$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: bMCo5h2cbleBlK+gnaukZuUguKZd9TdKpimtgJKteGE= Subject key identifier: DB:BF:CA:FF:37:45:42:CE:66:9E:B5:BC:3A:F0:92:8E:B2:3F:C7:07 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 2BF19BBDE320DAEAFD2A0DB13D235C7CE577FC25 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 03DA Signing time: Mon 23 Mar 2026 08:12:17 +0000 Manifest this update: Mon 23 Mar 2026 08:07:17 +0000 Manifest next update: Thu 26 Mar 2026 14:58:17 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: WlLX6O6rNmqDQ4mfZ8+qxFiX7NI25EFsrosyds4ThYo=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:f1:9b:bd:e3:20:da:ea:fd:2a:0d:b1:3d:23:5c:7c:e5:77:fc:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Mar 23 08:07:17 2026 GMT Not After : Mar 26 14:58:17 2026 GMT Subject: CN=DBBFCAFF374542CE669EB5BC3AF0928EB23FC707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ee:9a:dc:c2:b9:30:26:68:5b:3d:c2:3d:da: fb:15:c7:37:44:c2:a2:75:fd:da:8f:ea:77:d2:65: 08:65:83:af:8c:76:ab:a3:66:c1:12:ba:60:49:c1: 5e:a9:2d:72:de:6e:6a:39:4f:61:b8:20:ae:98:bf: fb:52:2e:2a:45:83:25:ba:40:79:14:4a:69:38:9a: ff:35:df:0e:d6:51:b1:ea:72:d0:8f:63:bd:50:bd: da:b2:cb:dd:bd:73:2c:f8:54:cf:bb:c9:4c:7a:a3: d8:0f:42:8f:01:95:23:54:31:ee:29:19:05:0f:dd: da:61:de:47:54:08:a9:76:6c:d5:1c:4f:de:6e:b8: 83:4e:73:a9:29:aa:a4:be:50:ac:60:1b:fa:47:d1: 6f:9e:d6:5e:59:da:20:2b:20:ee:42:01:d1:e5:2d: a7:53:37:94:98:e5:07:29:bf:e2:9d:46:78:a5:8b: ff:5f:09:57:87:52:12:ff:c7:68:67:cc:b2:52:cd: be:21:8e:76:15:f1:88:28:c2:34:83:7b:3f:46:30: da:1f:0c:08:6b:16:3c:99:b7:cc:be:ff:43:5b:29: 5b:fa:7b:5d:e4:02:42:62:85:d5:c3:59:99:ae:15: 4e:c7:5d:db:c7:3c:07:c6:28:4f:3b:89:a7:8a:49: cf:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:CA:FF:37:45:42:CE:66:9E:B5:BC:3A:F0:92:8E:B2:3F:C7:07 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:fb:9a:78:fe:34:1f:39:5b:ad:87:5d:bd:71:d8:14:59:43: 3d:55:51:a2:6f:f1:c5:ee:50:83:51:55:b1:6a:06:22:c6:61: 60:d1:73:6d:bf:fa:5e:f2:5a:e8:03:eb:ea:3d:bc:a6:81:d7: 55:29:3b:c7:cf:68:92:bb:e6:e7:c7:58:75:78:85:2c:a2:47: 3e:2e:39:34:9f:9b:b4:0b:dc:59:88:31:1a:8a:f7:db:1d:6d: 2e:82:d0:e7:fc:38:e8:3b:0e:0b:fb:04:68:b4:f9:48:66:83: 31:69:09:bc:3f:3f:95:17:3c:76:5a:54:51:5f:67:53:6b:a9: 04:b2:5f:84:03:c2:03:26:ef:cb:54:b4:fc:f2:4c:69:69:e2: 31:59:00:ef:31:7b:95:7e:1b:d0:05:0d:04:e7:78:4f:39:0a: 8a:33:a0:21:9e:7c:a4:8d:b0:9b:fd:78:1c:61:ab:bb:82:b5: 4b:42:81:51:ba:12:45:75:b2:3d:bf:44:c6:4e:d4:47:d9:49: 07:0e:65:01:05:b5:6e:c6:5f:4c:00:41:10:f9:89:d0:ec:b9: b1:c9:0b:65:da:86:bf:37:b1:b6:10:15:8c:1c:ae:c6:2d:aa: 06:7b:c8:f1:44:18:71:38:70:d2:52:d2:33:5d:fa:b2:8c:bf: 26:33:61:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK/GbveMg2ur9Kg2xPSNcfOV3/CUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNjAzMjMwODA3MTdaFw0yNjAzMjYxNDU4MTdaMDMxMTAvBgNV BAMTKERCQkZDQUZGMzc0NTQyQ0U2NjlFQjVCQzNBRjA5MjhFQjIzRkM3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn7prcwrkwJmhbPcI92vsVxzdE wqJ1/dqP6nfSZQhlg6+MdqujZsESumBJwV6pLXLebmo5T2G4IK6Yv/tSLipFgyW6 QHkUSmk4mv813w7WUbHqctCPY71Qvdqyy929cyz4VM+7yUx6o9gPQo8BlSNUMe4p GQUP3dph3kdUCKl2bNUcT95uuINOc6kpqqS+UKxgG/pH0W+e1l5Z2iArIO5CAdHl LadTN5SY5Qcpv+KdRnili/9fCVeHUhL/x2hnzLJSzb4hjnYV8YgowjSDez9GMNof DAhrFjyZt8y+/0NbKVv6e13kAkJihdXDWZmuFU7HXdvHPAfGKE87iaeKSc/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU27/K/zdFQs5mnrW8OvCSjrI/xwcwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/7mnj+NB85W62HXb1x2BRZQz1VUaJv8cXu UINRVbFqBiLGYWDRc22/+l7yWugD6+o9vKaB11UpO8fPaJK75ufHWHV4hSyiRz4u OTSfm7QL3FmIMRqK99sdbS6C0Of8OOg7Dgv7BGi0+UhmgzFpCbw/P5UXPHZaVFFf Z1NrqQSyX4QDwgMm78tUtPzyTGlp4jFZAO8xe5V+G9AFDQTneE85CoozoCGefKSN sJv9eBxhq7uCtUtCgVG6EkV1sj2/RMZO1EfZSQcOZQEFtW7GX0wAQRD5idDsubHJ C2Xahr83sbYQFYwcrsYtqgZ7yPFEGHE4cNJS0jNd+rKMvyYzYSk= -----END CERTIFICATE-----Generated at Tue Mar 24 01:51:25 2026 by rpki-client