$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: dvfGWDSezcZbefZIb3RKfvsuijxKvwQtnHVEHUr3eyg= Subject key identifier: 5A:7B:E8:80:FE:E6:19:EC:56:5B:63:BA:A5:47:2A:DC:C8:45:7B:83 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 232B3D213D8FEED011E75C0643CA3FFFA37A1851 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 0208 Signing time: Wed 25 Mar 2026 16:00:05 +0000 Manifest this update: Wed 25 Mar 2026 15:55:05 +0000 Manifest next update: Sun 29 Mar 2026 03:37:05 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: g2lsheOeqC61r76Ow2I2Ux+7LhQ9XsKXPywMRj3PasY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:37:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:2b:3d:21:3d:8f:ee:d0:11:e7:5c:06:43:ca:3f:ff:a3:7a:18:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Mar 25 15:55:05 2026 GMT Not After : Mar 29 03:37:05 2026 GMT Subject: CN=5A7BE880FEE619EC565B63BAA5472ADCC8457B83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:55:87:06:b9:de:60:bb:02:68:5c:16:aa:2e: f5:04:c8:43:6d:ac:ed:43:9c:06:72:77:08:c3:d9: 2a:46:73:ca:a1:99:7f:9a:44:2b:37:9f:6d:8a:56: 41:16:c3:8b:5e:ee:2b:b3:a8:c5:b1:4d:7c:f1:e0: 65:bd:fa:79:b3:64:f2:fb:a1:4d:ee:a2:88:77:d4: 00:ed:44:61:87:84:8a:f0:04:80:c7:35:f3:f9:df: 2c:c2:0c:60:f0:f2:c9:53:6d:35:0e:80:9c:9c:5d: bb:e2:2e:2d:b8:ba:51:0c:d2:ef:e8:c3:36:f9:33: a4:5b:07:8b:67:61:e7:3b:3b:01:74:ef:ff:fd:33: 2e:55:ac:ba:00:38:3e:00:55:e5:6a:ce:9e:fb:2c: 14:ab:5d:f3:76:3f:9a:df:ef:9b:c7:b4:c7:0d:1f: 9e:e6:f6:a0:cd:5f:c4:8d:de:0b:d6:39:03:e0:9e: 47:87:ef:44:f4:7d:2d:f0:68:67:16:3a:8b:91:2f: 31:a5:45:61:b2:39:ee:d3:e2:aa:0b:7e:50:70:79: 5a:c5:88:e7:40:47:a3:81:50:0d:93:f4:9e:62:24: ea:37:cf:0c:5a:39:30:c2:a3:e7:1d:f3:c4:f2:9d: d2:aa:67:c0:b4:8f:5b:64:55:ea:4d:67:14:cb:c8: 7f:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:7B:E8:80:FE:E6:19:EC:56:5B:63:BA:A5:47:2A:DC:C8:45:7B:83 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:34:b7:ec:df:00:51:88:ea:a3:55:26:38:ff:61:a3:38:c1: 73:a4:a8:69:7f:03:92:67:c5:b6:a6:25:08:a8:df:e7:82:13: 5a:eb:4a:2a:06:24:c2:ae:86:22:6c:8e:63:2c:51:80:d1:a0: 37:9f:e0:a4:6c:dc:20:6a:d4:20:df:70:ac:c5:86:02:c1:6a: 4d:08:84:90:1f:9c:b9:5e:74:b9:aa:f9:89:6b:dc:98:09:38: d4:c2:4f:95:a7:ec:c8:a1:f2:af:f1:55:f7:ce:be:cb:3d:2f: 4f:77:0e:5e:54:5b:f0:c2:c0:16:7f:4c:cd:55:1a:5f:fa:ef: d8:b0:7a:0a:13:57:af:c0:34:df:58:de:0b:19:7b:a5:22:03: 3b:80:71:d9:84:a4:a2:e4:66:b4:06:16:1a:38:5d:f3:13:e6: 01:0a:1e:16:ff:3b:2e:f4:7d:d2:3f:9f:3f:92:51:dc:91:88: eb:ac:83:16:ba:9c:ca:d2:5d:12:96:e6:77:13:72:7a:52:d4: ae:ce:cc:25:e4:b4:47:10:0c:71:f9:52:4b:d1:7b:14:85:a2: 9f:3b:b3:dc:a5:9b:cb:2e:11:4f:f8:7e:89:0c:9e:29:56:2d: 58:91:cc:25:63:f8:0f:69:8f:b2:2f:58:b3:ce:90:1b:0d:84: 9a:53:e2:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIys9IT2P7tAR51wGQ8o//6N6GFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNjAzMjUxNTU1MDVaFw0yNjAzMjkwMzM3MDVaMDMxMTAvBgNV BAMTKDVBN0JFODgwRkVFNjE5RUM1NjVCNjNCQUE1NDcyQURDQzg0NTdCODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHVYcGud5guwJoXBaqLvUEyENt rO1DnAZydwjD2SpGc8qhmX+aRCs3n22KVkEWw4te7iuzqMWxTXzx4GW9+nmzZPL7 oU3uooh31ADtRGGHhIrwBIDHNfP53yzCDGDw8slTbTUOgJycXbviLi24ulEM0u/o wzb5M6RbB4tnYec7OwF07//9My5VrLoAOD4AVeVqzp77LBSrXfN2P5rf75vHtMcN H57m9qDNX8SN3gvWOQPgnkeH70T0fS3waGcWOouRLzGlRWGyOe7T4qoLflBweVrF iOdAR6OBUA2T9J5iJOo3zwxaOTDCo+cd88TyndKqZ8C0j1tkVepNZxTLyH9/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWnvogP7mGexWW2O6pUcq3MhFe4MwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALA0t+zfAFGI6qNVJjj/YaM4wXOkqGl/A5Jn xbamJQio3+eCE1rrSioGJMKuhiJsjmMsUYDRoDef4KRs3CBq1CDfcKzFhgLBak0I hJAfnLledLmq+Ylr3JgJONTCT5Wn7Mih8q/xVffOvss9L093Dl5UW/DCwBZ/TM1V Gl/679iwegoTV6/ANN9Y3gsZe6UiAzuAcdmEpKLkZrQGFho4XfMT5gEKHhb/Oy70 fdI/nz+SUdyRiOusgxa6nMrSXRKW5ncTcnpS1K7OzCXktEcQDHH5UkvRexSFop87 s9ylm8suEU/4fokMnilWLViRzCVj+A9pj7IvWLPOkBsNhJpT4gI= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:33 2026 by rpki-client