$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: QFs0nSr3NPpsT1NfcSQCF6fqdgIvkG+So0SuBMa8YRo= Subject key identifier: 42:B0:FD:36:91:53:77:3C:70:9A:38:90:4F:D3:80:2E:79:9A:C1:14 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 06686136583368034DC1A7122D7BC786CA404EFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0184 Signing time: Wed 25 Mar 2026 13:41:40 +0000 Manifest this update: Wed 25 Mar 2026 13:36:40 +0000 Manifest next update: Sat 28 Mar 2026 21:42:40 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: qJyum2At3OQ0/Mui5d66zUzvrRUlMyLgYJNLgluGsro=) 2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: NWx313Eak6ryGXrEQpkxOKGoXHPpAIUkV1kgoiWIcbI=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: 8BRGIjefty8sLc1ZfWkrubhQIyt7J7+He/FXFv8R2Vs=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: e7GnY3/Pzg4rpwB1CyNbDQ/8IF2EHij8cXm/C6g/0LI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:42:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:68:61:36:58:33:68:03:4d:c1:a7:12:2d:7b:c7:86:ca:40:4e:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Mar 25 13:36:40 2026 GMT Not After : Mar 28 21:42:40 2026 GMT Subject: CN=42B0FD369153773C709A38904FD3802E799AC114 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:42:2f:b2:88:c3:e5:c6:93:f0:a8:6b:77:60: 75:bf:e5:ad:ac:6b:fe:6a:11:c1:26:42:ec:f4:f0: 99:c1:38:97:8b:74:dc:35:7d:70:d6:62:4b:b7:b0: 5d:f7:72:f4:3a:7b:b6:6a:4c:7b:a2:b4:64:6f:20: 9e:75:ad:7a:1f:12:33:ed:8a:06:6c:d5:04:a4:6c: c9:b6:e3:d2:87:52:f2:72:4a:d2:c1:ea:a4:3d:c2: 6d:b3:7c:ef:7a:43:bc:ca:59:43:10:9e:8d:de:7e: 88:f0:ca:36:2c:10:ca:b4:d3:3a:ca:16:9c:8e:54: 18:80:fd:27:b2:44:93:5e:4d:67:b7:07:e4:ae:4d: 91:a8:fe:46:82:d6:aa:21:60:e2:95:42:75:01:cb: 40:22:52:f8:e6:21:8c:a8:75:f2:36:20:f6:3e:9c: d3:2b:3e:84:4b:7d:6e:7f:0b:37:8c:3c:6c:1d:fa: db:bb:19:b9:0c:ea:d1:04:09:ff:78:40:78:25:6b: 8a:c3:0c:1f:dd:bd:50:ff:f9:5b:08:7f:4f:16:ad: c7:6b:3d:21:4a:8a:d9:e7:07:08:81:10:f5:93:ae: b7:34:b1:81:d0:be:2b:db:1f:7d:f0:6c:12:22:44: c8:cf:dd:55:7e:9c:9c:18:69:eb:07:41:f9:f8:16: c5:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B0:FD:36:91:53:77:3C:70:9A:38:90:4F:D3:80:2E:79:9A:C1:14 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1c:b9:44:0e:a1:fe:bd:f0:5e:73:9e:7d:65:96:60:67:fa: b0:cd:a4:3a:1c:b7:e2:78:73:4c:5d:f7:fa:93:b4:ad:cc:ff: c0:fe:f5:42:ba:c1:0f:82:14:d5:f3:0b:4c:9b:26:c0:ce:27: 6c:7e:72:fa:1b:b7:6f:64:32:16:25:73:44:6d:8a:d6:bb:7a: 7d:a3:fd:91:17:d6:5d:aa:79:ed:7c:0b:00:b5:27:18:42:f1: b1:7a:fc:d5:94:c3:dc:bb:4e:e4:2d:eb:d7:c2:46:d1:ca:db: 6a:3b:a9:0a:a5:ba:61:b6:cf:3b:6e:8b:e2:48:c6:ce:30:c3: e6:18:9f:11:7c:c6:8f:3c:f0:9e:3d:87:77:c3:a1:60:44:aa: 22:43:af:90:75:ec:35:01:1e:4e:e7:ed:a5:ac:1b:39:67:f2: e2:a6:17:a2:28:df:2f:10:19:c5:f0:04:56:7a:38:8b:7a:d4: 25:48:30:07:90:29:be:2d:c4:dc:aa:99:7f:3f:8a:6f:64:1e: 9a:17:ce:5e:b3:31:4b:06:86:14:e6:6f:66:cf:5e:e1:8f:cc: 88:c6:7a:c1:82:a8:f3:17:fe:89:66:0c:eb:42:7b:90:b6:0f: c1:e2:dd:5d:12:1c:24:1a:95:eb:81:1b:fd:0b:58:b3:7e:b6: 1b:87:95:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmhhNlgzaANNwacSLXvHhspATv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNjAzMjUxMzM2NDBaFw0yNjAzMjgyMTQyNDBaMDMxMTAvBgNV BAMTKDQyQjBGRDM2OTE1Mzc3M0M3MDlBMzg5MDRGRDM4MDJFNzk5QUMxMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkQi+yiMPlxpPwqGt3YHW/5a2s a/5qEcEmQuz08JnBOJeLdNw1fXDWYku3sF33cvQ6e7ZqTHuitGRvIJ51rXofEjPt igZs1QSkbMm249KHUvJyStLB6qQ9wm2zfO96Q7zKWUMQno3efojwyjYsEMq00zrK FpyOVBiA/SeyRJNeTWe3B+SuTZGo/kaC1qohYOKVQnUBy0AiUvjmIYyodfI2IPY+ nNMrPoRLfW5/CzeMPGwd+tu7GbkM6tEECf94QHgla4rDDB/dvVD/+VsIf08Wrcdr PSFKitnnBwiBEPWTrrc0sYHQvivbH33wbBIiRMjP3VV+nJwYaesHQfn4FsXhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQrD9NpFTdzxwmjiQT9OALnmawRQwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGIcuUQOof698F5znn1llmBn+rDNpDoct+J4 c0xd9/qTtK3M/8D+9UK6wQ+CFNXzC0ybJsDOJ2x+cvobt29kMhYlc0Rtita7en2j /ZEX1l2qee18CwC1JxhC8bF6/NWUw9y7TuQt69fCRtHK22o7qQqlumG2zztui+JI xs4ww+YYnxF8xo888J49h3fDoWBEqiJDr5B17DUBHk7n7aWsGzln8uKmF6Io3y8Q GcXwBFZ6OIt61CVIMAeQKb4txNyqmX8/im9kHpoXzl6zMUsGhhTmb2bPXuGPzIjG esGCqPMX/olmDOtCe5C2D8Hi3V0SHCQaleuBG/0LWLN+thuHlSg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:04 2026 by rpki-client