$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: 8DXxY09QVxltW0bv/4FVTsqUB48LeDCb7rRJ4d9oPAo= Subject key identifier: EC:64:B0:BD:30:BB:AC:98:05:55:9E:C9:E4:5A:5E:00:11:04:55:A1 Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 4F745395EBF06D8765E12359E45B53CFC2CC1F01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 017D Signing time: Thu 26 Mar 2026 00:21:29 +0000 Manifest this update: Thu 26 Mar 2026 00:16:29 +0000 Manifest next update: Sun 29 Mar 2026 03:06:29 +0000 Files and hashes: 1: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: yQij4LuEV2VFUHfy2lP7ia2raJm8ejL39m4NdrK9O8I=) 2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:06:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:74:53:95:eb:f0:6d:87:65:e1:23:59:e4:5b:53:cf:c2:cc:1f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Mar 26 00:16:29 2026 GMT Not After : Mar 29 03:06:29 2026 GMT Subject: CN=EC64B0BD30BBAC9805559EC9E45A5E00110455A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:7d:7d:80:1a:51:79:6e:c7:41:25:81:de:4e: 7a:d0:10:bf:03:27:2b:b3:79:ea:89:ab:18:a4:c7: 88:1e:1e:f2:ba:6c:ae:1e:26:b0:7a:d0:51:11:20: f6:f0:35:27:b1:0e:38:e5:f8:b0:84:19:ae:e2:e1: a8:8b:58:52:63:13:57:71:4a:6c:73:ff:d3:85:3a: 64:38:2e:07:70:9b:8b:54:d4:5c:26:6b:b2:4b:f7: 3a:e3:d1:23:c2:09:cf:35:08:ea:b6:8f:46:e9:6e: e7:f3:98:86:bb:83:77:34:89:0c:d9:4a:2e:85:e3: c3:7a:2e:3b:ed:60:fc:65:00:e7:90:6c:3e:3a:d3: c8:2e:ed:f4:00:2b:b7:d3:8c:ff:94:33:a9:8b:e0: 36:b0:8d:e7:0c:9c:a8:6b:94:9b:fd:1e:02:0e:13: 06:ae:4b:21:83:f3:69:88:08:86:5f:93:eb:62:61: 28:86:11:a4:71:0a:e6:fa:31:f0:15:55:fd:4e:08: 9e:65:47:bf:c6:3b:7f:40:41:75:e6:fa:1d:b0:23: 4b:67:15:f1:18:3d:3f:bd:69:d9:7c:c7:41:79:68: fd:93:58:8b:2f:4c:46:89:b5:7e:a8:6d:1a:45:03: e1:09:92:e5:f7:36:23:05:5c:7e:16:bd:cb:3e:1f: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:64:B0:BD:30:BB:AC:98:05:55:9E:C9:E4:5A:5E:00:11:04:55:A1 X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:b0:4f:d5:af:11:35:77:20:6c:4d:5b:4e:c3:07:b7:51:f0: c5:d0:88:5f:0f:28:23:82:4b:b0:b3:8f:a3:85:df:2b:ef:00: 58:81:08:36:1d:34:67:12:f0:c0:76:7d:3b:78:91:cd:fa:80: e4:4e:b3:5e:e2:ec:0a:cf:13:29:53:f4:6f:2f:a4:02:8d:9e: 58:c2:38:f7:b6:bf:7c:a5:2e:6a:b7:ac:40:7e:88:3f:f3:b5: 3e:bc:20:89:27:4e:30:97:4d:cd:c0:a9:8d:51:ef:7c:1b:6e: 16:c0:89:3e:1c:ed:e3:42:d1:6a:35:b2:32:28:ef:c2:35:e7: dd:95:72:1b:ad:33:1b:69:e2:d5:2f:9f:4b:24:4b:5d:9d:94: 6e:5f:d5:27:d1:4f:f7:c2:95:2c:1c:a3:ae:67:d4:bb:28:f2: 95:5f:3c:40:70:9f:c2:51:62:72:6b:50:c3:49:76:67:23:bc: ca:28:c9:6a:82:62:c5:ac:83:32:5b:bf:35:26:a9:1c:3e:2b: 50:d8:52:73:cc:f7:98:fc:06:be:81:f3:bf:4f:c4:75:74:0b: 93:c7:74:35:2f:d2:52:ab:fc:c7:9f:00:68:3c:34:88:a5:ff: fb:4d:8c:8a:e7:2c:80:d6:49:74:8f:a4:0b:29:d4:41:ec:f0: 90:d3:06:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3RTlevwbYdl4SNZ5FtTz8LMHwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNjAzMjYwMDE2MjlaFw0yNjAzMjkwMzA2MjlaMDMxMTAvBgNV BAMTKEVDNjRCMEJEMzBCQkFDOTgwNTU1OUVDOUU0NUE1RTAwMTEwNDU1QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSfX2AGlF5bsdBJYHeTnrQEL8D JyuzeeqJqxikx4geHvK6bK4eJrB60FERIPbwNSexDjjl+LCEGa7i4aiLWFJjE1dx Smxz/9OFOmQ4Lgdwm4tU1Fwma7JL9zrj0SPCCc81COq2j0bpbufzmIa7g3c0iQzZ Si6F48N6LjvtYPxlAOeQbD4608gu7fQAK7fTjP+UM6mL4DawjecMnKhrlJv9HgIO EwauSyGD82mICIZfk+tiYSiGEaRxCub6MfAVVf1OCJ5lR7/GO39AQXXm+h2wI0tn FfEYPT+9adl8x0F5aP2TWIsvTEaJtX6obRpFA+EJkuX3NiMFXH4Wvcs+H15PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7GSwvTC7rJgFVZ7J5FpeABEEVaEwHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABywT9WvETV3IGxNW07DB7dR8MXQiF8PKCOC S7Czj6OF3yvvAFiBCDYdNGcS8MB2fTt4kc36gOROs17i7ArPEylT9G8vpAKNnljC OPe2v3ylLmq3rEB+iD/ztT68IIknTjCXTc3AqY1R73wbbhbAiT4c7eNC0Wo1sjIo 78I1592VchutMxtp4tUvn0skS12dlG5f1SfRT/fClSwco65n1Lso8pVfPEBwn8JR YnJrUMNJdmcjvMooyWqCYsWsgzJbvzUmqRw+K1DYUnPM95j8Br6B879PxHV0C5PH dDUv0lKr/MefAGg8NIil//tNjIrnLIDWSXSPpAsp1EHs8JDTBlc= -----END CERTIFICATE-----Generated at Thu Mar 26 11:28:14 2026 by rpki-client