$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: 5rODHNkIZRBvoYp/gzLnUGkEtawTw/bPSiyqKeOPXOA= Subject key identifier: 79:E4:DB:D2:34:B9:38:72:C3:F0:21:F4:E1:29:0D:F3:0A:4C:45:58 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 04B1DF557C4E43F9FF46896963D9F462FF49A564 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 025B Signing time: Wed 25 Mar 2026 19:41:08 +0000 Manifest this update: Wed 25 Mar 2026 19:36:08 +0000 Manifest next update: Sun 29 Mar 2026 07:32:08 +0000 Files and hashes: 1: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: ygBjaQNkg0tfs5DBgfWh1pEfhSH0cEu7cJHwv1qWBfw=) 2: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: BRm0NDg5Ybly7ATWBG9rULlosyYIWi0TQ0o34qTg0tE=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: kTrFLDCi/3VQV7a7pkmW+dWv+0RMpkZ4AhkZOzoo+gg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:32:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:b1:df:55:7c:4e:43:f9:ff:46:89:69:63:d9:f4:62:ff:49:a5:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Mar 25 19:36:08 2026 GMT Not After : Mar 29 07:32:08 2026 GMT Subject: CN=79E4DBD234B93872C3F021F4E1290DF30A4C4558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:59:1a:98:bf:c8:41:39:63:f3:26:02:73:e6: 1a:37:19:11:15:ca:90:f7:56:3e:6b:e9:6c:12:ed: 13:21:77:ef:4e:2e:fa:42:c6:5f:32:3d:08:e3:e4: 29:50:24:d1:f8:34:ec:15:32:4d:d3:b1:b2:a9:8e: fe:e3:a7:ff:b0:1d:f8:2d:68:e4:51:09:ca:56:ed: cb:cf:7b:cb:d7:8c:19:79:1a:4d:0e:5e:0a:6d:19: ed:ca:5a:25:47:9d:a8:72:4f:b8:30:9d:50:14:ed: 35:76:4f:b0:13:e6:d5:35:18:36:ba:40:41:10:3f: 80:45:9b:36:03:b2:bf:ae:6b:dd:e9:ce:7c:75:eb: 5e:3a:69:0c:dc:6f:a2:09:9b:4c:e0:0e:c4:83:ff: e4:42:c3:55:0b:25:4a:10:9a:ea:06:fb:14:93:df: 42:d1:7d:4c:85:93:a1:e7:f3:db:26:a6:e5:5e:de: 83:89:eb:5c:c2:40:cb:e1:bf:2b:36:93:63:d3:ba: bf:e8:7a:c8:e8:ca:b1:26:31:05:b7:df:4c:25:2c: 1b:83:ac:55:9c:c6:f6:25:8f:97:66:bc:7c:7b:96: b8:68:f6:dd:39:a5:bb:4a:51:aa:4f:1c:c6:1c:ac: b0:48:f9:67:17:5b:bc:99:6f:eb:34:05:1e:d0:9a: 98:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:E4:DB:D2:34:B9:38:72:C3:F0:21:F4:E1:29:0D:F3:0A:4C:45:58 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:f3:e0:44:1f:c5:96:49:d3:51:2e:00:6b:48:d5:3b:d7:be: 8d:01:f4:7b:63:8a:6a:15:72:61:a6:27:9e:9b:73:83:c5:54: 8f:9c:f4:08:d2:91:08:2c:74:f9:e9:a0:46:c6:8e:04:30:a5: c1:41:14:56:e7:e3:8f:1b:99:35:f8:12:a6:71:a5:76:31:83: d0:fb:3c:c0:c3:b2:54:77:6e:aa:64:91:cb:37:10:67:4a:24: f9:de:bc:f9:04:c6:77:85:ff:1b:c1:aa:f7:4a:32:70:62:e2: ba:85:da:4a:e5:b8:3a:dd:ca:e5:a5:e6:6d:47:94:70:79:b2: 74:e0:49:4e:4c:38:6c:31:67:2b:6e:eb:86:40:5b:09:57:43: ab:e8:36:ac:1f:d4:8b:62:91:47:6a:f2:ee:d0:ee:47:f2:5b: 98:89:54:9e:02:0d:22:52:d1:fc:c8:86:95:89:30:85:19:71: bf:a7:e3:b4:94:59:12:0c:4b:df:3b:19:f0:a6:5e:c4:2f:e5: 17:bf:b5:1e:5c:de:8b:70:e6:c2:15:a4:ac:2f:05:a0:95:ae: 4d:81:2a:8e:bc:3d:31:b7:bc:87:92:5e:0a:fe:2d:f0:48:67: 85:f8:db:13:f4:df:fd:1c:7d:72:3d:19:7d:6c:36:43:5d:96: 71:01:57:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBLHfVXxOQ/n/RolpY9n0Yv9JpWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNjAzMjUxOTM2MDhaFw0yNjAzMjkwNzMyMDhaMDMxMTAvBgNV BAMTKDc5RTREQkQyMzRCOTM4NzJDM0YwMjFGNEUxMjkwREYzMEE0QzQ1NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcWRqYv8hBOWPzJgJz5ho3GREV ypD3Vj5r6WwS7RMhd+9OLvpCxl8yPQjj5ClQJNH4NOwVMk3TsbKpjv7jp/+wHfgt aORRCcpW7cvPe8vXjBl5Gk0OXgptGe3KWiVHnahyT7gwnVAU7TV2T7AT5tU1GDa6 QEEQP4BFmzYDsr+ua93pznx16146aQzcb6IJm0zgDsSD/+RCw1ULJUoQmuoG+xST 30LRfUyFk6Hn89smpuVe3oOJ61zCQMvhvys2k2PTur/oesjoyrEmMQW330wlLBuD rFWcxvYlj5dmvHx7lrho9t05pbtKUapPHMYcrLBI+WcXW7yZb+s0BR7QmphPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeeTb0jS5OHLD8CH04SkN8wpMRVgwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPz4EQfxZZJ01EuAGtI1TvXvo0B9HtjimoV cmGmJ56bc4PFVI+c9AjSkQgsdPnpoEbGjgQwpcFBFFbn448bmTX4EqZxpXYxg9D7 PMDDslR3bqpkkcs3EGdKJPnevPkExneF/xvBqvdKMnBi4rqF2krluDrdyuWl5m1H lHB5snTgSU5MOGwxZytu64ZAWwlXQ6voNqwf1ItikUdq8u7Q7kfyW5iJVJ4CDSJS 0fzIhpWJMIUZcb+n47SUWRIMS987GfCmXsQv5Re/tR5c3otw5sIVpKwvBaCVrk2B Ko68PTG3vIeSXgr+LfBIZ4X42xP03/0cfXI9GX1sNkNdlnEBVwM= -----END CERTIFICATE-----Generated at Thu Mar 26 13:04:48 2026 by rpki-client