$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: BEhGsDxeORsYDqBOcpX/wuxV388H4qOaLWgcEzqu08M= Subject key identifier: 50:3D:75:9F:F4:C5:12:C7:31:2D:F5:0C:AE:38:16:40:29:64:31:B7 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 31ABE020FD71D3C44D3A1FC38AC8B3E90B9B81C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 025B Signing time: Wed 25 Mar 2026 10:41:40 +0000 Manifest this update: Wed 25 Mar 2026 10:36:39 +0000 Manifest next update: Sat 28 Mar 2026 10:52:39 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: xiPezgCdXPpVWAYGmojcQqXMOFaMujk+Ld9wiV+hMIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 10:52:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:ab:e0:20:fd:71:d3:c4:4d:3a:1f:c3:8a:c8:b3:e9:0b:9b:81:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Mar 25 10:36:39 2026 GMT Not After : Mar 28 10:52:39 2026 GMT Subject: CN=503D759FF4C512C7312DF50CAE381640296431B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:9f:aa:1a:16:ae:ec:e9:92:49:3f:df:99:a0: 86:6e:f3:d1:a5:cb:04:72:a0:6c:2e:68:72:77:61: cd:ba:51:11:ae:ca:6a:9c:b7:f7:c7:05:23:34:53: ce:1d:b2:27:cb:45:b2:2b:15:72:55:eb:a5:0d:9e: 72:50:e1:a0:55:bd:90:9b:9b:37:69:e4:9e:15:fa: da:aa:bc:d7:c6:be:ad:86:80:b9:42:e4:c2:f9:c0: 1b:af:b5:e3:74:cf:1c:72:99:75:0a:55:5f:88:25: c0:9a:3b:16:87:a1:cf:30:be:60:1b:de:4b:f7:aa: 44:ba:9a:d4:1b:d1:b2:e5:ab:ac:40:32:15:dc:ce: ee:e1:c1:2a:18:60:28:ff:02:e2:10:cd:66:b3:e7: d2:00:32:b4:de:25:be:9a:3e:3d:21:7b:3c:d1:18: 4c:22:09:14:b3:94:be:27:01:87:2f:06:74:0b:95: 2a:c7:4a:19:ee:f8:c0:37:92:f4:42:d5:36:70:65: 39:44:e6:6c:05:72:14:45:b4:75:46:df:09:fa:71: 40:8d:2e:34:1d:d7:4e:81:99:44:ac:57:a3:c6:ba: 83:75:d6:76:dc:51:11:67:81:3a:17:75:dc:24:f2: 3d:52:7d:60:fa:b6:65:2a:da:2f:24:04:26:48:a8: 3e:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 50:3D:75:9F:F4:C5:12:C7:31:2D:F5:0C:AE:38:16:40:29:64:31:B7 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:ba:c7:02:52:08:dd:bd:82:32:ce:d2:6c:a4:ec:91:45:b6: 42:75:fe:2f:90:a8:42:31:9b:59:a8:ed:89:b4:8a:11:09:f1: 06:a5:32:37:11:9f:e6:2c:8e:61:4d:1d:45:d9:eb:e6:10:5b: fa:2e:34:09:bd:fd:0f:4f:15:26:a5:a4:dc:68:4e:b9:0a:fc: 9b:30:d1:39:1f:47:6b:7b:cb:f3:14:61:30:35:81:17:47:d5: f3:74:f5:41:56:6e:56:02:2e:04:f9:cb:cc:18:1f:9d:b8:33: f8:30:32:ac:8b:7a:e1:13:20:b6:31:61:6d:3b:b0:0e:67:83: 02:67:48:b0:db:bc:52:72:b6:42:74:18:75:7d:67:d3:eb:84: 5c:81:a4:89:e9:ea:9c:b1:99:4e:6a:b6:c6:57:1f:b7:f4:66: 0e:39:49:cc:f6:1c:6f:f7:2d:3a:91:3f:af:ac:85:68:01:9e: 62:61:64:0e:2a:ae:06:8c:de:8e:61:78:67:71:95:21:0d:e1: e1:58:c1:c0:c0:e5:8b:cc:ef:6a:0c:3f:b8:c5:6b:40:ea:71: 27:11:b0:e7:02:ff:63:38:7c:bb:6c:35:0b:bc:10:68:cf:00: 62:fb:42:50:cd:e0:14:f5:30:e1:2f:7e:7d:64:5f:de:54:69: d1:ad:f9:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMavgIP1x08RNOh/Disiz6QubgcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNjAzMjUxMDM2MzlaFw0yNjAzMjgxMDUyMzlaMDMxMTAvBgNV BAMTKDUwM0Q3NTlGRjRDNTEyQzczMTJERjUwQ0FFMzgxNjQwMjk2NDMxQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUn6oaFq7s6ZJJP9+ZoIZu89Gl ywRyoGwuaHJ3Yc26URGuymqct/fHBSM0U84dsifLRbIrFXJV66UNnnJQ4aBVvZCb mzdp5J4V+tqqvNfGvq2GgLlC5ML5wBuvteN0zxxymXUKVV+IJcCaOxaHoc8wvmAb 3kv3qkS6mtQb0bLlq6xAMhXczu7hwSoYYCj/AuIQzWaz59IAMrTeJb6aPj0hezzR GEwiCRSzlL4nAYcvBnQLlSrHShnu+MA3kvRC1TZwZTlE5mwFchRFtHVG3wn6cUCN LjQd106BmUSsV6PGuoN11nbcURFngToXddwk8j1SfWD6tmUq2i8kBCZIqD6XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUD11n/TFEscxLfUMrjgWQClkMbcwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO6xwJSCN29gjLO0myk7JFFtkJ1/i+QqEIx m1mo7Ym0ihEJ8QalMjcRn+YsjmFNHUXZ6+YQW/ouNAm9/Q9PFSalpNxoTrkK/Jsw 0TkfR2t7y/MUYTA1gRdH1fN09UFWblYCLgT5y8wYH524M/gwMqyLeuETILYxYW07 sA5ngwJnSLDbvFJytkJ0GHV9Z9PrhFyBpInp6pyxmU5qtsZXH7f0Zg45Scz2HG/3 LTqRP6+shWgBnmJhZA4qrgaM3o5heGdxlSEN4eFYwcDA5YvM72oMP7jFa0DqcScR sOcC/2M4fLtsNQu8EGjPAGL7QlDN4BT1MOEvfn1kX95UadGt+XA= -----END CERTIFICATE-----Generated at Thu Mar 26 23:48:57 2026 by rpki-client