$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft File: 7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json) Hash identifier: GqMnyXFI3jHByqASePkyQ3u/vHZYxVnckJqs1NQorGo= Subject key identifier: 44:85:85:FE:0B:C8:07:85:8A:54:C0:C9:BB:22:F8:30:6D:F1:31:AB Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D Certificate issuer: /CN=7B04CE58A1370241E93EF01F597DD18A039D613D Certificate serial: 48DBAA8EE6BF1E4E920B3A3F41E1FCE94B5A0569 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft Manifest number: 01ED Signing time: Thu 26 Mar 2026 13:50:41 +0000 Manifest this update: Thu 26 Mar 2026 13:45:41 +0000 Manifest next update: Sun 29 Mar 2026 14:35:41 +0000 Files and hashes: 1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: zomwNLCe0VyAqDz92tIZrE0AVW1Hd75UHhQ0Qjvp8io=) 2: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: BVsk6AHIvUUfWZ+4++VqM/4m6oLrmg+QHEXYFO+Hiks=) 3: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: mH/I6tnbOj2dR33rWSoKyGDa+yVTRlMR5ZJVBlar/8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:35:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:db:aa:8e:e6:bf:1e:4e:92:0b:3a:3f:41:e1:fc:e9:4b:5a:05:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D Validity Not Before: Mar 26 13:45:41 2026 GMT Not After : Mar 29 14:35:41 2026 GMT Subject: CN=448585FE0BC807858A54C0C9BB22F8306DF131AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:04:e4:84:df:32:2b:48:f5:25:6d:92:c7:02: 75:97:26:8d:04:de:65:98:04:73:ba:22:ac:ff:f2: 17:92:c1:03:ec:89:71:21:c4:f4:be:ce:35:31:4f: 74:e7:36:81:cb:c3:6d:2f:da:67:5d:73:41:0d:a5: 79:db:39:62:db:2e:e7:e4:35:92:52:b2:a8:45:29: 4c:75:80:37:64:6f:2a:6a:2d:ae:6e:f4:77:2b:41: f3:50:c7:d4:be:bd:0a:c7:0b:c8:75:04:bb:4f:42: 49:7b:97:36:39:77:e0:80:67:c7:f1:3e:48:4c:25: b5:91:05:7a:de:46:ab:9c:76:35:4a:fd:2a:c7:f8: 1a:2d:50:f7:56:ac:7e:dd:5f:c5:28:22:0a:57:30: 33:21:bd:56:43:d1:ec:14:de:5a:57:61:73:2d:d1: fe:2f:0c:cb:1d:b8:96:61:fd:31:33:1a:e9:ba:12: 25:d8:0a:69:75:0b:43:7c:38:b4:33:28:18:49:e8: 4f:e5:7a:0e:1d:34:a6:aa:57:6a:ea:cd:eb:c2:3a: fd:0a:3a:63:95:45:86:e3:dd:49:d8:00:a4:a9:f9: d8:8d:e8:fb:ce:e6:f1:0b:1f:70:ab:0a:09:6a:8f: 0d:17:4e:84:79:56:c6:9e:b1:84:88:14:3e:22:d3: 11:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:85:85:FE:0B:C8:07:85:8A:54:C0:C9:BB:22:F8:30:6D:F1:31:AB X509v3 Authority Key Identifier: keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d9:62:74:34:53:9b:ba:2a:06:03:d3:78:7c:ea:ef:3b:6f:ca: 5e:2a:41:80:37:7c:6c:51:fa:ef:d2:45:d9:b2:6d:b5:f1:9e: f1:52:37:55:16:a2:b3:07:b4:a9:85:ba:0c:fe:14:b7:5d:ce: 6e:e6:14:ab:8d:54:10:74:49:2c:92:32:2d:37:23:3d:fe:bd: 8a:85:4a:f0:c2:1c:a8:9e:95:2a:cf:34:6b:1b:80:12:b4:fc: 2a:58:5d:0f:f9:77:34:3c:0c:19:9b:b8:f6:4b:62:19:29:d4: 7f:a6:23:1f:8c:42:ac:b3:14:35:5c:22:4b:4e:3a:d8:57:0a: ea:aa:d7:8b:9b:cd:02:26:fd:f2:37:b0:e3:bd:f7:a0:47:24: 10:f2:c8:b9:de:16:a1:05:9d:f1:74:c1:79:3b:ce:4b:32:cd: a5:90:fd:a3:05:03:6f:cd:3e:7a:36:74:3c:60:5b:80:36:e2: c0:97:24:f0:23:41:2b:a9:4a:c7:26:0e:f3:99:fd:74:19:3e: 23:e6:4a:99:29:7e:46:1e:ef:a5:6b:53:17:e9:20:12:99:ee: 2c:70:f6:81:c7:34:14:9c:bd:1a:23:4b:bd:5c:ce:61:e9:0e: 5a:28:b0:5b:a6:5a:35:fd:a5:5e:93:3a:97:2f:38:0f:5b:d7: 3f:07:98:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSNuqjua/Hk6SCzo/QeH86UtaBWkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw MzlENjEzRDAeFw0yNjAzMjYxMzQ1NDFaFw0yNjAzMjkxNDM1NDFaMDMxMTAvBgNV BAMTKDQ0ODU4NUZFMEJDODA3ODU4QTU0QzBDOUJCMjJGODMwNkRGMTMxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVBOSE3zIrSPUlbZLHAnWXJo0E 3mWYBHO6Iqz/8heSwQPsiXEhxPS+zjUxT3TnNoHLw20v2mddc0ENpXnbOWLbLufk NZJSsqhFKUx1gDdkbypqLa5u9HcrQfNQx9S+vQrHC8h1BLtPQkl7lzY5d+CAZ8fx PkhMJbWRBXreRqucdjVK/SrH+BotUPdWrH7dX8UoIgpXMDMhvVZD0ewU3lpXYXMt 0f4vDMsduJZh/TEzGum6EiXYCml1C0N8OLQzKBhJ6E/leg4dNKaqV2rqzevCOv0K OmOVRYbj3UnYAKSp+diN6PvO5vELH3CrCglqjw0XToR5VsaesYSIFD4i0xF9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURIWF/gvIB4WKVMDJuyL4MG3xMaswHwYDVR0j BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE NjEzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx NjUtZDE5NGVlZDg5ZTZiLzAvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQx OEEwMzlENjEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANlidDRTm7oqBgPTeHzq7ztvyl4qQYA3fGxR +u/SRdmybbXxnvFSN1UWorMHtKmFugz+FLddzm7mFKuNVBB0SSySMi03Iz3+vYqF SvDCHKielSrPNGsbgBK0/CpYXQ/5dzQ8DBmbuPZLYhkp1H+mIx+MQqyzFDVcIktO OthXCuqq14ubzQIm/fI3sOO996BHJBDyyLneFqEFnfF0wXk7zksyzaWQ/aMFA2/N Pno2dDxgW4A24sCXJPAjQSupSscmDvOZ/XQZPiPmSpkpfkYe76VrUxfpIBKZ7ixw 9oHHNBScvRojS71czmHpDloosFumWjX9pV6TOpcvOA9b1z8HmMs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:35:45 2026 by rpki-client