$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: XmqZmmbRJldJpoUQ790PN37YVkKoHiOw1TXlC8LghMk= Subject key identifier: 8B:77:AB:93:E4:6C:23:D1:45:98:5B:BB:19:9F:D3:37:51:85:8C:4F Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 09408DA486B0660E7A2EFD09BAA6EA2E9F0CA649 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 0518 Signing time: Fri 27 Feb 2026 22:41:44 +0000 Manifest this update: Fri 27 Feb 2026 22:36:44 +0000 Manifest next update: Tue 03 Mar 2026 09:02:44 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: Q8AiVS513YZaJstY9RUzjxicepMe2vYlP+usoxO41hE=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FLALrXW88OdyfJgNAdKbgu+otxNBlGdrwAiQnaIoTaE=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: TyTiSrDtoGf6yxFjrplTS2QqYDHuH/EafxRIvX9o0Z4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:40:8d:a4:86:b0:66:0e:7a:2e:fd:09:ba:a6:ea:2e:9f:0c:a6:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Feb 27 22:36:44 2026 GMT Not After : Mar 3 09:02:44 2026 GMT Subject: CN=8B77AB93E46C23D145985BBB199FD33751858C4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:fc:42:16:8d:0b:4a:a0:d9:93:8c:df:c2:9b: 4a:a8:14:46:af:b1:e8:f0:13:a7:b4:54:6f:2b:ca: a6:b9:e4:64:0a:c7:c3:76:47:b7:19:9a:a9:03:23: 02:4f:15:b3:16:d0:01:89:ce:a6:bf:5f:90:8d:51: e6:e2:92:a2:af:75:df:a0:ee:ee:76:04:43:91:88: e3:6e:e9:89:5c:08:1e:9e:4e:96:b4:45:4c:9b:9b: 44:85:a0:a6:77:ee:67:4d:41:a2:dc:1f:ab:4a:c7: 59:b1:18:cd:ac:a7:8a:e3:73:95:8c:36:95:88:94: 3c:0a:86:11:b3:0d:66:3f:14:ca:d0:c2:2c:ea:32: 0f:b1:9a:92:1e:a2:1a:15:70:e9:38:38:72:77:88: 7d:a3:33:17:b9:1f:16:bc:ca:77:15:19:70:0f:64: 06:ed:31:c4:9e:12:31:14:b3:b8:b6:42:9a:12:aa: ab:1c:55:a1:72:c8:f0:40:69:cf:83:be:72:03:c2: 97:b9:b8:ca:ce:19:b1:db:36:5b:51:7f:8d:67:78: c8:11:aa:e8:05:95:ab:d3:54:34:b9:b2:9b:d7:9d: 8a:62:2f:74:9f:a8:1d:04:1d:ad:f3:b5:48:b7:08: 1e:6d:0b:25:6d:1c:64:5c:e3:80:ae:0b:41:ec:fe: b5:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:77:AB:93:E4:6C:23:D1:45:98:5B:BB:19:9F:D3:37:51:85:8C:4F X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ae:7c:1a:9a:99:cb:d4:05:a3:44:b7:81:94:db:9b:e5:a9: d2:ae:5f:11:a8:9b:33:d9:b7:b0:8e:e8:3d:2b:da:4c:dc:6f: 1f:2c:97:23:fe:6d:cb:ac:14:80:88:c5:79:a0:ff:79:bc:3c: 44:33:47:fa:7b:f2:43:09:ff:f9:e7:11:b0:b8:69:6b:6b:c0: 18:fc:bf:87:19:b3:7d:b4:e9:2e:f0:c9:22:3d:30:05:66:5b: f7:c9:cd:01:30:1b:cb:19:3f:a0:fa:f6:c8:54:da:a8:ef:94: 91:ee:69:5e:08:52:24:65:ce:5d:e1:d2:67:24:fb:05:46:af: b7:07:39:b3:34:10:9f:32:eb:46:9b:11:a3:a3:be:d6:d1:ab: 0f:53:8f:b7:98:de:f6:e9:e7:ef:cd:58:07:f4:6c:3f:6e:d2: 00:8f:c7:75:b4:f9:0c:66:9a:78:dc:12:ed:34:c0:b4:c3:6f: 8b:f6:c0:67:05:6c:ef:58:a3:0c:f0:8e:e4:87:0f:84:16:e7: 3c:9e:50:01:21:92:9b:bc:93:6f:65:3a:d3:d7:e7:7f:dc:1e: d0:80:7f:a4:9b:ad:38:34:28:aa:83:f8:2c:c9:a7:d8:eb:f5: 2b:cb:e2:5d:fe:33:e3:da:41:7e:ed:9a:b8:82:58:48:d6:1b: 3e:a6:bf:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCUCNpIawZg56Lv0JuqbqLp8MpkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNjAyMjcyMjM2NDRaFw0yNjAzMDMwOTAyNDRaMDMxMTAvBgNV BAMTKDhCNzdBQjkzRTQ2QzIzRDE0NTk4NUJCQjE5OUZEMzM3NTE4NThDNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDy/EIWjQtKoNmTjN/Cm0qoFEav sejwE6e0VG8ryqa55GQKx8N2R7cZmqkDIwJPFbMW0AGJzqa/X5CNUebikqKvdd+g 7u52BEORiONu6YlcCB6eTpa0RUybm0SFoKZ37mdNQaLcH6tKx1mxGM2sp4rjc5WM NpWIlDwKhhGzDWY/FMrQwizqMg+xmpIeohoVcOk4OHJ3iH2jMxe5Hxa8yncVGXAP ZAbtMcSeEjEUs7i2QpoSqqscVaFyyPBAac+DvnIDwpe5uMrOGbHbNltRf41neMgR qugFlavTVDS5spvXnYpiL3SfqB0EHa3ztUi3CB5tCyVtHGRc44CuC0Hs/rU7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3erk+RsI9FFmFu7GZ/TN1GFjE8wHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaufBqamcvUBaNEt4GU25vlqdKuXxGomzPZ t7CO6D0r2kzcbx8slyP+bcusFICIxXmg/3m8PEQzR/p78kMJ//nnEbC4aWtrwBj8 v4cZs3206S7wySI9MAVmW/fJzQEwG8sZP6D69shU2qjvlJHuaV4IUiRlzl3h0mck +wVGr7cHObM0EJ8y60abEaOjvtbRqw9Tj7eY3vbp5+/NWAf0bD9u0gCPx3W0+Qxm mnjcEu00wLTDb4v2wGcFbO9YowzwjuSHD4QW5zyeUAEhkpu8k29lOtPX53/cHtCA f6SbrTg0KKqD+CzJp9jr9SvL4l3+M+PaQX7tmriCWEjWGz6mvzQ= -----END CERTIFICATE-----Generated at Mon Mar 2 08:20:07 2026 by rpki-client