$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: tSr2AAz5eWwPtpCnAHx9d+rZucWzq+vRiul7fggcYRU= Subject key identifier: 8D:41:FA:CF:E0:95:90:14:7D:14:B1:12:D7:CD:C0:28:3C:54:84:A4 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 5F13CA4A6688AB5A863D04673D43261D8B6197A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 010B Signing time: Sat 07 Mar 2026 21:52:11 +0000 Manifest this update: Sat 07 Mar 2026 21:47:11 +0000 Manifest next update: Wed 11 Mar 2026 00:47:11 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: wtsAMKmAUiyjNMiP6Q32BPPBKsDaVniQSpwFegXMvW8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:13:ca:4a:66:88:ab:5a:86:3d:04:67:3d:43:26:1d:8b:61:97:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Mar 7 21:47:11 2026 GMT Not After : Mar 11 00:47:11 2026 GMT Subject: CN=8D41FACFE09590147D14B112D7CDC0283C5484A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:5a:1f:c8:6a:8c:8a:51:02:a2:a9:80:77:a4: 2a:37:96:d7:84:42:cc:50:46:1e:9e:ac:e7:cd:cf: ac:79:d0:eb:c8:cc:1b:a0:9f:2e:7e:37:3a:98:9b: 20:4f:ea:d2:52:f8:a4:d2:07:e7:66:d8:0c:32:96: d9:2f:91:1c:af:a7:d9:12:93:88:5b:61:90:ea:2d: 0a:5b:04:11:e0:26:0d:23:c4:6d:f4:43:38:29:c5: d8:cc:29:d0:df:0a:db:65:b6:5c:d2:6c:f2:2a:c6: 5f:74:0d:eb:74:49:2f:d0:99:8c:c2:d7:c9:22:36: 70:d1:3c:42:80:9f:47:13:2c:63:76:91:88:3b:a0: 48:ae:a2:bf:04:5d:23:31:53:b5:68:ff:b0:2f:83: cc:2c:7c:6c:fd:44:f4:2a:00:ed:fb:bf:15:16:d0: 11:33:32:c5:d5:ce:b1:cd:ff:06:73:22:77:87:06: cf:e2:b0:c3:05:0a:4a:91:5a:41:b3:9f:c5:72:0f: 19:ac:b9:6d:dc:95:a2:52:d3:04:f7:7e:09:34:97: b2:82:a0:6a:58:15:c4:c3:33:55:e2:df:ce:3f:cc: ae:96:7e:8b:dc:d2:35:bb:4b:52:de:3d:95:96:5c: f6:e0:b6:a0:03:84:f5:12:36:d1:86:be:f4:60:bb: 75:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:41:FA:CF:E0:95:90:14:7D:14:B1:12:D7:CD:C0:28:3C:54:84:A4 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6d:11:9e:e7:73:86:a1:e7:a0:53:f9:62:2a:40:ec:ea:14: 8f:dd:5f:e8:0c:7e:34:95:fc:54:96:96:f0:bf:36:97:a3:6a: dd:f6:0c:32:d5:1b:6f:80:06:9c:98:9c:e9:c0:8a:90:e4:23: 9d:a9:18:02:ef:cd:a1:c8:a8:02:17:af:02:89:f2:c9:02:25: 2a:99:12:5c:a7:52:31:c5:26:85:6e:4f:20:02:e1:61:70:4b: a9:4b:38:b6:fa:97:4b:4b:b2:9f:61:77:04:37:e0:26:9f:f4: 55:d8:19:10:db:3a:bf:b8:14:55:9d:1f:e9:ec:f2:1c:0c:2d: 33:0a:4f:c3:e6:56:64:65:86:77:8e:77:71:16:14:ce:8c:92: f2:4b:6d:7e:5c:25:1c:d5:25:e4:4c:27:95:78:2f:f4:df:b9: 40:34:6e:60:11:3b:b5:19:20:90:6a:08:f6:02:8e:9b:89:94: 15:ec:94:12:85:88:2b:67:4e:55:1c:d8:c2:6c:d6:7f:23:5e: 5d:31:5a:a5:a7:47:e0:31:68:5e:5e:df:20:ef:e3:6a:a5:0c: 9f:9b:30:12:b2:2d:e3:a4:83:6d:ed:84:4e:3e:7c:d8:b0:a1: 98:5b:97:72:29:55:d4:e6:66:b2:18:46:b6:0e:a9:a2:96:8f: aa:cf:6c:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXxPKSmaIq1qGPQRnPUMmHYthl6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNjAzMDcyMTQ3MTFaFw0yNjAzMTEwMDQ3MTFaMDMxMTAvBgNV BAMTKDhENDFGQUNGRTA5NTkwMTQ3RDE0QjExMkQ3Q0RDMDI4M0M1NDg0QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChWh/IaoyKUQKiqYB3pCo3lteE QsxQRh6erOfNz6x50OvIzBugny5+NzqYmyBP6tJS+KTSB+dm2AwyltkvkRyvp9kS k4hbYZDqLQpbBBHgJg0jxG30QzgpxdjMKdDfCttltlzSbPIqxl90Det0SS/QmYzC 18kiNnDRPEKAn0cTLGN2kYg7oEiuor8EXSMxU7Vo/7Avg8wsfGz9RPQqAO37vxUW 0BEzMsXVzrHN/wZzIneHBs/isMMFCkqRWkGzn8VyDxmsuW3claJS0wT3fgk0l7KC oGpYFcTDM1Xi384/zK6Wfovc0jW7S1LePZWWXPbgtqADhPUSNtGGvvRgu3V9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjUH6z+CVkBR9FLES183AKDxUhKQwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRtEZ7nc4ah56BT+WIqQOzqFI/dX+gMfjSV /FSWlvC/Npejat32DDLVG2+ABpyYnOnAipDkI52pGALvzaHIqAIXrwKJ8skCJSqZ ElynUjHFJoVuTyAC4WFwS6lLOLb6l0tLsp9hdwQ34Caf9FXYGRDbOr+4FFWdH+ns 8hwMLTMKT8PmVmRlhneOd3EWFM6MkvJLbX5cJRzVJeRMJ5V4L/TfuUA0bmARO7UZ IJBqCPYCjpuJlBXslBKFiCtnTlUc2MJs1n8jXl0xWqWnR+AxaF5e3yDv42qlDJ+b MBKyLeOkg23thE4+fNiwoZhbl3IpVdTmZrIYRrYOqaKWj6rPbPY= -----END CERTIFICATE-----Generated at Sun Mar 8 00:35:24 2026 by rpki-client