$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: 2h+M9ds4dftyCkKsy007DHITkNCJ1XCDn4n8SZQE1FU= Subject key identifier: D6:7D:66:5B:F1:AF:FB:B4:4C:EE:F0:B4:CF:CF:DD:84:06:F3:23:E3 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 67D90436712B8E786BAAEECE99DDE7A2A9D90543 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: 011E Signing time: Wed 25 Mar 2026 20:51:44 +0000 Manifest this update: Wed 25 Mar 2026 20:46:44 +0000 Manifest next update: Sun 29 Mar 2026 05:29:44 +0000 Files and hashes: 1: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: veloX5cPcGdFzmlVH0M/9nO2SIzluT86fRpTLLaJwm8=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:29:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:d9:04:36:71:2b:8e:78:6b:aa:ee:ce:99:dd:e7:a2:a9:d9:05:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Mar 25 20:46:44 2026 GMT Not After : Mar 29 05:29:44 2026 GMT Subject: CN=D67D665BF1AFFBB44CEEF0B4CFCFDD8406F323E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:b9:b6:88:9c:7d:0a:e3:20:6c:cb:37:e0:d3: 5d:ce:e3:2f:54:14:ed:58:e9:29:29:14:5d:cc:31: 2b:27:69:70:b6:0a:08:f3:e7:28:2a:5c:fa:6a:a8: 68:91:b6:cb:a5:97:ba:2f:ce:dc:e1:41:f2:68:31: cc:a2:14:e1:42:06:2a:f8:a8:a9:32:e7:48:4d:a7: 72:5c:83:1a:57:88:15:c0:04:21:cd:e3:df:e5:bb: a4:b8:6d:4d:66:28:d4:ad:37:0e:04:fa:cb:0a:be: 3a:ff:b8:de:e4:c5:d8:36:da:2f:16:b5:d4:5d:8a: 4f:fb:16:6c:62:e7:78:72:04:93:0a:14:6f:60:91: d2:99:41:9e:ee:fa:97:04:4e:01:4b:ec:01:87:34: 6c:4a:28:b0:e1:1a:a3:69:8c:58:2e:ea:b2:27:11: 73:de:24:45:75:ba:82:21:94:bd:39:98:32:c6:f3: cd:4f:f6:13:de:6f:a7:4c:b3:7c:c0:cc:0f:2e:7b: bd:ad:77:52:2d:c1:6f:35:6a:6d:34:ae:f6:7e:3e: e7:a2:df:d2:d5:19:f3:09:b1:03:3f:d7:33:43:44: 45:bf:a1:0d:ce:8f:1e:22:72:5b:bb:8f:c1:1a:0a: 55:c1:e2:3c:6d:03:6b:b1:78:d8:e7:a7:ec:a1:43: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:7D:66:5B:F1:AF:FB:B4:4C:EE:F0:B4:CF:CF:DD:84:06:F3:23:E3 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:20:10:c8:da:0d:d0:e6:f4:0e:b7:b0:45:b7:30:5b:cc:cc: 71:02:b4:98:c5:b6:0c:ad:04:ec:57:a0:c8:2a:41:a5:d1:55: d2:4b:09:bb:72:e3:ac:2e:a6:1a:d4:3d:32:f9:cd:04:d2:48: 13:40:59:b6:0e:d1:c8:fe:9d:ee:34:d2:e8:80:40:19:39:0b: 1d:bd:97:98:37:1f:0f:43:45:39:73:f3:f2:13:88:9e:cc:fa: 39:63:8c:70:d9:9b:8c:eb:76:3a:86:b9:24:5e:98:29:f2:57: e3:7d:4b:c2:06:0b:2f:69:b8:b6:9c:e2:07:e6:2b:3d:43:79: 70:7a:fc:38:48:8a:6c:cd:31:4e:9f:68:50:ac:f8:54:36:d5: 1c:e7:6c:90:34:4a:3f:83:e3:f9:c2:b4:1b:12:e4:64:8c:32: e8:41:d5:a1:84:7c:9b:d7:2c:b3:bf:bb:21:30:db:06:e5:45: f6:28:9b:03:0e:5f:38:89:8d:1d:d6:9a:75:11:c0:5f:26:42: 73:6a:a1:4b:f2:20:e8:c1:07:f3:f1:fb:52:f7:bd:15:a5:2e: 2f:c1:50:3f:4f:39:4a:08:c2:ae:40:15:58:c2:41:90:e8:62: 25:0b:b5:c2:9f:c1:df:ee:90:d3:77:cc:cd:ed:df:5a:9c:64: ab:35:0b:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ9kENnErjnhrqu7Omd3noqnZBUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNjAzMjUyMDQ2NDRaFw0yNjAzMjkwNTI5NDRaMDMxMTAvBgNV BAMTKEQ2N0Q2NjVCRjFBRkZCQjQ0Q0VFRjBCNENGQ0ZERDg0MDZGMzIzRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqubaInH0K4yBsyzfg013O4y9U FO1Y6SkpFF3MMSsnaXC2Cgjz5ygqXPpqqGiRtsull7ovztzhQfJoMcyiFOFCBir4 qKky50hNp3JcgxpXiBXABCHN49/lu6S4bU1mKNStNw4E+ssKvjr/uN7kxdg22i8W tdRdik/7Fmxi53hyBJMKFG9gkdKZQZ7u+pcETgFL7AGHNGxKKLDhGqNpjFgu6rIn EXPeJEV1uoIhlL05mDLG881P9hPeb6dMs3zAzA8ue72td1ItwW81am00rvZ+Puei 39LVGfMJsQM/1zNDREW/oQ3Ojx4iclu7j8EaClXB4jxtA2uxeNjnp+yhQ91TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1n1mW/Gv+7RM7vC0z8/dhAbzI+MwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4gEMjaDdDm9A63sEW3MFvMzHECtJjFtgyt BOxXoMgqQaXRVdJLCbty46wuphrUPTL5zQTSSBNAWbYO0cj+ne400uiAQBk5Cx29 l5g3Hw9DRTlz8/ITiJ7M+jljjHDZm4zrdjqGuSRemCnyV+N9S8IGCy9puLac4gfm Kz1DeXB6/DhIimzNMU6faFCs+FQ21RznbJA0Sj+D4/nCtBsS5GSMMuhB1aGEfJvX LLO/uyEw2wblRfYomwMOXziJjR3WmnURwF8mQnNqoUvyIOjBB/Px+1L3vRWlLi/B UD9POUoIwq5AFVjCQZDoYiULtcKfwd/ukNN3zM3t31qcZKs1C8U= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:23 2026 by rpki-client