$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: TQZPr9pu/wS9XjRBeYo2i1VuDB2pTt0k/OIw+knQfsc= Subject key identifier: 92:32:1A:16:E9:F1:3C:08:51:6F:E2:F1:6C:67:9D:EC:29:F4:4B:15 Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 518DF1CF03902270B26144F7D173FEEC9587AF83 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 010F Signing time: Wed 25 Mar 2026 10:40:00 +0000 Manifest this update: Wed 25 Mar 2026 10:35:00 +0000 Manifest next update: Sat 28 Mar 2026 21:09:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: EBTnI9tBuRgHx7XzNJJK6O5uUOlk8/JPA44T1WNwOCw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:09:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8d:f1:cf:03:90:22:70:b2:61:44:f7:d1:73:fe:ec:95:87:af:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Mar 25 10:35:00 2026 GMT Not After : Mar 28 21:09:00 2026 GMT Subject: CN=92321A16E9F13C08516FE2F16C679DEC29F44B15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:76:17:c4:35:43:75:af:b2:ed:35:3d:b9:ba: 84:dc:a1:24:b5:67:da:25:1a:f8:14:31:95:9f:fc: a8:27:16:2b:1a:39:de:64:ca:f5:db:24:39:bd:c7: 20:d3:ae:a7:47:c6:02:34:a3:07:1a:57:1b:11:8e: 5a:a1:bb:91:bd:e5:05:f8:b9:f0:b0:c5:e6:c6:13: c5:23:1b:93:3c:97:50:21:cb:58:80:0d:b1:eb:4f: 41:e2:ad:8f:eb:59:31:b4:8b:ce:26:99:20:9d:4b: e8:d6:29:83:a1:c2:f8:5a:6c:b0:73:30:18:4f:fe: 2f:e4:ca:c4:e7:76:33:72:bf:28:69:2f:f5:21:ed: a0:da:72:f5:90:71:99:d1:47:1c:ca:b9:58:00:e1: 66:a5:7c:75:27:b6:88:d3:51:49:11:26:ad:8c:9d: 47:59:5a:8f:19:29:5b:2e:e0:02:5f:08:d5:6d:e5: e0:59:69:77:b2:6f:81:85:da:7a:d8:ad:f8:fb:95: c8:0a:b5:0a:2a:ec:a3:c1:d0:48:39:da:4e:69:22: 9c:3d:7d:c4:c4:95:0c:ff:18:dd:7e:a8:d2:9f:4c: 25:d8:32:6e:a5:92:30:a7:83:08:dc:0e:57:e5:95: dc:40:fa:a4:45:91:50:05:a5:e7:94:ec:4b:a0:fd: ab:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:32:1A:16:E9:F1:3C:08:51:6F:E2:F1:6C:67:9D:EC:29:F4:4B:15 X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:80:6a:79:3e:e0:6c:dc:fe:8a:54:ec:ec:60:1e:38:d1:1f: a0:f3:d6:42:b2:9e:b5:ff:25:1a:e2:4f:c2:1c:4c:05:bf:fb: da:4c:b9:d1:6f:30:86:48:cc:f2:c9:a2:ba:42:8a:7f:4f:7a: b3:5f:f4:0d:f9:12:d7:67:83:80:99:c5:0b:7c:f4:8f:8b:0d: fc:bc:03:2e:41:3a:1e:c8:19:ef:34:97:ab:ea:78:f2:dc:93: 9a:8a:80:3f:51:0e:62:96:0a:75:c5:bc:27:ac:b5:e6:7d:8e: db:5d:e5:df:8a:46:d6:b9:fb:74:3b:9b:14:dd:7b:8f:cd:1c: 02:5a:ba:24:02:0e:19:7d:f1:b2:b0:a7:6e:a0:69:26:d4:3a: 11:5a:f7:8a:05:11:6e:7a:99:db:5e:13:5e:6e:59:92:e7:45: 2f:dd:fa:54:5c:90:06:1e:3f:ac:b0:83:63:21:82:0e:15:53: 1a:15:f6:78:70:94:cf:69:ed:3e:f2:48:3d:2a:23:a9:3d:b3: 5d:ae:96:50:38:89:84:15:53:4a:44:fb:53:c2:e8:e6:04:0a: f2:a8:4a:59:1a:80:06:13:5a:72:5d:92:63:cf:9c:b2:4e:eb: 52:26:85:aa:88:4d:27:e1:04:52:5e:2e:42:ef:4d:92:a6:62: 98:af:49:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUY3xzwOQInCyYUT30XP+7JWHr4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNjAzMjUxMDM1MDBaFw0yNjAzMjgyMTA5MDBaMDMxMTAvBgNV BAMTKDkyMzIxQTE2RTlGMTNDMDg1MTZGRTJGMTZDNjc5REVDMjlGNDRCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUdhfENUN1r7LtNT25uoTcoSS1 Z9olGvgUMZWf/KgnFisaOd5kyvXbJDm9xyDTrqdHxgI0owcaVxsRjlqhu5G95QX4 ufCwxebGE8UjG5M8l1Ahy1iADbHrT0HirY/rWTG0i84mmSCdS+jWKYOhwvhabLBz MBhP/i/kysTndjNyvyhpL/Uh7aDacvWQcZnRRxzKuVgA4WalfHUntojTUUkRJq2M nUdZWo8ZKVsu4AJfCNVt5eBZaXeyb4GF2nrYrfj7lcgKtQoq7KPB0Eg52k5pIpw9 fcTElQz/GN1+qNKfTCXYMm6lkjCngwjcDlflldxA+qRFkVAFpeeU7Eug/avHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkjIaFunxPAhRb+LxbGed7Cn0SxUwHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACAank+4Gzc/opU7OxgHjjRH6Dz1kKynrX/ JRriT8IcTAW/+9pMudFvMIZIzPLJorpCin9PerNf9A35Etdng4CZxQt89I+LDfy8 Ay5BOh7IGe80l6vqePLck5qKgD9RDmKWCnXFvCesteZ9jttd5d+KRta5+3Q7mxTd e4/NHAJauiQCDhl98bKwp26gaSbUOhFa94oFEW56mdteE15uWZLnRS/d+lRckAYe P6ywg2Mhgg4VUxoV9nhwlM9p7T7ySD0qI6k9s12ullA4iYQVU0pE+1PC6OYECvKo SlkagAYTWnJdkmPPnLJO61ImhaqITSfhBFJeLkLvTZKmYpivSS0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:56:54 2026 by rpki-client