$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: IAxfuc3V0PYN3STzM4uOP5gFPrdyJpZtVsGq9HIjPfE= Subject key identifier: A8:20:93:77:3E:66:6C:AF:8B:4D:2D:2D:F3:E5:9F:89:AC:3D:EB:97 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 04FDE79DBF1263B21E9F3A21DD442B9EF5567324 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0549 Signing time: Wed 18 Mar 2026 05:30:44 +0000 Manifest this update: Wed 18 Mar 2026 05:25:44 +0000 Manifest next update: Sat 21 Mar 2026 08:58:44 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: H82o+EJhxXW1tTxalo+/WWsiK/8ITbb8ZNw3Se8lUqI=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 08:58:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:fd:e7:9d:bf:12:63:b2:1e:9f:3a:21:dd:44:2b:9e:f5:56:73:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Mar 18 05:25:44 2026 GMT Not After : Mar 21 08:58:44 2026 GMT Subject: CN=A82093773E666CAF8B4D2D2DF3E59F89AC3DEB97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:b5:63:46:ef:7d:60:d5:88:3e:6f:d4:0f:ad: 7f:80:bb:07:57:88:bf:ab:4b:53:38:f6:b8:64:36: 65:a3:99:86:92:25:db:42:24:43:b3:ef:78:a0:1e: a5:c2:d5:b7:04:b7:64:9f:9a:06:96:4a:d3:83:8c: 21:a4:f7:24:66:05:86:9d:40:fc:f0:39:2a:3e:f3: 1c:1c:36:f9:3e:b3:e6:71:fe:d2:96:1a:6d:7b:94: 0e:bf:42:1c:27:e9:ad:c7:a9:19:27:a6:48:4f:fa: 98:d3:c7:f4:66:2f:a2:7a:96:2f:e2:f8:2f:b3:c1: 5e:e7:cf:1a:98:26:c0:c6:0f:58:f9:70:dd:38:df: 60:9a:12:10:6e:77:31:cf:19:53:ae:fe:64:98:1c: b9:3a:d3:69:81:4e:fc:f8:04:07:8b:84:d3:e5:2a: b5:d2:4f:f0:be:af:09:9e:e8:fe:75:bd:ec:cb:10: d9:12:fd:29:39:d4:84:fe:0f:ce:bf:79:9a:a6:6d: 2d:27:54:80:08:40:0c:c4:e8:8b:3f:25:93:33:70: 5f:57:d2:11:6c:43:b4:c7:07:6f:73:ce:75:a4:66: 7d:53:d2:e2:b9:75:55:c1:06:c6:c4:d2:55:4a:ca: a1:45:43:46:f2:27:c6:b0:25:9a:5e:bb:df:e9:2b: 0d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:20:93:77:3E:66:6C:AF:8B:4D:2D:2D:F3:E5:9F:89:AC:3D:EB:97 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:29:b5:d4:4b:52:18:ac:90:2b:a3:5c:ab:63:08:1b:ef:aa: 8a:7a:c2:5e:e5:d7:89:8b:a6:a4:5e:a6:a9:34:92:4e:b1:3c: b4:b3:c5:cf:61:6e:eb:af:f1:f9:5a:b8:30:cb:f6:06:8f:cf: 59:8b:8b:70:03:a2:bf:c2:48:d5:1d:71:6e:06:99:8e:b2:95: 1d:4e:a1:89:41:bb:86:03:f8:e0:69:6b:0a:ea:af:75:84:bc: 19:a6:a8:70:18:bf:80:11:09:b3:f3:a3:45:47:4f:0e:9e:e3: fa:77:b0:90:9d:ad:e3:6d:de:6c:2f:a0:a7:a9:d4:36:a8:2c: 23:ed:39:aa:6c:72:f9:d0:51:db:f1:c9:d7:6e:d9:60:c6:51: 53:b6:2a:e9:ab:93:35:a2:8e:94:c8:ca:58:e9:ac:a7:ea:b3: 55:61:58:e6:ad:f1:5e:82:aa:8d:76:80:9b:ac:f0:01:06:a6: 63:20:a0:f6:b6:52:3b:71:91:e8:97:1b:c8:ba:46:05:4d:a9: 93:2c:d8:7e:08:93:d5:a9:7e:69:58:f1:24:e1:6b:9d:1b:56: bb:6e:4b:25:37:42:21:7c:b5:d4:da:a2:fd:07:dd:60:f2:01: 17:21:d1:99:12:e7:6a:6c:c1:23:9f:e5:73:d7:a8:d8:7e:bf: 5f:95:78:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBP3nnb8SY7Ienzoh3UQrnvVWcyQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNjAzMTgwNTI1NDRaFw0yNjAzMjEwODU4NDRaMDMxMTAvBgNV BAMTKEE4MjA5Mzc3M0U2NjZDQUY4QjREMkQyREYzRTU5Rjg5QUMzREVCOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5tWNG731g1Yg+b9QPrX+AuwdX iL+rS1M49rhkNmWjmYaSJdtCJEOz73igHqXC1bcEt2SfmgaWStODjCGk9yRmBYad QPzwOSo+8xwcNvk+s+Zx/tKWGm17lA6/Qhwn6a3HqRknpkhP+pjTx/RmL6J6li/i +C+zwV7nzxqYJsDGD1j5cN0432CaEhBudzHPGVOu/mSYHLk602mBTvz4BAeLhNPl KrXST/C+rwme6P51vezLENkS/Sk51IT+D86/eZqmbS0nVIAIQAzE6Is/JZMzcF9X 0hFsQ7THB29zznWkZn1T0uK5dVXBBsbE0lVKyqFFQ0byJ8awJZpeu9/pKw2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqCCTdz5mbK+LTS0t8+Wfiaw965cwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUptdRLUhiskCujXKtjCBvvqop6wl7l14mL pqRepqk0kk6xPLSzxc9hbuuv8flauDDL9gaPz1mLi3ADor/CSNUdcW4GmY6ylR1O oYlBu4YD+OBpawrqr3WEvBmmqHAYv4ARCbPzo0VHTw6e4/p3sJCdreNt3mwvoKep 1DaoLCPtOapscvnQUdvxyddu2WDGUVO2KumrkzWijpTIyljprKfqs1VhWOat8V6C qo12gJus8AEGpmMgoPa2UjtxkeiXG8i6RgVNqZMs2H4Ik9WpfmlY8STha50bVrtu SyU3QiF8tdTaov0H3WDyARch0ZkS52pswSOf5XPXqNh+v1+VeJI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:23:51 2026 by rpki-client