$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: zPQ3UthJ5JehEwDRjxTP3SzcDayhZofXs7J0Zq14MMM= Subject key identifier: 9E:E2:7F:42:BA:87:9E:06:48:67:BA:F5:6B:AA:DD:E3:74:80:B5:ED Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 04AB1F6B69BA82B843A8A0BE43410DACB6E0560B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 021C Signing time: Fri 20 Mar 2026 00:01:03 +0000 Manifest this update: Thu 19 Mar 2026 23:56:03 +0000 Manifest next update: Mon 23 Mar 2026 10:56:03 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: 4gA0Ayh4wc+enuZjfM5cvXtF4KS/wz/Vl+eaNQabdGI=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 7pJK2Nu09mDb/KW48/x7bS6pMakC4PmiTUB5vEr70Gk=) 3: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: TMHSmP2hwL9fn32T5fdH98uckIXEP735rtfqmLjHYfo=) 4: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: U/yDn1W4jZEF4S0Nu+KZGK93oXQkpj5Y66m25j//fks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ab:1f:6b:69:ba:82:b8:43:a8:a0:be:43:41:0d:ac:b6:e0:56:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Mar 19 23:56:03 2026 GMT Not After : Mar 23 10:56:03 2026 GMT Subject: CN=9EE27F42BA879E064867BAF56BAADDE37480B5ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:41:62:09:81:2a:2e:21:2e:34:c0:0d:b7:b9: 62:d3:88:04:f2:4b:5a:53:69:55:49:9c:80:d0:b7: 69:86:a6:d2:b4:f9:f0:f2:97:da:f5:e2:fb:83:b8: 39:ca:fb:1e:d6:1e:72:4d:50:45:42:cb:ba:93:0a: e2:5e:ee:3c:17:7c:0e:68:94:47:19:63:67:f4:f0: 92:8c:5f:50:c6:03:4e:39:98:fa:e4:0c:c4:94:a3: 58:3d:ed:55:54:d6:ea:89:de:d6:14:84:c4:3e:cd: 9a:a0:8b:27:0e:98:fb:1a:cb:6a:11:5e:e5:3c:08: e9:a7:54:1c:98:ee:ad:2f:cc:b3:de:41:23:0a:42: 08:d8:ce:5f:0e:f9:9c:ab:b8:6f:b9:26:71:66:cd: c9:6c:70:a5:f5:f2:01:ca:3d:58:a4:ca:8a:95:c0: 0e:00:13:ac:b6:55:13:3b:80:2b:24:85:21:dd:ff: d4:99:99:bf:d1:a9:77:e3:6e:4a:8f:32:db:86:d9: cc:dd:ea:03:e1:dd:38:e0:62:29:f1:0c:ca:f4:0f: 5c:df:06:46:26:e5:79:2b:ba:ed:4e:0e:44:6e:a0: d2:68:ce:89:f4:8e:2f:5d:02:66:69:be:1b:47:41: 89:1f:c5:5e:57:b3:a9:e2:80:35:3a:1a:40:c0:fc: f7:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:E2:7F:42:BA:87:9E:06:48:67:BA:F5:6B:AA:DD:E3:74:80:B5:ED X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:33:f6:6d:90:a0:12:f4:7f:cc:fa:d1:2c:9c:a7:fb:af:8f: bb:7a:b8:e8:64:df:a0:79:ce:52:4c:62:d6:a4:e7:f7:e3:53: 19:76:a8:b5:43:97:62:33:53:f5:70:76:4f:d3:b5:8e:83:81: 3c:bc:9b:06:9e:81:d8:9d:58:bf:ea:b8:6c:7d:1d:de:d1:65: 11:3c:9d:c7:bc:aa:00:03:69:b8:97:3e:92:d8:a2:69:2a:b6: 95:4f:89:c1:13:f8:5c:26:a5:7f:f7:74:f3:34:59:0b:7b:e6: ce:c4:62:5b:d6:6d:08:dc:2b:3c:9d:bc:25:9f:57:30:97:f6: bb:5f:47:99:58:bf:c6:27:c3:bb:40:3b:60:58:37:5b:b1:b7: 1e:98:51:3c:80:8b:76:36:b5:df:5f:f2:5a:0a:a3:31:b4:bf: 92:6c:20:2f:0b:cc:89:07:07:f6:22:cb:b6:49:ec:e4:5d:28: fe:56:cd:44:8b:5d:de:68:f0:af:0b:b3:f1:11:51:f5:b8:56: 77:2c:d1:1b:c4:d1:0e:06:a2:5b:93:12:c9:11:df:47:9a:2f: 21:30:98:2b:d3:e5:a3:d0:e2:20:66:92:9d:33:e9:bb:e1:97: 27:72:64:95:54:26:9b:30:79:05:5c:63:ed:70:96:b3:3e:02: 34:44:ab:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBKsfa2m6grhDqKC+Q0ENrLbgVgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNjAzMTkyMzU2MDNaFw0yNjAzMjMxMDU2MDNaMDMxMTAvBgNV BAMTKDlFRTI3RjQyQkE4NzlFMDY0ODY3QkFGNTZCQUFEREUzNzQ4MEI1RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQWIJgSouIS40wA23uWLTiATy S1pTaVVJnIDQt2mGptK0+fDyl9r14vuDuDnK+x7WHnJNUEVCy7qTCuJe7jwXfA5o lEcZY2f08JKMX1DGA045mPrkDMSUo1g97VVU1uqJ3tYUhMQ+zZqgiycOmPsay2oR XuU8COmnVByY7q0vzLPeQSMKQgjYzl8O+ZyruG+5JnFmzclscKX18gHKPVikyoqV wA4AE6y2VRM7gCskhSHd/9SZmb/RqXfjbkqPMtuG2czd6gPh3TjgYinxDMr0D1zf BkYm5Xkruu1ODkRuoNJozon0ji9dAmZpvhtHQYkfxV5Xs6nigDU6GkDA/PdJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnuJ/QrqHngZIZ7r1a6rd43SAte0wHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwz9m2QoBL0f8z60Sycp/uvj7t6uOhk36B5 zlJMYtak5/fjUxl2qLVDl2IzU/Vwdk/TtY6DgTy8mwaegdidWL/quGx9Hd7RZRE8 nce8qgADabiXPpLYomkqtpVPicET+FwmpX/3dPM0WQt75s7EYlvWbQjcKzydvCWf VzCX9rtfR5lYv8Ynw7tAO2BYN1uxtx6YUTyAi3Y2td9f8loKozG0v5JsIC8LzIkH B/Yiy7ZJ7ORdKP5WzUSLXd5o8K8Ls/ERUfW4Vncs0RvE0Q4GoluTEskR30eaLyEw mCvT5aPQ4iBmkp0z6bvhlydyZJVUJpsweQVcY+1wlrM+AjREqwA= -----END CERTIFICATE-----Generated at Fri Mar 20 12:42:44 2026 by rpki-client