$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: 2DjQtXZsxzanebggF7IB7xNac2RWAsDApgl9/T+PibY= Subject key identifier: 5C:F6:01:82:C5:E7:9B:1E:63:77:69:5B:C4:BC:AD:32:F8:99:AF:42 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 4AB8B35472295F611744482CD24086A7BE9DC807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0375 Signing time: Mon 02 Mar 2026 16:30:57 +0000 Manifest this update: Mon 02 Mar 2026 16:25:57 +0000 Manifest next update: Fri 06 Mar 2026 03:30:57 +0000 Files and hashes: 1: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: 1y9CCqMzrzmHARlpXo0nlCTDPFkcypfaDxlGwqrXBTM=) 2: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 3: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Mar 2026 03:30:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:b8:b3:54:72:29:5f:61:17:44:48:2c:d2:40:86:a7:be:9d:c8:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Mar 2 16:25:57 2026 GMT Not After : Mar 6 03:30:57 2026 GMT Subject: CN=5CF60182C5E79B1E6377695BC4BCAD32F899AF42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:21:41:be:b3:4d:5b:e1:5f:bf:71:78:c5:11: 7e:ba:c7:2d:2f:42:28:ea:4a:16:a6:cd:5d:aa:d3: fe:0a:8c:cc:45:e0:ba:6c:5b:88:44:84:66:ea:f1: 90:e6:13:7f:ae:53:b8:d0:15:63:6b:7f:03:9d:01: 6b:5f:4a:55:26:9c:8b:74:0f:46:b6:35:76:9b:4d: e0:27:9f:00:6c:fd:a0:e5:58:4d:bc:c7:00:ab:66: a9:ac:96:7c:e5:db:ce:8c:dd:a7:1b:03:97:f3:3e: 69:57:96:b7:71:d3:4b:bd:f1:6e:5b:a5:b4:c1:05: da:ed:f6:b8:6d:27:72:e0:3b:a9:54:51:38:b2:99: 26:2d:be:f8:0d:a9:37:81:50:e8:1a:b0:c0:77:8e: 1e:e9:b0:42:79:9b:f4:d2:8f:18:b9:a6:81:8d:59: 00:51:e4:d2:c2:0e:ac:ec:69:9d:83:90:08:1a:4b: 1d:9c:d2:57:79:d3:4e:db:f8:ea:f2:5b:89:7f:cd: 1d:c1:4c:32:b2:01:99:9d:58:cf:c4:0e:14:a0:b1: a5:17:94:2a:52:54:e3:94:9c:bb:0c:53:f0:1c:8b: e9:d1:43:6a:40:04:26:3e:b9:38:52:cd:35:f8:3f: 73:d8:40:52:a1:77:e4:6e:dc:1f:c4:1e:7b:d3:3c: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:F6:01:82:C5:E7:9B:1E:63:77:69:5B:C4:BC:AD:32:F8:99:AF:42 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:33:b1:30:a7:54:a8:94:2a:49:cb:13:d8:d2:38:13:e8:b3: 76:eb:f9:09:21:4c:13:42:31:52:d2:fe:2c:6d:6d:1e:58:dc: c7:04:d1:ad:b3:a8:c3:b5:c6:e9:02:fa:da:97:16:e2:8d:72: 8d:0d:cf:d8:38:b6:4b:c7:9e:c4:3d:f4:5b:35:19:23:68:8b: ca:f3:1b:ed:fe:af:51:e8:f8:32:0e:0d:ee:28:34:32:b3:da: 5b:3b:19:69:a6:cf:96:da:86:cf:96:54:8f:08:76:05:91:d0: 52:17:20:23:ae:78:3a:b0:0b:b3:bf:1b:5f:a7:19:45:eb:79: a4:f1:82:ae:0e:ae:ad:f4:6f:cc:92:3d:38:d6:86:36:2e:30: ee:5b:2f:45:7c:90:a3:75:ae:20:a0:c0:c3:11:12:7e:b4:f8: 4d:37:2a:e7:e3:59:ae:c9:12:eb:f7:8b:65:d6:ae:94:fb:8f: 79:56:50:7b:24:88:d6:ac:67:96:40:b7:a6:3b:20:0c:4e:d1: 42:dd:2b:f7:f8:db:c5:2c:2a:45:71:fa:55:ba:4e:d1:92:b0: 74:27:35:41:b3:8f:ae:fe:43:c5:34:83:06:8a:b4:a9:96:69: 40:d1:bd:68:2b:4d:95:b9:b0:ba:c6:61:5c:38:c9:87:0a:a2: 9a:e1:14:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSrizVHIpX2EXREgs0kCGp76dyAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNjAzMDIxNjI1NTdaFw0yNjAzMDYwMzMwNTdaMDMxMTAvBgNV BAMTKDVDRjYwMTgyQzVFNzlCMUU2Mzc3Njk1QkM0QkNBRDMyRjg5OUFGNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0IUG+s01b4V+/cXjFEX66xy0v QijqShamzV2q0/4KjMxF4LpsW4hEhGbq8ZDmE3+uU7jQFWNrfwOdAWtfSlUmnIt0 D0a2NXabTeAnnwBs/aDlWE28xwCrZqmslnzl286M3acbA5fzPmlXlrdx00u98W5b pbTBBdrt9rhtJ3LgO6lUUTiymSYtvvgNqTeBUOgasMB3jh7psEJ5m/TSjxi5poGN WQBR5NLCDqzsaZ2DkAgaSx2c0ld5007b+OryW4l/zR3BTDKyAZmdWM/EDhSgsaUX lCpSVOOUnLsMU/Aci+nRQ2pABCY+uThSzTX4P3PYQFKhd+Ru3B/EHnvTPBW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXPYBgsXnmx5jd2lbxLytMviZr0IwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHMzsTCnVKiUKknLE9jSOBPos3br+QkhTBNC MVLS/ixtbR5Y3McE0a2zqMO1xukC+tqXFuKNco0Nz9g4tkvHnsQ99Fs1GSNoi8rz G+3+r1Ho+DIODe4oNDKz2ls7GWmmz5bahs+WVI8IdgWR0FIXICOueDqwC7O/G1+n GUXreaTxgq4Orq30b8ySPTjWhjYuMO5bL0V8kKN1riCgwMMREn60+E03KufjWa7J Euv3i2XWrpT7j3lWUHskiNasZ5ZAt6Y7IAxO0ULdK/f428UsKkVx+lW6TtGSsHQn NUGzj67+Q8U0gwaKtKmWaUDRvWgrTZW5sLrGYVw4yYcKoprhFII= -----END CERTIFICATE-----Generated at Wed Mar 4 21:15:16 2026 by rpki-client