$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: CRjfijj/cMujT8Y2xmvPZ087LbsLpQutdO0X1y0SM9c= Subject key identifier: 3A:79:1D:45:11:2A:F0:A8:C0:7D:F7:9F:F0:96:C9:D2:93:EB:85:8E Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 37E23D341874CB516204D9C291E62EFDC7FE80AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: 0109 Signing time: Tue 24 Mar 2026 19:20:00 +0000 Manifest this update: Tue 24 Mar 2026 19:15:00 +0000 Manifest next update: Sat 28 Mar 2026 00:57:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20323135373237.roa (hash: Gxx1N7C+QbTulu8Y3abVKzpV17eZ/FeVMjAWzNKkBjk=) 3: 3130332e3136392e3134332e302f32342d3234203d3e20313534343130.roa (hash: s2qqo3oU1qGkmrEqC+VMkH+1kS1V5uXeU54SPuAImfg=) 4: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: wBrAwy3dPVLmJHPQK96Y+KvJrlGTdhPHo2S6mAUh6bU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:57:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:e2:3d:34:18:74:cb:51:62:04:d9:c2:91:e6:2e:fd:c7:fe:80:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Mar 24 19:15:00 2026 GMT Not After : Mar 28 00:57:00 2026 GMT Subject: CN=3A791D45112AF0A8C07DF79FF096C9D293EB858E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:23:04:44:16:61:3e:73:7a:34:41:87:d4:7e: e9:08:68:c7:48:e7:b6:80:68:b7:0c:92:57:e0:c4: f4:09:95:1e:ec:a9:41:4d:7c:bf:ba:1d:83:2f:07: 85:b5:80:33:91:f0:ce:bc:ac:28:b1:79:87:fb:4c: 33:64:18:8d:68:45:8b:8e:30:f7:d0:e7:f5:66:9b: 97:f6:87:45:a5:64:f6:2b:7d:a3:88:c9:4a:2e:cc: 65:d2:3e:04:19:cf:79:21:2d:7f:e1:79:01:fb:2f: d1:6a:1a:8e:21:83:a3:61:bd:72:ea:9c:ea:ec:81: 75:fc:12:82:ca:f4:e0:32:0d:03:95:0b:00:75:57: e9:c2:5d:cd:cb:05:27:fe:e5:56:22:97:6e:be:ce: 61:48:13:e1:44:1e:e4:a5:d3:a4:85:c7:b4:8a:32: be:bd:aa:b0:a7:5f:f0:90:a0:f6:3d:5b:7f:e6:89: a7:8c:54:83:1c:b9:5e:b3:e2:59:c1:db:de:1d:35: 2e:2a:e2:8a:b6:54:b6:b3:67:46:89:1c:ba:f1:39: 0c:b0:c7:61:eb:d5:57:5f:71:46:d5:15:b8:95:e3: b2:7e:5c:20:38:65:91:90:b7:8f:83:83:ab:f2:a1: e6:da:c6:fc:0b:c6:e2:a7:b3:9e:12:51:35:a8:62: 7f:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:79:1D:45:11:2A:F0:A8:C0:7D:F7:9F:F0:96:C9:D2:93:EB:85:8E X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:cf:8c:99:b9:74:42:95:e6:df:62:d1:64:39:57:23:da:de: ef:06:55:c7:8c:fd:c3:fd:f0:50:d2:bc:aa:a0:2e:b0:bb:e0: a8:63:b9:99:a5:f3:25:86:0a:ea:6e:4e:14:47:f3:7a:da:06: bc:7d:6e:f4:4d:f8:db:ab:ab:01:00:18:f4:16:cc:b4:e6:96: 56:f2:75:bb:0f:81:a3:e8:fa:b8:23:db:8d:d5:1c:2b:ec:68: 6b:9e:db:9c:99:7b:48:44:cb:54:7d:e0:74:ae:32:be:59:08: 28:9e:1e:28:1b:1f:12:df:0b:04:75:88:28:7e:7b:71:42:f6: f1:f2:16:5e:09:58:83:42:a0:11:c9:86:ea:6c:12:6b:57:d7: 20:e3:f0:14:72:f5:54:a5:24:fb:12:71:56:4b:95:64:dd:99: ad:6c:19:d1:2c:8c:a4:b4:86:af:f1:ab:f2:27:1b:1b:d1:3b: 4e:f6:29:8a:e7:2a:bf:df:65:60:51:2e:d7:65:84:c6:9c:11: 4c:d1:42:77:cc:76:66:9b:e6:c5:62:8b:7d:69:00:dd:fa:ae: 93:7b:e8:af:3d:56:74:d2:53:29:5e:85:32:46:3a:95:65:3e: 17:8b:a3:d1:d3:5e:59:d9:85:5c:43:5c:31:d4:09:b1:8d:a7: f0:96:49:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUN+I9NBh0y1FiBNnCkeYu/cf+gK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNjAzMjQxOTE1MDBaFw0yNjAzMjgwMDU3MDBaMDMxMTAvBgNV BAMTKDNBNzkxRDQ1MTEyQUYwQThDMDdERjc5RkYwOTZDOUQyOTNFQjg1OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKIwREFmE+c3o0QYfUfukIaMdI 57aAaLcMklfgxPQJlR7sqUFNfL+6HYMvB4W1gDOR8M68rCixeYf7TDNkGI1oRYuO MPfQ5/Vmm5f2h0WlZPYrfaOIyUouzGXSPgQZz3khLX/heQH7L9FqGo4hg6NhvXLq nOrsgXX8EoLK9OAyDQOVCwB1V+nCXc3LBSf+5VYil26+zmFIE+FEHuSl06SFx7SK Mr69qrCnX/CQoPY9W3/miaeMVIMcuV6z4lnB294dNS4q4oq2VLazZ0aJHLrxOQyw x2Hr1VdfcUbVFbiV47J+XCA4ZZGQt4+Dg6vyoebaxvwLxuKns54SUTWoYn+/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOnkdRREq8KjAffef8JbJ0pPrhY4wHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLPjJm5dEKV5t9i0WQ5VyPa3u8GVceM/cP9 8FDSvKqgLrC74KhjuZml8yWGCupuThRH83raBrx9bvRN+NurqwEAGPQWzLTmllby dbsPgaPo+rgj243VHCvsaGue25yZe0hEy1R94HSuMr5ZCCieHigbHxLfCwR1iCh+ e3FC9vHyFl4JWINCoBHJhupsEmtX1yDj8BRy9VSlJPsScVZLlWTdma1sGdEsjKS0 hq/xq/InGxvRO072KYrnKr/fZWBRLtdlhMacEUzRQnfMdmab5sVii31pAN36rpN7 6K89VnTSUylehTJGOpVlPheLo9HTXlnZhVxDXDHUCbGNp/CWSfk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:11:25 2026 by rpki-client