$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: dD/KR2yyM9LmqyYK2OJJxJGgd1tag+C5Ao8vFCn/VYs= Subject key identifier: 47:9F:36:82:CE:24:C7:22:EB:B4:75:BD:52:7D:A5:91:7D:AB:7D:FC Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 49D50665F37F7C9353FBE5CBA065C73A6B418BB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 95 Signing time: Tue 24 Mar 2026 21:02:09 +0000 Manifest this update: Tue 24 Mar 2026 20:57:09 +0000 Manifest next update: Sat 28 Mar 2026 02:01:09 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: Pf39QvZJs+o28P7+iaCbi1z6RUM/tjA59V8z1IbRuj8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:01:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:d5:06:65:f3:7f:7c:93:53:fb:e5:cb:a0:65:c7:3a:6b:41:8b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Mar 24 20:57:09 2026 GMT Not After : Mar 28 02:01:09 2026 GMT Subject: CN=479F3682CE24C722EBB475BD527DA5917DAB7DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ab:2c:6f:f3:2c:de:ac:91:fb:93:cf:60:40: a0:4e:ca:ab:10:21:59:6b:45:09:13:53:e3:3f:bb: 10:2d:22:29:bb:b9:cb:8f:92:2a:8e:ff:95:5f:9c: 8b:6c:03:cd:69:26:53:17:bb:18:ff:43:34:e4:0a: d8:75:cb:6f:e5:f3:75:f0:67:a7:fc:e7:aa:01:86: 41:a0:96:5c:81:bc:ce:2b:b2:83:b9:00:cd:e1:ba: 66:ab:91:f5:ad:60:6c:84:6e:c5:1b:1e:4c:5f:1e: 41:fb:47:21:03:23:bd:30:0c:e3:d3:a4:7a:ad:fc: 16:e8:5d:31:68:89:97:9d:7f:83:23:72:b5:30:e8: 4d:e2:5f:eb:37:18:1e:36:ff:92:e3:a3:af:43:4e: df:b5:4e:1b:64:2a:ff:9a:ba:c3:fa:bd:54:93:a7: 8f:15:9b:3d:24:93:a2:2b:26:30:ef:87:37:9f:86: 65:ab:d8:6f:dc:5a:a0:d4:79:dc:42:2e:8f:37:6d: 12:a9:7b:9f:56:52:72:4b:09:19:e8:77:c3:99:d4: 5f:50:b8:7f:ab:ed:3a:00:92:a6:7d:1e:7a:75:95: 34:58:bd:03:3a:19:42:45:ca:d9:2b:07:ae:93:6d: 1a:bf:49:c6:b1:f3:34:6b:a8:f8:f9:c3:4e:db:37: 12:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:9F:36:82:CE:24:C7:22:EB:B4:75:BD:52:7D:A5:91:7D:AB:7D:FC X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:a9:3c:bd:f5:c2:1d:05:6f:3d:c6:ef:29:b9:a0:b4:c3:96: 4a:ad:33:14:ad:78:46:88:a9:88:49:2f:c6:56:15:c6:37:d8: 98:e8:66:af:97:db:af:46:b3:b3:8d:04:30:d3:1c:76:70:76: da:e4:06:9e:29:10:49:0f:61:2a:16:31:b8:13:23:65:88:4f: 6e:e1:c2:70:22:7e:1b:39:17:78:fd:31:a3:71:4f:fe:76:c8: e3:e8:ae:61:dc:68:33:d5:48:e6:85:2e:84:37:6c:a9:5a:4c: 56:20:68:4e:9c:7a:16:bd:17:ae:76:ad:af:2d:9d:76:37:f5: cc:c0:20:22:7d:aa:f6:d7:05:1f:2a:db:4a:0f:cb:be:a6:a4: d0:1d:93:50:88:f9:e7:cc:87:c2:1b:4d:3a:51:b4:7d:1a:06: 8f:6a:fc:a9:84:06:1c:ba:98:fc:6d:7f:d7:ce:e0:e3:83:b4: 76:87:43:98:03:6c:98:08:c2:92:2c:0e:5b:13:0a:bf:52:13: ab:85:c3:0e:3d:49:9a:84:bf:7c:dc:0f:2c:bb:a1:9f:46:06: 9f:1f:64:7d:5a:76:da:8f:4f:7a:7d:dd:d2:68:2f:a7:bb:5c: 78:44:4a:73:1a:33:02:35:a8:e4:be:9d:a1:ff:59:14:9e:cc: 51:75:2a:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSdUGZfN/fJNT++XLoGXHOmtBi7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNjAzMjQyMDU3MDlaFw0yNjAzMjgwMjAxMDlaMDMxMTAvBgNV BAMTKDQ3OUYzNjgyQ0UyNEM3MjJFQkI0NzVCRDUyN0RBNTkxN0RBQjdERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qyxv8yzerJH7k89gQKBOyqsQ IVlrRQkTU+M/uxAtIim7ucuPkiqO/5VfnItsA81pJlMXuxj/QzTkCth1y2/l83Xw Z6f856oBhkGgllyBvM4rsoO5AM3humarkfWtYGyEbsUbHkxfHkH7RyEDI70wDOPT pHqt/BboXTFoiZedf4MjcrUw6E3iX+s3GB42/5Ljo69DTt+1ThtkKv+ausP6vVST p48Vmz0kk6IrJjDvhzefhmWr2G/cWqDUedxCLo83bRKpe59WUnJLCRnod8OZ1F9Q uH+r7ToAkqZ9Hnp1lTRYvQM6GUJFytkrB66TbRq/Scax8zRrqPj5w07bNxLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR582gs4kxyLrtHW9Un2lkX2rffwwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA+pPL31wh0Fbz3G7ym5oLTDlkqtMxSteEaI qYhJL8ZWFcY32JjoZq+X269Gs7ONBDDTHHZwdtrkBp4pEEkPYSoWMbgTI2WIT27h wnAifhs5F3j9MaNxT/52yOPormHcaDPVSOaFLoQ3bKlaTFYgaE6ceha9F652ra8t nXY39czAICJ9qvbXBR8q20oPy76mpNAdk1CI+efMh8IbTTpRtH0aBo9q/KmEBhy6 mPxtf9fO4OODtHaHQ5gDbJgIwpIsDlsTCr9SE6uFww49SZqEv3zcDyy7oZ9GBp8f ZH1adtqPT3p93dJoL6e7XHhESnMaMwI1qOS+naH/WRSezFF1Kl4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:24:32 2026 by rpki-client