$ rpki-client -vvf repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft File: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft (raw, json) Hash identifier: vnEbcBNiVA3pj0KS2oXCmk8n+GkErGMs2NfqlXVctAY= Subject key identifier: 44:97:06:AB:C0:2B:DE:75:33:6A:F7:E4:8B:5C:85:ED:A4:6C:F6:D9 Authority key identifier: 07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F Certificate issuer: /CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Certificate serial: 1A8953B13230EACD133CA8E9EE67E32C8628D2B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft Manifest number: 06 Signing time: Wed 25 Mar 2026 18:21:01 +0000 Manifest this update: Wed 25 Mar 2026 18:16:01 +0000 Manifest next update: Sun 29 Mar 2026 00:46:01 +0000 Files and hashes: 1: 07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl (hash: ZklwdPraZ54VxF9aHx/Ud41URzhSpyRc1zP5dD+/0mg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:46:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:89:53:b1:32:30:ea:cd:13:3c:a8:e9:ee:67:e3:2c:86:28:d2:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F Validity Not Before: Mar 25 18:16:01 2026 GMT Not After : Mar 29 00:46:01 2026 GMT Subject: CN=449706ABC02BDE75336AF7E48B5C85EDA46CF6D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:20:b2:a4:35:08:d2:c8:bb:78:9e:b0:3c:39: 9f:71:39:d8:a6:be:3e:88:1d:f8:f8:70:f8:4e:17: 14:0a:bf:46:a2:f3:ad:97:4c:4c:ff:97:8b:a6:50: 45:b6:e2:b6:04:2f:4a:03:1c:76:0a:5d:6a:4c:41: 36:0a:c3:d7:4d:d8:5a:78:ce:d1:8c:31:f6:0d:3c: 18:ee:74:21:d7:d4:be:2f:3b:88:e8:7f:f9:73:18: 17:a0:dc:bd:59:06:5a:22:26:9b:2b:b1:54:11:bc: 35:7e:ef:d5:7e:22:05:3e:f5:b0:54:ab:5b:59:ec: 44:83:e6:e6:25:5f:95:13:84:ad:02:66:b0:c9:ee: 02:6e:fc:c1:87:cc:10:de:1a:ec:3c:dd:40:c9:9e: c9:0a:2d:45:f3:6a:38:b0:28:64:92:0f:9f:a8:a1: 60:fd:cb:4c:4a:f8:6b:31:6c:45:ea:fe:ac:62:07: 69:8d:32:6f:79:4b:a1:f2:74:ba:79:f9:25:4d:15: 93:51:89:80:ca:c5:de:96:10:fb:e7:fd:6e:e6:76: b6:17:95:95:2e:13:fd:95:32:c0:1e:b6:7c:36:f3: 7d:63:c4:d5:99:7f:a1:d7:1c:1a:c3:d6:74:2e:6d: 15:8f:8c:97:40:0f:96:f2:86:c4:2a:0e:21:88:97: 4b:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:97:06:AB:C0:2B:DE:75:33:6A:F7:E4:8B:5C:85:ED:A4:6C:F6:D9 X509v3 Authority Key Identifier: keyid:07:E9:A4:22:0C:F1:D4:FF:0D:5C:99:AF:B5:00:12:C6:84:5F:D0:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/937f195a-369e-44ba-80ce-72173d51a372/1/07E9A4220CF1D4FF0D5C99AFB50012C6845FD04F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:ad:66:aa:a6:e3:f7:fa:c4:70:3f:ec:74:1a:26:be:64:56: fb:07:7f:03:27:81:5a:48:d6:28:90:0c:37:7b:6b:2f:77:5e: c1:5a:5c:80:3d:52:5e:2d:7f:76:f9:1a:81:e2:5c:98:99:40: a9:01:69:ae:d5:ac:78:32:cb:49:33:d9:98:85:e5:b6:fa:97: b7:1f:0e:2e:0f:d0:8e:7b:8e:9a:2a:d9:ab:5c:0d:00:6a:fc: 48:ff:32:ec:22:c4:ac:6c:b2:4f:a5:b7:10:8f:bc:08:23:bb: 7c:29:40:41:b4:03:66:12:2b:06:5a:c9:69:32:ff:5c:01:b4: fb:97:65:7c:a6:6e:38:6e:f8:e7:0f:71:ea:5c:e3:85:d7:94: 58:f6:33:b6:10:96:9c:48:57:02:06:46:3f:eb:bd:db:4e:c5: 25:66:d8:b1:b6:bc:a3:7e:e3:1c:57:c6:c6:6b:a3:5e:3c:b2: 32:58:30:c9:c1:7c:b7:2c:aa:65:db:8c:5b:3e:5e:c4:6f:28: 3f:b1:40:34:c8:40:85:2d:32:92:05:f0:0d:e7:cb:09:3c:f0: 34:8b:2c:be:f1:e9:3a:9f:52:7d:c8:60:fa:d9:98:8b:f9:2d: fa:14:b0:8d:c3:58:1c:ed:03:01:d3:24:a3:02:a4:9f:3d:a7: 47:28:a6:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGolTsTIw6s0TPKjp7mfjLIYo0rIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4 NDVGRDA0RjAeFw0yNjAzMjUxODE2MDFaFw0yNjAzMjkwMDQ2MDFaMDMxMTAvBgNV BAMTKDQ0OTcwNkFCQzAyQkRFNzUzMzZBRjdFNDhCNUM4NUVEQTQ2Q0Y2RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ILKkNQjSyLt4nrA8OZ9xOdim vj6IHfj4cPhOFxQKv0ai862XTEz/l4umUEW24rYEL0oDHHYKXWpMQTYKw9dN2Fp4 ztGMMfYNPBjudCHX1L4vO4jof/lzGBeg3L1ZBloiJpsrsVQRvDV+79V+IgU+9bBU q1tZ7ESD5uYlX5UThK0CZrDJ7gJu/MGHzBDeGuw83UDJnskKLUXzajiwKGSSD5+o oWD9y0xK+GsxbEXq/qxiB2mNMm95S6HydLp5+SVNFZNRiYDKxd6WEPvn/W7mdrYX lZUuE/2VMsAetnw2831jxNWZf6HXHBrD1nQubRWPjJdAD5byhsQqDiGIl0u7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJcGq8Ar3nUzavfki1yF7aRs9tkwHwYDVR0j BBgwFoAUB+mkIgzx1P8NXJmvtQASxoRf0E8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzdmMTk1YS0zNjllLTQ0YmEtODBjZS03MjE3M2Q1MWEzNzIvMS8wN0U5QTQyMjBD RjFENEZGMEQ1Qzk5QUZCNTAwMTJDNjg0NUZEMDRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEyQzY4NDVG RDA0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM3ZjE5NWEtMzY5ZS00NGJhLTgw Y2UtNzIxNzNkNTFhMzcyLzEvMDdFOUE0MjIwQ0YxRDRGRjBENUM5OUFGQjUwMDEy QzY4NDVGRDA0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGtZqqm4/f6xHA/7HQaJr5kVvsHfwMngVpI 1iiQDDd7ay93XsFaXIA9Ul4tf3b5GoHiXJiZQKkBaa7VrHgyy0kz2ZiF5bb6l7cf Di4P0I57jpoq2atcDQBq/Ej/MuwixKxssk+ltxCPvAgju3wpQEG0A2YSKwZayWky /1wBtPuXZXymbjhu+OcPcepc44XXlFj2M7YQlpxIVwIGRj/rvdtOxSVm2LG2vKN+ 4xxXxsZro148sjJYMMnBfLcsqmXbjFs+XsRvKD+xQDTIQIUtMpIF8A3nywk88DSL LL7x6TqfUn3IYPrZmIv5LfoUsI3DWBztAwHTJKMCpJ89p0copqA= -----END CERTIFICATE-----Generated at Thu Mar 26 14:40:44 2026 by rpki-client