$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: PI6S76LlyOxzll4+1aL8zNB5GRlYqXRDItN14dzbP4o= Subject key identifier: 10:AF:01:C6:DA:17:E6:48:F3:B5:43:BF:AD:3C:EF:99:C1:B1:B4:BB Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 22FC5DCE729C1C1FA8B5C948E7BF2C54B82212AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 02BA Signing time: Tue 24 Mar 2026 13:41:51 +0000 Manifest this update: Tue 24 Mar 2026 13:36:51 +0000 Manifest next update: Fri 27 Mar 2026 20:03:51 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: IZAxbMicRcqAzaZtMjhUwi1+FVIdt4oT105Mhx0UE5A=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 3: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:03:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:fc:5d:ce:72:9c:1c:1f:a8:b5:c9:48:e7:bf:2c:54:b8:22:12:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Mar 24 13:36:51 2026 GMT Not After : Mar 27 20:03:51 2026 GMT Subject: CN=10AF01C6DA17E648F3B543BFAD3CEF99C1B1B4BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:07:99:66:ec:37:d0:05:a7:6b:60:dd:c3: 6a:e5:4e:31:ba:52:1f:00:a8:5e:24:33:c7:bc:14: 10:00:25:fe:fe:99:1f:c9:39:73:c5:a1:26:47:47: 00:6d:15:32:c1:a4:b7:5b:97:43:8e:76:c5:45:42: 8e:ab:10:01:5f:0c:4a:0f:ae:e3:33:ec:66:df:c8: 90:99:6e:84:d0:68:ec:16:a6:6a:10:95:9a:3f:a6: 55:22:83:3e:01:90:3b:a5:cd:30:50:c8:49:c9:1a: c1:62:3d:a4:2e:87:34:25:ac:5a:0e:cf:d0:95:e5: 77:97:a4:26:0d:e9:0c:9a:3b:ce:0f:a6:0d:31:c3: b8:66:a9:02:3d:dc:14:36:4e:0e:77:72:c7:ed:6a: a2:d7:31:41:82:49:df:d9:5f:f5:60:9a:dc:81:39: 60:48:45:d9:50:95:18:a8:60:93:1c:7c:9f:6a:58: 46:4b:61:9f:bc:f3:70:8f:aa:6d:3a:2e:51:1d:28: bd:17:09:65:fa:9a:32:f8:0d:97:46:5b:50:84:bf: 6b:f0:3d:3d:92:cc:3c:9f:3e:32:e5:98:ac:a4:9e: 80:fe:fc:75:02:7c:8a:23:78:5d:62:bd:5b:82:16: 5e:8b:a0:98:be:40:f7:b4:2d:4c:c3:38:4f:8c:29: 31:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:AF:01:C6:DA:17:E6:48:F3:B5:43:BF:AD:3C:EF:99:C1:B1:B4:BB X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:05:b2:6c:c5:64:38:c9:e1:03:87:63:54:0e:e6:1a:73:ef: b8:c5:af:78:24:57:44:a1:c8:04:8f:4b:ec:a7:7f:58:c0:c4: f9:a5:49:29:e6:1d:c5:05:86:d8:eb:12:ec:44:fb:7a:f2:ed: 08:c2:28:cb:4e:53:63:2c:28:c1:30:34:3f:be:be:96:94:99: 55:f6:9f:33:bf:27:8d:70:f6:d7:27:96:09:0b:7a:26:03:94: e0:23:ba:7e:57:9e:25:ef:e3:78:f0:bd:1c:30:3b:ee:1c:6f: 0f:8d:a3:e1:d5:43:72:a5:3a:fc:bd:db:31:e7:21:d1:d7:72: 4d:47:a0:07:29:ce:11:a9:c5:2f:df:9f:fc:b4:ca:96:fc:5d: 6a:d3:cd:48:80:b4:46:7b:62:c0:43:85:fa:76:28:8d:2c:f4: 87:89:57:44:6e:90:13:3d:41:54:f7:02:e1:a9:d9:16:1a:9e: f6:cd:bd:0b:85:65:88:73:70:ed:f2:ee:9e:f7:80:96:02:4e: 13:ba:75:4e:19:c0:c2:53:78:0e:4c:08:ad:20:49:14:c0:d6: 26:fa:bb:7e:d3:fc:50:4c:97:5f:3a:a1:32:e6:9f:52:e4:b5: f1:c5:b7:bb:a7:c3:5f:00:15:16:91:52:2c:7c:eb:e1:1e:a1: 94:81:ac:69 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIvxdznKcHB+otclI578sVLgiEq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNjAzMjQxMzM2NTFaFw0yNjAzMjcyMDAzNTFaMDMxMTAvBgNV BAMTKDEwQUYwMUM2REExN0U2NDhGM0I1NDNCRkFEM0NFRjk5QzFCMUI0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCehgeZZuw30AWna2Ddw2rlTjG6 Uh8AqF4kM8e8FBAAJf7+mR/JOXPFoSZHRwBtFTLBpLdbl0OOdsVFQo6rEAFfDEoP ruMz7GbfyJCZboTQaOwWpmoQlZo/plUigz4BkDulzTBQyEnJGsFiPaQuhzQlrFoO z9CV5XeXpCYN6QyaO84Ppg0xw7hmqQI93BQ2Tg53csftaqLXMUGCSd/ZX/VgmtyB OWBIRdlQlRioYJMcfJ9qWEZLYZ+883CPqm06LlEdKL0XCWX6mjL4DZdGW1CEv2vw PT2SzDyfPjLlmKyknoD+/HUCfIojeF1ivVuCFl6LoJi+QPe0LUzDOE+MKTFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEK8BxtoX5kjztUO/rTzvmcGxtLswHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0FsmzFZDjJ4QOHY1QO5hpz77jFr3gkV0Sh yASPS+ynf1jAxPmlSSnmHcUFhtjrEuxE+3ry7QjCKMtOU2MsKMEwND++vpaUmVX2 nzO/J41w9tcnlgkLeiYDlOAjun5XniXv43jwvRwwO+4cbw+No+HVQ3KlOvy92zHn IdHXck1HoAcpzhGpxS/fn/y0ypb8XWrTzUiAtEZ7YsBDhfp2KI0s9IeJV0RukBM9 QVT3AuGp2RYanvbNvQuFZYhzcO3y7p73gJYCThO6dU4ZwMJTeA5MCK0gSRTA1ib6 u37T/FBMl186oTLmn1LktfHFt7unw18AFRaRUix86+EeoZSBrGk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:53:42 2026 by rpki-client