$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: 0kDpjCYRo5hEg/stDTeKI9OKWu3gWt2S9NE1/+1e8AA= Subject key identifier: E0:8E:A2:F3:3D:50:C7:5F:1F:18:09:E2:18:CF:AF:DA:94:BE:46:4E Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 50FC86D506B9595980750C05B4358FD4EB1A9E5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 87 Signing time: Thu 26 Mar 2026 09:51:26 +0000 Manifest this update: Thu 26 Mar 2026 09:46:26 +0000 Manifest next update: Sun 29 Mar 2026 15:02:26 +0000 Files and hashes: 1: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: WRfY/rBH6p7PK9emmqpsCXbVvrKz6VH5x4tTkw/6VAg=) 2: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: KbsNeVkBNP38lHPj61FRz/2WBU+OnT4U0fi6GcLgsYk=) 3: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: AvEPI0bAoOmymUfdeDC6gmwMLJ9H1XDm/x+gGjdHvOw=) 4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: E6gkUAkUB565OD/KSAK3yf+TxFTGQrj7xHTIY9Gqph4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:02:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:fc:86:d5:06:b9:59:59:80:75:0c:05:b4:35:8f:d4:eb:1a:9e:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Mar 26 09:46:26 2026 GMT Not After : Mar 29 15:02:26 2026 GMT Subject: CN=E08EA2F33D50C75F1F1809E218CFAFDA94BE464E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:22:c2:61:96:fa:90:bd:2b:81:8a:29:d0:38: b4:b7:1c:34:0d:3e:00:00:c4:ce:c1:71:c0:e7:09: 82:cf:5d:f1:c0:35:53:28:ad:1f:56:19:c6:ae:ed: bf:26:0e:0b:bb:d4:7b:23:a4:e0:5c:46:91:10:45: 00:55:87:e9:3e:2f:80:fe:44:e7:c3:3a:a4:67:a6: b3:36:6e:65:fe:e9:d0:18:70:46:4b:3c:94:db:31: a8:6d:e7:4d:61:ae:2b:59:b5:04:31:0d:5b:83:15: 32:94:14:c7:c2:51:f4:c5:d9:5b:6d:e0:13:7b:40: 98:11:b1:2e:ed:94:3d:bf:01:f9:86:0d:af:a7:1b: d4:8a:6f:82:18:b0:72:d1:01:3f:b7:60:86:5f:35: 7f:e7:c7:57:8d:e1:cc:68:e7:15:8f:65:c7:9c:af: 3a:b0:67:6f:6c:3d:c5:da:65:5f:37:3c:46:a3:c6: ae:d4:ed:4f:5d:e7:58:f9:2f:c0:94:3f:c3:b4:48: 76:26:fb:90:81:24:4d:25:ff:9c:74:a0:8d:9c:8b: 91:f9:a8:00:26:2f:55:f5:9e:67:ea:f8:25:2e:47: 3a:12:e6:3c:16:a3:67:23:05:40:b3:08:db:c8:96: 09:fa:ba:6a:4f:0b:e7:7f:6b:21:51:2b:05:91:31: 69:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:8E:A2:F3:3D:50:C7:5F:1F:18:09:E2:18:CF:AF:DA:94:BE:46:4E X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:e4:9c:5c:60:2e:01:16:94:b9:7a:90:59:f1:60:4c:0a:51: 5d:20:6e:11:40:d6:02:52:7d:d4:05:f1:cb:46:26:0e:56:b0: f0:42:42:97:ff:68:51:75:d3:a3:76:4d:47:56:f6:44:f2:87: 0c:f2:75:69:29:f3:5e:9e:2b:c6:18:f8:8f:72:83:69:08:dc: 89:11:09:df:fc:cf:4d:3a:5e:dd:9a:68:77:c3:39:18:b7:00: e7:2d:f6:58:d6:1a:73:c7:86:95:f3:4f:06:d4:84:34:7c:08: f1:1a:06:30:7e:b7:ab:c9:76:f2:0e:42:11:5c:67:53:05:ef: 54:96:2b:cd:ec:d6:8e:46:a9:cd:cb:06:b7:0b:89:ce:e0:9e: 3c:b5:b5:ca:01:0b:e4:82:1a:2f:47:d6:9f:0a:dd:22:6f:7b: 39:7a:1a:93:1d:a1:60:0b:78:80:5d:31:2f:af:12:a6:0e:41: fc:aa:e6:26:1c:36:27:16:66:bb:5a:6d:75:df:f4:be:2d:e9: 94:83:b2:a8:e1:2e:dc:de:4c:06:b9:b3:fd:18:9a:85:87:89: cc:55:a3:c6:74:89:51:9a:a8:dd:44:ba:2d:9d:99:62:ae:fd: 41:33:05:9a:84:69:23:b0:89:8d:c5:02:74:5e:57:a5:19:55: 51:c0:03:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPyG1Qa5WVmAdQwFtDWP1OsanlswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNjAzMjYwOTQ2MjZaFw0yNjAzMjkxNTAyMjZaMDMxMTAvBgNV BAMTKEUwOEVBMkYzM0Q1MEM3NUYxRjE4MDlFMjE4Q0ZBRkRBOTRCRTQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIIsJhlvqQvSuBiinQOLS3HDQN PgAAxM7BccDnCYLPXfHANVMorR9WGcau7b8mDgu71HsjpOBcRpEQRQBVh+k+L4D+ ROfDOqRnprM2bmX+6dAYcEZLPJTbMaht501hritZtQQxDVuDFTKUFMfCUfTF2Vtt 4BN7QJgRsS7tlD2/AfmGDa+nG9SKb4IYsHLRAT+3YIZfNX/nx1eN4cxo5xWPZcec rzqwZ29sPcXaZV83PEajxq7U7U9d51j5L8CUP8O0SHYm+5CBJE0l/5x0oI2ci5H5 qAAmL1X1nmfq+CUuRzoS5jwWo2cjBUCzCNvIlgn6umpPC+d/ayFRKwWRMWlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4I6i8z1Qx18fGAniGM+v2pS+Rk4wHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnknFxgLgEWlLl6kFnxYEwKUV0gbhFA1gJS fdQF8ctGJg5WsPBCQpf/aFF106N2TUdW9kTyhwzydWkp816eK8YY+I9yg2kI3IkR Cd/8z006Xt2aaHfDORi3AOct9ljWGnPHhpXzTwbUhDR8CPEaBjB+t6vJdvIOQhFc Z1MF71SWK83s1o5Gqc3LBrcLic7gnjy1tcoBC+SCGi9H1p8K3SJvezl6GpMdoWAL eIBdMS+vEqYOQfyq5iYcNicWZrtabXXf9L4t6ZSDsqjhLtzeTAa5s/0YmoWHicxV o8Z0iVGaqN1Eui2dmWKu/UEzBZqEaSOwiY3FAnReV6UZVVHAA7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:03 2026 by rpki-client