$ rpki-client -vvf repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft File: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft (raw, json) Hash identifier: 7d5+FbgguMRhiTKsjV0OT9Yaj9lk4U6kDUDr0CEzfbc= Subject key identifier: 96:88:91:6B:49:D8:71:2E:07:3E:BD:5E:46:F3:0A:BF:BA:A0:E9:4F Authority key identifier: 79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 Certificate issuer: /CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Certificate serial: 4BD89EADA7CD5836BFD8B4777BD3139C73353F64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft Manifest number: 34 Signing time: Thu 19 Mar 2026 07:32:11 +0000 Manifest this update: Thu 19 Mar 2026 07:27:11 +0000 Manifest next update: Sun 22 Mar 2026 15:54:11 +0000 Files and hashes: 1: 3130332e3233362e3135312e302f32342d3234203d3e203535363634.roa (hash: vN+gGGeaJ1gj8tThDKmMiECC35znNoNYchE+0HwB4qo=) 2: 7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl (hash: i9YqQ7FxD30c4cT4wxkTdjwZEQGbgHbPQNYozC4e8Hk=) 3: 34352e3234392e3232322e302f32342d3234203d3e203535363634.roa (hash: IjL8U7j0DmBIXMsuGkW1RQCn11k2vE+wQV790Ok5z/U=) 4: 3130332e3233362e3135302e302f32342d3234203d3e203535363634.roa (hash: 2gNt0b6scD0Vr6P6DjjlOCkxUmLu97iptlipFu8yVHU=) 5: 34352e3234392e3232332e302f32342d3234203d3e203535363634.roa (hash: JpmEn7WaRdkeEFa5ZGloCMsN5J170hstOwttgz6U1Z0=) 6: 34352e3234392e3232302e302f32342d3234203d3e203535363634.roa (hash: UnBNpg7Ki5yb8nLJihGU6CQzLaBHjw3/oRDo43eNzRA=) 7: 34352e3234392e3232312e302f32342d3234203d3e203535363634.roa (hash: QaVL8FZIkXQEPUlKXDz1K7gc9JnXnHYzpgLLHSEIXzo=) 8: 3130332e3233362e3134382e302f32342d3234203d3e203535363634.roa (hash: Vp8nm0q1fVdfpoUq1ph6iBsHdLxuIgv5gZec72xD2Lk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 13:43:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:d8:9e:ad:a7:cd:58:36:bf:d8:b4:77:7b:d3:13:9c:73:35:3f:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7932E1C92B451A2FD7A5E85B541135E25AD074D5 Validity Not Before: Mar 19 07:27:11 2026 GMT Not After : Mar 22 15:54:11 2026 GMT Subject: CN=9688916B49D8712E073EBD5E46F30ABFBAA0E94F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:78:9e:07:ef:9e:c3:5a:37:d5:da:9f:38:95: bd:1c:8c:2c:f4:11:0d:7c:7d:0e:91:85:79:c2:f7: e7:d6:3f:02:6a:df:6b:6a:74:8d:ad:01:ea:ab:61: 40:6d:67:4e:0f:8d:2f:41:f1:0d:df:a0:bd:8b:4e: c2:78:24:5d:19:39:ef:92:35:3b:25:c4:fa:f5:ff: b6:09:7f:50:df:0e:7b:b6:ff:84:11:43:c6:ee:c7: c7:d4:f5:c6:4f:68:1e:ba:f6:4b:02:58:62:a0:60: 64:3e:69:c3:82:d1:63:61:eb:02:82:de:24:7e:74: 26:de:cb:da:37:f6:54:02:cb:0c:4b:29:7d:f2:6f: 14:e3:a5:51:c8:23:2f:03:39:6e:3b:27:e4:03:0b: 15:c4:8e:72:e6:68:c5:d0:16:5c:0c:77:fe:9d:1a: 68:92:81:b9:b0:8e:e7:2d:7f:cc:b8:9f:bf:4c:f6: 85:b6:c7:59:f8:26:21:e7:66:4d:a4:ec:a3:49:bc: d0:10:48:89:49:07:79:49:4f:0d:75:e9:ab:ff:e8: cb:f5:6f:f1:ad:79:96:3b:a1:d4:46:09:14:d4:ad: fa:e2:20:86:61:4d:c0:fa:1f:91:23:79:33:4a:48: 77:d3:e7:9c:20:1b:a5:c6:3a:43:6e:97:9e:f9:e3: 37:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:88:91:6B:49:D8:71:2E:07:3E:BD:5E:46:F3:0A:BF:BA:A0:E9:4F X509v3 Authority Key Identifier: keyid:79:32:E1:C9:2B:45:1A:2F:D7:A5:E8:5B:54:11:35:E2:5A:D0:74:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7932E1C92B451A2FD7A5E85B541135E25AD074D5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28a79755-238a-46d2-b052-30587bf9eff7/0/7932E1C92B451A2FD7A5E85B541135E25AD074D5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:5b:fa:5f:92:02:1b:d3:bd:8f:a0:b2:04:be:ea:2a:05:dd: 76:86:a1:1e:67:35:6f:1d:a6:53:42:e7:e3:05:89:1c:fb:ab: 0a:be:6e:f4:0d:d9:2e:09:d3:fc:d4:a0:e4:d4:f6:e5:1f:00: c9:82:33:ef:0e:88:d1:49:8a:72:bd:d0:d6:71:f0:a7:4b:bf: 64:d1:6a:41:d1:4e:7d:58:c9:30:d7:57:d7:ce:35:a9:d1:55: 2b:08:c5:6a:54:bc:5a:f7:67:eb:12:cb:75:71:8f:8f:5c:ed: ab:1c:0c:a1:49:37:25:b7:62:45:44:4d:24:07:8f:23:be:c3: db:ae:22:30:c7:9e:d3:8f:df:ff:f8:10:fc:05:07:e2:fe:bf: 8d:fc:f6:ff:21:41:6d:96:ec:c4:19:c7:6e:86:b1:6d:d2:a7: 31:7a:f0:89:8a:d4:78:81:e9:16:ff:4c:68:3f:b8:b1:76:11: 5b:34:5e:ce:c8:87:17:79:11:44:50:bd:36:f9:56:81:63:1d: df:4b:c6:0f:b6:9d:24:b3:27:85:71:e5:e5:b7:af:8d:b4:d2: d5:ad:4b:0b:67:f7:e9:64:cc:eb:8f:22:b5:fa:89:a7:d7:9b: 57:95:da:f9:43:df:84:87:58:e0:36:ce:28:bf:75:73:78:ba: 39:2a:c7:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS9ierafNWDa/2LR3e9MTnHM1P2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1 QUQwNzRENTAeFw0yNjAzMTkwNzI3MTFaFw0yNjAzMjIxNTU0MTFaMDMxMTAvBgNV BAMTKDk2ODg5MTZCNDlEODcxMkUwNzNFQkQ1RTQ2RjMwQUJGQkFBMEU5NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEeJ4H757DWjfV2p84lb0cjCz0 EQ18fQ6RhXnC9+fWPwJq32tqdI2tAeqrYUBtZ04PjS9B8Q3foL2LTsJ4JF0ZOe+S NTslxPr1/7YJf1DfDnu2/4QRQ8bux8fU9cZPaB669ksCWGKgYGQ+acOC0WNh6wKC 3iR+dCbey9o39lQCywxLKX3ybxTjpVHIIy8DOW47J+QDCxXEjnLmaMXQFlwMd/6d GmiSgbmwjuctf8y4n79M9oW2x1n4JiHnZk2k7KNJvNAQSIlJB3lJTw116av/6Mv1 b/GteZY7odRGCRTUrfriIIZhTcD6H5EjeTNKSHfT55wgG6XGOkNul5754zeHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUloiRa0nYcS4HPr1eRvMKv7qg6U8wHwYDVR0j BBgwFoAUeTLhyStFGi/XpehbVBE14lrQdNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGE3OTc1NS0yMzhhLTQ2ZDItYjA1Mi0zMDU4N2JmOWVmZjcvMC83OTMyRTFDOTJC NDUxQTJGRDdBNUU4NUI1NDExMzVFMjVBRDA3NEQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1RTI1QUQw NzRENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhhNzk3NTUtMjM4YS00NmQyLWIw NTItMzA1ODdiZjllZmY3LzAvNzkzMkUxQzkyQjQ1MUEyRkQ3QTVFODVCNTQxMTM1 RTI1QUQwNzRENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRb+l+SAhvTvY+gsgS+6ioF3XaGoR5nNW8d plNC5+MFiRz7qwq+bvQN2S4J0/zUoOTU9uUfAMmCM+8OiNFJinK90NZx8KdLv2TR akHRTn1YyTDXV9fONanRVSsIxWpUvFr3Z+sSy3Vxj49c7ascDKFJNyW3YkVETSQH jyO+w9uuIjDHntOP3//4EPwFB+L+v4389v8hQW2W7MQZx26GsW3SpzF68ImK1HiB 6Rb/TGg/uLF2EVs0Xs7Ihxd5EURQvTb5VoFjHd9Lxg+2nSSzJ4Vx5eW3r4200tWt Swtn9+lkzOuPIrX6iafXm1eV2vlD34SHWOA2zii/dXN4ujkqxwk= -----END CERTIFICATE-----Generated at Thu Mar 19 10:01:17 2026 by rpki-client