$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: WHsZchwweYhu2KpkuRGjtVX73tpI+oDxC0B97wHgF1o= Subject key identifier: 44:CA:AC:87:1C:04:2A:61:8C:E8:AF:0E:5D:C7:73:48:D1:E3:33:45 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 23B6894DCDF88ACB84E93DD24A53766F2D18ACFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 0226 Signing time: Wed 25 Mar 2026 17:01:35 +0000 Manifest this update: Wed 25 Mar 2026 16:56:35 +0000 Manifest next update: Sun 29 Mar 2026 02:20:35 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: 813GtoQAFV76KY2gkXJfY4E5XZd9R3ya5qK8nqkR2nI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b6:89:4d:cd:f8:8a:cb:84:e9:3d:d2:4a:53:76:6f:2d:18:ac:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Mar 25 16:56:35 2026 GMT Not After : Mar 29 02:20:35 2026 GMT Subject: CN=44CAAC871C042A618CE8AF0E5DC77348D1E33345 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:5e:e7:ec:69:54:d2:70:9f:c9:cf:92:6c:16: 69:1c:e7:09:b8:8e:2e:66:2c:b7:32:5b:45:3c:6d: 54:99:30:25:00:c5:f7:56:89:8e:ac:9f:ac:3c:88: 70:09:d0:f2:3b:fe:d3:66:56:fa:4d:87:65:40:1a: 48:46:00:a4:3a:45:fe:e0:1b:fc:b2:40:39:9a:a5: d1:15:cb:94:68:ae:67:30:07:4c:08:cb:e1:c8:05: 77:ff:1d:74:36:7c:71:f0:b6:a8:de:c4:66:70:c5: f5:f8:f6:58:26:64:fe:97:89:39:95:f9:e5:42:17: 87:a0:48:86:2a:78:07:2c:a3:8c:98:a6:b7:53:a3: 13:22:7b:bf:37:4e:1d:db:30:20:0a:74:59:a2:8a: 48:a1:fc:a0:13:2f:13:e4:51:0f:9a:5a:a2:d3:fa: 4b:dc:83:03:ec:c5:ea:0b:0f:2f:75:a0:26:cf:c6: da:dc:98:03:19:ef:f3:43:e5:8d:7b:4d:de:fc:7d: e2:11:77:82:b6:e9:ab:51:db:dd:3e:67:e6:91:bd: fd:ce:13:4f:20:f8:71:59:4a:50:12:ac:82:32:01: eb:d4:90:46:83:d1:f3:77:90:35:56:b2:6f:93:f8: 0d:44:1d:0a:a6:2e:fa:8a:6e:29:05:15:d7:d6:b0: 0c:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:CA:AC:87:1C:04:2A:61:8C:E8:AF:0E:5D:C7:73:48:D1:E3:33:45 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:38:b1:d8:b0:6a:33:ba:2a:b1:bf:dc:00:e8:da:52:bb:85: 82:77:d4:87:5c:66:f1:ab:fd:94:09:5b:cd:0c:4f:a2:2f:cf: d9:54:2a:bb:37:10:73:5d:f4:6c:e1:73:95:a3:89:0a:d3:14: 7a:4e:f9:32:12:1e:45:c6:46:b4:d2:27:c3:64:f1:8f:b2:b3: 0f:91:ab:a6:23:c5:bd:5e:e3:96:4b:ff:aa:0a:ec:a3:83:2b: c7:8e:ea:4f:9c:38:c9:c0:13:de:a3:ba:2d:1c:80:a7:14:1b: 7e:ad:04:a7:21:99:53:f4:c2:47:dc:e9:71:59:b7:b3:b0:a1: 60:d3:c2:06:d6:2d:80:23:cd:46:68:3b:92:54:21:18:b2:f0: 08:94:ad:42:2c:88:9a:cf:ac:27:9b:90:3b:a3:b9:60:05:d0: 41:1d:31:8e:b2:87:12:6c:c5:8d:fd:22:c6:92:c2:3b:82:5c: 71:a5:a6:33:e9:81:14:db:d0:00:4b:01:bd:32:24:48:8e:eb: f7:c4:50:a6:40:46:57:20:ea:ba:98:c3:91:89:66:00:65:21: 32:5c:e7:b0:b3:e7:04:3a:3b:15:1c:6e:59:e3:16:54:c8:49: a6:d5:36:79:e2:81:a3:fe:8d:66:93:c7:6f:c6:78:c4:79:9b: 50:8c:0a:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7aJTc34isuE6T3SSlN2by0YrPwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNjAzMjUxNjU2MzVaFw0yNjAzMjkwMjIwMzVaMDMxMTAvBgNV BAMTKDQ0Q0FBQzg3MUMwNDJBNjE4Q0U4QUYwRTVEQzc3MzQ4RDFFMzMzNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4XufsaVTScJ/Jz5JsFmkc5wm4 ji5mLLcyW0U8bVSZMCUAxfdWiY6sn6w8iHAJ0PI7/tNmVvpNh2VAGkhGAKQ6Rf7g G/yyQDmapdEVy5RormcwB0wIy+HIBXf/HXQ2fHHwtqjexGZwxfX49lgmZP6XiTmV +eVCF4egSIYqeAcso4yYprdToxMie783Th3bMCAKdFmiikih/KATLxPkUQ+aWqLT +kvcgwPsxeoLDy91oCbPxtrcmAMZ7/ND5Y17Td78feIRd4K26atR290+Z+aRvf3O E08g+HFZSlASrIIyAevUkEaD0fN3kDVWsm+T+A1EHQqmLvqKbikFFdfWsAwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURMqshxwEKmGM6K8OXcdzSNHjM0UwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABE4sdiwajO6KrG/3ADo2lK7hYJ31IdcZvGr /ZQJW80MT6Ivz9lUKrs3EHNd9Gzhc5WjiQrTFHpO+TISHkXGRrTSJ8Nk8Y+ysw+R q6Yjxb1e45ZL/6oK7KODK8eO6k+cOMnAE96jui0cgKcUG36tBKchmVP0wkfc6XFZ t7OwoWDTwgbWLYAjzUZoO5JUIRiy8AiUrUIsiJrPrCebkDujuWAF0EEdMY6yhxJs xY39IsaSwjuCXHGlpjPpgRTb0ABLAb0yJEiO6/fEUKZARlcg6rqYw5GJZgBlITJc 57Cz5wQ6OxUcblnjFlTISabVNnnigaP+jWaTx2/GeMR5m1CMCmY= -----END CERTIFICATE-----Generated at Thu Mar 26 07:33:51 2026 by rpki-client