$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: Zz5Fzcqk3h5yyAv5v3Q67NvDe3xafSsAdlBXYiyWeuo= Subject key identifier: C9:A2:4F:04:4A:B0:72:C3:22:A4:34:38:11:D4:81:6F:01:67:80:C5 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 66C7085635DAD99FED6467F13607CD72C86EC2D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: EB Signing time: Wed 25 Mar 2026 18:21:06 +0000 Manifest this update: Wed 25 Mar 2026 18:16:06 +0000 Manifest next update: Sat 28 Mar 2026 23:26:06 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: OlH1LJDVTdPh6jf44CE+S2TFdfLVV08JTgH0pHi9Mxo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:26:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c7:08:56:35:da:d9:9f:ed:64:67:f1:36:07:cd:72:c8:6e:c2:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Mar 25 18:16:06 2026 GMT Not After : Mar 28 23:26:06 2026 GMT Subject: CN=C9A24F044AB072C322A4343811D4816F016780C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d0:51:74:2b:3e:66:30:1e:ec:c6:7f:ba:16: 87:58:89:0d:ba:28:6c:30:9d:d6:3d:4e:e4:7a:98: c1:fb:fe:57:0c:be:32:a4:99:12:c2:58:30:cc:dc: 1e:33:c9:0f:1a:9e:49:a4:21:9a:03:b4:ec:0b:b1: bf:a5:80:ad:37:42:ed:f0:16:48:cc:62:d8:80:ae: 80:11:19:9b:7d:cc:ba:33:99:8d:0b:60:ee:9b:4b: 1f:41:1a:95:39:b8:3e:eb:86:57:a5:ae:a1:d1:f8: ef:cc:41:22:69:5b:bc:a4:1b:7e:21:dd:74:1b:ea: c2:18:ca:a5:ff:bf:90:7e:24:90:1b:51:5b:e8:69: bf:e8:82:ce:aa:0e:37:2b:5d:f5:a3:00:ba:c4:3c: fd:46:85:68:56:b8:96:02:d0:c3:99:b4:7f:77:3e: 5e:9d:00:f3:07:6e:25:99:ec:fb:79:e4:f3:71:b5: 4f:0f:62:17:21:79:07:85:89:aa:c4:7c:d5:7e:6d: 6c:39:06:53:25:44:81:98:b1:66:09:24:81:39:b1: 31:b1:de:4e:58:fa:48:e5:1b:b4:ee:02:5d:40:30: 2b:e9:c6:95:6f:c0:fb:c2:60:05:57:e3:40:dc:2b: 56:bb:f8:0b:30:d3:ad:4c:93:57:d2:93:81:94:ab: 14:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:A2:4F:04:4A:B0:72:C3:22:A4:34:38:11:D4:81:6F:01:67:80:C5 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:2b:72:6e:b6:8b:62:93:f2:08:ec:b7:51:17:a6:1a:82:3a: 62:43:cb:97:aa:44:c2:35:2e:aa:49:ed:1b:6b:1f:57:4c:90: b6:9c:25:b0:26:c3:04:dd:42:f8:69:e6:24:99:81:03:08:16: a1:a7:9f:0c:d4:9f:0a:66:dd:23:49:36:d1:63:52:dc:99:85: 3d:54:3f:c0:92:d2:00:8b:ef:aa:95:81:dc:aa:df:be:96:be: 42:7e:6a:70:ac:6b:33:eb:11:c3:5c:dc:13:99:d6:7a:de:bd: 57:b3:63:f2:8e:47:5f:22:9d:cf:2f:20:0d:3f:cb:79:77:5b: fc:73:f5:48:79:57:c9:44:ab:d0:91:bc:df:17:40:dd:81:ba: b2:24:cd:eb:9b:10:92:ae:75:27:84:cd:a2:5e:fa:f3:5e:96: 6b:f5:5e:be:03:90:01:e5:e1:e1:c5:2b:2b:9c:e9:68:89:80: df:6f:37:ee:f6:65:99:da:95:60:2f:d2:55:91:52:94:03:a9: 00:fc:c3:65:c4:b5:a9:56:41:be:54:4f:2c:ed:5e:76:29:d6: 8c:d3:78:23:70:e2:22:4b:94:83:1d:3a:e1:69:88:0d:29:c4: 77:5f:b5:9a:43:eb:c7:e5:95:cc:d9:7e:0d:41:08:bd:cb:9b: 62:8a:4a:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZscIVjXa2Z/tZGfxNgfNcshuwtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNjAzMjUxODE2MDZaFw0yNjAzMjgyMzI2MDZaMDMxMTAvBgNV BAMTKEM5QTI0RjA0NEFCMDcyQzMyMkE0MzQzODExRDQ4MTZGMDE2NzgwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC70FF0Kz5mMB7sxn+6FodYiQ26 KGwwndY9TuR6mMH7/lcMvjKkmRLCWDDM3B4zyQ8ankmkIZoDtOwLsb+lgK03Qu3w FkjMYtiAroARGZt9zLozmY0LYO6bSx9BGpU5uD7rhlelrqHR+O/MQSJpW7ykG34h 3XQb6sIYyqX/v5B+JJAbUVvoab/ogs6qDjcrXfWjALrEPP1GhWhWuJYC0MOZtH93 Pl6dAPMHbiWZ7Pt55PNxtU8PYhcheQeFiarEfNV+bWw5BlMlRIGYsWYJJIE5sTGx 3k5Y+kjlG7TuAl1AMCvpxpVvwPvCYAVX40DcK1a7+Asw061Mk1fSk4GUqxTFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyaJPBEqwcsMipDQ4EdSBbwFngMUwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwrcm62i2KT8gjst1EXphqCOmJDy5eqRMI1 LqpJ7RtrH1dMkLacJbAmwwTdQvhp5iSZgQMIFqGnnwzUnwpm3SNJNtFjUtyZhT1U P8CS0gCL76qVgdyq376WvkJ+anCsazPrEcNc3BOZ1nrevVezY/KOR18inc8vIA0/ y3l3W/xz9Uh5V8lEq9CRvN8XQN2BurIkzeubEJKudSeEzaJe+vNelmv1Xr4DkAHl 4eHFKyuc6WiJgN9vN+72ZZnalWAv0lWRUpQDqQD8w2XEtalWQb5UTyztXnYp1ozT eCNw4iJLlIMdOuFpiA0pxHdftZpD68fllczZfg1BCL3Lm2KKSl0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:18:02 2026 by rpki-client