$ rpki-client -vvf repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft File: 84DE1C79BB946275D6796DBDBC79083CB24881A6.mft (raw, json) Hash identifier: rc+9gkoXnb9vHexHZC4nS08Y7oQ/NmYCWgx6/EYhNSY= Subject key identifier: CF:B0:03:40:CB:61:55:1A:E8:15:89:46:59:7D:48:23:B1:B6:81:1B Authority key identifier: 84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 Certificate issuer: /CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Certificate serial: 0AAC9C9586BD12651709C4408BC1052D7D896BA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft Manifest number: 7C Signing time: Tue 24 Mar 2026 13:42:26 +0000 Manifest this update: Tue 24 Mar 2026 13:37:26 +0000 Manifest next update: Sat 28 Mar 2026 01:10:26 +0000 Files and hashes: 1: 34332e3234312e3234362e302f32332d3234203d3e20313532303837.roa (hash: nPcZF2JbaXVg4aqEl6fdLSlNMJ+HNs6j21SzssKEs40=) 2: 84DE1C79BB946275D6796DBDBC79083CB24881A6.crl (hash: +zFJspD4jZffGJcfJMaZX/m3qkUZiHaTZLgSVXBf5/8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:10:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ac:9c:95:86:bd:12:65:17:09:c4:40:8b:c1:05:2d:7d:89:6b:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=84DE1C79BB946275D6796DBDBC79083CB24881A6 Validity Not Before: Mar 24 13:37:26 2026 GMT Not After : Mar 28 01:10:26 2026 GMT Subject: CN=CFB00340CB61551AE8158946597D4823B1B6811B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:e5:6d:72:e4:f0:2c:a2:ce:f5:f0:ab:3c:5e: d0:8b:dc:dd:97:db:43:83:4b:31:f6:5c:d3:4d:7a: b2:d0:ba:db:4f:69:a7:14:b6:9f:2e:3d:83:ac:0e: a1:8e:49:70:ed:a3:32:66:e5:6e:8a:15:f2:bb:c8: b4:70:09:99:64:42:e6:1e:3d:25:1f:f6:54:8e:01: 89:9b:80:bf:76:af:38:8d:60:50:b4:4c:d9:28:6d: 28:37:32:c9:8b:46:50:eb:55:02:5e:27:4e:29:4f: b3:f3:25:b4:02:1b:6f:4f:1a:48:e6:11:87:39:ff: 43:e0:3e:81:ff:06:c9:d8:5a:20:e0:e4:27:d6:8e: 62:5f:22:51:db:c8:9e:d1:ca:f1:b8:04:42:5a:92: 24:56:6a:53:99:e7:4a:2c:3c:79:1e:82:7d:a3:b7: b7:9e:c6:71:99:61:6d:68:a6:dd:f4:a0:86:63:68: e3:47:fd:33:1e:a2:45:ae:00:6a:57:fe:ee:77:00: 18:e3:9d:68:c0:d2:cc:99:b8:c9:5d:e2:50:dd:17: 09:c1:13:12:5a:0f:07:ca:09:10:4f:b1:92:de:10: 50:93:25:8a:5c:e9:13:7c:02:65:20:19:da:2c:4e: 4c:e2:10:46:6e:07:84:1d:94:63:bb:de:78:3d:a5: 77:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:B0:03:40:CB:61:55:1A:E8:15:89:46:59:7D:48:23:B1:B6:81:1B X509v3 Authority Key Identifier: keyid:84:DE:1C:79:BB:94:62:75:D6:79:6D:BD:BC:79:08:3C:B2:48:81:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/84DE1C79BB946275D6796DBDBC79083CB24881A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1087159-30dd-41ba-9979-03588112a780/0/84DE1C79BB946275D6796DBDBC79083CB24881A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d0:1d:49:f9:b4:3d:50:b4:49:26:f8:2d:cc:ef:cf:53:ec: ad:59:9b:fa:57:8e:74:78:9b:7e:3f:d2:53:1a:16:bb:d3:fd: 06:1e:55:1b:15:94:b9:f0:25:d0:84:b8:47:db:3a:ca:50:3d: 95:b9:f2:59:9c:c2:22:64:0a:b7:ce:37:b5:49:34:bf:7e:47: d3:9b:d9:02:f6:82:69:15:bd:05:41:54:fb:80:c7:96:1d:9d: cf:c2:bb:f5:7b:f1:6c:59:8c:2a:34:6e:e3:5a:17:c6:8f:96: 29:40:c3:2f:5f:cc:20:b3:2f:c8:b7:0c:e3:3f:f3:24:be:cf: 21:0d:64:91:e6:fe:96:a0:4b:b3:20:c6:62:c3:08:9d:d0:f8: de:e6:58:7c:2c:2b:a3:d6:58:51:5f:df:24:df:02:0c:cf:e5: 54:4d:1d:8f:1f:7b:dc:9d:aa:3d:db:8d:2d:d3:bb:4a:46:29: bc:7c:e4:82:fe:5f:1f:51:fd:fb:0b:db:26:88:ec:15:cd:6a: 9c:14:3e:92:5d:e9:d9:66:96:e8:d1:8a:71:96:40:25:b7:fa: 06:a4:f9:b5:34:ca:79:fe:29:bd:e0:0b:68:28:4e:9c:82:fe: d0:34:8a:9e:12:ca:cb:d7:49:bf:9e:4f:fc:62:74:2e:fb:d0: 25:62:f1:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCqyclYa9EmUXCcRAi8EFLX2Ja6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NC MjQ4ODFBNjAeFw0yNjAzMjQxMzM3MjZaFw0yNjAzMjgwMTEwMjZaMDMxMTAvBgNV BAMTKENGQjAwMzQwQ0I2MTU1MUFFODE1ODk0NjU5N0Q0ODIzQjFCNjgxMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH5W1y5PAsos718Ks8XtCL3N2X 20ODSzH2XNNNerLQuttPaacUtp8uPYOsDqGOSXDtozJm5W6KFfK7yLRwCZlkQuYe PSUf9lSOAYmbgL92rziNYFC0TNkobSg3MsmLRlDrVQJeJ04pT7PzJbQCG29PGkjm EYc5/0PgPoH/BsnYWiDg5CfWjmJfIlHbyJ7RyvG4BEJakiRWalOZ50osPHkegn2j t7eexnGZYW1opt30oIZjaONH/TMeokWuAGpX/u53ABjjnWjA0syZuMld4lDdFwnB ExJaDwfKCRBPsZLeEFCTJYpc6RN8AmUgGdosTkziEEZuB4QdlGO73ng9pXd/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz7ADQMthVRroFYlGWX1II7G2gRswHwYDVR0j BBgwFoAUhN4cebuUYnXWeW29vHkIPLJIgaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTA4NzE1OS0zMGRkLTQxYmEtOTk3OS0wMzU4ODExMmE3ODAvMC84NERFMUM3OUJC OTQ2Mjc1RDY3OTZEQkRCQzc5MDgzQ0IyNDg4MUE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4M0NCMjQ4 ODFBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjEwODcxNTktMzBkZC00MWJhLTk5 NzktMDM1ODgxMTJhNzgwLzAvODRERTFDNzlCQjk0NjI3NUQ2Nzk2REJEQkM3OTA4 M0NCMjQ4ODFBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjQHUn5tD1QtEkm+C3M789T7K1Zm/pXjnR4 m34/0lMaFrvT/QYeVRsVlLnwJdCEuEfbOspQPZW58lmcwiJkCrfON7VJNL9+R9Ob 2QL2gmkVvQVBVPuAx5Ydnc/Cu/V78WxZjCo0buNaF8aPlilAwy9fzCCzL8i3DOM/ 8yS+zyENZJHm/pagS7MgxmLDCJ3Q+N7mWHwsK6PWWFFf3yTfAgzP5VRNHY8fe9yd qj3bjS3Tu0pGKbx85IL+Xx9R/fsL2yaI7BXNapwUPpJd6dlmlujRinGWQCW3+gak +bU0ynn+Kb3gC2goTpyC/tA0ip4SysvXSb+eT/xidC770CVi8Ss= -----END CERTIFICATE-----Generated at Thu Mar 26 21:22:39 2026 by rpki-client