: da:06:57:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3pnaTtdGw0np9lMhsb4d3EdsOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNjAzMjQxMDI2MTdaFw0yNjAzMjcxNDE4MTdaMDMxMTAvBgNV BAMTKEE5NzhGNTNGQTg5NDE5QkJGOEMwN0YzOUE5NzRGNzdCQzc1NUIzNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFROmYKCHz/uRCw1Z0ZStZx4W6 KmQEnm8hY0vyxlfYh9RjUoODKjtJ87axRHLgl3ctDMe4iktXyr/t2e/qb/5eh4HM hifM4md3w55KKlNU9IUX1Iw7WJ4xwSZSjH1eUn30is8OU13tqreHqntQ6JsBTMab MYN+5MeJJGiRKdtgJgCuias3GuBmIoaQBin+Z2l1SINsaQs4odnhEhXpawxx4ooY VcB7MLc6jRM2EoOdE80UFrivvJeGPaAXzneoEC+KSwgQBfXs/AyKXb2K0GSjMP2L 7FkwdaDEwm/0Qr9kEzvdIuyaXDWEztVQA4I5FE3GQmrFVwPqrPXig3sIi5bhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqXj1P6iUGbv4wH85qXT3e8dVs3kwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFsaEItZgfsuqBCs32fZQ4K99kxVt0x3C+9 ROnFMZPXrvog4OTa4s5OU4cRbSrBXw/UZqqV9SxYB8TnP8NO2WuGA3mS0aEcamfE VaZWD3K96LZGOokmgn3FoK4UGSqLbLW9zPAh6Bz+Nof+C+QdYIt3tlAsAIuJsKys BbUyYVnUU0FMN2meFHtbHDRW0+bGZbCBCEHmnP8hJWEBNa9aMgzlVnyY6nwb64n+ qX3QWbsOnL/IA5nP4mJPhhlRjINiqxnpVCmJWgUG14l0Klx4mE/MSf6w6SzRo8nP JEENrtfWaNcbU31h6g5gfHUvVhdGb8dbL8fr16wAfu1619oGV2E= -----END CERTIFICATE-----Generated at Thu Mar 26 11:15:57 2026 by rpki-client