$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: Mb3SXLyndkdocXgm75JGKvz0xIDqCRU7IOP4BrKKgrI= Subject key identifier: 94:D5:50:6D:43:1B:D3:30:9B:B6:5B:6B:9B:2A:73:17:95:DD:06:C1 Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 024F248D650A42F7B015EC7D4FCE408CBE2F7B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 018F Signing time: Thu 26 Mar 2026 06:43:47 +0000 Manifest this update: Thu 26 Mar 2026 06:38:47 +0000 Manifest next update: Sun 29 Mar 2026 16:29:47 +0000 Files and hashes: 1: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: ubAgdugDvQaB/HJfz4fY63v3MFp+bq+KP7AGcGBA1hw=) 2: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: DiLaOSAGeMGPeLSDdzKMT4fdyNSepmZMlyNLR4Q26VU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:4f:24:8d:65:0a:42:f7:b0:15:ec:7d:4f:ce:40:8c:be:2f:7b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Mar 26 06:38:47 2026 GMT Not After : Mar 29 16:29:47 2026 GMT Subject: CN=94D5506D431BD3309BB65B6B9B2A731795DD06C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:df:64:cd:77:fa:95:ee:7d:38:d4:57:dd:94: 05:b1:fb:45:ff:86:d6:0d:09:07:c9:77:78:a5:e8: 30:47:cd:5e:c7:3f:a6:6f:85:4b:7f:ea:30:4a:23: 65:38:b8:99:e9:5f:4c:bf:f1:6d:24:de:87:47:2a: 5f:f0:e6:07:2c:90:29:01:8d:f8:b5:11:2d:50:0c: 7f:5e:f9:f0:9b:97:05:43:da:da:6e:c6:cf:f4:9e: 0e:73:53:fd:71:a6:ad:b5:b2:95:04:25:d2:0b:ee: f2:32:d3:71:88:bf:88:8c:84:33:25:e8:6a:d1:69: 98:92:aa:71:60:79:83:74:62:04:c6:0a:30:b1:3a: 5d:63:f2:e8:58:eb:80:ed:35:10:67:13:ee:97:56: 32:11:de:75:75:8c:ab:0b:06:ee:aa:5c:57:35:94: ea:e3:fa:f1:8d:86:03:c0:47:a6:b9:ab:1e:8b:a0: 68:72:15:0d:ea:0a:73:7f:8d:20:4b:cc:a0:3f:f1: aa:48:23:8a:e0:90:ac:9c:08:42:b9:20:e6:9c:c6: 29:ea:be:eb:fb:a1:46:29:7b:70:9b:e9:39:d0:88: 70:ad:c3:af:09:88:3f:8e:4e:dd:70:34:69:23:1f: 8a:8d:a6:f2:89:30:d2:bb:b4:76:cc:a2:b7:9e:76: 71:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:D5:50:6D:43:1B:D3:30:9B:B6:5B:6B:9B:2A:73:17:95:DD:06:C1 X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:81:10:78:dd:41:7b:d2:07:ae:1e:d7:f4:9b:35:69:f4:d0: fb:ec:97:93:d2:5e:66:93:33:3f:71:0a:98:7b:68:4a:22:07: 47:08:97:56:b1:9d:b3:ee:85:aa:7a:36:0f:67:c2:d5:03:32: 9c:c8:c1:53:f3:76:a2:06:ff:30:a6:c8:ae:d7:88:44:9a:e0: 9e:8f:99:c2:05:6c:8f:c4:80:85:85:38:cf:00:c5:07:27:cf: 6a:8d:e4:2d:8b:1e:29:4c:d8:ff:11:3b:ef:6f:be:89:c1:5f: f0:ee:e0:09:1c:f2:22:8a:00:56:4b:48:ff:b4:7b:ea:08:b5: fd:a2:49:17:ba:c2:dd:f4:0d:c8:d5:9a:1c:2b:68:8e:15:63: 32:ec:4f:da:b1:ee:3d:e7:73:40:44:72:6c:4c:b2:5c:c8:46: a4:31:e7:78:6e:e7:4a:c0:4f:d8:ca:41:65:a5:a8:b0:d2:7a: db:e5:cc:29:b9:d0:a9:eb:9b:5c:40:40:3c:de:35:c8:ae:05: a5:db:46:3d:7c:d2:10:c4:76:ea:69:bd:0e:7b:7a:52:a2:b9: ea:e4:24:3a:12:1d:ba:d9:65:09:90:b9:18:00:6d:2d:88:4e: 4d:79:31:da:d6:f6:86:58:2a:5d:e3:f6:10:51:c1:76:58:33: d1:d3:ab:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAk8kjWUKQvewFex9T85AjL4ve3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNjAzMjYwNjM4NDdaFw0yNjAzMjkxNjI5NDdaMDMxMTAvBgNV BAMTKDk0RDU1MDZENDMxQkQzMzA5QkI2NUI2QjlCMkE3MzE3OTVERDA2QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC32TNd/qV7n041FfdlAWx+0X/ htYNCQfJd3il6DBHzV7HP6ZvhUt/6jBKI2U4uJnpX0y/8W0k3odHKl/w5gcskCkB jfi1ES1QDH9e+fCblwVD2tpuxs/0ng5zU/1xpq21spUEJdIL7vIy03GIv4iMhDMl 6GrRaZiSqnFgeYN0YgTGCjCxOl1j8uhY64DtNRBnE+6XVjIR3nV1jKsLBu6qXFc1 lOrj+vGNhgPAR6a5qx6LoGhyFQ3qCnN/jSBLzKA/8apII4rgkKycCEK5IOacxinq vuv7oUYpe3Cb6TnQiHCtw68JiD+OTt1wNGkjH4qNpvKJMNK7tHbMoreednEvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlNVQbUMb0zCbtltrmypzF5XdBsEwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6BEHjdQXvSB64e1/SbNWn00Pvsl5PSXmaT Mz9xCph7aEoiB0cIl1axnbPuhap6Ng9nwtUDMpzIwVPzdqIG/zCmyK7XiESa4J6P mcIFbI/EgIWFOM8AxQcnz2qN5C2LHilM2P8RO+9vvonBX/Du4Akc8iKKAFZLSP+0 e+oItf2iSRe6wt30DcjVmhwraI4VYzLsT9qx7j3nc0BEcmxMslzIRqQx53hu50rA T9jKQWWlqLDSetvlzCm50Knrm1xAQDzeNciuBaXbRj180hDEduppvQ57elKiuerk JDoSHbrZZQmQuRgAbS2ITk15MdrW9oZYKl3j9hBRwXZYM9HTq2M= -----END CERTIFICATE-----Generated at Thu Mar 26 08:47:47 2026 by rpki-client