$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: qmJyTuR6LUkGhbMh2OXlg6mDa9uK4qccMRvWUjiiizI= Subject key identifier: 21:04:75:AD:16:D9:CE:2B:5F:A5:90:F6:7F:D4:47:AC:22:84:FB:E3 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 7D724C42B65BEF4B284F5319C0BD0489C2DC7945 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 055D Signing time: Wed 25 Mar 2026 23:00:41 +0000 Manifest this update: Wed 25 Mar 2026 22:55:41 +0000 Manifest next update: Sun 29 Mar 2026 08:54:41 +0000 Files and hashes: 1: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: LXd0bMELzxvWVcOFeDE7liUCwlwWoPR5ozrn/rxaCpM=) 2: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 3: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 4: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:54:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:72:4c:42:b6:5b:ef:4b:28:4f:53:19:c0:bd:04:89:c2:dc:79:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Mar 25 22:55:41 2026 GMT Not After : Mar 29 08:54:41 2026 GMT Subject: CN=210475AD16D9CE2B5FA590F67FD447AC2284FBE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:9d:be:d1:7f:e0:c6:b8:24:e7:e9:25:e6:e4: 81:20:d3:1e:e9:7c:21:82:55:fd:a5:bb:2f:61:e0: de:fd:6e:05:f3:83:5b:8c:c8:9f:7f:e9:1c:4a:d9: 24:89:fd:1f:3d:7f:17:5d:72:4f:66:39:f4:ea:90: ed:4d:a0:c0:d8:a3:83:34:d3:7a:28:13:ad:40:b0: 50:58:d0:c2:ec:3a:62:51:45:8b:f3:e8:ef:3c:8c: 06:ef:c8:47:fd:c4:ce:3e:66:65:8c:72:74:79:3b: 99:ef:de:f2:e0:55:3a:22:14:dc:cb:3d:cd:31:54: 3c:f6:ef:9a:6c:36:6a:5f:04:a0:68:7b:99:11:bb: aa:52:63:ed:e9:76:a3:94:e2:5e:bc:04:af:a9:69: c6:38:ce:60:e7:07:a0:1b:37:dc:05:df:5d:26:19: 71:12:72:bb:d1:9f:3f:0a:df:a5:02:a9:4f:47:f2: 84:4b:90:65:e6:eb:8b:0d:83:e5:38:cc:b7:cd:e5: ad:a0:7b:b2:1f:e9:58:6b:68:8c:61:ef:16:ec:41: fe:16:0d:19:c7:6c:00:77:b9:37:4e:3c:ac:f7:5d: 28:a9:3d:4f:ed:49:74:e6:7a:55:37:c3:6a:a6:26: 50:aa:39:da:4b:14:c4:b9:67:a6:a9:f9:c1:63:9a: b1:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:04:75:AD:16:D9:CE:2B:5F:A5:90:F6:7F:D4:47:AC:22:84:FB:E3 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:77:af:96:cf:b8:b2:eb:29:51:69:31:99:1a:09:14:a6:f5: 96:c1:df:0a:81:8e:bb:4e:e2:a7:41:bd:0f:ce:07:db:f3:45: 1c:43:f8:8c:26:98:ab:b3:3a:d4:5f:a1:58:87:57:42:55:8a: 27:ed:62:3a:d0:31:26:dd:45:a3:47:e4:30:5e:4e:e3:a2:b3: f2:5a:de:4e:a8:fa:4d:80:52:ce:44:1c:89:b6:1d:4c:fa:f4: ec:26:67:07:b5:78:ba:12:48:e3:1d:3f:c3:6e:e7:1f:70:4e: 98:9e:1b:f8:30:3c:52:40:4c:32:5d:c5:be:f5:2e:56:32:ba: c4:50:df:f1:89:6f:95:89:6d:0e:48:00:fb:14:b1:ea:12:9d: 56:50:16:12:58:f1:54:6d:c0:33:89:55:76:41:66:e1:1a:73: 61:00:a1:7e:a2:7c:5a:b4:07:f1:52:4b:b2:8a:74:b8:b3:69: 75:39:30:32:6a:d0:95:bc:85:a3:1f:87:c4:4d:59:3d:b4:6e: ed:ef:f5:61:07:97:93:ad:bd:a3:58:bf:65:df:e1:4d:95:9f: b3:1f:4b:85:cf:8f:98:38:a1:fb:3b:d7:9b:70:1e:a4:be:91: db:e1:f8:54:df:08:58:23:96:da:ab:da:43:f7:93:18:df:7d: 8a:ed:2d:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXJMQrZb70soT1MZwL0EicLceUUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNjAzMjUyMjU1NDFaFw0yNjAzMjkwODU0NDFaMDMxMTAvBgNV BAMTKDIxMDQ3NUFEMTZEOUNFMkI1RkE1OTBGNjdGRDQ0N0FDMjI4NEZCRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1nb7Rf+DGuCTn6SXm5IEg0x7p fCGCVf2luy9h4N79bgXzg1uMyJ9/6RxK2SSJ/R89fxddck9mOfTqkO1NoMDYo4M0 03ooE61AsFBY0MLsOmJRRYvz6O88jAbvyEf9xM4+ZmWMcnR5O5nv3vLgVToiFNzL Pc0xVDz275psNmpfBKBoe5kRu6pSY+3pdqOU4l68BK+pacY4zmDnB6AbN9wF310m GXEScrvRnz8K36UCqU9H8oRLkGXm64sNg+U4zLfN5a2ge7If6VhraIxh7xbsQf4W DRnHbAB3uTdOPKz3XSipPU/tSXTmelU3w2qmJlCqOdpLFMS5Z6ap+cFjmrGDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIQR1rRbZzitfpZD2f9RHrCKE++MwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFF3r5bPuLLrKVFpMZkaCRSm9ZbB3wqBjrtO 4qdBvQ/OB9vzRRxD+IwmmKuzOtRfoViHV0JViiftYjrQMSbdRaNH5DBeTuOis/Ja 3k6o+k2AUs5EHIm2HUz69OwmZwe1eLoSSOMdP8Nu5x9wTpieG/gwPFJATDJdxb71 LlYyusRQ3/GJb5WJbQ5IAPsUseoSnVZQFhJY8VRtwDOJVXZBZuEac2EAoX6ifFq0 B/FSS7KKdLizaXU5MDJq0JW8haMfh8RNWT20bu3v9WEHl5OtvaNYv2Xf4U2Vn7Mf S4XPj5g4ofs715twHqS+kdvh+FTfCFgjltqr2kP3kxjffYrtLQk= -----END CERTIFICATE-----Generated at Thu Mar 26 21:11:16 2026 by rpki-client