$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: 7Xhb2m+4cl9uvkJd3FYOtRoJ+0iFx/0NhZu1oOifuDs= Subject key identifier: 90:19:8D:31:F6:83:68:42:FD:CB:57:37:F2:02:4C:96:79:E9:58:9C Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 47B2A2377D4D01D4DFFCBE4C5F6BA318BFA6891F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 0186 Signing time: Sun 01 Mar 2026 11:01:56 +0000 Manifest this update: Sun 01 Mar 2026 10:56:55 +0000 Manifest next update: Wed 04 Mar 2026 14:23:55 +0000 Files and hashes: 1: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: YEBaBxPwHlWl6QnQu+5NSGyLE1OmHb45/8fA4bnTuYI=) 2: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: AGikL5mf3R6SUcLntlNendJ/c7wVC1wVAVxWd0F74Ys=) 3: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: YOGZVl1pxBeHfHLB3kw7JsNB/ueNC1i2F+bIqbAKZQY=) 4: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: L1QXmmmYL7avongM7Z18LqYgTBveJl41ce19oTEBc90=) 5: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 0CJAWZ02vSckzRoE57ZpZjjAeFM8kHecSgDHcs3TTPQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:b2:a2:37:7d:4d:01:d4:df:fc:be:4c:5f:6b:a3:18:bf:a6:89:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: Mar 1 10:56:55 2026 GMT Not After : Mar 4 14:23:55 2026 GMT Subject: CN=90198D31F6836842FDCB5737F2024C9679E9589C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:ef:ee:5e:45:11:6a:aa:6b:2a:1e:d3:17:bd: 81:25:a6:5d:19:bd:9f:1c:45:32:56:9f:80:6e:17: 25:c9:86:3a:94:d1:cb:c8:0b:6b:1a:6f:43:27:2b: 8f:53:e0:0a:98:ff:13:be:02:6c:36:63:d4:82:07: 17:ce:c6:2c:bb:28:31:56:42:be:dc:26:37:40:c5: 38:55:ee:52:82:f5:b6:48:dd:f2:e9:a2:84:9a:42: 00:3a:f2:71:1e:65:ad:e5:3a:9b:3a:6d:bf:26:8e: 39:d9:60:a3:34:e1:12:12:1e:0c:d4:e4:67:c3:01: 6f:6c:db:9c:a5:82:72:f7:13:f8:e9:fa:a7:b2:c1: 65:b2:ee:b3:b2:16:76:86:ab:7d:81:bf:e2:db:cd: b7:9c:36:68:84:4e:53:c1:9f:c3:f7:6e:34:00:48: d2:32:4c:17:b6:4b:a1:b4:9c:dc:a8:1d:91:2f:01: ad:6f:cb:bd:9d:a7:c5:76:25:44:91:8b:f7:7b:b5: fe:6d:76:a7:36:2c:26:c9:ae:87:63:8b:e4:2b:26: 87:09:8f:64:0d:5c:8f:7b:0c:51:4b:18:8a:03:07: e3:a9:2a:ee:53:7d:bd:e9:7d:59:55:c3:b1:4d:80: 02:e4:66:f5:37:71:7d:6e:49:98:73:27:c6:af:9d: 16:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:19:8D:31:F6:83:68:42:FD:CB:57:37:F2:02:4C:96:79:E9:58:9C X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:7f:63:af:eb:2d:cf:ec:78:3f:8e:14:38:11:1e:6b:5f:41: 08:7a:93:68:df:9a:d7:4c:ae:cd:7c:52:ff:be:8c:4b:59:ec: 3c:9e:8d:26:e2:14:af:04:d4:1b:d2:f8:e7:df:68:98:eb:d2: 4c:2f:7f:94:68:a1:2a:9a:e8:57:ae:76:ab:2f:d0:79:80:f6: 2f:b7:8d:e9:6d:8b:ee:6b:65:93:e8:cb:3a:be:4b:57:56:75: d0:42:2a:55:24:86:4e:87:6a:3c:af:38:d2:e8:07:05:3d:fe: 19:0d:4e:0f:8e:c7:0d:1c:58:d5:86:d9:d8:a3:c4:25:be:35: f9:6a:e0:e7:54:a1:a1:66:9c:5d:c0:a4:31:5b:0b:ef:39:ea: 30:f8:bc:0b:9f:d0:58:d1:35:80:ff:b3:9e:4a:d1:ac:c9:84: c3:f8:b3:06:89:0d:5b:65:b9:4b:0b:13:66:55:04:04:aa:08: 51:83:52:e7:ea:33:04:34:7d:df:bb:44:fc:bb:cc:1f:e9:f7: 71:82:6f:35:c3:4f:3c:64:4e:4b:86:41:c6:fb:83:02:f7:02: f3:16:b3:a7:f8:b5:e2:53:35:ec:ed:56:89:32:b8:92:21:3c: f1:d8:b1:2a:9c:d2:e6:b4:fc:b5:c0:89:3b:57:f1:d0:f8:35: 2d:32:af:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR7KiN31NAdTf/L5MX2ujGL+miR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNjAzMDExMDU2NTVaFw0yNjAzMDQxNDIzNTVaMDMxMTAvBgNV BAMTKDkwMTk4RDMxRjY4MzY4NDJGRENCNTczN0YyMDI0Qzk2NzlFOTU4OUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR7+5eRRFqqmsqHtMXvYElpl0Z vZ8cRTJWn4BuFyXJhjqU0cvIC2sab0MnK49T4AqY/xO+Amw2Y9SCBxfOxiy7KDFW Qr7cJjdAxThV7lKC9bZI3fLpooSaQgA68nEeZa3lOps6bb8mjjnZYKM04RISHgzU 5GfDAW9s25ylgnL3E/jp+qeywWWy7rOyFnaGq32Bv+LbzbecNmiETlPBn8P3bjQA SNIyTBe2S6G0nNyoHZEvAa1vy72dp8V2JUSRi/d7tf5tdqc2LCbJrodji+QrJocJ j2QNXI97DFFLGIoDB+OpKu5Tfb3pfVlVw7FNgALkZvU3cX1uSZhzJ8avnRZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkBmNMfaDaEL9y1c38gJMlnnpWJwwHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABd/Y6/rLc/seD+OFDgRHmtfQQh6k2jfmtdM rs18Uv++jEtZ7DyejSbiFK8E1BvS+OffaJjr0kwvf5RooSqa6Feudqsv0HmA9i+3 jelti+5rZZPoyzq+S1dWddBCKlUkhk6HajyvONLoBwU9/hkNTg+Oxw0cWNWG2dij xCW+Nflq4OdUoaFmnF3ApDFbC+856jD4vAuf0FjRNYD/s55K0azJhMP4swaJDVtl uUsLE2ZVBASqCFGDUufqMwQ0fd+7RPy7zB/p93GCbzXDTzxkTkuGQcb7gwL3AvMW s6f4teJTNeztVokyuJIhPPHYsSqc0ua0/LXAiTtX8dD4NS0yr9Q= -----END CERTIFICATE-----Generated at Mon Mar 2 12:51:30 2026 by rpki-client