$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: vySu15ep3Pb90qNdHzYOAJHM7P97ljDZaBXHGaONJgM= Subject key identifier: AB:69:07:F0:FB:29:CC:AF:7B:F7:39:4D:59:7F:EF:4C:A3:13:80:7C Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 09E73C8BF36C7202B9309A39FC679205F5C28C15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 0102 Signing time: Wed 25 Mar 2026 21:52:36 +0000 Manifest this update: Wed 25 Mar 2026 21:47:36 +0000 Manifest next update: Sun 29 Mar 2026 01:57:36 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: tUtVpBVFx0oHRrj3Xc2trznKc6K1uAtBGYHoUig69BM=) 2: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 01:57:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:e7:3c:8b:f3:6c:72:02:b9:30:9a:39:fc:67:92:05:f5:c2:8c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Mar 25 21:47:36 2026 GMT Not After : Mar 29 01:57:36 2026 GMT Subject: CN=AB6907F0FB29CCAF7BF7394D597FEF4CA313807C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:60:7f:39:84:db:8e:23:ba:1e:ae:6d:fe:a2: f5:dd:ca:68:49:21:83:0d:29:16:45:22:2d:1d:e1: e3:87:ca:29:7f:da:ee:49:64:e7:1f:4c:03:95:0a: e6:8a:39:98:39:4e:f1:53:87:3c:12:be:97:f4:00: c2:f2:15:cb:48:8a:c9:58:f1:1f:02:bb:eb:51:72: 35:8a:27:8c:fc:d6:92:42:a2:26:f1:28:f5:e0:cd: ad:88:04:5d:e1:fa:2c:44:fb:87:1c:de:c2:2a:f0: 3f:c0:80:a9:50:7d:5d:d7:4b:dd:46:b0:b6:6e:48: 17:a1:84:1c:1c:11:f8:82:91:61:35:e8:1a:d8:a8: 2a:eb:49:e4:5e:61:46:95:33:a0:d5:01:09:99:53: 45:3a:6a:d0:ab:fc:bd:79:fc:cc:7e:0b:95:11:73: ee:0d:07:d6:6a:85:2b:ea:b2:34:de:1f:cb:36:c6: 43:b9:74:be:d8:32:b3:46:68:8c:2e:6b:24:cb:39: 4b:99:96:5e:69:92:24:b2:b2:ef:44:5d:65:50:89: 9c:c8:ac:52:49:7d:34:e3:00:fa:1b:f7:7c:fa:28: 64:29:29:01:44:c7:4c:ac:bc:d0:22:08:cc:10:13: ec:19:4b:f4:09:3f:94:2d:6c:91:b9:60:a9:a0:af: f5:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:69:07:F0:FB:29:CC:AF:7B:F7:39:4D:59:7F:EF:4C:A3:13:80:7C X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:66:7b:c4:d2:86:c4:06:49:07:86:e9:26:bc:50:87:55:d3: d4:bd:05:53:d6:75:ac:52:21:c6:f4:18:3e:6c:4b:2a:7d:75: 04:14:e6:eb:86:c3:20:5a:11:8e:5a:85:d1:95:f3:5a:88:f5: df:11:4e:7b:65:92:1c:46:52:83:00:5d:b0:62:84:aa:59:8b: ca:20:39:fb:b2:80:13:b1:df:5f:51:20:ea:27:30:f0:d4:a0: d3:27:2f:71:5c:98:fe:51:16:ce:78:d2:1d:40:8b:c2:4e:e6: 65:89:91:a2:9d:ec:44:d6:d5:24:9b:b2:12:c3:e0:80:be:c2: 70:61:7a:27:d0:9c:ee:e6:93:da:30:8c:67:90:68:b6:50:32: 03:10:4b:97:4a:bb:76:fa:f8:ff:97:cd:9b:61:f4:1f:69:cd: f5:4c:e5:8f:d7:6f:6b:36:a4:d0:de:23:62:7d:99:de:35:ab: 17:06:3c:0c:a2:4c:88:cc:52:3b:8c:d2:34:71:da:f1:58:e3: 6b:97:96:a5:e2:d8:7b:99:18:96:89:38:62:53:a2:89:7a:22: 2d:64:f6:6e:39:66:01:d5:f7:41:0b:61:2f:69:29:ac:32:b4: f4:b9:62:f4:4b:85:85:93:e2:ef:af:dd:82:83:42:1c:40:52: 30:c3:73:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCec8i/NscgK5MJo5/GeSBfXCjBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNjAzMjUyMTQ3MzZaFw0yNjAzMjkwMTU3MzZaMDMxMTAvBgNV BAMTKEFCNjkwN0YwRkIyOUNDQUY3QkY3Mzk0RDU5N0ZFRjRDQTMxMzgwN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiYH85hNuOI7oerm3+ovXdymhJ IYMNKRZFIi0d4eOHyil/2u5JZOcfTAOVCuaKOZg5TvFThzwSvpf0AMLyFctIislY 8R8Cu+tRcjWKJ4z81pJCoibxKPXgza2IBF3h+ixE+4cc3sIq8D/AgKlQfV3XS91G sLZuSBehhBwcEfiCkWE16BrYqCrrSeReYUaVM6DVAQmZU0U6atCr/L15/Mx+C5UR c+4NB9ZqhSvqsjTeH8s2xkO5dL7YMrNGaIwuayTLOUuZll5pkiSysu9EXWVQiZzI rFJJfTTjAPob93z6KGQpKQFEx0ysvNAiCMwQE+wZS/QJP5QtbJG5YKmgr/WbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq2kH8PspzK979zlNWX/vTKMTgHwwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABVme8TShsQGSQeG6Sa8UIdV09S9BVPWdaxS Icb0GD5sSyp9dQQU5uuGwyBaEY5ahdGV81qI9d8RTntlkhxGUoMAXbBihKpZi8og OfuygBOx319RIOonMPDUoNMnL3FcmP5RFs540h1Ai8JO5mWJkaKd7ETW1SSbshLD 4IC+wnBheifQnO7mk9owjGeQaLZQMgMQS5dKu3b6+P+XzZth9B9pzfVM5Y/Xb2s2 pNDeI2J9md41qxcGPAyiTIjMUjuM0jRx2vFY42uXlqXi2HuZGJaJOGJTool6Ii1k 9m45ZgHV90ELYS9pKawytPS5YvRLhYWT4u+v3YKDQhxAUjDDc18= -----END CERTIFICATE-----Generated at Thu Mar 26 19:47:08 2026 by rpki-client