$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: 3UJqo85fFULB5Yt21LNLTKLPiPRW7hvRJwdTcTx38aU= Subject key identifier: 31:04:36:C6:B9:7F:04:9A:6B:01:AD:A8:39:69:42:3A:F2:36:AF:61 Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 3A6DA794C4D77C702599B4AFA31B32589D2676EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 0225 Signing time: Wed 25 Mar 2026 22:50:57 +0000 Manifest this update: Wed 25 Mar 2026 22:45:57 +0000 Manifest next update: Sun 29 Mar 2026 09:12:57 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: m5zVdj5eik3LoKH8n3yc9tou1o5tmBbi5H5pOVeGB1Y=) 2: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: vtJy3QLaEsTyMsh4YgUbtMWyR6flJHIlXv3cZgtZ59o=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: /LiLN+J0a3bLX8pXdquoB9qjro5HIfp6bcZw4BWkMOQ=) 4: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: DnN4DbVNjWnQCkjXwlNPMidCO0/mBYN6hm7/J4O2GDg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:6d:a7:94:c4:d7:7c:70:25:99:b4:af:a3:1b:32:58:9d:26:76:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Mar 25 22:45:57 2026 GMT Not After : Mar 29 09:12:57 2026 GMT Subject: CN=310436C6B97F049A6B01ADA83969423AF236AF61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:38:48:ec:aa:d4:1d:fb:c6:09:bd:9c:c9:ad: d9:55:c9:9d:a7:b1:eb:2b:40:ac:b4:40:01:6b:54: 11:62:ca:76:c5:e5:7c:e2:73:75:dc:e2:69:b4:e4: dc:37:88:c1:86:65:c4:88:18:db:1b:a7:b7:72:c9: c8:38:0c:4c:5a:e7:77:5b:d5:4a:ee:ab:1d:77:4d: a5:f6:03:60:83:2e:4e:5b:bd:64:71:b9:d0:8b:98: de:bd:37:42:c5:25:b9:a3:43:ab:f7:65:df:39:8d: e9:d1:38:2c:91:79:ed:0f:d2:ad:be:bc:8e:25:69: a0:5d:24:65:65:ce:43:05:4d:f9:67:74:cf:97:83: 97:22:11:2b:28:bc:e3:66:3f:aa:02:67:b4:0a:6f: b9:8b:57:f2:c7:49:ba:cb:74:f2:2d:38:cf:77:16: f7:15:fd:35:8e:1c:64:30:c7:83:bb:4b:9c:48:d3: 94:89:95:f4:a1:f4:95:f2:23:c9:8f:24:1c:c3:17: 78:44:82:86:13:ce:e0:eb:58:d3:4c:15:8c:5d:e7: aa:d0:d8:2b:fe:db:16:ff:f1:72:c6:bd:1b:20:f4: b7:dc:37:56:cd:f5:7b:2a:ca:17:6f:d1:9d:e4:68: 39:66:c9:78:d4:42:e0:ab:cb:14:6a:cb:e0:7f:b7: b8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:04:36:C6:B9:7F:04:9A:6B:01:AD:A8:39:69:42:3A:F2:36:AF:61 X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:58:27:7c:03:0c:f7:c0:c6:08:28:0a:2f:6f:85:d6:24:d4: 66:fb:75:ce:f8:71:90:d8:91:f9:61:a5:e5:37:b8:62:6b:23: ad:c0:91:1b:58:43:8b:47:20:e7:9e:17:98:b2:7d:88:3b:cd: e2:e5:ff:99:28:3b:72:0c:a5:83:92:66:d7:27:6a:2b:3c:06: 87:f7:c5:d0:fb:63:bd:a9:06:d1:2f:59:08:2f:09:33:bd:d7: 13:96:9b:05:16:13:78:b6:7d:0f:ad:4d:f4:47:f3:86:32:e2: a6:9e:c0:14:d7:b6:3e:54:d6:2a:e2:35:00:2a:58:a0:3e:d9: 2c:e6:f7:03:5c:8f:db:33:de:f1:b2:6f:1a:43:7f:fd:ec:77: 3d:0a:10:df:19:db:0c:4b:f9:1b:18:49:df:21:fa:4f:ff:87: 37:81:05:0c:54:bb:43:cb:50:06:4f:cd:79:98:6c:3a:48:47: e3:4e:2b:5c:9c:fd:b0:f5:07:2e:6a:76:52:16:8e:c6:b5:5f: 09:50:30:2f:5f:2e:ea:f2:13:37:e8:1a:6f:31:df:fe:e4:d8: f1:03:d1:84:23:92:6f:52:36:4f:20:57:ea:e9:c4:b8:4e:00: 2b:6c:c6:bb:48:19:0c:54:0d:fe:a1:6b:d4:20:e1:cf:ee:48: 80:e9:71:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOm2nlMTXfHAlmbSvoxsyWJ0mduowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNjAzMjUyMjQ1NTdaFw0yNjAzMjkwOTEyNTdaMDMxMTAvBgNV BAMTKDMxMDQzNkM2Qjk3RjA0OUE2QjAxQURBODM5Njk0MjNBRjIzNkFGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOEjsqtQd+8YJvZzJrdlVyZ2n sesrQKy0QAFrVBFiynbF5Xzic3Xc4mm05Nw3iMGGZcSIGNsbp7dyycg4DExa53db 1Uruqx13TaX2A2CDLk5bvWRxudCLmN69N0LFJbmjQ6v3Zd85jenROCyRee0P0q2+ vI4laaBdJGVlzkMFTflndM+Xg5ciESsovONmP6oCZ7QKb7mLV/LHSbrLdPItOM93 FvcV/TWOHGQwx4O7S5xI05SJlfSh9JXyI8mPJBzDF3hEgoYTzuDrWNNMFYxd56rQ 2Cv+2xb/8XLGvRsg9LfcN1bN9Xsqyhdv0Z3kaDlmyXjUQuCryxRqy+B/t7h/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMQQ2xrl/BJprAa2oOWlCOvI2r2EwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJBYJ3wDDPfAxggoCi9vhdYk1Gb7dc74cZDY kflhpeU3uGJrI63AkRtYQ4tHIOeeF5iyfYg7zeLl/5koO3IMpYOSZtcnais8Bof3 xdD7Y72pBtEvWQgvCTO91xOWmwUWE3i2fQ+tTfRH84Yy4qaewBTXtj5U1iriNQAq WKA+2Szm9wNcj9sz3vGybxpDf/3sdz0KEN8Z2wxL+RsYSd8h+k//hzeBBQxUu0PL UAZPzXmYbDpIR+NOK1yc/bD1By5qdlIWjsa1XwlQMC9fLuryEzfoGm8x3/7k2PED 0YQjkm9SNk8gV+rpxLhOACtsxrtIGQxUDf6ha9Qg4c/uSIDpcQs= -----END CERTIFICATE-----Generated at Fri Mar 27 04:15:18 2026 by rpki-client