$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: 9I6/jAhMSKUEHpCk02Dj60xE3uaG4OK0RMOzrDFXDsY= Subject key identifier: 53:E7:CC:47:5E:86:84:2A:4B:36:98:76:E8:CB:CC:AC:1D:2A:08:03 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 71C6E78C7FEAD6EB4CA4F97803BC3AE82B1A08FF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 03:12:28 +0000 Manifest this update: Wed 25 Mar 2026 03:07:28 +0000 Manifest next update: Sat 28 Mar 2026 08:53:28 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 2: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: MTkfThDvgZ7moD/JQA9iMDse9qa65PGK4INEJj7YSi8=) 4: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:53:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c6:e7:8c:7f:ea:d6:eb:4c:a4:f9:78:03:bc:3a:e8:2b:1a:08:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Mar 25 03:07:28 2026 GMT Not After : Mar 28 08:53:28 2026 GMT Subject: CN=53E7CC475E86842A4B369876E8CBCCAC1D2A0803 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:41:2a:58:7d:ed:4a:c4:6a:c5:b0:d3:34:6f: 9e:fc:ea:ce:a3:95:98:74:9a:de:c9:8b:43:67:8c: d3:a6:4d:12:73:63:9c:3d:31:9f:c7:84:96:5a:1f: 22:61:f0:b2:ff:42:fb:9e:07:f3:57:7b:b7:93:3b: 84:42:50:4a:6e:16:1b:2d:7f:dd:9f:cf:cc:b3:03: f8:49:dd:6b:68:ad:ba:4e:73:0f:58:a1:4d:ba:d7: 75:c9:ca:27:0e:bf:b6:d3:bb:10:8b:91:95:f5:5d: 7d:25:80:2a:c6:1e:b3:5c:fc:7c:77:e5:1f:3e:f4: 11:1a:0e:df:af:d8:f9:bf:62:07:25:b8:19:76:33: 8f:de:66:ba:3c:28:2f:6f:81:0b:8e:29:9d:7d:b2: b1:c9:c4:1b:fe:8f:6f:fe:36:45:8b:08:12:19:88: 58:72:93:bd:f2:8e:ef:59:ea:e9:2a:c2:d0:9d:8f: 8f:5a:46:4a:74:f7:23:20:ac:c7:e6:ea:9c:7d:80: 4e:90:d9:1d:85:20:08:14:39:cf:95:8f:8f:16:51: 20:07:20:6c:54:a8:4e:c3:13:e8:bd:45:51:c4:0a: fd:84:88:50:76:5b:0c:cf:f1:da:58:70:16:12:57: f1:62:35:18:6d:f0:90:5c:af:a5:ba:5e:d7:91:11: b2:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:E7:CC:47:5E:86:84:2A:4B:36:98:76:E8:CB:CC:AC:1D:2A:08:03 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:1c:8c:ad:00:03:ba:08:5a:6b:f1:1e:70:dd:29:42:82:ad: 18:3c:40:ba:02:7b:f4:2b:fb:5f:bb:5f:27:dc:72:2a:09:36: e4:7e:e0:e9:7b:a7:c3:37:b3:7f:e6:19:14:58:68:bd:7f:6d: 5f:d1:d7:51:e4:3c:27:b3:f8:1e:0c:aa:91:a1:04:ef:cd:ca: df:51:33:1d:91:d7:e7:f2:4c:c5:a5:89:a9:c4:4c:c4:7d:81: 49:b8:16:a3:8a:67:48:06:dd:5f:81:fd:07:a9:a2:15:3b:dc: 74:29:8f:b7:a7:74:74:51:81:3d:e0:14:80:c3:59:9c:8f:31: e6:d6:be:67:81:ea:5e:19:b7:b8:4c:ad:85:fe:b7:82:53:2c: 7d:a5:17:ef:22:e2:16:a2:59:e2:dc:e8:93:ed:8f:27:f6:92: 46:1a:94:99:ce:0b:4a:81:b2:2f:5c:52:c4:ff:41:18:28:c5: bb:c0:e9:6e:33:ed:66:96:cd:6f:0c:1d:76:83:40:fa:82:a7: d4:b2:6b:2f:74:e2:9f:84:2a:8c:33:d6:a9:5e:5f:83:da:0a: 75:6d:60:89:2a:86:6a:2c:01:b0:e3:21:18:a4:d9:cf:8c:26: 9c:d9:3a:93:b0:00:c0:bc:63:06:6b:05:c7:4b:4e:0d:d1:49: 47:63:aa:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccbnjH/q1utMpPl4A7w66CsaCP8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNjAzMjUwMzA3MjhaFw0yNjAzMjgwODUzMjhaMDMxMTAvBgNV BAMTKDUzRTdDQzQ3NUU4Njg0MkE0QjM2OTg3NkU4Q0JDQ0FDMUQyQTA4MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjQSpYfe1KxGrFsNM0b5786s6j lZh0mt7Ji0NnjNOmTRJzY5w9MZ/HhJZaHyJh8LL/QvueB/NXe7eTO4RCUEpuFhst f92fz8yzA/hJ3WtorbpOcw9YoU2613XJyicOv7bTuxCLkZX1XX0lgCrGHrNc/Hx3 5R8+9BEaDt+v2Pm/YgcluBl2M4/eZro8KC9vgQuOKZ19srHJxBv+j2/+NkWLCBIZ iFhyk73yju9Z6ukqwtCdj49aRkp09yMgrMfm6px9gE6Q2R2FIAgUOc+Vj48WUSAH IGxUqE7DE+i9RVHECv2EiFB2WwzP8dpYcBYSV/FiNRht8JBcr6W6XteREbJdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU+fMR16GhCpLNph26MvMrB0qCAMwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4cjK0AA7oIWmvxHnDdKUKCrRg8QLoCe/Qr +1+7XyfccioJNuR+4Ol7p8M3s3/mGRRYaL1/bV/R11HkPCez+B4MqpGhBO/Nyt9R Mx2R1+fyTMWlianETMR9gUm4FqOKZ0gG3V+B/QepohU73HQpj7endHRRgT3gFIDD WZyPMebWvmeB6l4Zt7hMrYX+t4JTLH2lF+8i4haiWeLc6JPtjyf2kkYalJnOC0qB si9cUsT/QRgoxbvA6W4z7WaWzW8MHXaDQPqCp9Syay904p+EKowz1qleX4PaCnVt YIkqhmosAbDjIRik2c+MJpzZOpOwAMC8YwZrBcdLTg3RSUdjqoU= -----END CERTIFICATE-----Generated at Thu Mar 26 12:54:10 2026 by rpki-client