$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft File: C7D4D30314160FDACB9582CF972E90EC10AE206F.mft (raw, json) Hash identifier: 9/VC8JN1ncnyf693aYYghI9H0/AmP7k8xteVwGnMeVM= Subject key identifier: CC:92:0A:DE:8E:E4:98:54:7D:2C:DD:B2:8B:FB:CB:41:02:25:87:71 Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F Certificate issuer: /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Certificate serial: 32080DB2D7F68320E6ABA03C0F3D3AEBC1E7E075 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 11:41:45 +0000 Manifest this update: Tue 24 Mar 2026 11:36:45 +0000 Manifest next update: Fri 27 Mar 2026 21:44:45 +0000 Files and hashes: 1: 3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (hash: xsM8R50wRfdlN5JweHjZIfTpmduLeILF/fWliK+i37M=) 2: C7D4D30314160FDACB9582CF972E90EC10AE206F.crl (hash: 1PKJDfMizpRN31L+Rm3PGPVtGkIVv2OZQMPtFGo55Xo=) 3: 3130332e3134342e32322e302f32342d3234203d3e20313333383339.roa (hash: llGSDUYqSL3OD7TtVsp6ArCR8mqRzLPhfJs1tW9L5wg=) 4: 323030313a6466303a333330303a3a2f34382d3438203d3e20313333383339.roa (hash: 4N6LRCptGvt5p5Z3fi0q5sQmHj3OTG0hHztRBZdu+t8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:44:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:08:0d:b2:d7:f6:83:20:e6:ab:a0:3c:0f:3d:3a:eb:c1:e7:e0:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F Validity Not Before: Mar 24 11:36:45 2026 GMT Not After : Mar 27 21:44:45 2026 GMT Subject: CN=CC920ADE8EE498547D2CDDB28BFBCB4102258771 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1f:8b:56:8c:c8:c1:72:57:90:4c:98:86:1c: 6f:79:e1:90:58:87:a1:f0:26:e9:68:ae:f7:0f:67: 70:a8:fc:9f:5b:07:9e:bb:d2:ad:1b:6b:32:df:33: ab:ad:7c:a6:90:99:5f:97:77:9b:7b:7b:37:e2:40: bd:fa:e4:2c:f4:08:7d:ea:3d:f6:1e:5b:e8:33:12: 70:58:54:98:29:7e:ee:c3:bf:5f:f0:e3:64:82:12: 71:2f:af:b9:32:03:da:b3:c6:bc:b4:b3:0e:e6:80: d3:bf:38:69:8b:42:d2:9b:01:ce:ab:12:da:51:1a: 3a:c6:1b:42:0e:9d:43:75:a5:a0:9c:52:15:a5:6f: da:28:aa:8e:d9:83:d0:f9:60:15:ab:21:c7:a3:b5: 03:4c:21:87:fa:10:12:49:94:fd:a8:4d:f0:80:a3: ff:fe:15:be:de:37:c4:52:ea:89:33:2a:05:02:30: 6d:5d:6c:ca:12:58:2a:5c:2e:94:13:2b:f5:ec:2f: 14:a8:71:5b:14:8d:23:27:21:54:a2:8a:94:4e:3e: d7:cc:da:51:4a:aa:0f:d7:e2:c2:99:3d:d8:61:9c: c7:88:cc:17:14:9d:7e:0c:ea:2b:c8:c1:dd:58:74: 0c:14:c0:80:f4:6e:e1:e6:1b:9e:8b:53:d3:66:be: 25:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:92:0A:DE:8E:E4:98:54:7D:2C:DD:B2:8B:FB:CB:41:02:25:87:71 X509v3 Authority Key Identifier: keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:fc:48:21:cb:45:a1:b4:73:94:96:d5:e0:c4:fb:6f:e2:81: 37:70:d7:3f:af:ae:04:1a:52:0a:c9:ad:d8:b8:31:23:24:7f: 0d:31:93:b5:18:d0:c3:80:f6:d5:4c:00:3b:b4:0d:71:eb:ce: 36:45:e1:ba:ea:9b:24:a8:69:c2:72:38:d4:a2:e2:83:ff:8c: 84:77:4d:db:af:84:33:32:d2:90:f3:b7:77:aa:3d:97:c4:dc: 8a:f0:b5:f1:8c:8b:e9:f5:06:ab:14:34:61:e0:5d:e1:4a:53: 71:ff:2a:87:30:9d:b7:eb:d4:05:91:77:ae:73:0f:13:8e:12: 36:9d:4a:95:f7:4d:65:f0:46:50:b0:5b:64:3c:dc:38:a4:eb: 51:e1:34:3b:3c:5d:8c:ab:a5:4c:e5:74:c2:38:50:b4:13:5f: 62:7e:a6:7f:de:51:a7:a5:5d:0e:6c:74:7f:ea:6b:e2:7c:3e: b4:5d:7b:81:aa:6f:d3:dc:0a:fd:0f:b0:16:37:7a:95:70:e7: 01:80:e1:14:4a:b3:c9:38:d8:03:c3:19:cc:43:8b:56:af:3e: d5:c7:a2:ea:1d:38:48:6c:5d:73:41:24:36:a3:ca:98:52:f2: ab:81:1b:03:1c:eb:7e:18:dd:03:21:c5:92:b5:9b:c8:22:6f: ca:a4:a7:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMggNstf2gyDmq6A8Dz0668Hn4HUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx MEFFMjA2RjAeFw0yNjAzMjQxMTM2NDVaFw0yNjAzMjcyMTQ0NDVaMDMxMTAvBgNV BAMTKENDOTIwQURFOEVFNDk4NTQ3RDJDRERCMjhCRkJDQjQxMDIyNTg3NzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIH4tWjMjBcleQTJiGHG954ZBY h6HwJulorvcPZ3Co/J9bB5670q0bazLfM6utfKaQmV+Xd5t7ezfiQL365Cz0CH3q PfYeW+gzEnBYVJgpfu7Dv1/w42SCEnEvr7kyA9qzxry0sw7mgNO/OGmLQtKbAc6r EtpRGjrGG0IOnUN1paCcUhWlb9ooqo7Zg9D5YBWrIcejtQNMIYf6EBJJlP2oTfCA o//+Fb7eN8RS6okzKgUCMG1dbMoSWCpcLpQTK/XsLxSocVsUjSMnIVSiipROPtfM 2lFKqg/X4sKZPdhhnMeIzBcUnX4M6ivIwd1YdAwUwID0buHmG56LU9NmviWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJIK3o7kmFR9LN2yi/vLQQIlh3EwHwYDVR0j BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0 MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF MjA2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTE4YWQ3YTYtYzkwNy00MzU5LWFi YTUtZDU3NDhiYTE2MTc2LzAvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkw RUMxMEFFMjA2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEH8SCHLRaG0c5SW1eDE+2/igTdw1z+vrgQa UgrJrdi4MSMkfw0xk7UY0MOA9tVMADu0DXHrzjZF4brqmySoacJyONSi4oP/jIR3 TduvhDMy0pDzt3eqPZfE3IrwtfGMi+n1BqsUNGHgXeFKU3H/Kocwnbfr1AWRd65z DxOOEjadSpX3TWXwRlCwW2Q83Dik61HhNDs8XYyrpUzldMI4ULQTX2J+pn/eUael XQ5sdH/qa+J8PrRde4Gqb9PcCv0PsBY3epVw5wGA4RRKs8k42APDGcxDi1avPtXH ouodOEhsXXNBJDajyphS8quBGwMc634Y3QMhxZK1m8gib8qkp0c= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:13 2026 by rpki-client