$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json) Hash identifier: RQc7nuvChs7iipfzRfBto24sVKPPmsW4iA4sNYvxfVk= Subject key identifier: 25:CF:5F:40:66:14:B7:B1:C1:98:FF:7C:FF:53:F4:99:D2:33:EB:91 Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7 Certificate serial: 4412DD3D31E36F501ED29D9D4788BC663833B07A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft Manifest number: 01F5 Signing time: Tue 24 Mar 2026 09:11:42 +0000 Manifest this update: Tue 24 Mar 2026 09:06:42 +0000 Manifest next update: Fri 27 Mar 2026 12:58:42 +0000 Files and hashes: 1: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=) 2: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: eInxhswnMrG9fDFP5xSq+IgAwvWXipcrT5KabdT3Tko=) 3: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=) 4: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:58:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:12:dd:3d:31:e3:6f:50:1e:d2:9d:9d:47:88:bc:66:38:33:b0:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7195906BF48238F96B0510D75000910A519133F7 Validity Not Before: Mar 24 09:06:42 2026 GMT Not After : Mar 27 12:58:42 2026 GMT Subject: CN=25CF5F406614B7B1C198FF7CFF53F499D233EB91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:21:69:77:14:f5:eb:e6:cb:25:72:14:c5:97: 2f:7b:c3:3e:e2:66:bb:f6:39:1f:58:22:8e:1b:4d: 4c:49:9a:a7:ed:5b:b2:6f:76:57:8f:57:3a:da:98: 99:97:5f:88:97:5a:53:2c:f9:7e:42:49:46:20:f6: 16:67:39:22:73:72:ff:61:e5:98:43:3f:46:a8:54: 58:8d:16:95:7e:94:b8:7d:73:61:1c:b2:ae:ce:dd: 6d:2c:8a:e9:54:60:5f:61:ea:ca:bc:12:a8:3a:63: 72:1b:7f:ed:ee:1e:41:43:3a:fa:26:62:9a:be:c5: 28:59:34:99:bc:85:79:26:41:59:ce:70:bd:b5:fe: 06:29:52:d3:07:d8:50:9f:da:a5:24:5b:99:00:e9: d0:00:f9:9c:8e:f5:a2:c0:3a:e9:4d:26:c1:1d:46: 52:35:51:af:ba:19:94:91:8c:f6:95:09:5a:da:9b: 5b:fd:2e:b3:2c:8e:ce:67:e2:01:02:70:72:9e:06: df:0f:e2:6e:1c:47:fe:20:7a:3a:0b:8c:e0:f2:65: 35:c7:f1:59:1c:49:8d:a5:41:05:38:01:09:d5:b9: 17:28:4d:8d:67:0f:eb:c0:dc:39:e3:77:0d:dc:a9: ef:d6:02:e8:d3:37:3b:f3:af:7b:49:34:08:bc:1f: 62:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:CF:5F:40:66:14:B7:B1:C1:98:FF:7C:FF:53:F4:99:D2:33:EB:91 X509v3 Authority Key Identifier: keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:27:38:4e:54:b2:a5:4e:df:03:76:4f:51:a5:53:53:bc:ae: 30:ea:05:39:66:3e:64:5a:21:61:d9:23:f2:18:13:69:11:73: bc:6b:b8:fa:d4:a1:42:80:80:64:3d:ec:ef:58:6f:0e:31:fe: 7f:32:41:95:ab:a0:c1:47:9f:4e:c0:d2:87:62:e8:f9:ca:1f: 79:f3:33:45:cf:92:ad:22:f5:ab:51:eb:dd:19:38:d3:13:a0: a4:16:4f:01:09:14:14:c2:95:18:51:97:07:2d:ad:f2:c7:82: 6c:ce:d9:5c:7a:b9:d7:32:5b:50:e7:2f:00:a4:97:4a:8a:20: 04:c6:a2:2a:9d:0c:47:33:c3:e5:97:d2:4d:72:0f:50:56:7b: 18:0d:e4:3f:3f:a4:6c:84:4f:86:50:df:48:e2:1c:de:fb:68: 44:4b:e9:cf:94:b3:1f:1d:23:23:74:f6:3b:b6:92:b5:d7:6f: 86:6f:9e:44:02:7f:36:ed:5d:9b:ab:3d:42:4b:40:98:a4:0f: 66:07:e1:24:08:41:2a:cd:d6:48:04:bf:0e:97:59:d5:31:d3: b7:d7:6e:a8:11:33:44:82:5d:48:da:85:6b:3b:62:2b:e8:61: 68:ae:0b:2e:a6:bf:79:c0:43:43:1d:e0:fc:8b:e9:0f:6d:a5: 07:c7:43:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURBLdPTHjb1Ae0p2dR4i8ZjgzsHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1 MTkxMzNGNzAeFw0yNjAzMjQwOTA2NDJaFw0yNjAzMjcxMjU4NDJaMDMxMTAvBgNV BAMTKDI1Q0Y1RjQwNjYxNEI3QjFDMTk4RkY3Q0ZGNTNGNDk5RDIzM0VCOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtIWl3FPXr5sslchTFly97wz7i Zrv2OR9YIo4bTUxJmqftW7JvdlePVzramJmXX4iXWlMs+X5CSUYg9hZnOSJzcv9h 5ZhDP0aoVFiNFpV+lLh9c2Ecsq7O3W0siulUYF9h6sq8Eqg6Y3Ibf+3uHkFDOvom Ypq+xShZNJm8hXkmQVnOcL21/gYpUtMH2FCf2qUkW5kA6dAA+ZyO9aLAOulNJsEd RlI1Ua+6GZSRjPaVCVram1v9LrMsjs5n4gECcHKeBt8P4m4cR/4gejoLjODyZTXH 8VkcSY2lQQU4AQnVuRcoTY1nD+vA3Dnjdw3cqe/WAujTNzvzr3tJNAi8H2KrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJc9fQGYUt7HBmP98/1P0mdIz65EwHwYDVR0j BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0 ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx MzNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkx MEE1MTkxMzNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI0nOE5UsqVO3wN2T1GlU1O8rjDqBTlmPmRa IWHZI/IYE2kRc7xruPrUoUKAgGQ97O9Ybw4x/n8yQZWroMFHn07A0odi6PnKH3nz M0XPkq0i9atR690ZONMToKQWTwEJFBTClRhRlwctrfLHgmzO2Vx6udcyW1DnLwCk l0qKIATGoiqdDEczw+WX0k1yD1BWexgN5D8/pGyET4ZQ30jiHN77aERL6c+Usx8d IyN09ju2krXXb4ZvnkQCfzbtXZurPUJLQJikD2YH4SQIQSrN1kgEvw6XWdUx07fX bqgRM0SCXUjahWs7YivoYWiuCy6mv3nAQ0Md4PyL6Q9tpQfHQ6U= -----END CERTIFICATE-----Generated at Thu Mar 26 14:44:53 2026 by rpki-client