$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: mq95BfWY2YjRhoQbODU5SXesNRsrs2k8JhkC3zxg68k= Subject key identifier: D2:77:68:F2:0B:F4:39:63:80:84:15:F1:54:8A:B2:C4:5B:7A:A9:65 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 1C761B263D1FFD0803C89BCCEEB034DC31F9F077 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: 0140 Signing time: Tue 24 Mar 2026 10:30:52 +0000 Manifest this update: Tue 24 Mar 2026 10:25:52 +0000 Manifest next update: Fri 27 Mar 2026 17:10:52 +0000 Files and hashes: 1: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: sy0a2pciPn+lzZs1YZ3/4BLlGePk2jxUxj5HLSpdP5k=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: eQaky8Oqg6zWWDS6nsYOWW+QdwQJL6ZWMvFeCi9tD5w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:10:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:76:1b:26:3d:1f:fd:08:03:c8:9b:cc:ee:b0:34:dc:31:f9:f0:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Mar 24 10:25:52 2026 GMT Not After : Mar 27 17:10:52 2026 GMT Subject: CN=D27768F20BF43963808415F1548AB2C45B7AA965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:8f:39:3b:79:9d:6c:c9:a3:93:b0:86:e8:de: ee:85:eb:ac:ac:cb:54:1d:91:24:fc:42:ba:2f:ce: 89:c3:f3:70:7b:45:c9:49:94:e2:eb:89:66:43:14: eb:6e:14:50:43:c1:02:ae:90:d5:75:92:03:17:ea: a0:34:e3:06:2d:d9:52:11:3e:21:27:e4:0d:7e:15: 1f:5f:68:cf:b7:7b:33:fd:16:d9:aa:a1:6a:28:39: 1d:54:cb:44:ba:17:89:f5:24:4a:c5:b4:13:9e:17: be:1c:90:5d:3e:87:d9:c0:c3:f5:72:3d:f0:44:be: d8:8d:3f:79:62:6e:92:69:af:70:e1:2f:06:02:78: f9:71:40:1a:96:01:d4:c8:4c:2a:aa:a5:c6:0f:25: 8c:48:d9:39:8e:d2:20:f1:90:cf:ec:65:30:23:8e: 03:bd:9e:48:aa:ce:5f:dc:fd:68:d7:61:be:47:03: 4c:2f:07:91:a6:53:29:55:83:4a:e6:bb:b6:45:d8: 26:1d:e6:2c:df:c0:47:49:5e:ff:fc:d8:b5:13:d0: d0:9b:17:1f:9b:0f:33:a4:01:99:24:5f:02:6c:a6: 87:2b:d8:72:6e:56:ce:6f:70:f6:13:50:16:64:eb: 1b:df:a7:13:d5:e8:0f:5f:52:2b:af:ba:94:78:e1: e7:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:77:68:F2:0B:F4:39:63:80:84:15:F1:54:8A:B2:C4:5B:7A:A9:65 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:30:4a:bc:28:38:25:4a:ec:a2:8b:b8:ca:56:40:0e:78:75: b9:e9:92:0c:ce:a6:56:a1:2b:01:ac:7a:23:90:bc:57:c7:13: 01:f3:04:22:43:08:fa:64:ac:b1:72:31:f2:ce:a5:34:16:34: ac:a9:14:5f:77:67:13:15:9b:5e:af:b8:57:13:1b:82:48:34: 0f:82:0a:b1:9e:11:49:12:f2:eb:65:dd:23:2d:9f:b6:3d:4b: c5:87:e2:d7:90:95:47:48:e5:e3:de:81:4b:5f:3d:14:c9:fd: 97:4e:8b:2a:67:09:6c:72:ae:3f:42:97:e6:42:54:92:12:eb: 35:fc:78:92:00:43:30:f3:1d:16:f5:17:f2:63:b0:11:bf:70: cd:2d:a2:9f:d5:24:f2:73:c4:d5:e1:a9:6f:23:b3:9d:10:48: d5:2a:26:f9:7f:30:cc:ec:4c:94:5b:55:73:99:fe:97:cb:68: ba:fe:85:e2:85:00:c2:7f:7e:1f:4c:b0:93:51:6c:1d:08:09: 4f:da:37:a1:c6:86:5f:e8:c7:b0:86:b8:89:2b:0c:94:84:6e: 51:96:7b:7f:69:f2:88:75:fb:e7:e5:9b:ce:81:ba:b1:06:b0: 67:49:d9:70:7c:9b:27:b1:6b:c4:16:df:aa:9a:d0:4d:42:f0: 50:11:5b:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHHYbJj0f/QgDyJvM7rA03DH58HcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNjAzMjQxMDI1NTJaFw0yNjAzMjcxNzEwNTJaMDMxMTAvBgNV BAMTKEQyNzc2OEYyMEJGNDM5NjM4MDg0MTVGMTU0OEFCMkM0NUI3QUE5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjjzk7eZ1syaOTsIbo3u6F66ys y1QdkST8QrovzonD83B7RclJlOLriWZDFOtuFFBDwQKukNV1kgMX6qA04wYt2VIR PiEn5A1+FR9faM+3ezP9FtmqoWooOR1Uy0S6F4n1JErFtBOeF74ckF0+h9nAw/Vy PfBEvtiNP3libpJpr3DhLwYCePlxQBqWAdTITCqqpcYPJYxI2TmO0iDxkM/sZTAj jgO9nkiqzl/c/WjXYb5HA0wvB5GmUylVg0rmu7ZF2CYd5izfwEdJXv/82LUT0NCb Fx+bDzOkAZkkXwJspocr2HJuVs5vcPYTUBZk6xvfpxPV6A9fUiuvupR44ec/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ndo8gv0OWOAhBXxVIqyxFt6qWUwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0wSrwoOCVK7KKLuMpWQA54dbnpkgzOplah KwGseiOQvFfHEwHzBCJDCPpkrLFyMfLOpTQWNKypFF93ZxMVm16vuFcTG4JINA+C CrGeEUkS8utl3SMtn7Y9S8WH4teQlUdI5ePegUtfPRTJ/ZdOiypnCWxyrj9Cl+ZC VJIS6zX8eJIAQzDzHRb1F/JjsBG/cM0top/VJPJzxNXhqW8js50QSNUqJvl/MMzs TJRbVXOZ/pfLaLr+heKFAMJ/fh9MsJNRbB0ICU/aN6HGhl/ox7CGuIkrDJSEblGW e39p8oh1++flm86BurEGsGdJ2XB8myexa8QW36qa0E1C8FARWwA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:23 2026 by rpki-client