$ rpki-client -vvf repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.mft (raw, json) Hash identifier: O/FZ3xQXZs8EokkOtVv76/77YVWsPFf9YakqRRexr+Y= Subject key identifier: 3A:F9:79:08:2D:59:A4:0D:15:45:AB:04:2E:E9:1D:79:F9:BA:E8:E7 Authority key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 Certificate issuer: /CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Certificate serial: 08EF045797CF4F53DF0FD4B679A4EDE9F82E09F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft Manifest number: 0209 Signing time: Tue 24 Mar 2026 21:02:06 +0000 Manifest this update: Tue 24 Mar 2026 20:57:06 +0000 Manifest next update: Sat 28 Mar 2026 03:25:06 +0000 Files and hashes: 1: 7B7F414EB90DB2AC9713729961F3D35102FEA537.crl (hash: GJlsQ093CtlJQKK/eECLLyrTjAsZHYJYi1R6jyHWCME=) 2: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: SJiBilo0yb+Xo2QIMXQYNjp32KQ3sSu+rr7Zt7LD6xo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:25:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ef:04:57:97:cf:4f:53:df:0f:d4:b6:79:a4:ed:e9:f8:2e:09:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Validity Not Before: Mar 24 20:57:06 2026 GMT Not After : Mar 28 03:25:06 2026 GMT Subject: CN=3AF979082D59A40D1545AB042EE91D79F9BAE8E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:60:51:10:ca:24:39:c3:73:95:21:08:d6:f2: 59:88:25:9b:43:85:9a:76:76:38:06:da:08:28:87: 54:61:2b:ec:86:de:0b:6e:ef:71:a9:25:17:d2:1a: e4:c5:86:7f:8c:4d:54:8a:cd:63:f3:7a:59:8b:13: 18:08:87:45:94:58:fa:5d:1f:9c:d6:bc:ac:9f:ff: 0b:b3:eb:09:92:78:7e:26:5e:9f:01:8b:e0:1e:26: 3a:e9:9a:99:5b:7f:12:16:ed:77:d1:d0:47:c9:74: 5d:fb:02:b6:73:56:8a:33:63:b3:70:cc:8f:2c:58: aa:5f:86:e1:cf:0a:10:db:72:50:5c:e4:85:9b:45: f7:b2:06:b7:d3:01:4a:13:71:ce:c5:3c:ba:f8:ed: d8:07:87:4d:70:5e:ea:de:6a:74:20:5c:a6:b2:f2: 30:52:7d:3d:2d:89:23:54:5c:47:b1:ae:14:b7:eb: 8c:e3:d3:e1:2f:d7:bf:25:38:db:53:19:b2:d8:e5: cd:e6:55:a9:19:7b:1e:8b:64:fb:09:85:fa:fe:0e: 65:4e:cd:9a:d2:15:27:d1:ea:66:b6:59:95:7c:70: 96:f7:47:5e:74:bc:3b:ac:f4:8a:f1:0b:6b:4a:54: d6:ff:7f:22:b4:04:fc:fa:e9:79:db:f2:2d:80:08: 77:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:F9:79:08:2D:59:A4:0D:15:45:AB:04:2E:E9:1D:79:F9:BA:E8:E7 X509v3 Authority Key Identifier: keyid:7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:4c:86:3c:44:43:34:82:f6:93:40:d8:72:cd:c2:97:43:7d: 82:8b:c7:85:e3:5f:77:46:27:70:f7:07:17:20:1d:2f:11:c7: 81:0f:3f:e1:99:1e:ce:ea:bf:18:83:1d:ff:b9:51:c9:d3:31: a2:32:a0:36:3f:83:f2:a0:e8:72:47:41:c6:7e:c8:e7:0d:18: 02:65:1c:4d:41:c7:75:5f:23:2a:8e:22:0f:c7:2a:65:9a:59: 7a:88:cd:b8:47:6b:bd:ae:77:46:79:90:45:a9:c1:ed:3d:ee: 51:a9:e1:ff:fa:35:08:1f:b0:28:db:08:89:82:a0:36:4e:a9: 7a:db:c5:e4:03:43:78:a1:e8:4a:ed:47:27:27:bd:63:16:b7: 01:a5:bd:6b:d3:9d:ec:6e:0a:6e:41:2c:ff:fa:af:1c:d0:37: 60:0e:d6:ea:dd:fd:32:d3:cf:29:ec:71:24:19:ca:23:e4:ac: a0:be:2a:d6:1c:6b:8d:22:fc:b8:b7:ac:4c:8a:27:0b:a2:ff: 66:ce:d4:88:fa:2c:6a:bc:3a:b5:9a:41:34:dc:eb:c0:67:d4: 43:cb:18:a6:0b:46:8f:9e:ce:62:e8:9a:54:bf:9d:ec:22:f3: 8f:b4:06:7a:2d:9c:55:0e:95:c7:2c:a9:16:58:a9:56:ae:20: 24:e5:b3:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCO8EV5fPT1PfD9S2eaTt6fguCfQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0QzNTEw MkZFQTUzNzAeFw0yNjAzMjQyMDU3MDZaFw0yNjAzMjgwMzI1MDZaMDMxMTAvBgNV BAMTKDNBRjk3OTA4MkQ1OUE0MEQxNTQ1QUIwNDJFRTkxRDc5RjlCQUU4RTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdYFEQyiQ5w3OVIQjW8lmIJZtD hZp2djgG2ggoh1RhK+yG3gtu73GpJRfSGuTFhn+MTVSKzWPzelmLExgIh0WUWPpd H5zWvKyf/wuz6wmSeH4mXp8Bi+AeJjrpmplbfxIW7XfR0EfJdF37ArZzVoozY7Nw zI8sWKpfhuHPChDbclBc5IWbRfeyBrfTAUoTcc7FPLr47dgHh01wXureanQgXKay 8jBSfT0tiSNUXEexrhS364zj0+Ev178lONtTGbLY5c3mVakZex6LZPsJhfr+DmVO zZrSFSfR6ma2WZV8cJb3R150vDus9IrxC2tKVNb/fyK0BPz66Xnb8i2ACHeXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvl5CC1ZpA0VRasELukdefm66OcwHwYDVR0j BBgwFoAUe39BTrkNsqyXE3KZYfPTUQL+pTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTg0MzJjZC1hMDQ3LTQ4NWItODE0My01OWEzNTMyYzA3YjcvMC83QjdGNDE0RUI5 MERCMkFDOTcxMzcyOTk2MUYzRDM1MTAyRkVBNTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0QzNTEwMkZF QTUzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0Qz NTEwMkZFQTUzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJZMhjxEQzSC9pNA2HLNwpdDfYKLx4XjX3dG J3D3BxcgHS8Rx4EPP+GZHs7qvxiDHf+5UcnTMaIyoDY/g/Kg6HJHQcZ+yOcNGAJl HE1Bx3VfIyqOIg/HKmWaWXqIzbhHa72ud0Z5kEWpwe097lGp4f/6NQgfsCjbCImC oDZOqXrbxeQDQ3ih6ErtRycnvWMWtwGlvWvTnexuCm5BLP/6rxzQN2AO1urd/TLT zynscSQZyiPkrKC+KtYca40i/Li3rEyKJwui/2bO1Ij6LGq8OrWaQTTc68Bn1EPL GKYLRo+ezmLomlS/newi84+0BnotnFUOlccsqRZYqVauICTlsyg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:48 2026 by rpki-client