$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: dWnU24CDfTDex4kSjnazE2gP9WZ8U9yakfzSBM0phuE= Subject key identifier: B7:A1:24:C9:FA:BC:1F:CE:61:26:6D:1C:1A:48:73:76:FA:13:7E:89 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 0238A4438BE3794E1D0951F92CA9FCBBBE6AAB3D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01F4 Signing time: Thu 26 Mar 2026 01:42:31 +0000 Manifest this update: Thu 26 Mar 2026 01:37:31 +0000 Manifest next update: Sun 29 Mar 2026 11:06:31 +0000 Files and hashes: 1: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) 3: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: sT+udY1JUOU/jvSDLDEAWLsQzEONAPQOcEik/z/N+qo=) 4: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:06:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:38:a4:43:8b:e3:79:4e:1d:09:51:f9:2c:a9:fc:bb:be:6a:ab:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Mar 26 01:37:31 2026 GMT Not After : Mar 29 11:06:31 2026 GMT Subject: CN=B7A124C9FABC1FCE61266D1C1A487376FA137E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:6f:d0:11:87:c1:60:d3:2d:4c:44:dd:60:35: cc:59:a7:e7:92:17:ff:24:60:3b:89:45:b8:54:31: c3:ce:10:d7:b5:7d:2a:cf:ac:33:e4:00:cc:7f:9b: 1f:71:d8:4a:9e:21:a1:d1:7a:7e:47:ad:11:50:23: f5:9d:aa:d7:ff:72:3b:37:32:0c:55:9d:34:ff:25: 0d:e5:02:d8:9d:5f:22:4f:4b:f8:23:1a:79:0d:78: 4d:ac:e6:06:92:1b:19:fa:3c:e2:18:34:f0:01:3b: 45:80:81:ae:5d:04:25:5a:d1:18:66:c0:85:de:9f: 14:a6:f6:32:80:f8:04:ac:43:d9:2f:9c:36:58:5b: 37:53:10:0a:87:c1:73:18:34:01:4d:bf:bd:a2:5e: f3:fe:0e:30:67:3f:e9:00:a3:cf:31:98:32:69:82: 4f:f2:29:e6:93:b7:bc:f0:a9:c5:41:ab:e2:4e:04: 98:32:1c:2b:80:f2:a9:fd:41:02:a5:e1:b9:cd:6c: 74:6a:92:9a:4b:d7:8b:a8:eb:5c:b5:63:5f:d1:33: 97:84:88:92:8a:6a:c5:b1:96:aa:e8:78:59:c9:b5: 0c:09:42:9f:33:71:b6:3e:ba:38:02:e9:c1:e0:95: f6:b9:b0:45:f2:7c:67:e4:0b:84:1c:80:11:65:a3: e6:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:A1:24:C9:FA:BC:1F:CE:61:26:6D:1C:1A:48:73:76:FA:13:7E:89 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:24:e3:b0:52:15:13:38:9a:3e:60:a6:78:e7:eb:8e:e0:72: 6c:29:fd:73:2e:3c:79:e4:73:81:9a:f0:76:22:86:c9:25:d9: 60:41:a2:3d:0e:02:90:98:fb:ed:67:68:c5:4d:29:dc:69:57: 6e:5e:d3:e1:f3:48:b0:1e:c8:2d:81:4b:0c:87:90:3b:0e:74: 49:1e:16:b8:34:1d:83:e9:38:37:38:20:00:1e:f9:15:a9:c3: 60:a7:24:04:99:7d:83:5c:df:fc:ef:48:64:4a:b6:8f:eb:72: 36:25:a0:9b:50:7b:bf:93:cb:c3:ce:18:6b:7f:48:4f:4a:52: 02:43:23:97:33:ab:78:7e:78:5a:f9:f4:da:e6:08:24:2b:b5: 0b:40:f7:74:c4:09:b8:29:fd:10:1c:63:3e:a8:01:9d:70:81: 77:d7:3d:10:9b:9e:87:cf:c0:f7:83:b7:13:4e:bd:f6:04:ca: 4c:bb:50:2a:3e:b3:37:fa:33:f3:2e:ee:88:1a:63:f6:5a:71: 3a:43:f7:a2:a2:ed:c0:6f:d0:28:da:55:06:df:94:98:54:66: 4a:01:5a:78:df:4c:72:32:21:cb:55:95:b0:87:1c:57:c6:d5: 5b:6a:67:d4:66:de:f6:60:0d:3d:e9:4a:88:37:8e:1a:8e:1b: 22:a6:76:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAjikQ4vjeU4dCVH5LKn8u75qqz0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNjAzMjYwMTM3MzFaFw0yNjAzMjkxMTA2MzFaMDMxMTAvBgNV BAMTKEI3QTEyNEM5RkFCQzFGQ0U2MTI2NkQxQzFBNDg3Mzc2RkExMzdFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUb9ARh8Fg0y1MRN1gNcxZp+eS F/8kYDuJRbhUMcPOENe1fSrPrDPkAMx/mx9x2EqeIaHRen5HrRFQI/Wdqtf/cjs3 MgxVnTT/JQ3lAtidXyJPS/gjGnkNeE2s5gaSGxn6POIYNPABO0WAga5dBCVa0Rhm wIXenxSm9jKA+ASsQ9kvnDZYWzdTEAqHwXMYNAFNv72iXvP+DjBnP+kAo88xmDJp gk/yKeaTt7zwqcVBq+JOBJgyHCuA8qn9QQKl4bnNbHRqkppL14uo61y1Y1/RM5eE iJKKasWxlqroeFnJtQwJQp8zcbY+ujgC6cHglfa5sEXyfGfkC4QcgBFlo+ZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt6Ekyfq8H85hJm0cGkhzdvoTfokwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkk47BSFRM4mj5gpnjn647gcmwp/XMuPHnk c4Ga8HYihskl2WBBoj0OApCY++1naMVNKdxpV25e0+HzSLAeyC2BSwyHkDsOdEke Frg0HYPpODc4IAAe+RWpw2CnJASZfYNc3/zvSGRKto/rcjYloJtQe7+Ty8POGGt/ SE9KUgJDI5czq3h+eFr59NrmCCQrtQtA93TECbgp/RAcYz6oAZ1wgXfXPRCbnofP wPeDtxNOvfYEyky7UCo+szf6M/Mu7ogaY/ZacTpD96Ki7cBv0CjaVQbflJhUZkoB WnjfTHIyIctVlbCHHFfG1VtqZ9Rm3vZgDT3pSog3jhqOGyKmdlU= -----END CERTIFICATE-----Generated at Thu Mar 26 08:53:10 2026 by rpki-client