$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json) Hash identifier: twPXWK3GVSSABavsNxv4a4QijEUVH2/pWMWX8nVcQIo= Subject key identifier: 2C:71:FD:AC:06:C2:2F:FA:38:CC:33:E9:4E:32:F0:AC:C3:41:F3:4D Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Certificate serial: 0CA61BF847ADE8E1E1AC0A350BE718549CC106C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft Manifest number: 02D6 Signing time: Wed 25 Mar 2026 03:01:00 +0000 Manifest this update: Wed 25 Mar 2026 02:56:00 +0000 Manifest next update: Sat 28 Mar 2026 14:14:00 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: Ub1gaXrsr3jYwznRfiJ7hcJdmUDiG8zu3ELlFNODX3w=) 2: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=) 3: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=) 4: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: 8Ols4X3Ox/2DMfkq9UlOyw8aJgOrcc9iZC7STl1RiLU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:a6:1b:f8:47:ad:e8:e1:e1:ac:0a:35:0b:e7:18:54:9c:c1:06:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Validity Not Before: Mar 25 02:56:00 2026 GMT Not After : Mar 28 14:14:00 2026 GMT Subject: CN=2C71FDAC06C22FFA38CC33E94E32F0ACC341F34D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:10:c2:9f:ed:f3:3b:46:14:c2:68:a3:1c:f0: 63:83:3c:69:8b:16:ac:f4:1c:80:55:d6:5f:47:94: 0b:6a:f4:8b:f2:f3:9a:bc:c6:c0:78:67:ac:69:35: c4:74:ea:9d:35:8f:8e:03:7f:fa:93:3a:52:ca:df: 18:3c:e9:d2:66:95:75:aa:02:03:ff:5d:01:c7:97: ce:5b:78:7d:f5:9d:30:9c:0b:fe:c2:1c:ba:cc:0f: 35:ee:b8:2d:53:e5:b9:f1:c6:16:5a:ec:15:f1:0c: b3:9f:13:8b:af:7c:85:d1:c9:cb:c8:0d:57:c6:7f: 68:7b:b8:b2:cf:83:4c:51:b7:48:6c:16:54:6e:cc: db:f7:8d:b1:32:3f:66:99:83:2a:e9:9d:c4:47:6b: 96:fa:9d:2a:e1:d7:b4:4a:55:70:4c:21:05:3c:54: 36:18:69:28:f3:af:aa:7b:19:33:9b:50:f2:1e:bc: db:84:2b:42:d5:d2:56:d9:d4:16:e5:06:97:32:ae: 29:72:bb:a2:2c:4c:04:9b:19:56:27:fd:23:79:72: 99:7e:1b:f4:50:8a:57:56:38:ee:93:64:0e:7c:05: d0:82:cc:1c:1d:93:89:30:9e:53:6d:59:18:36:55: da:59:10:2f:29:ba:82:5c:48:15:16:9c:d0:d1:c2: bf:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:71:FD:AC:06:C2:2F:FA:38:CC:33:E9:4E:32:F0:AC:C3:41:F3:4D X509v3 Authority Key Identifier: keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:db:7f:6f:f5:a2:08:7c:7d:d4:62:37:74:6f:87:e2:60:77: 28:20:18:92:f6:e6:4c:9b:c7:6f:1a:0e:a4:84:c2:a7:c3:3a: 2a:c0:b6:8b:24:ed:19:0e:86:33:73:fe:49:4e:ef:12:5a:3e: 5b:fb:ac:f4:c3:7f:d2:a1:96:e8:b8:c2:5f:9e:7b:88:03:bf: 51:88:55:d0:65:e2:f4:c5:73:9a:89:f6:a0:22:b9:71:b4:b2: 3a:a8:e5:30:d7:9f:5b:3a:13:94:99:0d:77:28:27:f3:bf:0f: e2:ec:32:e2:62:ec:cc:16:9d:47:59:39:ad:ab:3f:63:cb:22: c9:74:0c:02:10:ac:3f:f1:ef:15:7f:bb:6e:60:d2:a6:e1:56: be:e0:ef:32:84:99:8a:cd:bd:81:9b:89:23:c7:c8:ff:70:d6: 10:18:54:8a:24:cb:86:73:bf:af:76:d6:bf:57:eb:41:e0:8f: 11:f6:e8:85:c1:fb:23:ab:6d:43:82:1d:a1:51:f0:dc:50:bc: 3a:ff:43:bb:43:d0:30:98:04:9c:52:28:ef:e9:4f:65:e0:53: 17:b9:d5:aa:1d:fe:29:56:ff:d5:8c:3b:01:0c:1a:bb:9a:4b: f6:c4:2e:b5:bb:c9:6a:37:e6:1a:0e:c2:2e:6c:5f:d6:d0:d6: 02:a1:43:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDKYb+Eet6OHhrAo1C+cYVJzBBsMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE Q0U5NzRCNjAeFw0yNjAzMjUwMjU2MDBaFw0yNjAzMjgxNDE0MDBaMDMxMTAvBgNV BAMTKDJDNzFGREFDMDZDMjJGRkEzOENDMzNFOTRFMzJGMEFDQzM0MUYzNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUEMKf7fM7RhTCaKMc8GODPGmL Fqz0HIBV1l9HlAtq9Ivy85q8xsB4Z6xpNcR06p01j44Df/qTOlLK3xg86dJmlXWq AgP/XQHHl85beH31nTCcC/7CHLrMDzXuuC1T5bnxxhZa7BXxDLOfE4uvfIXRycvI DVfGf2h7uLLPg0xRt0hsFlRuzNv3jbEyP2aZgyrpncRHa5b6nSrh17RKVXBMIQU8 VDYYaSjzr6p7GTObUPIevNuEK0LV0lbZ1BblBpcyrilyu6IsTASbGVYn/SN5cpl+ G/RQildWOO6TZA58BdCCzBwdk4kwnlNtWRg2VdpZEC8puoJcSBUWnNDRwr/PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHH9rAbCL/o4zDPpTjLwrMNB800wHwYDVR0j BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1 QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5 NzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0My MjREQ0U5NzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjbf2/1ogh8fdRiN3Rvh+JgdyggGJL25kyb x28aDqSEwqfDOirAtosk7RkOhjNz/klO7xJaPlv7rPTDf9Khlui4wl+ee4gDv1GI VdBl4vTFc5qJ9qAiuXG0sjqo5TDXn1s6E5SZDXcoJ/O/D+LsMuJi7MwWnUdZOa2r P2PLIsl0DAIQrD/x7xV/u25g0qbhVr7g7zKEmYrNvYGbiSPHyP9w1hAYVIoky4Zz v6921r9X60HgjxH26IXB+yOrbUOCHaFR8NxQvDr/Q7tD0DCYBJxSKO/pT2XgUxe5 1aod/ilW/9WMOwEMGruaS/bELrW7yWo35hoOwi5sX9bQ1gKhQ58= -----END CERTIFICATE-----Generated at Thu Mar 26 16:26:14 2026 by rpki-client