$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: UYyx4BKjitxr6Biaop01EzIPTLwLSn/co1tzS51db7Q= Subject key identifier: 04:4C:7E:8B:50:8E:04:33:89:09:FD:52:6F:22:2E:E3:85:5A:DA:DD Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 5AA1FFB50F03C6E4061647B80C1992C5FC71F4E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: E0 Signing time: Wed 25 Mar 2026 05:22:40 +0000 Manifest this update: Wed 25 Mar 2026 05:17:40 +0000 Manifest next update: Sat 28 Mar 2026 15:48:40 +0000 Files and hashes: 1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 2: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 3: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 4: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: iBbk5J05hN8tKkVeEkfsJGD8FW69SM2IepgyHyiWbWI=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:48:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:a1:ff:b5:0f:03:c6:e4:06:16:47:b8:0c:19:92:c5:fc:71:f4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Mar 25 05:17:40 2026 GMT Not After : Mar 28 15:48:40 2026 GMT Subject: CN=044C7E8B508E04338909FD526F222EE3855ADADD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:43:a4:91:9a:a1:eb:22:9b:51:da:be:d7:e4: 40:ad:f4:85:fb:a7:90:aa:b6:2d:81:15:54:5f:25: ca:25:a9:4f:d1:8d:81:78:1c:16:a3:53:00:e4:54: 08:9e:ce:f1:e6:00:05:09:6b:26:8a:99:9d:cd:f2: ab:ba:7a:ec:de:48:45:75:5c:9b:96:bc:3e:8e:1b: 46:a4:ee:2e:83:86:54:64:a5:05:78:6f:b1:65:07: c8:e6:e3:2d:fc:b7:76:f8:1b:03:5a:1b:eb:12:19: 08:1b:88:d7:6c:9b:ee:f7:b0:bf:a5:6f:f0:f1:05: 78:84:78:a1:ac:49:51:02:a8:7e:6f:9e:61:55:79: b7:4c:a1:51:f5:ac:80:b9:e4:13:89:ed:b3:ac:55: e1:39:7c:5a:87:f3:eb:17:df:54:aa:2c:3e:fa:8b: f3:75:c4:f5:42:3a:76:9c:60:fc:fa:4d:67:00:cf: a5:13:94:5f:57:2a:e8:a9:68:d9:2e:25:79:b7:fe: 95:d4:34:90:af:eb:da:65:76:cb:99:76:3c:9a:a1: e1:3d:7b:27:7a:4a:59:93:15:49:20:12:ce:cc:3d: ad:83:cd:c0:54:eb:65:25:0e:99:bc:a8:96:51:39: e5:cf:13:f2:0e:8e:f8:ba:01:87:f3:dc:94:f2:30: 24:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:4C:7E:8B:50:8E:04:33:89:09:FD:52:6F:22:2E:E3:85:5A:DA:DD X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:6d:89:42:93:da:10:a1:74:ad:9a:52:23:98:48:02:53:2c: c4:a9:8c:ce:4c:e0:e0:52:24:bd:c7:88:f9:b2:ae:40:ea:92: cb:e1:2d:73:d6:6d:09:fe:a5:01:f9:79:87:34:4d:b0:02:32: 71:a0:a2:86:d9:9d:ca:3c:1a:48:16:62:85:fe:60:3a:69:cc: 1c:d3:44:85:e4:29:ad:81:05:b3:4e:3d:4b:61:8e:35:17:22: 62:08:a9:70:46:5b:a6:5d:e7:61:ad:ca:8b:ec:7f:d1:b7:7c: 6f:37:dd:18:00:5f:6e:82:f8:f1:43:99:8e:a1:0d:3a:92:5c: af:6e:8f:a3:81:18:a7:d5:59:12:33:9a:d8:7a:61:6a:7a:3e: 74:fd:85:71:2a:93:b6:af:f1:0c:dd:90:8f:ae:62:fd:9f:ab: 45:07:91:30:f0:c1:f9:7a:b6:c6:48:8f:9f:f6:c1:29:1e:22: fc:9e:4e:a6:60:d9:b5:84:e3:b4:b8:12:47:36:35:bc:74:93: 00:43:61:99:00:f7:cd:37:d4:4b:af:93:07:ab:6e:d2:80:a4: d4:d1:c6:94:74:50:7a:54:ba:41:c0:74:87:f1:3e:e3:53:81: 4a:3f:21:6a:72:4c:de:c8:de:60:1b:8b:c7:12:ea:4b:18:d5: e3:54:5b:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWqH/tQ8DxuQGFke4DBmSxfxx9OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNjAzMjUwNTE3NDBaFw0yNjAzMjgxNTQ4NDBaMDMxMTAvBgNV BAMTKDA0NEM3RThCNTA4RTA0MzM4OTA5RkQ1MjZGMjIyRUUzODU1QURBREQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtQ6SRmqHrIptR2r7X5ECt9IX7 p5Cqti2BFVRfJcolqU/RjYF4HBajUwDkVAiezvHmAAUJayaKmZ3N8qu6euzeSEV1 XJuWvD6OG0ak7i6DhlRkpQV4b7FlB8jm4y38t3b4GwNaG+sSGQgbiNdsm+73sL+l b/DxBXiEeKGsSVECqH5vnmFVebdMoVH1rIC55BOJ7bOsVeE5fFqH8+sX31SqLD76 i/N1xPVCOnacYPz6TWcAz6UTlF9XKuipaNkuJXm3/pXUNJCv69pldsuZdjyaoeE9 eyd6SlmTFUkgEs7MPa2DzcBU62UlDpm8qJZROeXPE/IOjvi6AYfz3JTyMCTPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBEx+i1COBDOJCf1SbyIu44Va2t0wHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9tiUKT2hChdK2aUiOYSAJTLMSpjM5M4OBS JL3HiPmyrkDqksvhLXPWbQn+pQH5eYc0TbACMnGgoobZnco8GkgWYoX+YDppzBzT RIXkKa2BBbNOPUthjjUXImIIqXBGW6Zd52Gtyovsf9G3fG833RgAX26C+PFDmY6h DTqSXK9uj6OBGKfVWRIzmth6YWp6PnT9hXEqk7av8QzdkI+uYv2fq0UHkTDwwfl6 tsZIj5/2wSkeIvyeTqZg2bWE47S4Ekc2Nbx0kwBDYZkA98031EuvkwerbtKApNTR xpR0UHpUukHAdIfxPuNTgUo/IWpyTN7I3mAbi8cS6ksY1eNUWyo= -----END CERTIFICATE-----Generated at Thu Mar 26 11:16:55 2026 by rpki-client