$ rpki-client -vvf repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft File: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft (raw, json) Hash identifier: XJJk44R/6iJos3IQQyMnwyXKIOoVl3yTbZAzBpyIlFg= Subject key identifier: F7:DF:D1:76:4C:9D:00:41:EF:5A:83:A4:97:10:FC:A2:3E:76:96:D0 Authority key identifier: 74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C Certificate issuer: /CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Certificate serial: 0F1C131FC9BAD7E7EC9AF1A5BA03501C3C09C44A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 14:32:12 +0000 Manifest this update: Wed 25 Mar 2026 14:27:12 +0000 Manifest next update: Sat 28 Mar 2026 17:53:12 +0000 Files and hashes: 1: 3130332e3134392e3137372e302f32342d3234203d3e20313430343433.roa (hash: S9ss1UFC8ltEsWGGAoKwO6GpiU6tI/d9HG2NbYNNjaw=) 2: 749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl (hash: iOsi7+DJ8y7T0P/SAWGEQo7/hjT9OrV2DLp7L/6BlG0=) 3: 3130332e3134392e3137362e302f32342d3234203d3e20313430343433.roa (hash: eZYtUZLtuRDuxdsxLnXjmZgx/1qgwLRJLKfiQTo3GQY=) 4: 323030313a6466333a333438303a3a2f34382d3438203d3e20313430343433.roa (hash: 82yOGmzbVqcCrn1bsvHBPAxt3dwBS7UeQFQIwikGg9M=) 5: 3130332e3134392e3137362e302f32332d3233203d3e20313430343433.roa (hash: D6ZQ1Nszopc+tjvvlk9LxeInARJoQa1nF2ZqxR2uBQM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:1c:13:1f:c9:ba:d7:e7:ec:9a:f1:a5:ba:03:50:1c:3c:09:c4:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=749E8F6C5F22D18A70B682F86C65ECD3EA27635C Validity Not Before: Mar 25 14:27:12 2026 GMT Not After : Mar 28 17:53:12 2026 GMT Subject: CN=F7DFD1764C9D0041EF5A83A49710FCA23E7696D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:72:c8:93:63:9e:93:ef:65:b9:6a:f2:0e: 23:8c:9d:53:72:75:ac:20:09:0a:1c:90:74:6c:ce: 97:8d:68:80:7f:7e:a0:43:89:d3:16:12:10:0c:5a: 61:10:26:6d:48:91:0b:b5:7e:bd:65:c5:8d:c3:6a: 85:15:e0:48:09:40:0e:c8:f9:0a:f0:97:31:32:07: 90:e5:b2:e4:e4:dd:04:c0:5d:c6:d6:3b:a1:6a:27: b5:6a:0f:70:9b:5b:d2:06:15:ad:d7:ba:d1:c4:1b: 72:03:e1:76:a2:c9:71:55:2d:74:05:a9:c2:05:dc: 27:0c:23:19:46:b1:4b:b2:06:c8:d2:69:3d:6d:f9: 46:c8:aa:44:c5:7b:a7:e6:8f:5d:3c:8e:e5:52:9b: d2:52:cd:34:f2:34:74:c8:34:8c:68:64:c5:db:38: 60:32:2f:e2:c8:67:f3:45:78:83:0f:b7:d4:95:44: a5:c7:0a:33:29:d8:bf:96:d6:17:28:10:dd:bc:72: 91:37:31:49:62:39:b8:72:ec:7f:87:72:b3:78:6d: 58:a2:3e:12:82:14:70:6d:84:67:be:6b:b5:1d:bb: a7:a3:40:e6:8a:56:24:ec:67:2b:50:8b:c3:ba:68: 3c:20:58:16:c6:9c:31:72:a0:79:22:4d:4b:b2:a7: 58:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:DF:D1:76:4C:9D:00:41:EF:5A:83:A4:97:10:FC:A2:3E:76:96:D0 X509v3 Authority Key Identifier: keyid:74:9E:8F:6C:5F:22:D1:8A:70:B6:82:F8:6C:65:EC:D3:EA:27:63:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ae8db38-63a8-413c-a9f6-cc223afa4a75/0/749E8F6C5F22D18A70B682F86C65ECD3EA27635C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:5c:7b:ac:39:ce:1c:ce:e2:03:5c:b9:8e:eb:73:90:83:8e: 5c:5d:db:78:82:f2:1b:86:98:28:93:35:14:64:97:2a:13:70: e5:1e:4f:a0:6e:9f:43:0c:bc:49:a2:13:c6:bd:f4:54:57:48: 24:2e:8c:d0:51:40:07:70:68:86:94:80:99:0a:95:98:f6:2a: 2f:21:20:12:fa:74:25:ae:38:6f:f4:55:69:50:bc:96:f0:f2: 89:3d:98:d9:e2:68:13:a0:f0:11:9e:7d:69:1f:1b:d8:ac:bf: 93:62:dd:6d:e7:a2:ac:24:71:83:a4:19:5c:80:f4:0c:fe:69: c8:ab:77:3c:5a:03:4a:c9:ed:6b:e0:b5:51:36:72:4e:d5:78: 40:df:24:59:01:5e:5f:6d:90:a6:d2:d7:bc:d4:11:ca:43:48: c1:75:52:26:91:55:e6:69:f6:dd:0a:62:02:23:01:0c:5a:bb: cd:72:33:36:c8:57:77:f7:58:b6:57:c6:b1:aa:33:45:4a:7f: 7e:29:52:48:61:44:bc:40:dc:58:15:63:81:58:a1:91:c2:b1: 3e:72:cc:86:6c:15:b5:e1:69:eb:f8:9d:8c:19:9c:df:65:5a: 5f:ad:31:c4:39:19:22:23:3f:b0:f6:c3:95:ad:a7:eb:9e:98: d3:8b:3b:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxwTH8m61+fsmvGlugNQHDwJxEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNF QTI3NjM1QzAeFw0yNjAzMjUxNDI3MTJaFw0yNjAzMjgxNzUzMTJaMDMxMTAvBgNV BAMTKEY3REZEMTc2NEM5RDAwNDFFRjVBODNBNDk3MTBGQ0EyM0U3Njk2RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJnLIk2Oek+9luWryDiOMnVNy dawgCQockHRszpeNaIB/fqBDidMWEhAMWmEQJm1IkQu1fr1lxY3DaoUV4EgJQA7I +QrwlzEyB5DlsuTk3QTAXcbWO6FqJ7VqD3CbW9IGFa3XutHEG3ID4XaiyXFVLXQF qcIF3CcMIxlGsUuyBsjSaT1t+UbIqkTFe6fmj108juVSm9JSzTTyNHTINIxoZMXb OGAyL+LIZ/NFeIMPt9SVRKXHCjMp2L+W1hcoEN28cpE3MUliObhy7H+HcrN4bVii PhKCFHBthGe+a7Udu6ejQOaKViTsZytQi8O6aDwgWBbGnDFyoHkiTUuyp1jlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99/RdkydAEHvWoOklxD8oj52ltAwHwYDVR0j BBgwFoAUdJ6PbF8i0YpwtoL4bGXs0+onY1wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 YWU4ZGIzOC02M2E4LTQxM2MtYTlmNi1jYzIyM2FmYTRhNzUvMC83NDlFOEY2QzVG MjJEMThBNzBCNjgyRjg2QzY1RUNEM0VBMjc2MzVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVDRDNFQTI3 NjM1Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGFlOGRiMzgtNjNhOC00MTNjLWE5 ZjYtY2MyMjNhZmE0YTc1LzAvNzQ5RThGNkM1RjIyRDE4QTcwQjY4MkY4NkM2NUVD RDNFQTI3NjM1Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJce6w5zhzO4gNcuY7rc5CDjlxd23iC8huG mCiTNRRklyoTcOUeT6Bun0MMvEmiE8a99FRXSCQujNBRQAdwaIaUgJkKlZj2Ki8h IBL6dCWuOG/0VWlQvJbw8ok9mNniaBOg8BGefWkfG9isv5Ni3W3noqwkcYOkGVyA 9Az+acirdzxaA0rJ7WvgtVE2ck7VeEDfJFkBXl9tkKbS17zUEcpDSMF1UiaRVeZp 9t0KYgIjAQxau81yMzbIV3f3WLZXxrGqM0VKf34pUkhhRLxA3FgVY4FYoZHCsT5y zIZsFbXhaev4nYwZnN9lWl+tMcQ5GSIjP7D2w5Wtp+uemNOLO3M= -----END CERTIFICATE-----Generated at Thu Mar 26 14:13:37 2026 by rpki-client