$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 8lioW7IXUTcytkKXOXoSDHIXbHCjv+YcQ9aCX2279Lo= Subject key identifier: 99:77:99:D8:C8:31:BD:82:E0:90:8D:6A:A2:94:F9:FC:B5:9E:01:0B Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 068C64C1435FF30AB854B505C9BD5F32A5C3DEFC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 027F Signing time: Fri 20 Mar 2026 07:00:03 +0000 Manifest this update: Fri 20 Mar 2026 06:55:03 +0000 Manifest next update: Mon 23 Mar 2026 11:06:03 +0000 Files and hashes: 1: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 3ORUUmkJ+o4nnE20LKRWQpDfQUx6WFMnIqRqb1dCAcA=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: q1WIq9OuzOdZXnnKygZFJaApItytPiwWXK3YBXJGvac=) 3: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: xfBxO1cpwHLH3mPIYYSSSWYs4NXVE5RlSEpIHuIsrj0=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: PNalk4vA/Rkbr+Ga9Voh4gRAWTRSepvHB28AsR/h9Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:8c:64:c1:43:5f:f3:0a:b8:54:b5:05:c9:bd:5f:32:a5:c3:de:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Mar 20 06:55:03 2026 GMT Not After : Mar 23 11:06:03 2026 GMT Subject: CN=997799D8C831BD82E0908D6AA294F9FCB59E010B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:27:19:37:89:66:e2:73:6f:39:8b:d4:49:8e: 3d:12:f7:66:45:d4:d6:c1:45:48:ac:53:cf:2b:c0: d1:a4:9f:a7:2e:c2:e5:9e:e5:40:03:6f:96:b9:02: 2c:af:dd:e6:50:a5:80:af:2d:42:8d:31:e7:b5:7b: a9:36:85:f3:e8:bf:8c:2e:2e:53:9a:53:e5:38:c2: 1c:8a:8e:8c:a1:ec:2f:ce:a6:67:02:4a:77:0d:f7: 35:7e:a7:e4:35:1f:4b:de:4d:56:33:15:1f:f4:a9: e7:72:40:69:76:c5:2a:b1:42:9b:64:f2:f3:f7:0c: 44:64:a3:8d:db:47:de:b1:87:31:b1:2c:29:6f:6a: 17:66:f5:e4:cf:11:15:de:08:97:ff:44:fd:38:ab: 3f:32:db:9f:cd:cd:1d:20:b8:33:a4:2c:f3:e5:df: 4d:51:4d:14:d2:00:ca:03:98:6f:95:53:28:94:bc: 79:fb:71:3d:49:08:a4:d6:63:82:eb:df:84:37:6e: 26:18:af:00:03:6d:63:74:c5:18:80:b8:cc:d1:f4: 3a:fe:05:fe:67:35:3e:96:bc:b3:c6:05:5d:97:24: ae:7b:25:0d:f1:ab:95:af:af:26:e0:6e:5a:b9:46: b1:ee:e3:bd:ba:2f:1a:69:73:6d:f8:0e:31:e3:cf: 3e:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:77:99:D8:C8:31:BD:82:E0:90:8D:6A:A2:94:F9:FC:B5:9E:01:0B X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e2:f9:6a:a2:24:88:15:2d:88:3d:72:cd:23:88:33:75:b8: a8:3e:04:8d:63:41:32:c7:f3:4a:26:5f:c5:1b:69:26:76:ba: fe:6d:05:43:20:fc:a9:d6:c8:bf:fb:02:b6:f8:fd:8e:ef:6c: b1:2f:9d:85:0d:bd:d8:4e:ef:61:cc:c2:3c:fb:f4:35:ed:88: 93:d1:f5:c2:d2:a6:9c:bb:48:6c:9c:26:3e:ea:df:90:d0:10: 20:83:2d:bb:f6:4f:ff:15:a3:79:9a:97:0a:ca:54:c0:df:30: 42:0c:e3:c9:dd:dd:85:02:d5:cf:0b:f4:a8:4e:fa:12:bb:b0: cb:05:bf:3e:0a:0b:12:62:ed:06:cf:48:9d:d2:27:6b:76:50: 38:cf:af:91:1f:e8:d3:e7:8a:38:05:61:4c:8a:9f:7e:82:d8: 7f:8e:09:e9:0a:e5:b8:e0:35:0c:b8:dc:e2:00:86:77:17:2b: a7:cf:be:64:03:1d:00:22:b4:1b:88:8b:34:d0:96:57:94:cb: 86:04:5d:88:e7:6e:db:00:44:b0:8c:5c:5a:a8:fe:d9:3b:99: 43:05:31:ab:d5:c8:d0:b2:06:f2:f7:74:53:a4:22:3b:a9:22: bd:89:8a:3c:72:67:48:0f:5e:84:da:0d:1a:31:53:20:71:8e: c6:1f:ca:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBoxkwUNf8wq4VLUFyb1fMqXD3vwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNjAzMjAwNjU1MDNaFw0yNjAzMjMxMTA2MDNaMDMxMTAvBgNV BAMTKDk5Nzc5OUQ4QzgzMUJEODJFMDkwOEQ2QUEyOTRGOUZDQjU5RTAxMEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeJxk3iWbic285i9RJjj0S92ZF 1NbBRUisU88rwNGkn6cuwuWe5UADb5a5Aiyv3eZQpYCvLUKNMee1e6k2hfPov4wu LlOaU+U4whyKjoyh7C/OpmcCSncN9zV+p+Q1H0veTVYzFR/0qedyQGl2xSqxQptk 8vP3DERko43bR96xhzGxLClvahdm9eTPERXeCJf/RP04qz8y25/NzR0guDOkLPPl 301RTRTSAMoDmG+VUyiUvHn7cT1JCKTWY4Lr34Q3biYYrwADbWN0xRiAuMzR9Dr+ Bf5nNT6WvLPGBV2XJK57JQ3xq5Wvrybgblq5RrHu4726Lxppc234DjHjzz6jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmXeZ2MgxvYLgkI1qopT5/LWeAQswHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3i+WqiJIgVLYg9cs0jiDN1uKg+BI1jQTLH 80omX8UbaSZ2uv5tBUMg/KnWyL/7Arb4/Y7vbLEvnYUNvdhO72HMwjz79DXtiJPR 9cLSppy7SGycJj7q35DQECCDLbv2T/8Vo3malwrKVMDfMEIM48nd3YUC1c8L9KhO +hK7sMsFvz4KCxJi7QbPSJ3SJ2t2UDjPr5Ef6NPnijgFYUyKn36C2H+OCekK5bjg NQy43OIAhncXK6fPvmQDHQAitBuIizTQlleUy4YEXYjnbtsARLCMXFqo/tk7mUMF MavVyNCyBvL3dFOkIjupIr2JijxyZ0gPXoTaDRoxUyBxjsYfypQ= -----END CERTIFICATE-----Generated at Fri Mar 20 14:36:37 2026 by rpki-client