$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: c5XAlUjAfHRtzoQ7Ujpy99pEwJ/fnyVUdOW8L0yKtmk= Subject key identifier: 7F:66:1C:61:A0:64:B7:08:AB:25:B2:CD:D0:9C:16:A2:FA:36:97:0E Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 4278D66FE872261D9D6687C38AB6B2ADD8C605C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0214 Signing time: Wed 25 Mar 2026 21:31:43 +0000 Manifest this update: Wed 25 Mar 2026 21:26:43 +0000 Manifest next update: Sun 29 Mar 2026 00:15:43 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: fgIdktNbv13gSR2149E82B1+KoRIhNbHn4COg5rfDdI=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:15:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:78:d6:6f:e8:72:26:1d:9d:66:87:c3:8a:b6:b2:ad:d8:c6:05:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Mar 25 21:26:43 2026 GMT Not After : Mar 29 00:15:43 2026 GMT Subject: CN=7F661C61A064B708AB25B2CDD09C16A2FA36970E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:8d:90:46:ca:d4:84:99:c8:a7:87:e0:85:20: d5:54:11:c9:45:77:54:e0:b7:31:7b:43:eb:5f:78: c0:09:c2:ad:67:0e:9f:52:9a:a6:f0:40:1d:7d:0d: 7d:32:48:66:43:7f:af:c0:6f:28:83:86:52:ad:1d: d9:c5:d8:1d:4f:42:b2:f9:27:48:68:93:d0:c1:03: aa:2f:a4:94:ef:48:64:a8:34:73:24:95:6e:72:b9: 4a:d4:9b:ce:df:13:30:77:4f:db:5a:6e:69:dc:06: 19:ce:14:6e:a9:6d:36:f6:c6:5c:91:a8:75:53:ee: 9f:a5:b7:6b:29:c6:62:14:ef:f0:77:25:12:f9:31: de:e1:2c:0a:27:d5:eb:6f:b4:1a:38:65:df:78:c9: 05:99:a0:a0:14:2b:31:fe:fc:4f:3a:93:5d:c3:cd: 1a:ac:36:ad:2d:5f:a1:bc:d6:51:70:c6:9e:41:4b: f0:e3:79:7a:1b:20:6e:f6:c6:e1:76:38:47:40:e4: cf:d2:68:41:bf:dd:0f:50:7c:27:8c:da:d0:49:71: 5e:9d:af:69:16:84:77:28:7d:36:38:d1:d9:13:ae: 43:f9:e7:3d:98:67:d2:31:5a:21:d3:93:ba:df:a0: b4:ab:fb:60:d6:39:fa:ed:7c:8a:6f:5c:f8:e2:04: ca:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:66:1C:61:A0:64:B7:08:AB:25:B2:CD:D0:9C:16:A2:FA:36:97:0E X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:88:22:50:11:01:66:78:3b:5f:1d:c9:07:61:85:24:fe:28: 47:d5:0d:24:34:90:67:57:02:86:83:cd:c9:ab:fd:a8:39:3e: 8d:75:76:f2:8d:70:94:15:6b:3a:af:ac:55:2d:0b:94:f9:f2: f0:87:94:25:cb:0e:3e:95:f7:2b:11:42:5f:fe:a9:ce:be:0c: 46:71:54:ab:c3:e1:99:91:61:90:f9:b9:ea:22:20:7b:d2:0c: 44:69:cd:b5:11:61:4f:90:93:b5:96:e9:2a:cd:78:8f:ec:3d: 05:7f:ec:e8:a0:ac:7b:f1:01:fa:d0:63:54:af:11:74:19:18: 59:32:e7:7b:e5:9d:40:98:d5:95:2c:eb:d7:42:bd:f1:35:d2: da:78:a5:f6:a3:16:d1:9c:45:1b:79:3c:aa:fa:c0:59:1e:96: 51:04:45:e7:b9:4e:a4:2a:00:42:53:9a:98:0b:ea:43:7c:99: 5d:88:1a:be:7d:e2:f7:0a:5c:3d:11:59:c8:33:a9:84:82:c0: 64:63:c0:98:c6:00:e3:89:33:1c:03:6f:ee:3e:55:5c:6b:c6: 40:ce:75:cc:b6:2e:f0:f5:26:ea:ec:f4:a4:95:4e:34:68:57: b6:3b:f1:42:e1:e9:88:3b:9c:dc:78:2d:27:bc:c6:60:28:f4: 8f:72:a6:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQnjWb+hyJh2dZofDirayrdjGBcYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNjAzMjUyMTI2NDNaFw0yNjAzMjkwMDE1NDNaMDMxMTAvBgNV BAMTKDdGNjYxQzYxQTA2NEI3MDhBQjI1QjJDREQwOUMxNkEyRkEzNjk3MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkjZBGytSEmcinh+CFINVUEclF d1TgtzF7Q+tfeMAJwq1nDp9SmqbwQB19DX0ySGZDf6/AbyiDhlKtHdnF2B1PQrL5 J0hok9DBA6ovpJTvSGSoNHMklW5yuUrUm87fEzB3T9tabmncBhnOFG6pbTb2xlyR qHVT7p+lt2spxmIU7/B3JRL5Md7hLAon1etvtBo4Zd94yQWZoKAUKzH+/E86k13D zRqsNq0tX6G81lFwxp5BS/DjeXobIG72xuF2OEdA5M/SaEG/3Q9QfCeM2tBJcV6d r2kWhHcofTY40dkTrkP55z2YZ9IxWiHTk7rfoLSr+2DWOfrtfIpvXPjiBMq5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf2YcYaBktwirJbLN0JwWovo2lw4wHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESIIlARAWZ4O18dyQdhhST+KEfVDSQ0kGdX AoaDzcmr/ag5Po11dvKNcJQVazqvrFUtC5T58vCHlCXLDj6V9ysRQl/+qc6+DEZx VKvD4ZmRYZD5ueoiIHvSDERpzbURYU+Qk7WW6SrNeI/sPQV/7OigrHvxAfrQY1Sv EXQZGFky53vlnUCY1ZUs69dCvfE10tp4pfajFtGcRRt5PKr6wFkellEERee5TqQq AEJTmpgL6kN8mV2IGr594vcKXD0RWcgzqYSCwGRjwJjGAOOJMxwDb+4+VVxrxkDO dcy2LvD1Jurs9KSVTjRoV7Y78ULh6Yg7nNx4LSe8xmAo9I9ypmg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:21 2026 by rpki-client