$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: 3v98KUXDub+clLTuaOQTckDj7vzIb7PBa9bPdIB8n9E= Subject key identifier: 7B:B3:4D:DD:E2:65:B2:AB:3C:4E:16:F7:D5:89:28:7D:C9:8D:C6:A6 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 713D0BA22535C82DB803BAA61F4F6B39118998A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 0237 Signing time: Sat 28 Feb 2026 02:11:50 +0000 Manifest this update: Sat 28 Feb 2026 02:06:50 +0000 Manifest next update: Tue 03 Mar 2026 12:58:50 +0000 Files and hashes: 1: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: JYcpL65ET1AYs/cvL4MaiSPFIZ0l/zjJCYA4TcVUdoI=) 2: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: b6fruH9Pkg0tQtl5YFYqPR73UwekDQbIDYYtyH1Ta2c=) 3: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) 4: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: NXprsMe2/WNzu5mYRMy4RWXWHIky8681oQg8vwfZ9nk=) 5: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: V1d1AQKh658wUjsgrRqAYJfqVQCWP+2WeR6WY873spI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:58:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:3d:0b:a2:25:35:c8:2d:b8:03:ba:a6:1f:4f:6b:39:11:89:98:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Feb 28 02:06:50 2026 GMT Not After : Mar 3 12:58:50 2026 GMT Subject: CN=7BB34DDDE265B2AB3C4E16F7D589287DC98DC6A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a9:cc:06:64:fb:73:87:b6:93:2a:f3:50:26: bf:8c:70:e0:fd:e2:ab:85:05:f7:9b:6c:d1:00:04: 75:b8:b1:94:19:78:47:1c:ac:ee:54:46:9a:6a:9f: 2b:d8:cd:2d:1e:39:34:96:0a:06:73:94:74:c0:54: 2b:3e:0a:8a:9f:44:83:fd:4e:f5:b5:20:31:30:63: a1:53:a7:9c:7d:4d:27:f5:76:48:96:ab:2a:3b:ba: 86:be:47:98:36:f2:4f:99:49:dc:c4:41:77:54:eb: 98:14:4a:96:66:36:2d:1c:2e:e2:26:7d:30:15:b1: 4f:25:94:1f:04:0d:6e:60:58:02:94:f8:47:a1:75: ab:71:69:d7:a0:ea:b8:6b:46:8d:8b:16:09:46:47: 67:7d:8a:1d:24:6b:26:9d:ff:c6:e7:dd:fc:37:16: 4a:64:fe:f2:1f:9d:3d:55:e2:52:77:80:75:af:c0: ec:ad:32:cc:fa:11:72:37:6f:18:b3:88:69:fe:d8: a5:0c:f0:c6:a0:ec:86:16:52:9b:ee:08:cd:79:2f: 56:14:bd:1b:ed:5f:00:6c:7c:a5:07:0c:46:05:4a: 5a:51:2c:64:ea:e2:a1:c6:79:70:27:52:02:03:4f: 6a:7f:9d:65:85:91:5d:d2:f2:65:55:a5:fa:73:cb: 17:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:B3:4D:DD:E2:65:B2:AB:3C:4E:16:F7:D5:89:28:7D:C9:8D:C6:A6 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:7c:e5:76:51:fb:57:75:15:60:ba:0c:86:21:cc:17:d7:d6: 9e:5b:35:ca:fc:5b:46:54:60:ec:ea:1c:f1:33:98:54:23:58: af:fd:e1:e2:eb:08:09:cd:35:71:c0:8a:70:b1:37:60:f3:c5: 5e:17:f3:6b:14:4c:f9:6c:63:be:ef:3f:9b:4e:7b:23:38:d9: f0:52:ac:ea:10:8e:ce:80:f3:55:e3:a7:40:ff:ab:1c:3a:e4: 77:e5:66:9f:48:83:33:4f:a8:af:7a:89:b9:4d:15:5f:f9:0a: 2a:0e:11:fa:6d:5d:37:a9:88:03:df:dc:8c:40:f3:74:37:dc: bb:59:26:13:0f:2a:72:49:3d:cd:2c:fe:15:3a:67:14:6c:2e: c6:8c:77:bd:71:d4:15:07:fe:e4:e3:9b:38:f6:37:11:86:28: 6e:ac:aa:e1:db:09:88:fe:a9:46:28:c1:64:9e:a4:7f:12:05: fb:52:25:d9:21:c3:d9:3e:63:f4:5e:b8:b0:af:c1:62:e5:74: 61:16:f1:47:93:c0:81:b2:52:4f:3e:77:09:e1:33:47:47:59: aa:ca:57:40:d4:5c:e5:a6:0f:3d:f5:8a:f7:7b:6f:ee:da:29: 35:a6:eb:8a:d4:a8:93:e5:0d:52:33:87:85:51:ab:51:36:57: 14:f8:f0:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcT0LoiU1yC24A7qmH09rORGJmKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNjAyMjgwMjA2NTBaFw0yNjAzMDMxMjU4NTBaMDMxMTAvBgNV BAMTKDdCQjM0RERERTI2NUIyQUIzQzRFMTZGN0Q1ODkyODdEQzk4REM2QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbqcwGZPtzh7aTKvNQJr+McOD9 4quFBfebbNEABHW4sZQZeEccrO5URppqnyvYzS0eOTSWCgZzlHTAVCs+CoqfRIP9 TvW1IDEwY6FTp5x9TSf1dkiWqyo7uoa+R5g28k+ZSdzEQXdU65gUSpZmNi0cLuIm fTAVsU8llB8EDW5gWAKU+Eehdatxadeg6rhrRo2LFglGR2d9ih0kayad/8bn3fw3 Fkpk/vIfnT1V4lJ3gHWvwOytMsz6EXI3bxiziGn+2KUM8Mag7IYWUpvuCM15L1YU vRvtXwBsfKUHDEYFSlpRLGTq4qHGeXAnUgIDT2p/nWWFkV3S8mVVpfpzyxdXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe7NN3eJlsqs8Thb31YkofcmNxqYwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMh85XZR+1d1FWC6DIYhzBfX1p5bNcr8W0ZU YOzqHPEzmFQjWK/94eLrCAnNNXHAinCxN2DzxV4X82sUTPlsY77vP5tOeyM42fBS rOoQjs6A81Xjp0D/qxw65HflZp9IgzNPqK96iblNFV/5CioOEfptXTepiAPf3IxA 83Q33LtZJhMPKnJJPc0s/hU6ZxRsLsaMd71x1BUH/uTjmzj2NxGGKG6squHbCYj+ qUYowWSepH8SBftSJdkhw9k+Y/ReuLCvwWLldGEW8UeTwIGyUk8+dwnhM0dHWarK V0DUXOWmDz31ivd7b+7aKTWm64rUqJPlDVIzh4VRq1E2VxT48Lk= -----END CERTIFICATE-----Generated at Mon Mar 2 02:51:51 2026 by rpki-client