$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft File: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json) Hash identifier: bLuXXdZlSZUoIgWLXZi5ulGWjt/rHEceXIkPYgPFRsg= Subject key identifier: 4F:4F:0A:FC:4C:59:2F:E9:D5:83:96:7E:F3:48:D2:AD:B3:27:61:13 Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 Certificate issuer: /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Certificate serial: 7039879793CD726FF4D6DA2CCC0232C1DAA26030 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft Manifest number: 03DD Signing time: Tue 24 Mar 2026 11:31:54 +0000 Manifest this update: Tue 24 Mar 2026 11:26:54 +0000 Manifest next update: Fri 27 Mar 2026 14:55:54 +0000 Files and hashes: 1: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: pfyWIoLnfhreu/uz7HLcqt4VfjgUWRecSpJkmtZIEHI=) 2: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: RsWcUmr2uvYRvygwSjz1OJYmVuhO73DQIzd7nwrVn7I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:55:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:39:87:97:93:cd:72:6f:f4:d6:da:2c:cc:02:32:c1:da:a2:60:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Validity Not Before: Mar 24 11:26:54 2026 GMT Not After : Mar 27 14:55:54 2026 GMT Subject: CN=4F4F0AFC4C592FE9D583967EF348D2ADB3276113 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:f5:1b:63:60:c5:8d:18:63:62:c9:a8:02:bc: 73:76:17:08:de:d1:f4:fc:29:8a:e2:60:b5:8e:2d: 04:56:0e:7c:d3:0d:8f:e0:56:75:e1:02:39:69:b5: 8d:60:ca:06:d5:7c:71:89:4a:a9:1a:27:de:81:22: 63:14:2a:9a:ba:a3:08:f2:c2:d4:45:12:c6:97:00: 76:28:59:f6:89:0b:3f:7e:68:4e:cc:df:22:58:63: 0e:c0:ba:72:3d:70:26:aa:b4:e3:ff:be:f3:f3:2c: bf:2a:13:c4:05:7e:5f:88:0d:7d:d0:f6:e6:50:d7: cb:3e:6d:11:7f:16:a7:bd:a5:38:5f:7c:d9:7f:50: 51:e3:5a:a5:61:eb:8a:dc:b0:dc:3c:3d:17:3b:61: bc:5d:67:7f:b8:b3:8c:35:9b:5d:48:1d:c8:80:93: 04:6e:6b:c0:e3:8c:67:67:4c:45:84:18:8e:0d:47: 43:f3:0a:da:69:4c:6e:39:c0:83:20:50:a4:73:61: ec:11:29:69:fb:eb:c5:70:7a:e1:d0:e0:a9:e6:8c: 63:14:e8:40:4f:e8:d7:02:61:f2:c3:9e:a4:ba:16: ff:e7:62:e0:d8:04:cb:36:74:04:57:e3:ed:a5:25: 17:4c:7a:d6:3b:1d:52:c3:3a:cf:e7:af:59:aa:07: af:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:4F:0A:FC:4C:59:2F:E9:D5:83:96:7E:F3:48:D2:AD:B3:27:61:13 X509v3 Authority Key Identifier: keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:16:2b:6c:be:96:4a:bd:70:c5:23:be:d7:e2:b2:84:72:f8: 1f:85:84:25:a2:26:be:2b:85:76:1d:53:28:89:1e:7d:54:08: 49:56:cd:56:24:3f:cd:d5:e5:db:1c:4b:1b:c4:13:08:da:52: 06:26:03:e3:af:77:e1:e4:c8:f1:ef:53:c5:37:f5:16:5d:80: 7e:59:db:64:a0:86:5e:c8:96:e3:c6:98:2f:9b:2d:e6:50:38: 08:3b:1d:25:96:c4:f5:51:22:41:91:bd:f6:40:20:b3:c7:9f: aa:3c:21:30:ed:b1:29:6e:ce:ec:37:ad:dd:3f:dd:51:f4:eb: 69:07:2a:95:36:ec:85:77:10:af:bd:09:5a:d1:31:57:39:fa: 3c:52:e9:06:cb:84:ef:55:41:b9:ff:97:45:43:7d:a7:67:14: 52:ce:26:05:a8:56:f4:5d:0c:6b:35:2a:79:23:34:13:28:62: 55:ad:fd:24:b8:06:1a:f3:f6:42:16:80:0a:fd:52:97:af:79: a1:4a:6c:d2:94:0d:a8:dc:c3:de:27:49:bb:3c:4e:b8:05:43: cf:1e:21:7b:63:ce:1b:29:02:cd:48:de:e2:10:c4:e3:b0:12: b0:d4:12:00:b4:db:90:35:20:0a:cd:d0:59:5a:f0:07:e2:45: f3:51:28:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcDmHl5PNcm/01toszAIywdqiYDAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEy OTg3MUQ5MDAeFw0yNjAzMjQxMTI2NTRaFw0yNjAzMjcxNDU1NTRaMDMxMTAvBgNV BAMTKDRGNEYwQUZDNEM1OTJGRTlENTgzOTY3RUYzNDhEMkFEQjMyNzYxMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT9RtjYMWNGGNiyagCvHN2Fwje 0fT8KYriYLWOLQRWDnzTDY/gVnXhAjlptY1gygbVfHGJSqkaJ96BImMUKpq6owjy wtRFEsaXAHYoWfaJCz9+aE7M3yJYYw7AunI9cCaqtOP/vvPzLL8qE8QFfl+IDX3Q 9uZQ18s+bRF/Fqe9pThffNl/UFHjWqVh64rcsNw8PRc7YbxdZ3+4s4w1m11IHciA kwRua8DjjGdnTEWEGI4NR0PzCtppTG45wIMgUKRzYewRKWn768VweuHQ4KnmjGMU 6EBP6NcCYfLDnqS6Fv/nYuDYBMs2dARX4+2lJRdMetY7HVLDOs/nr1mqB6/BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT08K/ExZL+nVg5Z+80jSrbMnYRMwHwYDVR0j BBgwFoAUf9P5LxMkG4AGLMMbDsij0SmHHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDRkNjQyNy0zZjAzLTRkMjEtYjhjYy1iYmZkMmEzZjhjMzMvMC83RkQzRjkyRjEz MjQxQjgwMDYyQ0MzMUIwRUM4QTNEMTI5ODcxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEyOTg3 MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEz RDEyOTg3MUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEWK2y+lkq9cMUjvtfisoRy+B+FhCWiJr4r hXYdUyiJHn1UCElWzVYkP83V5dscSxvEEwjaUgYmA+Ovd+HkyPHvU8U39RZdgH5Z 22Sghl7IluPGmC+bLeZQOAg7HSWWxPVRIkGRvfZAILPHn6o8ITDtsSluzuw3rd0/ 3VH062kHKpU27IV3EK+9CVrRMVc5+jxS6QbLhO9VQbn/l0VDfadnFFLOJgWoVvRd DGs1KnkjNBMoYlWt/SS4Bhrz9kIWgAr9UpeveaFKbNKUDajcw94nSbs8TrgFQ88e IXtjzhspAs1I3uIQxOOwErDUEgC025A1IArN0Fla8AfiRfNRKGw= -----END CERTIFICATE-----Generated at Thu Mar 26 07:19:58 2026 by rpki-client