$ rpki-client -vvf repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft File: 07560F77A1685B4C155E037BCDB207359FA510B4.mft (raw, json) Hash identifier: uBLpM4Jq/q2cfIC1JueYVYPmEwAIR5Nr5E7Rm0CGbUo= Subject key identifier: 1B:3D:7B:4B:2F:27:92:8F:E7:4F:C5:85:9B:5B:2A:8F:49:44:E2:4F Authority key identifier: 07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 Certificate issuer: /CN=07560F77A1685B4C155E037BCDB207359FA510B4 Certificate serial: 16FC6C12833BDC7B36671211606A87D97E50B6B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft Manifest number: 03B2 Signing time: Tue 24 Mar 2026 17:42:20 +0000 Manifest this update: Tue 24 Mar 2026 17:37:20 +0000 Manifest next update: Fri 27 Mar 2026 19:10:20 +0000 Files and hashes: 1: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: plRrfoS9u18r6cJ21dIs2GkBNTJ8mFpNHfj06xwp/io=) 2: 07560F77A1685B4C155E037BCDB207359FA510B4.crl (hash: NNElO31Wx5O4kUiODHFe1cni2PJZZhw3ckS8ss186jI=) 3: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: m+R5stnH6Lsh9qXKonDHyLXJDyC1D/I30DO2sDWbC8U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:10:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:fc:6c:12:83:3b:dc:7b:36:67:12:11:60:6a:87:d9:7e:50:b6:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560F77A1685B4C155E037BCDB207359FA510B4 Validity Not Before: Mar 24 17:37:20 2026 GMT Not After : Mar 27 19:10:20 2026 GMT Subject: CN=1B3D7B4B2F27928FE74FC5859B5B2A8F4944E24F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:32:4a:da:bc:53:29:8b:7d:83:36:4e:b4:76: 1f:ef:3e:99:8f:4c:3a:20:0f:af:60:d8:20:b7:a7: ca:88:85:c0:97:b9:1e:6a:8a:0f:33:ac:c4:99:af: 98:81:06:be:1f:77:37:0b:90:1e:22:5b:e3:52:20: d7:2b:bc:68:27:3e:21:ff:a3:60:53:bf:9e:e9:af: 01:00:1d:ee:3b:a5:31:ee:3f:56:fc:48:4f:62:10: 36:88:b9:26:0d:e8:f6:6d:74:42:f6:9d:47:17:5d: 2c:2d:23:89:e7:c3:be:4a:3a:c0:d9:aa:9b:e9:b4: 75:0f:ac:0d:3d:4f:3b:bf:17:cc:4f:a9:9b:79:b7: 23:5d:3c:2a:46:e6:87:c2:f9:d5:f7:da:56:d7:3f: f1:d2:13:c8:1c:d4:08:e4:0e:f7:8b:eb:8a:17:48: 7b:9a:a4:17:cb:2a:70:88:df:53:08:62:55:29:97: 5b:06:3c:f0:84:89:89:7b:22:b4:76:bf:e0:b1:e4: 81:85:8d:5a:22:c6:92:97:ea:f3:03:fe:93:55:f3: 30:29:46:7d:73:22:82:47:aa:90:31:8e:71:16:62: 7a:5d:51:37:0f:6f:71:6f:3c:2c:b8:8e:93:dc:e1: ad:2d:a7:a6:d1:56:92:b3:29:0d:66:8b:d4:61:7e: cf:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:3D:7B:4B:2F:27:92:8F:E7:4F:C5:85:9B:5B:2A:8F:49:44:E2:4F X509v3 Authority Key Identifier: keyid:07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:b4:09:19:44:75:ab:2e:84:8a:13:5e:80:79:d9:50:21:ad: 8c:46:4d:5c:3d:14:87:2f:03:cd:19:eb:9f:dd:b1:4c:f8:e2: 57:70:2e:8f:7f:b9:44:6b:23:7a:e9:c9:66:58:fb:33:cb:e3: dc:66:94:65:fe:57:21:b2:7f:f8:5e:f3:da:04:b3:99:6a:51: ee:55:c5:82:af:fd:b9:0a:e0:1b:a3:3e:63:cb:ed:d8:30:f0: b3:ce:7c:3f:88:99:b1:5c:58:68:45:06:7e:28:eb:95:4d:f4: f8:58:5f:82:d0:99:66:08:2c:2e:a2:60:5e:63:d0:6b:bf:0c: fc:c5:80:20:7f:0c:b7:56:21:02:15:e1:22:68:22:f8:7c:ec: c9:b0:cd:f0:0d:e9:4d:31:d0:32:8b:83:fa:eb:6b:e9:c1:7c: 66:56:79:c8:ed:08:cc:b9:ef:3c:ca:5a:f9:6a:fc:13:84:5c: 9a:c9:bb:ac:71:3f:10:f8:bf:0d:3e:21:e0:25:03:4b:2a:21: f9:46:03:a1:e5:05:67:c5:ab:4f:e4:11:d3:ea:65:4c:5c:59: 79:85:df:73:6a:bc:47:07:c0:d4:f1:dd:6a:31:66:6b:43:4f: 5f:72:66:18:c7:3b:a9:42:49:00:f2:d3:3e:85:8a:b3:93:6e: 3d:f7:f7:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFvxsEoM73Hs2ZxIRYGqH2X5QtrcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5 RkE1MTBCNDAeFw0yNjAzMjQxNzM3MjBaFw0yNjAzMjcxOTEwMjBaMDMxMTAvBgNV BAMTKDFCM0Q3QjRCMkYyNzkyOEZFNzRGQzU4NTlCNUIyQThGNDk0NEUyNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSMkravFMpi32DNk60dh/vPpmP TDogD69g2CC3p8qIhcCXuR5qig8zrMSZr5iBBr4fdzcLkB4iW+NSINcrvGgnPiH/ o2BTv57prwEAHe47pTHuP1b8SE9iEDaIuSYN6PZtdEL2nUcXXSwtI4nnw75KOsDZ qpvptHUPrA09Tzu/F8xPqZt5tyNdPCpG5ofC+dX32lbXP/HSE8gc1AjkDveL64oX SHuapBfLKnCI31MIYlUpl1sGPPCEiYl7IrR2v+Cx5IGFjVoixpKX6vMD/pNV8zAp Rn1zIoJHqpAxjnEWYnpdUTcPb3FvPCy4jpPc4a0tp6bRVpKzKQ1mi9Rhfs+XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGz17Sy8nko/nT8WFm1sqj0lE4k8wHwYDVR0j BBgwFoAUB1YPd6FoW0wVXgN7zbIHNZ+lELQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDhjYzBiMy0yNTA4LTQ3N2YtOWYyNS02Njg0ZDY1NzJkZGEvMC8wNzU2MEY3N0Ex Njg1QjRDMTU1RTAzN0JDREIyMDczNTlGQTUxMEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5RkE1 MTBCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3 MzU5RkE1MTBCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABu0CRlEdasuhIoTXoB52VAhrYxGTVw9FIcv A80Z65/dsUz44ldwLo9/uURrI3rpyWZY+zPL49xmlGX+VyGyf/he89oEs5lqUe5V xYKv/bkK4BujPmPL7dgw8LPOfD+ImbFcWGhFBn4o65VN9PhYX4LQmWYILC6iYF5j 0Gu/DPzFgCB/DLdWIQIV4SJoIvh87MmwzfAN6U0x0DKLg/rra+nBfGZWecjtCMy5 7zzKWvlq/BOEXJrJu6xxPxD4vw0+IeAlA0sqIflGA6HlBWfFq0/kEdPqZUxcWXmF 33NqvEcHwNTx3WoxZmtDT19yZhjHO6lCSQDy0z6FirOTbj3391s= -----END CERTIFICATE-----Generated at Thu Mar 26 18:34:44 2026 by rpki-client