$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: JDLEWnKwOuVFU3ajz02N6q2ftR0SrifuHu9sHB0AqF4= Subject key identifier: DB:20:ED:61:EB:AC:1B:98:C2:2C:D7:D9:93:FD:95:E3:C7:C0:8F:E8 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 70EE22ED5ECF00A22E25C67E0C6CA3C5C3E57EF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: EC Signing time: Fri 06 Mar 2026 10:41:13 +0000 Manifest this update: Fri 06 Mar 2026 10:36:13 +0000 Manifest next update: Mon 09 Mar 2026 15:56:13 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 2: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) 3: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: QrPPvz37MXhuPKwYcf022t6CRbCJiBdJcdJyq9k32pc=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:ee:22:ed:5e:cf:00:a2:2e:25:c6:7e:0c:6c:a3:c5:c3:e5:7e:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Mar 6 10:36:13 2026 GMT Not After : Mar 9 15:56:13 2026 GMT Subject: CN=DB20ED61EBAC1B98C22CD7D993FD95E3C7C08FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:e4:24:15:08:10:1a:3a:95:96:c8:ff:1b:8c: bc:51:66:9e:63:fa:5e:a6:90:47:d4:51:b2:a4:71: db:b8:6a:24:1a:4e:07:a0:cd:6c:7d:f8:63:13:95: b4:cf:96:5b:22:65:79:1e:f8:f5:45:0e:09:e1:f8: 6f:bf:19:88:37:5f:d9:51:1b:7a:13:6a:24:20:0d: 1a:84:2e:27:36:28:06:0d:4b:8a:bb:74:31:99:e3: 47:20:3d:a6:ba:d2:e1:38:37:92:a1:e2:97:93:bb: f4:68:dc:ed:d1:16:7a:70:4c:b0:c8:1d:c8:b4:16: 3d:d4:97:4d:53:5c:bd:d6:ad:50:ab:74:b2:b3:e6: c2:e7:cb:73:a8:c7:9a:60:3f:c2:9f:5d:ed:69:d7: f2:ce:83:93:d0:ff:83:8a:12:fd:41:e8:c7:15:ee: 04:8f:f8:86:b9:19:25:78:2c:c2:5a:18:3f:22:6d: 73:70:36:fb:84:36:d5:24:5d:98:40:f6:9d:04:59: 4a:1a:bc:00:00:e5:d6:a7:c2:d9:ee:3e:14:fa:46: 66:a5:f4:24:19:2b:0c:e3:50:6a:88:7d:36:d9:c9: fa:cf:fd:b0:60:10:5f:27:5b:7f:a0:cb:77:fc:74: 16:2d:26:e3:0b:26:31:42:24:b3:5b:cb:da:97:2e: 6a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:20:ED:61:EB:AC:1B:98:C2:2C:D7:D9:93:FD:95:E3:C7:C0:8F:E8 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:02:d5:42:1d:34:48:a6:7e:e0:3a:5e:23:b0:83:1e:e6:07: 1c:22:da:95:c5:30:77:13:b3:c4:f6:7a:cc:5d:72:4c:47:de: 21:77:bb:13:f2:89:b8:28:69:92:32:b5:ee:92:2d:ce:21:0a: 23:7a:9c:99:5a:40:06:fc:44:85:38:aa:2f:ab:7e:51:44:d7: 9c:5e:04:bc:e1:81:50:6c:e4:ad:9c:00:7e:d3:26:01:79:a9: 63:df:23:00:83:58:a6:ca:7c:b8:d0:35:94:c7:c4:a8:00:54: 9a:5e:00:db:95:15:cb:b6:a2:4a:6f:2d:c1:a0:f8:a7:7d:b6: 0d:b0:9c:90:12:68:e1:0e:29:61:a4:8b:cb:e6:cd:27:53:eb: 14:08:aa:f0:18:72:26:f3:e2:3f:0d:29:a3:79:b1:7e:27:79: 3a:11:ba:de:3d:f2:09:d6:6a:2a:3a:ed:1d:c0:78:13:9f:d6: 2e:be:40:38:4c:6a:62:2c:16:3c:f8:51:19:8b:36:d3:6e:7a: b5:d6:a9:bb:c7:f3:9b:35:b6:90:e6:66:1d:eb:b9:1e:75:d3: 1c:31:f5:da:a2:3d:99:98:ef:f6:ed:6b:e9:96:40:b0:78:34: e5:be:f9:f3:56:f4:bb:ea:f6:13:74:51:8d:f8:39:b3:da:ec: a4:a0:1e:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcO4i7V7PAKIuJcZ+DGyjxcPlfvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNjAzMDYxMDM2MTNaFw0yNjAzMDkxNTU2MTNaMDMxMTAvBgNV BAMTKERCMjBFRDYxRUJBQzFCOThDMjJDRDdEOTkzRkQ5NUUzQzdDMDhGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf5CQVCBAaOpWWyP8bjLxRZp5j +l6mkEfUUbKkcdu4aiQaTgegzWx9+GMTlbTPllsiZXke+PVFDgnh+G+/GYg3X9lR G3oTaiQgDRqELic2KAYNS4q7dDGZ40cgPaa60uE4N5Kh4peTu/Ro3O3RFnpwTLDI Hci0Fj3Ul01TXL3WrVCrdLKz5sLny3Oox5pgP8KfXe1p1/LOg5PQ/4OKEv1B6McV 7gSP+Ia5GSV4LMJaGD8ibXNwNvuENtUkXZhA9p0EWUoavAAA5danwtnuPhT6Rmal 9CQZKwzjUGqIfTbZyfrP/bBgEF8nW3+gy3f8dBYtJuMLJjFCJLNby9qXLmpbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2yDtYeusG5jCLNfZk/2V48fAj+gwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMC1UIdNEimfuA6XiOwgx7mBxwi2pXFMHcT s8T2esxdckxH3iF3uxPyibgoaZIyte6SLc4hCiN6nJlaQAb8RIU4qi+rflFE15xe BLzhgVBs5K2cAH7TJgF5qWPfIwCDWKbKfLjQNZTHxKgAVJpeANuVFcu2okpvLcGg +Kd9tg2wnJASaOEOKWGki8vmzSdT6xQIqvAYcibz4j8NKaN5sX4neToRut498gnW aio67R3AeBOf1i6+QDhMamIsFjz4URmLNtNuerXWqbvH85s1tpDmZh3ruR510xwx 9dqiPZmY7/bta+mWQLB4NOW++fNW9Lvq9hN0UY34ObPa7KSgHq4= -----END CERTIFICATE-----Generated at Sat Mar 7 17:57:41 2026 by rpki-client