$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: d0ZpPWRBK5RQgrBhdmHKujgT90nvQHxaBumR/EWWbPg= Subject key identifier: F8:95:72:99:52:73:84:E5:E2:A4:AC:76:A6:AE:73:A1:13:35:39:52 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 22E9F35AC5EF30F7C4FB2553F2C9408FDD7C0C3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 054C Signing time: Tue 24 Mar 2026 22:40:45 +0000 Manifest this update: Tue 24 Mar 2026 22:35:45 +0000 Manifest next update: Fri 27 Mar 2026 23:07:45 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: lLZaGtkUcNoXcK+9HAmi1uXInnoV33Vx39DrniRfNyk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:07:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:e9:f3:5a:c5:ef:30:f7:c4:fb:25:53:f2:c9:40:8f:dd:7c:0c:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Mar 24 22:35:45 2026 GMT Not After : Mar 27 23:07:45 2026 GMT Subject: CN=F8957299527384E5E2A4AC76A6AE73A113353952 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:55:f6:8c:dd:4d:7a:1c:0c:77:a4:f1:2a:3c: c5:a3:c0:81:dc:38:61:ec:51:d8:9d:f1:bf:4d:8a: 98:6a:91:ce:75:bb:73:2d:d6:79:b4:8d:8b:af:b0: 99:e3:c2:0d:2f:5a:e1:58:dc:5d:be:14:00:2f:61: 09:c6:19:e3:0c:e4:07:bf:32:8a:62:a4:b2:41:f1: a6:9a:75:e8:d5:b2:23:2e:36:e1:aa:0d:4b:e0:d4: 2c:d3:8c:3d:3c:93:f8:30:a5:d2:12:b7:35:7c:63: d7:c5:5b:7f:0a:80:cb:19:24:e4:c5:7a:df:99:90: ac:bb:48:63:cd:ce:af:64:a3:0d:8a:ee:65:14:92: f3:c4:3f:c8:5d:9e:12:af:d0:e4:aa:4d:9d:2d:d6: a3:82:9f:74:3a:f4:53:51:4e:f8:55:74:40:63:11: f0:5e:86:6c:aa:77:48:ae:47:3c:71:38:a3:93:3a: ab:da:1b:ae:d5:bd:73:4a:f1:b4:72:93:2d:13:d0: f5:78:bb:ed:cc:40:a1:43:44:a5:dd:4f:fd:5a:2c: 4a:82:e9:39:b3:a6:8f:f0:0b:7a:93:71:99:c2:c1: 0c:6c:0f:95:4e:8e:4c:8f:45:f1:1e:42:34:47:55: 8d:1b:5d:ec:f0:76:0a:c0:a0:3a:79:6a:35:e1:96: f9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:95:72:99:52:73:84:E5:E2:A4:AC:76:A6:AE:73:A1:13:35:39:52 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:05:98:4b:c9:36:f0:97:77:65:43:85:00:1b:3a:a7:1f:5a: 2f:7d:c6:0e:50:fe:87:11:67:00:04:06:2f:7f:6a:4b:88:9a: a5:99:17:b4:fc:5e:96:52:b0:b9:9c:77:e0:ab:2d:3b:6f:56: 48:8e:4f:00:02:de:47:c3:82:f6:c5:75:03:4c:e0:4d:c4:fa: 93:ce:69:71:62:21:c1:1d:5a:05:80:39:af:4a:97:7a:5b:38: a6:c9:5f:cd:9f:ba:d6:fb:41:aa:5a:f6:a8:92:5c:a2:72:99: 7a:43:28:c8:9d:10:a4:b3:dc:c5:90:fa:a6:82:9f:1e:15:73: 32:21:08:26:93:ba:5f:1f:8b:f6:dc:72:d8:98:d3:f3:f7:b9: fe:b6:60:c4:4f:4f:fb:c0:5c:db:c0:47:76:56:51:35:be:2d: fe:c5:08:3e:89:87:d6:e6:a1:6f:07:ce:af:69:98:b5:53:fa: c3:fa:9a:f9:0c:a5:51:1d:55:ee:f2:ba:2b:b9:75:b1:b7:9c: 52:a4:c2:97:51:f8:da:1f:03:e6:05:25:5a:16:47:cc:ae:12: 58:5a:6d:01:af:d0:89:bf:2d:78:8f:06:d5:ad:74:88:1c:71: 9b:a3:ae:d8:54:db:12:f7:ec:72:bf:60:fe:46:27:2a:3e:52: d5:08:4f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIunzWsXvMPfE+yVT8slAj918DD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNjAzMjQyMjM1NDVaFw0yNjAzMjcyMzA3NDVaMDMxMTAvBgNV BAMTKEY4OTU3Mjk5NTI3Mzg0RTVFMkE0QUM3NkE2QUU3M0ExMTMzNTM5NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzVfaM3U16HAx3pPEqPMWjwIHc OGHsUdid8b9Niphqkc51u3Mt1nm0jYuvsJnjwg0vWuFY3F2+FAAvYQnGGeMM5Ae/ MopipLJB8aaadejVsiMuNuGqDUvg1CzTjD08k/gwpdIStzV8Y9fFW38KgMsZJOTF et+ZkKy7SGPNzq9kow2K7mUUkvPEP8hdnhKv0OSqTZ0t1qOCn3Q69FNRTvhVdEBj EfBehmyqd0iuRzxxOKOTOqvaG67VvXNK8bRyky0T0PV4u+3MQKFDRKXdT/1aLEqC 6Tmzpo/wC3qTcZnCwQxsD5VOjkyPRfEeQjRHVY0bXezwdgrAoDp5ajXhlvlTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+JVymVJzhOXipKx2pq5zoRM1OVIwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKIFmEvJNvCXd2VDhQAbOqcfWi99xg5Q/ocR ZwAEBi9/akuImqWZF7T8XpZSsLmcd+CrLTtvVkiOTwAC3kfDgvbFdQNM4E3E+pPO aXFiIcEdWgWAOa9Kl3pbOKbJX82futb7Qapa9qiSXKJymXpDKMidEKSz3MWQ+qaC nx4VczIhCCaTul8fi/bcctiY0/P3uf62YMRPT/vAXNvAR3ZWUTW+Lf7FCD6Jh9bm oW8Hzq9pmLVT+sP6mvkMpVEdVe7yuiu5dbG3nFKkwpdR+NofA+YFJVoWR8yuElha bQGv0Im/LXiPBtWtdIgccZujrthU2xL37HK/YP5GJyo+UtUITyQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:52 2026 by rpki-client