$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: xlAhtbFMvNRLtW7ZJzdD/uMkI5mkgZeIzf8zE43cMEc= Subject key identifier: 0D:5C:14:10:7E:2C:50:22:BC:CF:8E:27:7F:51:48:35:33:A0:55:80 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 03D8A377FFE19F6D7BAA327E471FFDDE194EC42D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02F7 Signing time: Thu 26 Mar 2026 05:02:49 +0000 Manifest this update: Thu 26 Mar 2026 04:57:49 +0000 Manifest next update: Sun 29 Mar 2026 07:29:49 +0000 Files and hashes: 1: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 3: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: b6Ze1Cmi7h0UbgRWSKjWyOEXa3332OwZs4ZuR8D6lzY=) 4: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: lR76ZMs7WthIjQatwW8YgMtXJJYfT7EHHJEX+bYYarA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:d8:a3:77:ff:e1:9f:6d:7b:aa:32:7e:47:1f:fd:de:19:4e:c4:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Mar 26 04:57:49 2026 GMT Not After : Mar 29 07:29:49 2026 GMT Subject: CN=0D5C14107E2C5022BCCF8E277F51483533A05580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:d4:68:4f:d2:ff:7b:a8:5d:29:a9:61:90:fa: 94:9e:73:36:9b:8f:42:e2:1d:99:ce:39:00:17:87: 70:23:b6:04:19:83:10:1b:95:b1:86:fe:41:bb:c0: c5:ba:28:35:44:14:5b:a2:cf:3c:e5:0d:47:4b:23: 26:f8:33:77:6e:89:66:07:43:84:ab:ab:9d:f9:6b: 90:aa:61:83:c4:06:28:a0:96:fd:21:b2:3e:cf:40: 3e:7f:fc:94:74:2e:c6:11:1d:6c:ab:88:aa:24:98: 42:db:c5:57:2e:af:33:5b:79:22:e1:e5:7d:e7:2d: 5a:19:f4:69:2e:b6:50:89:d3:56:5a:e7:a7:57:e3: 6c:ad:d1:cc:e5:0b:04:ce:ee:4b:8f:a6:a1:32:9a: 13:75:50:2e:fd:3c:59:d9:90:56:15:f0:5a:5b:3d: af:4d:b9:57:2f:b3:b6:58:67:e3:a7:1b:93:26:42: 1a:be:a2:af:18:03:6d:a8:55:94:bd:ac:25:52:8b: 3a:6a:e5:98:91:76:20:78:e6:4f:a6:61:9f:50:c9: c1:ea:20:30:ca:78:2e:fd:30:4c:6b:a7:d7:f3:49: d7:25:61:df:f2:32:95:7b:e2:f8:4b:fa:63:6f:92: ee:cd:3c:e3:2d:ca:c8:36:52:46:7f:2d:a6:8a:8b: 32:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:5C:14:10:7E:2C:50:22:BC:CF:8E:27:7F:51:48:35:33:A0:55:80 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e8:62:7c:13:eb:8c:f0:55:50:24:4a:f2:51:8d:86:9a:dc: 18:6e:cd:b3:14:46:7f:c7:57:75:97:bc:cf:10:3d:7d:33:e1: d3:74:48:dc:22:3a:22:d9:3c:a6:8f:b5:9f:53:43:0c:c0:44: a3:82:16:69:14:60:f0:42:ba:b1:7e:3a:13:09:22:36:71:7f: 46:47:67:b2:3d:2e:68:40:9b:94:75:b8:e8:41:89:27:d6:c2: 1b:f3:8c:6a:13:a5:8e:18:38:db:15:18:bd:6a:8c:17:d9:ee: 1b:02:16:77:ff:e0:c7:e7:a9:d7:7e:f2:81:98:b1:ab:26:5e: f5:24:9d:21:0c:d4:cf:12:26:15:8b:c3:7d:80:09:ae:d1:e5: b4:aa:fd:84:7d:8a:fd:73:0b:4b:7b:34:7a:82:c1:5d:5f:ad: 06:73:57:45:6b:9f:ba:4d:91:07:0f:5e:c6:16:04:66:1b:8a: 33:83:23:25:9f:b3:66:ab:17:32:48:49:3c:b6:fe:ae:bd:1c: c5:aa:af:f9:85:a8:38:0a:30:7b:48:10:b2:38:5b:07:0f:1e: 5a:03:18:44:f3:3b:f3:36:5e:46:a7:78:70:33:6f:64:95:27: 82:e5:73:8d:f9:26:a8:f0:39:1f:bb:2c:97:6d:1e:f1:df:8b: dd:8f:9e:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA9ijd//hn217qjJ+Rx/93hlOxC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNjAzMjYwNDU3NDlaFw0yNjAzMjkwNzI5NDlaMDMxMTAvBgNV BAMTKDBENUMxNDEwN0UyQzUwMjJCQ0NGOEUyNzdGNTE0ODM1MzNBMDU1ODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw1GhP0v97qF0pqWGQ+pSeczab j0LiHZnOOQAXh3AjtgQZgxAblbGG/kG7wMW6KDVEFFuizzzlDUdLIyb4M3duiWYH Q4Srq535a5CqYYPEBiiglv0hsj7PQD5//JR0LsYRHWyriKokmELbxVcurzNbeSLh 5X3nLVoZ9GkutlCJ01Za56dX42yt0czlCwTO7kuPpqEymhN1UC79PFnZkFYV8Fpb Pa9NuVcvs7ZYZ+OnG5MmQhq+oq8YA22oVZS9rCVSizpq5ZiRdiB45k+mYZ9QycHq IDDKeC79MExrp9fzSdclYd/yMpV74vhL+mNvku7NPOMtysg2UkZ/LaaKizJZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDVwUEH4sUCK8z44nf1FINTOgVYAwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXoYnwT64zwVVAkSvJRjYaa3BhuzbMURn/H V3WXvM8QPX0z4dN0SNwiOiLZPKaPtZ9TQwzARKOCFmkUYPBCurF+OhMJIjZxf0ZH Z7I9LmhAm5R1uOhBiSfWwhvzjGoTpY4YONsVGL1qjBfZ7hsCFnf/4Mfnqdd+8oGY sasmXvUknSEM1M8SJhWLw32ACa7R5bSq/YR9iv1zC0t7NHqCwV1frQZzV0Vrn7pN kQcPXsYWBGYbijODIyWfs2arFzJISTy2/q69HMWqr/mFqDgKMHtIELI4WwcPHloD GETzO/M2XkaneHAzb2SVJ4Llc435JqjwOR+7LJdtHvHfi92Pngw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:59:51 2026 by rpki-client