$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: JqNxnYfbeM++NnYUllAvsux1x5cq9OOTTajjd0XIcFE= Subject key identifier: 31:95:D1:88:CF:24:9B:FC:D6:9D:4F:14:1E:18:A1:B8:64:00:BA:AF Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 5972B59313626E8FD16E622DF980F81E864E8FA5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: 0138 Signing time: Fri 06 Mar 2026 15:40:51 +0000 Manifest this update: Fri 06 Mar 2026 15:35:51 +0000 Manifest next update: Mon 09 Mar 2026 18:13:51 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: eQaky8Oqg6zWWDS6nsYOWW+QdwQJL6ZWMvFeCi9tD5w=) 2: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: FQ85gA90kyd0XW3CdhEFCLy/Kgy4S2cvTGnhMMi1RRU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:b5:93:13:62:6e:8f:d1:6e:62:2d:f9:80:f8:1e:86:4e:8f:a5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Mar 6 15:35:51 2026 GMT Not After : Mar 9 18:13:51 2026 GMT Subject: CN=3195D188CF249BFCD69D4F141E18A1B86400BAAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:9f:88:ce:c1:89:04:99:6f:c9:cd:5c:8f: d7:56:9b:8a:7c:cd:4c:c6:c9:73:4b:da:0b:cb:00: c1:79:c5:63:e7:fb:3b:ab:65:79:7b:40:a7:f4:15: c8:74:b6:b5:74:8c:8c:7d:97:b5:fb:42:74:e9:89: c9:f5:80:69:3e:02:ba:18:7b:91:b4:55:e4:6c:eb: 53:71:ec:5a:bd:46:ea:b7:d4:b4:e9:a7:dd:f7:3a: cc:e0:f4:9d:61:77:83:37:60:56:7d:f8:08:9b:30: 27:d4:f5:78:fb:4e:19:3b:0d:10:f2:8e:5e:6f:3b: 55:21:01:0f:03:db:44:71:6d:52:d5:5a:6a:28:25: ab:8d:99:86:1d:8e:d5:36:fd:ed:3e:2d:67:fe:fc: a8:08:68:d3:79:5d:57:c5:b2:fc:8f:e1:b0:c1:3f: a5:c9:26:25:72:85:79:1b:7e:a8:45:24:0c:4a:34: f4:ee:20:a2:b6:16:18:44:e0:6f:3d:71:65:7c:de: be:21:f0:a0:76:21:aa:18:07:07:32:18:a1:67:5a: 18:42:6e:1c:56:6a:2a:4b:81:a8:83:72:80:85:54: a3:77:27:9a:6d:75:7a:6c:46:35:ee:63:22:c7:96: ae:35:88:68:6c:e2:29:d4:61:db:51:3f:f6:c5:e3: 54:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:95:D1:88:CF:24:9B:FC:D6:9D:4F:14:1E:18:A1:B8:64:00:BA:AF X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:cd:b2:a0:ea:8b:9c:c2:25:7c:c7:c3:dd:d2:1b:e5:7d:24: 32:7d:ca:5e:0e:8c:f2:9a:cd:a8:16:4f:52:3a:90:f3:d9:12: 20:da:c9:13:48:45:ba:1c:cc:bd:74:43:59:70:42:78:0d:b8: 51:c1:8f:7c:fd:c5:20:83:c5:2f:a4:6e:1d:39:17:f2:d6:0d: 8b:3a:0b:ca:23:f2:b3:10:c9:d0:f3:91:b8:ac:54:fb:62:eb: 90:c2:df:a1:27:39:87:d9:da:71:bc:cc:e9:3a:7d:c6:03:19: 24:33:25:10:f8:7b:66:b0:08:62:0f:16:36:ff:3f:a3:11:bc: 83:df:38:52:d5:83:27:c4:b2:8d:f8:85:0b:0e:bd:b8:5d:ae: f0:fc:53:55:fc:40:7c:5a:b8:b8:32:68:61:59:9c:fa:b8:86: 7e:04:dd:84:af:4b:4d:1e:ae:51:6e:bb:b0:cb:81:45:f9:67: 02:2d:3f:f2:88:45:d5:9b:10:0d:3f:f9:5b:02:ac:96:de:51: d6:cf:23:26:17:07:89:02:0f:ed:4b:ed:51:27:3d:e6:96:a7: e7:e9:a7:58:f1:ac:b6:dd:10:87:78:e4:2b:6f:2c:8a:09:9b: 12:d7:96:57:04:b6:96:70:2d:43:f2:91:d0:82:77:a7:ae:88: f3:30:78:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWXK1kxNibo/RbmIt+YD4HoZOj6UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNjAzMDYxNTM1NTFaFw0yNjAzMDkxODEzNTFaMDMxMTAvBgNV BAMTKDMxOTVEMTg4Q0YyNDlCRkNENjlENEYxNDFFMThBMUI4NjQwMEJBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sZ+IzsGJBJlvyc1cj9dWm4p8 zUzGyXNL2gvLAMF5xWPn+zurZXl7QKf0Fch0trV0jIx9l7X7QnTpicn1gGk+AroY e5G0VeRs61Nx7Fq9Ruq31LTpp933Oszg9J1hd4M3YFZ9+AibMCfU9Xj7Thk7DRDy jl5vO1UhAQ8D20RxbVLVWmooJauNmYYdjtU2/e0+LWf+/KgIaNN5XVfFsvyP4bDB P6XJJiVyhXkbfqhFJAxKNPTuIKK2FhhE4G89cWV83r4h8KB2IaoYBwcyGKFnWhhC bhxWaipLgaiDcoCFVKN3J5ptdXpsRjXuYyLHlq41iGhs4inUYdtRP/bF41T1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMZXRiM8km/zWnU8UHhihuGQAuq8wHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLNsqDqi5zCJXzHw93SG+V9JDJ9yl4OjPKa zagWT1I6kPPZEiDayRNIRboczL10Q1lwQngNuFHBj3z9xSCDxS+kbh05F/LWDYs6 C8oj8rMQydDzkbisVPti65DC36EnOYfZ2nG8zOk6fcYDGSQzJRD4e2awCGIPFjb/ P6MRvIPfOFLVgyfEso34hQsOvbhdrvD8U1X8QHxauLgyaGFZnPq4hn4E3YSvS00e rlFuu7DLgUX5ZwItP/KIRdWbEA0/+VsCrJbeUdbPIyYXB4kCD+1L7VEnPeaWp+fp p1jxrLbdEId45CtvLIoJmxLXllcEtpZwLUPykdCCd6euiPMweIc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client