$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: 8lNVsBHYpRl4AVvCW6AFgm9zRc+3/ZGwKKbhfChEgNo= Subject key identifier: 76:03:9C:83:7E:1C:72:63:F4:FD:64:27:E4:AC:5A:E0:D7:A9:85:69 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 4C84ADDBE669F887D6A7A8021E876A8FD4BDC31A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 0113 Signing time: Wed 25 Mar 2026 13:52:14 +0000 Manifest this update: Wed 25 Mar 2026 13:47:14 +0000 Manifest next update: Sat 28 Mar 2026 22:54:14 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: URzSBzkpiIa1seodj3wyxovl9MZhZ8BUcGltmmPh2x0=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:54:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:84:ad:db:e6:69:f8:87:d6:a7:a8:02:1e:87:6a:8f:d4:bd:c3:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Mar 25 13:47:14 2026 GMT Not After : Mar 28 22:54:14 2026 GMT Subject: CN=76039C837E1C7263F4FD6427E4AC5AE0D7A98569 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:18:1c:34:cf:ab:83:83:2f:3c:ce:b4:5b:5c: 49:f3:a9:15:f1:c2:6c:55:f9:e5:c9:19:25:12:0c: 11:19:92:db:26:5a:05:43:d8:f8:e7:93:b4:16:02: df:e2:e8:b4:7e:20:70:f0:7c:3c:9b:5a:5e:9e:c7: c8:af:67:04:ba:90:de:81:f8:08:2e:f5:d7:41:6c: 84:13:8d:98:01:18:66:0d:64:4c:fb:2e:17:9c:e7: 7c:7c:a1:db:da:43:67:22:60:d4:01:1c:57:30:6c: c0:db:20:a0:db:04:ae:8c:4e:24:f9:69:80:cd:f4: 8e:6f:70:a1:e7:59:6a:1f:70:9b:f6:d8:0f:45:07: 1d:69:81:33:f0:b4:dc:eb:1b:d4:5d:4e:9c:65:d5: 8e:07:6b:7c:29:d1:88:7b:d5:2a:b6:d5:00:b2:a2: 1e:fa:19:5e:19:f3:c4:41:72:4e:9e:09:64:7b:35: 6d:d4:36:72:c4:d7:80:b5:89:ca:04:4c:63:03:e9: 0f:b9:6b:50:60:fa:2f:f5:29:5c:02:71:05:fa:fb: e6:d2:79:5c:29:dd:11:7a:e9:99:ba:e3:2f:a2:16: 71:b8:65:76:b5:17:c2:db:c5:e5:9c:13:b9:4e:e4: 4d:14:ef:1c:e4:99:2a:dd:7a:b0:19:20:cd:45:4a: ae:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:03:9C:83:7E:1C:72:63:F4:FD:64:27:E4:AC:5A:E0:D7:A9:85:69 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:ec:07:6a:4e:06:ea:29:35:6f:c1:70:c9:c7:5a:34:ce:3e: 7c:15:d1:2b:19:cb:6a:37:0a:9c:97:64:d8:ec:fd:d9:96:32: 7a:9c:89:a4:70:f0:d4:de:df:6c:03:73:bb:5a:2e:45:be:37: cc:0f:26:f0:34:9f:66:7d:33:01:83:17:1d:19:1f:e0:dc:7e: 21:aa:37:ca:7d:68:ce:98:1b:49:a8:34:c8:cf:eb:48:c2:33: 9c:84:70:e3:e8:e4:63:d5:9f:69:73:b1:51:c1:de:74:03:49: f8:85:9e:c2:37:98:5c:7e:0e:e8:5b:0b:c9:e6:79:c1:c8:1b: 5a:3a:0b:f6:15:08:ee:be:6c:05:67:80:49:55:81:a1:a9:cf: 7b:74:ce:fb:81:93:06:25:4d:91:a1:52:9e:35:ab:a9:ec:ec: 24:62:56:0e:b8:1c:ba:fd:4e:80:42:e3:2f:3e:87:ea:ab:98: 40:a6:85:ea:92:94:13:0f:3c:49:db:1c:1a:43:20:a5:0b:2d: a6:07:14:4c:82:7f:42:33:a1:68:3f:3e:59:95:da:74:05:68: a3:86:61:ca:76:db:7f:cd:e7:b7:d3:f5:8b:57:1d:1c:73:eb: b7:03:c4:58:36:40:eb:eb:48:45:9a:9b:5e:46:34:37:73:18: 3f:56:d3:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTISt2+Zp+IfWp6gCHodqj9S9wxowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNjAzMjUxMzQ3MTRaFw0yNjAzMjgyMjU0MTRaMDMxMTAvBgNV BAMTKDc2MDM5QzgzN0UxQzcyNjNGNEZENjQyN0U0QUM1QUUwRDdBOTg1NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMGBw0z6uDgy88zrRbXEnzqRXx wmxV+eXJGSUSDBEZktsmWgVD2Pjnk7QWAt/i6LR+IHDwfDybWl6ex8ivZwS6kN6B +Agu9ddBbIQTjZgBGGYNZEz7Lhec53x8odvaQ2ciYNQBHFcwbMDbIKDbBK6MTiT5 aYDN9I5vcKHnWWofcJv22A9FBx1pgTPwtNzrG9RdTpxl1Y4Ha3wp0Yh71Sq21QCy oh76GV4Z88RBck6eCWR7NW3UNnLE14C1icoETGMD6Q+5a1Bg+i/1KVwCcQX6++bS eVwp3RF66Zm64y+iFnG4ZXa1F8LbxeWcE7lO5E0U7xzkmSrderAZIM1FSq4dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdgOcg34ccmP0/WQn5Kxa4NephWkwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDsB2pOBuopNW/BcMnHWjTOPnwV0SsZy2o3 CpyXZNjs/dmWMnqciaRw8NTe32wDc7taLkW+N8wPJvA0n2Z9MwGDFx0ZH+DcfiGq N8p9aM6YG0moNMjP60jCM5yEcOPo5GPVn2lzsVHB3nQDSfiFnsI3mFx+DuhbC8nm ecHIG1o6C/YVCO6+bAVngElVgaGpz3t0zvuBkwYlTZGhUp41q6ns7CRiVg64HLr9 ToBC4y8+h+qrmECmheqSlBMPPEnbHBpDIKULLaYHFEyCf0IzoWg/PlmV2nQFaKOG Ycp223/N57fT9YtXHRxz67cDxFg2QOvrSEWam15GNDdzGD9W02M= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:38 2026 by rpki-client