$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: tqfyEtdDzgWEwPPPNV0dQ7MBLgB3pQxNC2qws8tVW4s= Subject key identifier: 3D:F6:74:53:FE:85:45:7E:CF:AD:EE:DB:41:7B:CF:39:C1:EF:E1:9D Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 49E2D0C5E4E9446B030588FF75C53EEDDEF6D0EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 024F Signing time: Tue 24 Mar 2026 19:42:29 +0000 Manifest this update: Tue 24 Mar 2026 19:37:29 +0000 Manifest next update: Fri 27 Mar 2026 22:53:29 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32342d3234203d3e20313534323137.roa (hash: YevEYsnpyXjpiEIMiyxhrulrrR0dSrjcBVrRlWG52Uk=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: 3msI/ygFttmp4PXSnBx54sTyPLJ5YCmXmK79NjZs9sY=) 3: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: 5WWV64ubZL/1/H2hKMOnSCb29oOiKpNtQtS8KPWFtJs=) 4: 3130332e32302e3130382e302f32332d3233203d3e20313530323338.roa (hash: h3F9Llj9O7Xku7uQRgTprbQZ0BqnZP4nbNoiUb3SuDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:53:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:e2:d0:c5:e4:e9:44:6b:03:05:88:ff:75:c5:3e:ed:de:f6:d0:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Mar 24 19:37:29 2026 GMT Not After : Mar 27 22:53:29 2026 GMT Subject: CN=3DF67453FE85457ECFADEEDB417BCF39C1EFE19D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:9f:c1:08:23:8d:6c:89:3e:ca:a1:6f:da:60: 15:81:59:41:14:d6:4a:dd:80:89:3c:4c:3c:c6:51: 7f:2b:33:73:4c:7c:ed:de:cb:3b:fb:6b:8a:b3:f3: 63:26:97:a4:38:14:23:9c:b9:0b:38:e5:19:00:1c: e5:f3:a7:c8:db:f1:bb:3c:d0:d1:a5:3c:dc:c5:11: d5:d5:65:66:51:46:94:8d:4d:3a:aa:01:d6:43:b3: 72:8e:75:11:7a:55:7e:8c:a7:bd:11:45:d3:58:84: be:c8:50:e9:4c:41:e9:8c:0f:d0:11:6b:57:d2:84: a8:36:af:64:0e:c9:24:be:a0:72:7a:7b:99:37:80: 85:f8:e0:5e:98:1f:c1:cb:e9:16:de:de:76:bf:7d: 43:5b:85:7f:e6:c6:2a:3e:11:2f:f9:1b:03:29:7c: bf:2a:09:68:3b:21:71:74:b9:de:44:6e:11:bd:59: b1:f9:b7:4d:28:48:f9:2f:dc:1c:25:68:d0:b4:36: e1:30:d3:64:ca:f1:30:ee:aa:5c:47:e2:f7:6b:67: 30:6d:93:3c:68:a0:a4:3e:aa:8e:26:87:a9:4d:96: 26:a9:b1:d5:a3:ac:d4:76:3a:23:5e:4c:c1:43:d5: 18:87:cf:7c:3f:02:6a:e2:23:f3:5e:d4:e4:d6:b1: 3f:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:F6:74:53:FE:85:45:7E:CF:AD:EE:DB:41:7B:CF:39:C1:EF:E1:9D X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:d5:ce:78:a3:b6:75:40:27:b1:47:ce:73:38:4d:87:db:d9: 1c:1d:c6:a1:94:00:de:c5:ec:a1:6c:8f:81:1c:f7:74:62:e8: eb:f4:f3:55:5f:af:40:40:a0:94:ad:71:59:a9:2b:f1:a3:bc: 1e:ad:2e:32:f4:06:a1:f3:4c:81:e5:2c:95:4e:2d:70:1d:bc: 58:d7:26:ac:13:2a:12:0c:cb:b9:d9:68:e7:7f:f6:83:dd:15: 96:d0:33:4d:83:1f:5f:ba:c3:c4:fd:6a:a8:27:15:a2:21:4c: 1b:7a:40:7f:74:ed:e1:f0:51:ef:62:70:d3:0a:ce:3f:6a:42: 5a:1a:17:53:2d:95:5a:78:e5:23:e4:e6:21:e6:4f:aa:dc:e4: fc:bf:91:8f:06:7e:bf:8a:66:0c:09:70:c7:bd:72:1f:56:c4: b2:07:cf:08:40:a0:47:bf:2c:75:7a:77:a8:16:c4:51:f9:de: ad:ed:cf:a6:88:f0:33:d0:c1:bb:48:4a:eb:b0:24:b8:1d:00: a0:b9:e7:b2:74:ce:f2:56:63:64:58:ad:8c:2c:02:38:75:ee: 6f:13:eb:b8:b0:d5:0e:d6:95:21:08:a8:cf:e2:1f:24:60:2d: 4a:f5:62:a1:46:9d:b8:ce:eb:ec:0c:01:8c:49:c9:76:43:3f: 97:86:ba:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSeLQxeTpRGsDBYj/dcU+7d720O8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNjAzMjQxOTM3MjlaFw0yNjAzMjcyMjUzMjlaMDMxMTAvBgNV BAMTKDNERjY3NDUzRkU4NTQ1N0VDRkFERUVEQjQxN0JDRjM5QzFFRkUxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwn8EII41siT7KoW/aYBWBWUEU 1krdgIk8TDzGUX8rM3NMfO3eyzv7a4qz82Mml6Q4FCOcuQs45RkAHOXzp8jb8bs8 0NGlPNzFEdXVZWZRRpSNTTqqAdZDs3KOdRF6VX6Mp70RRdNYhL7IUOlMQemMD9AR a1fShKg2r2QOySS+oHJ6e5k3gIX44F6YH8HL6Rbe3na/fUNbhX/mxio+ES/5GwMp fL8qCWg7IXF0ud5EbhG9WbH5t00oSPkv3BwlaNC0NuEw02TK8TDuqlxH4vdrZzBt kzxooKQ+qo4mh6lNliapsdWjrNR2OiNeTMFD1RiHz3w/AmriI/Ne1OTWsT9zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPfZ0U/6FRX7Pre7bQXvPOcHv4Z0wHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALXVznijtnVAJ7FHznM4TYfb2RwdxqGUAN7F 7KFsj4Ec93Ri6Ov081Vfr0BAoJStcVmpK/GjvB6tLjL0BqHzTIHlLJVOLXAdvFjX JqwTKhIMy7nZaOd/9oPdFZbQM02DH1+6w8T9aqgnFaIhTBt6QH907eHwUe9icNMK zj9qQloaF1MtlVp45SPk5iHmT6rc5Py/kY8Gfr+KZgwJcMe9ch9WxLIHzwhAoEe/ LHV6d6gWxFH53q3tz6aI8DPQwbtISuuwJLgdAKC557J0zvJWY2RYrYwsAjh17m8T 67iw1Q7WlSEIqM/iHyRgLUr1YqFGnbjO6+wMAYxJyXZDP5eGuvk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:55:26 2026 by rpki-client