$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: 6RPlJJ2Iub8NozaqrfkOvNnjn06JaqgKB37WbsahucE= Subject key identifier: C2:08:34:0E:E8:3B:D4:C8:66:68:55:CF:D6:5F:70:0E:0C:65:13:20 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 3E276F863B58DA45781A53227D32673BDE068FB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: DD Signing time: Wed 18 Mar 2026 15:52:38 +0000 Manifest this update: Wed 18 Mar 2026 15:47:38 +0000 Manifest next update: Sat 21 Mar 2026 21:00:38 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 2: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) 3: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) 4: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: nJI7Elzf4QhxYEIkVCwRzgrBWAD5d5QcKqEKvrcK3kk=) 5: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 21:00:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:27:6f:86:3b:58:da:45:78:1a:53:22:7d:32:67:3b:de:06:8f:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Mar 18 15:47:38 2026 GMT Not After : Mar 21 21:00:38 2026 GMT Subject: CN=C208340EE83BD4C8666855CFD65F700E0C651320 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5f:bd:b5:56:c8:57:4d:70:8d:ed:11:cf:65: 82:9d:c0:10:fd:52:d2:c7:7b:c7:14:b0:5b:d1:95: 73:10:9f:be:7d:54:24:c4:8e:20:24:fd:b2:8e:c6: fd:df:e3:89:70:e7:8d:f0:8b:12:cf:ab:81:14:72: 70:d4:3d:c8:67:60:58:a3:32:d5:40:3c:29:68:eb: 84:f1:97:90:ed:af:d7:71:b9:63:31:a3:5e:03:7d: a8:cb:65:d1:5e:62:f3:cb:6a:86:a2:f2:aa:29:12: 9e:7a:7e:9b:e8:3a:65:01:28:fd:4a:f4:e2:31:33: 5b:24:10:b1:9d:c2:cb:3d:73:10:4b:78:0a:bd:f5: 6b:7d:37:5f:dc:d7:2d:1c:e5:26:d9:1f:af:e3:5e: c0:f8:4a:9f:48:8e:6c:e5:cc:22:0c:f9:73:62:fa: 3a:02:dd:e2:fa:79:52:f6:9f:cd:ec:a7:64:2b:7d: ca:a9:26:33:9b:06:44:78:d0:17:ed:64:11:43:a9: ca:3e:2e:90:08:7d:62:33:30:95:39:ed:83:a3:8a: 63:47:69:6a:4e:1b:93:d1:2d:02:ed:88:cb:d1:b7: 81:f5:37:e9:a3:69:84:26:c6:0a:ce:4a:c7:49:8a: de:f0:39:16:7e:e6:53:80:00:23:9a:a1:5c:6e:da: 30:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:08:34:0E:E8:3B:D4:C8:66:68:55:CF:D6:5F:70:0E:0C:65:13:20 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:5e:ce:2d:e1:08:19:54:78:22:29:f8:b5:bb:2d:c8:e6:09: 48:d3:e4:d8:b3:a4:85:d9:90:16:80:db:0d:15:75:0d:ec:0d: 40:ab:f3:2b:b2:23:4d:7d:14:a5:a1:ec:0e:d3:3c:3d:7b:ec: 38:66:a9:5d:20:ef:ce:9f:b4:9a:d8:3e:e3:56:26:5f:ae:4a: 82:f3:9b:19:52:76:87:96:9c:48:24:eb:8e:bd:ec:d7:5f:5d: e1:6a:bb:93:20:78:21:bc:91:43:a1:26:29:fd:8d:bf:1f:e9: be:47:29:12:d5:dc:ad:c6:82:d3:9e:1a:92:b4:78:ec:fd:ac: 2c:ac:13:5f:a8:a5:0a:76:df:1c:ed:bb:72:a1:84:bc:b1:33: 79:74:dc:40:25:62:fc:ef:68:e1:3a:42:ea:43:51:7f:58:31: 86:08:25:f5:a5:fe:64:c4:44:09:85:32:b9:6c:21:33:b0:d6: be:09:65:9c:53:1f:69:85:39:9b:82:4d:1e:d2:c1:e8:36:36: 07:14:e1:c0:e0:c1:1b:60:6c:6b:d8:95:60:fd:53:d7:c4:1f: 1d:06:40:7a:6d:3c:6c:18:d2:2c:f3:05:82:00:3c:52:5e:76: c6:c9:58:ca:34:d2:8e:de:9e:b5:46:7b:5e:52:e8:32:ce:6a: cd:5e:c7:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPidvhjtY2kV4GlMifTJnO94Gj7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNjAzMTgxNTQ3MzhaFw0yNjAzMjEyMTAwMzhaMDMxMTAvBgNV BAMTKEMyMDgzNDBFRTgzQkQ0Qzg2NjY4NTVDRkQ2NUY3MDBFMEM2NTEzMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCX721VshXTXCN7RHPZYKdwBD9 UtLHe8cUsFvRlXMQn759VCTEjiAk/bKOxv3f44lw543wixLPq4EUcnDUPchnYFij MtVAPClo64Txl5Dtr9dxuWMxo14DfajLZdFeYvPLaoai8qopEp56fpvoOmUBKP1K 9OIxM1skELGdwss9cxBLeAq99Wt9N1/c1y0c5SbZH6/jXsD4Sp9IjmzlzCIM+XNi +joC3eL6eVL2n83sp2QrfcqpJjObBkR40BftZBFDqco+LpAIfWIzMJU57YOjimNH aWpOG5PRLQLtiMvRt4H1N+mjaYQmxgrOSsdJit7wORZ+5lOAACOaoVxu2jBDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwgg0Dug71MhmaFXP1l9wDgxlEyAwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINezi3hCBlUeCIp+LW7LcjmCUjT5NizpIXZ kBaA2w0VdQ3sDUCr8yuyI019FKWh7A7TPD177DhmqV0g786ftJrYPuNWJl+uSoLz mxlSdoeWnEgk64697NdfXeFqu5MgeCG8kUOhJin9jb8f6b5HKRLV3K3GgtOeGpK0 eOz9rCysE1+opQp23xztu3KhhLyxM3l03EAlYvzvaOE6QupDUX9YMYYIJfWl/mTE RAmFMrlsITOw1r4JZZxTH2mFOZuCTR7Sweg2NgcU4cDgwRtgbGvYlWD9U9fEHx0G QHptPGwY0izzBYIAPFJedsbJWMo00o7enrVGe15S6DLOas1ex1Y= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client