$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: 1J9elLfExzpedxlxDvlQJh6v/+vrHRoBY/+/t5r/Bxc= Subject key identifier: 62:62:F1:17:0B:90:9A:75:6A:72:1E:6E:A6:7B:FF:B9:29:DD:BB:97 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 79FB4F2C43AF51E69CC32411C1DC0870C1A8A1F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 0176 Signing time: Tue 24 Mar 2026 21:41:43 +0000 Manifest this update: Tue 24 Mar 2026 21:36:43 +0000 Manifest next update: Fri 27 Mar 2026 23:12:43 +0000 Files and hashes: 1: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: A6drga6n/xxCpXE1QoLMkue7uAZFiniUyjwMMhqwKkw=) 2: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:fb:4f:2c:43:af:51:e6:9c:c3:24:11:c1:dc:08:70:c1:a8:a1:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Mar 24 21:36:43 2026 GMT Not After : Mar 27 23:12:43 2026 GMT Subject: CN=6262F1170B909A756A721E6EA67BFFB929DDBB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:cb:b3:3a:fd:d4:fd:5a:0f:c0:04:6a:4d:35: 8c:33:5d:31:58:f6:1c:94:e5:ba:d9:fe:c8:51:09: de:a5:c9:53:c9:cc:72:10:40:31:92:b3:f9:6b:53: 21:1c:70:99:e7:b3:18:1e:87:7f:da:63:64:a8:f9: d6:96:2e:53:fb:a8:1c:70:5d:a6:24:6e:0e:27:ee: 6c:af:cd:d7:21:0f:7f:0b:a7:62:b7:27:8d:9b:35: 0c:23:21:46:18:0f:8e:fb:f7:4c:77:74:88:64:72: 76:8d:91:36:ff:be:15:cf:ad:2c:b7:4d:d8:92:25: 1b:d2:c0:e8:43:a7:82:44:97:06:a3:bf:79:30:96: e4:4f:f2:c6:69:af:aa:98:94:3d:96:d2:2b:87:5e: e6:2e:00:1e:cf:e6:1c:86:64:d3:5e:40:7f:a0:68: a8:f7:a3:67:44:3d:70:93:ea:5d:12:bd:f1:d1:81: 0c:75:3f:a9:36:d4:bc:43:d8:48:16:9c:2a:bc:c7: b1:f6:45:3a:d8:2f:f6:f5:93:e7:e1:f6:0d:c8:83: ed:64:90:06:8f:7a:59:6b:d6:9a:27:75:b7:1f:8f: 3b:47:a4:01:d2:f4:27:ca:de:70:ca:01:0f:57:c5: b2:68:21:1c:96:b4:a1:98:24:32:6c:69:3e:b9:66: 34:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:62:F1:17:0B:90:9A:75:6A:72:1E:6E:A6:7B:FF:B9:29:DD:BB:97 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:c2:b6:e2:ce:f7:6a:e4:8c:b9:67:ca:38:df:29:62:f2:28: 4d:a4:3b:8f:97:08:02:79:2e:f8:72:43:cc:ef:15:86:5c:11: 81:70:36:c1:50:d5:4f:49:b2:09:15:17:1e:c4:d8:44:6c:4a: 5d:39:04:bd:15:32:bc:73:cc:c5:62:74:0b:47:ae:91:08:ae: cd:ab:89:ed:7c:fa:7f:c3:54:cc:ed:4c:5a:f0:b0:2c:a4:63: e6:15:e2:8c:25:f2:84:c2:18:e6:c5:84:ed:4a:4a:6c:31:09: f5:f6:10:ac:3b:da:5b:0b:c4:4e:8f:9e:05:e9:70:96:4c:e5: d5:97:e1:5c:fa:22:c7:2e:ca:d5:d0:22:c5:19:25:5e:b7:68: 11:c4:47:df:8e:1f:41:b0:a2:87:e7:d2:0a:1e:cc:c2:43:da: 53:10:a6:a4:54:3d:37:2f:79:93:de:d2:82:2a:3c:7a:8b:3e: 37:7b:35:68:99:19:4a:3f:73:f9:39:8b:44:d3:81:6b:b2:f1: e5:6e:48:73:99:b7:6f:a5:1a:d8:3f:b8:25:e8:98:57:6c:0d: 9b:89:fa:62:65:53:cf:73:1a:e3:68:21:95:ce:9e:75:07:8b: c0:5d:06:84:9a:d9:e2:45:69:55:1c:62:5b:c6:2a:5d:09:2f: c0:9e:4e:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeftPLEOvUeacwyQRwdwIcMGoofgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNjAzMjQyMTM2NDNaFw0yNjAzMjcyMzEyNDNaMDMxMTAvBgNV BAMTKDYyNjJGMTE3MEI5MDlBNzU2QTcyMUU2RUE2N0JGRkI5MjlEREJCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUy7M6/dT9Wg/ABGpNNYwzXTFY 9hyU5brZ/shRCd6lyVPJzHIQQDGSs/lrUyEccJnnsxgeh3/aY2So+daWLlP7qBxw XaYkbg4n7myvzdchD38Lp2K3J42bNQwjIUYYD47790x3dIhkcnaNkTb/vhXPrSy3 TdiSJRvSwOhDp4JElwajv3kwluRP8sZpr6qYlD2W0iuHXuYuAB7P5hyGZNNeQH+g aKj3o2dEPXCT6l0SvfHRgQx1P6k21LxD2EgWnCq8x7H2RTrYL/b1k+fh9g3Ig+1k kAaPellr1pondbcfjztHpAHS9CfK3nDKAQ9XxbJoIRyWtKGYJDJsaT65ZjQ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYmLxFwuQmnVqch5upnv/uSndu5cwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPCtuLO92rkjLlnyjjfKWLyKE2kO4+XCAJ5 LvhyQ8zvFYZcEYFwNsFQ1U9JsgkVFx7E2ERsSl05BL0VMrxzzMVidAtHrpEIrs2r ie18+n/DVMztTFrwsCykY+YV4owl8oTCGObFhO1KSmwxCfX2EKw72lsLxE6PngXp cJZM5dWX4Vz6IscuytXQIsUZJV63aBHER9+OH0Gwoofn0goezMJD2lMQpqRUPTcv eZPe0oIqPHqLPjd7NWiZGUo/c/k5i0TTgWuy8eVuSHOZt2+lGtg/uCXomFdsDZuJ +mJlU89zGuNoIZXOnnUHi8BdBoSa2eJFaVUcYlvGKl0JL8CeTpI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:30:10 2026 by rpki-client