$ rpki-client -vvf repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft File: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft (raw, json) Hash identifier: cz057mNXBWTmlLabA+Y1sX14nbWvr9zmoA+Go8VtD8I= Subject key identifier: 7B:77:0B:E2:53:25:69:7E:AC:EA:7D:F3:ED:53:A9:DD:79:B9:D5:9C Authority key identifier: 78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 Certificate issuer: /CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Certificate serial: 0B6D1F08489ACAB5A60EE4E3F6E1117180C49D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft Manifest number: 0239 Signing time: Tue 24 Mar 2026 21:30:44 +0000 Manifest this update: Tue 24 Mar 2026 21:25:44 +0000 Manifest next update: Sat 28 Mar 2026 07:16:44 +0000 Files and hashes: 1: 3130332e3232352e34342e302f32332d3234203d3e2034383030.roa (hash: OSaJ9H+pyoyoyW3zEewmfSIETQNngkI7dg9yZKfTzxI=) 2: 7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl (hash: OJNuqWHHOer+zBVJVlIxEhv3E5CT/jYY12YmoNto1XQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:6d:1f:08:48:9a:ca:b5:a6:0e:e4:e3:f6:e1:11:71:80:c4:9d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7892183ECB217EAEF2D3DD16491BE535CA5C5A61 Validity Not Before: Mar 24 21:25:44 2026 GMT Not After : Mar 28 07:16:44 2026 GMT Subject: CN=7B770BE25325697EACEA7DF3ED53A9DD79B9D59C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:31:72:4e:74:1e:2c:ef:b6:89:ae:62:6a:c6: 04:f5:9f:14:5f:dc:53:b2:7d:76:8c:9a:77:b4:18: 27:e8:42:9e:61:fc:c2:d9:b4:be:f1:70:9c:ed:3e: e6:41:d2:17:7c:0a:73:5f:5f:f5:0b:d8:e6:e6:1e: 0f:4c:b0:eb:49:78:a5:0a:c6:9d:73:a7:5e:6e:60: cf:45:d5:79:61:4a:07:88:b4:74:45:72:5c:30:c6: 77:6c:51:c2:bb:e9:25:9e:53:f9:3c:f5:32:28:ba: c2:92:d0:c7:6b:1c:a3:2d:d2:da:76:22:4f:12:a9: be:aa:dc:42:fa:7c:9c:47:4f:d3:07:29:8c:52:79: 53:89:6c:6c:5a:85:3b:69:5d:35:9d:70:a8:a5:12: fb:de:1e:fc:e6:d1:d2:30:02:c0:f6:3f:57:71:3a: a0:68:ab:d5:e2:c3:7d:1b:24:99:50:31:03:f8:74: 4d:5a:e7:7a:16:8c:cf:88:54:8a:93:13:6a:00:50: e2:dd:93:7c:19:70:76:41:7f:9d:78:6c:e0:6c:7e: ca:7b:f3:d1:e2:3b:30:18:f5:bd:76:ad:bc:ae:fb: 53:56:0d:84:28:d3:c8:b2:3f:fd:70:a7:41:07:9c: 0c:79:21:07:59:76:c9:d7:64:c5:d4:ca:87:4a:58: 70:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:77:0B:E2:53:25:69:7E:AC:EA:7D:F3:ED:53:A9:DD:79:B9:D5:9C X509v3 Authority Key Identifier: keyid:78:92:18:3E:CB:21:7E:AE:F2:D3:DD:16:49:1B:E5:35:CA:5C:5A:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ce6ac01-8eac-46c5-9469-35efa36099fd/0/7892183ECB217EAEF2D3DD16491BE535CA5C5A61.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:99:5f:96:62:cf:bb:18:a4:db:25:f1:a6:e1:cf:ce:fa:af: 5b:bf:3d:28:7c:1c:13:20:f5:c4:25:70:28:81:f5:d8:56:fd: 59:f7:cc:7c:40:f6:4b:97:04:dc:8e:b0:fa:d5:35:35:de:ca: e6:56:e7:84:46:4a:a6:45:ba:58:2a:c4:eb:98:cb:45:53:38: 95:59:be:75:34:0c:a4:3f:b6:f1:5b:95:ee:dc:8f:29:4a:08: fb:97:4c:86:f8:ec:15:de:ed:93:cc:05:c2:1e:e7:98:07:f1: 83:75:0f:92:ff:37:3d:eb:70:16:01:ad:41:ea:7a:e8:a9:a3: 10:85:16:39:85:d5:31:d5:fe:f8:f8:74:ff:22:e8:53:49:5b: 58:d3:e9:3f:2a:7d:de:2d:71:45:24:19:ad:4f:50:24:7b:c4: 0a:7b:33:99:0d:98:5c:0b:51:60:ac:52:72:4d:3f:4c:66:a7: cb:db:e2:74:f3:8a:06:1f:f8:d2:26:1f:98:87:90:c2:db:6a: 48:21:b9:c4:fd:2a:a6:a6:b9:b4:31:e0:48:33:c5:dc:8b:96: d2:4a:e8:bd:e6:43:aa:75:43:10:d6:a7:6c:d2:96:5d:a4:48: c7:40:43:4e:22:47:9d:2a:2a:ae:c6:89:89:7f:3d:85:68:3f: 67:75:a8:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC20fCEiayrWmDuTj9uERcYDEnY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVD QTVDNUE2MTAeFw0yNjAzMjQyMTI1NDRaFw0yNjAzMjgwNzE2NDRaMDMxMTAvBgNV BAMTKDdCNzcwQkUyNTMyNTY5N0VBQ0VBN0RGM0VENTNBOURENzlCOUQ1OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEMXJOdB4s77aJrmJqxgT1nxRf 3FOyfXaMmne0GCfoQp5h/MLZtL7xcJztPuZB0hd8CnNfX/UL2ObmHg9MsOtJeKUK xp1zp15uYM9F1XlhSgeItHRFclwwxndsUcK76SWeU/k89TIousKS0MdrHKMt0tp2 Ik8Sqb6q3EL6fJxHT9MHKYxSeVOJbGxahTtpXTWdcKilEvveHvzm0dIwAsD2P1dx OqBoq9Xiw30bJJlQMQP4dE1a53oWjM+IVIqTE2oAUOLdk3wZcHZBf514bOBsfsp7 89HiOzAY9b12rbyu+1NWDYQo08iyP/1wp0EHnAx5IQdZdsnXZMXUyodKWHDfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe3cL4lMlaX6s6n3z7VOp3Xm51ZwwHwYDVR0j BBgwFoAUeJIYPsshfq7y090WSRvlNcpcWmEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Y2U2YWMwMS04ZWFjLTQ2YzUtOTQ2OS0zNWVmYTM2MDk5ZmQvMC83ODkyMTgzRUNC MjE3RUFFRjJEM0REMTY0OTFCRTUzNUNBNUM1QTYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1MzVDQTVD NUE2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWNlNmFjMDEtOGVhYy00NmM1LTk0 NjktMzVlZmEzNjA5OWZkLzAvNzg5MjE4M0VDQjIxN0VBRUYyRDNERDE2NDkxQkU1 MzVDQTVDNUE2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI2ZX5Ziz7sYpNsl8abhz876r1u/PSh8HBMg 9cQlcCiB9dhW/Vn3zHxA9kuXBNyOsPrVNTXeyuZW54RGSqZFulgqxOuYy0VTOJVZ vnU0DKQ/tvFble7cjylKCPuXTIb47BXe7ZPMBcIe55gH8YN1D5L/Nz3rcBYBrUHq euipoxCFFjmF1THV/vj4dP8i6FNJW1jT6T8qfd4tcUUkGa1PUCR7xAp7M5kNmFwL UWCsUnJNP0xmp8vb4nTzigYf+NImH5iHkMLbakghucT9KqamubQx4EgzxdyLltJK 6L3mQ6p1QxDWp2zSll2kSMdAQ04iR50qKq7GiYl/PYVoP2d1qLE= -----END CERTIFICATE-----Generated at Thu Mar 26 16:05:44 2026 by rpki-client