$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: L1QT4RDrQqFb08vpJId2Boz44KY9KT+aUL/gRsJ+Snw= Subject key identifier: 81:68:12:56:C3:98:04:FA:F0:35:2B:0E:87:D6:A6:67:F3:22:E6:A4 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 68D51AE50CD634B31A29DC3765655648047B3474 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 0202 Signing time: Thu 26 Mar 2026 04:31:45 +0000 Manifest this update: Thu 26 Mar 2026 04:26:45 +0000 Manifest next update: Sun 29 Mar 2026 16:08:45 +0000 Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: cq4N8v8+K7KIKuD1ZPHk6nZP7C9cSYGL40iGspJq+JA=) 2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: iiGr+PopU6Hz3cnQVhQvXlHgSkixhRPRwZ/ZW4Nmfrw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d5:1a:e5:0c:d6:34:b3:1a:29:dc:37:65:65:56:48:04:7b:34:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Mar 26 04:26:45 2026 GMT Not After : Mar 29 16:08:45 2026 GMT Subject: CN=81681256C39804FAF0352B0E87D6A667F322E6A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:b0:ea:ad:d8:83:35:75:a8:56:b8:55:a0:86: a4:dc:d0:8c:45:45:3e:35:14:66:a8:16:d2:ac:7a: 7c:9f:cd:03:36:6a:90:04:10:d9:e9:34:6a:bf:3d: d4:c2:90:61:3b:b6:3e:78:45:cf:5a:3e:1f:79:44: 8d:d5:0f:ea:ce:da:3c:64:61:f5:fe:58:d6:f3:c4: 4a:bf:57:42:8b:7e:0b:6c:fd:c2:44:93:8b:c9:6d: 09:f8:11:7a:ec:96:19:96:72:22:53:dc:d0:0c:87: b4:18:d9:32:43:d5:4f:bf:e0:c8:89:25:20:33:7b: 3c:4f:5b:0a:4c:4f:c6:2f:b8:74:88:5a:aa:ba:96: 49:3f:5d:a6:f8:db:dc:c6:07:52:36:ee:b8:f0:83: 0e:18:bc:99:27:be:09:b0:70:4c:c4:e9:27:18:2e: 65:74:12:da:5e:72:75:44:78:3f:71:b4:a8:da:a5: a4:78:81:e5:5f:d8:80:b6:e9:40:bf:98:d1:1a:5a: 3f:cc:cf:e4:2c:66:da:56:84:5a:08:98:ac:93:cd: 25:47:e0:3d:3f:b6:08:7f:f2:d5:f8:d7:5f:0c:50: a9:1a:62:57:f1:2c:7e:32:6d:7f:da:57:5e:b9:5c: f3:4f:03:24:21:0c:cd:10:eb:39:5d:30:cb:47:27: 70:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:68:12:56:C3:98:04:FA:F0:35:2B:0E:87:D6:A6:67:F3:22:E6:A4 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:08:97:fe:35:73:10:dd:f5:b2:fe:38:90:07:a3:cd:15:67: 7d:8a:b0:55:fa:2a:e8:f9:ac:0e:0c:dc:93:9b:64:a1:24:04: 5b:75:9d:cf:db:25:de:36:be:56:a9:08:c3:4a:46:50:9c:a2: c9:1a:75:52:53:c2:14:96:6e:90:c1:55:6a:a2:f3:56:43:4e: 37:65:91:a6:96:cb:27:0b:96:20:21:9a:12:9a:ee:74:35:30: bd:8a:86:23:13:d6:cb:25:2e:79:38:d0:63:9d:07:6d:6d:1f: af:f6:10:ac:26:19:1a:2b:ea:7c:8b:10:3b:8a:25:7f:da:b9: 11:d8:87:ed:10:e1:a6:43:2b:fd:09:b2:d7:09:32:43:52:c3: 7e:90:8a:a6:d3:43:0d:f1:15:43:22:fb:eb:0a:fb:e3:83:47: 9a:f2:d5:c6:98:81:2b:67:65:8f:fb:64:a7:8b:11:8b:e9:d1: 85:b6:5e:a4:9e:d3:d1:e4:2e:72:05:2b:80:65:4b:2a:65:2a: a4:48:40:48:cd:69:53:ad:63:81:ec:8e:0c:92:5f:16:12:1f: 11:f8:16:79:6f:a5:2c:d9:64:8b:7c:b0:c9:b9:05:6b:b6:67: c1:d5:c1:dd:ac:21:9e:d0:5f:78:6b:7f:1e:65:91:85:a3:19: 1c:f3:09:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaNUa5QzWNLMaKdw3ZWVWSAR7NHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNjAzMjYwNDI2NDVaFw0yNjAzMjkxNjA4NDVaMDMxMTAvBgNV BAMTKDgxNjgxMjU2QzM5ODA0RkFGMDM1MkIwRTg3RDZBNjY3RjMyMkU2QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZsOqt2IM1dahWuFWghqTc0IxF RT41FGaoFtKsenyfzQM2apAEENnpNGq/PdTCkGE7tj54Rc9aPh95RI3VD+rO2jxk YfX+WNbzxEq/V0KLfgts/cJEk4vJbQn4EXrslhmWciJT3NAMh7QY2TJD1U+/4MiJ JSAzezxPWwpMT8YvuHSIWqq6lkk/Xab429zGB1I27rjwgw4YvJknvgmwcEzE6ScY LmV0EtpecnVEeD9xtKjapaR4geVf2IC26UC/mNEaWj/Mz+QsZtpWhFoImKyTzSVH 4D0/tgh/8tX4118MUKkaYlfxLH4ybX/aV165XPNPAyQhDM0Q6zldMMtHJ3AnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgWgSVsOYBPrwNSsOh9amZ/Mi5qQwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHsIl/41cxDd9bL+OJAHo80VZ32KsFX6Kuj5 rA4M3JObZKEkBFt1nc/bJd42vlapCMNKRlCcoskadVJTwhSWbpDBVWqi81ZDTjdl kaaWyycLliAhmhKa7nQ1ML2KhiMT1sslLnk40GOdB21tH6/2EKwmGRor6nyLEDuK JX/auRHYh+0Q4aZDK/0JstcJMkNSw36QiqbTQw3xFUMi++sK++ODR5ry1caYgStn ZY/7ZKeLEYvp0YW2XqSe09HkLnIFK4BlSyplKqRIQEjNaVOtY4HsjgySXxYSHxH4 FnlvpSzZZIt8sMm5BWu2Z8HVwd2sIZ7QX3hrfx5lkYWjGRzzCYE= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:26 2026 by rpki-client