$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: xQNaBNIk9lSzLTXaU8hMmeJi2kKMa+RiA4cJplHhT4g= Subject key identifier: 45:DF:B8:03:EB:E9:8F:2F:19:DB:18:99:AB:D7:97:94:37:88:24:8B Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 18AD2EED358E9A145CA0B6ECC210D10022F18E71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: 0108 Signing time: Tue 24 Mar 2026 01:32:18 +0000 Manifest this update: Tue 24 Mar 2026 01:27:18 +0000 Manifest next update: Fri 27 Mar 2026 09:54:18 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: FQ3oDn17NwdexMmMWx3Pm6SBUbrsemDK+Hfmd7Aa0ew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 09:54:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:ad:2e:ed:35:8e:9a:14:5c:a0:b6:ec:c2:10:d1:00:22:f1:8e:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Mar 24 01:27:18 2026 GMT Not After : Mar 27 09:54:18 2026 GMT Subject: CN=45DFB803EBE98F2F19DB1899ABD797943788248B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:38:b9:78:9d:2b:92:d6:96:c6:be:49:19:71: fe:dd:54:68:75:20:47:6f:01:b4:14:7a:fb:52:5b: 19:b7:4b:69:63:8c:cc:51:f2:9e:7f:7a:54:79:a3: cd:e2:b1:fb:b1:42:60:24:a9:ab:66:f0:b0:36:3c: 31:af:f9:ad:d0:8a:60:94:62:2a:f1:02:ef:e3:6d: d2:42:d8:ac:ef:d4:4d:e8:ca:f1:26:e6:1e:ae:7a: 9f:48:1f:06:2e:5f:10:9a:a4:a2:89:94:c4:02:b4: 92:7a:57:ee:18:2e:6e:c9:8e:0f:94:ef:40:c1:f1: d2:1b:63:18:8a:62:d7:4b:5b:a8:09:85:c1:7e:eb: 06:f7:e1:dd:28:88:db:36:d5:06:a6:8b:c6:2e:23: 21:78:4d:74:c5:71:9f:1e:50:ec:a7:49:82:84:f2: cc:10:f2:27:b4:8b:0a:56:c3:73:84:5b:8d:c2:2a: 72:ba:23:c0:ee:83:47:0f:a0:80:76:a3:69:ae:7d: ae:62:c4:2b:a6:e1:ee:4e:9a:1b:4d:58:99:41:c2: 49:6f:57:84:83:c2:f2:5c:77:af:fc:26:35:68:6f: 97:ee:dd:25:49:4d:27:cf:34:b4:88:86:94:51:eb: 99:e0:87:35:fc:b1:80:63:12:dc:3e:22:d7:77:b7: fb:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:DF:B8:03:EB:E9:8F:2F:19:DB:18:99:AB:D7:97:94:37:88:24:8B X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:cf:d9:ef:2f:33:0f:48:10:b6:fc:41:ee:eb:a6:05:b3:e4: 57:2e:3c:04:34:62:dd:98:27:8d:5e:7b:ab:0f:7d:0a:a7:0c: 0c:d3:0c:0c:95:0d:c6:7f:89:90:ca:f6:ad:c6:dc:36:8d:00: e6:b0:09:55:90:bf:d9:3d:fa:87:fc:5a:85:4c:48:3f:1b:7a: 6f:0f:60:83:17:6e:eb:df:79:64:3b:e3:cf:6f:f7:81:38:34: cf:b7:a6:01:06:65:d0:23:3c:58:07:bd:eb:20:a3:80:8a:d8: 44:74:af:e1:20:94:7a:41:a0:ca:a1:b9:7e:27:ec:b3:27:18: 49:cf:87:cc:3c:c0:f1:dd:bf:46:91:27:06:42:6e:2e:28:df: 5b:31:f6:18:e2:d4:1e:e8:74:7f:60:da:fc:52:0d:32:b4:3c: dd:a0:72:ba:73:62:a0:1e:8c:16:ea:8c:c2:a7:37:30:ab:c5: 6e:66:1e:c9:3f:24:f5:a0:e1:d2:62:76:15:53:fc:d8:63:b9: 46:29:93:b5:81:3b:a6:58:30:3f:3c:c8:68:04:a8:94:d4:ce: e6:89:1a:93:25:45:31:64:3c:93:ab:2c:19:81:b5:ef:d4:09: a4:1c:87:a5:f6:77:2c:61:25:46:a1:3c:89:1a:69:3b:bd:0f: c8:72:a8:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGK0u7TWOmhRcoLbswhDRACLxjnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNjAzMjQwMTI3MThaFw0yNjAzMjcwOTU0MThaMDMxMTAvBgNV BAMTKDQ1REZCODAzRUJFOThGMkYxOURCMTg5OUFCRDc5Nzk0Mzc4ODI0OEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8OLl4nSuS1pbGvkkZcf7dVGh1 IEdvAbQUevtSWxm3S2ljjMxR8p5/elR5o83isfuxQmAkqatm8LA2PDGv+a3QimCU YirxAu/jbdJC2Kzv1E3oyvEm5h6uep9IHwYuXxCapKKJlMQCtJJ6V+4YLm7Jjg+U 70DB8dIbYxiKYtdLW6gJhcF+6wb34d0oiNs21Qami8YuIyF4TXTFcZ8eUOynSYKE 8swQ8ie0iwpWw3OEW43CKnK6I8Dug0cPoIB2o2mufa5ixCum4e5OmhtNWJlBwklv V4SDwvJcd6/8JjVob5fu3SVJTSfPNLSIhpRR65nghzX8sYBjEtw+Itd3t/v/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURd+4A+vpjy8Z2xiZq9eXlDeIJIswHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPP2e8vMw9IELb8Qe7rpgWz5FcuPAQ0Yt2Y J41ee6sPfQqnDAzTDAyVDcZ/iZDK9q3G3DaNAOawCVWQv9k9+of8WoVMSD8bem8P YIMXbuvfeWQ7489v94E4NM+3pgEGZdAjPFgHvesgo4CK2ER0r+EglHpBoMqhuX4n 7LMnGEnPh8w8wPHdv0aRJwZCbi4o31sx9hji1B7odH9g2vxSDTK0PN2gcrpzYqAe jBbqjMKnNzCrxW5mHsk/JPWg4dJidhVT/NhjuUYpk7WBO6ZYMD88yGgEqJTUzuaJ GpMlRTFkPJOrLBmBte/UCaQch6X2dyxhJUahPIkaaTu9D8hyqJg= -----END CERTIFICATE-----Generated at Thu Mar 26 11:57:26 2026 by rpki-client