$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json) Hash identifier: p9IJ5aqqxKU7NrYRMUPPgGJwVd12hf/yKbB12RCFlIg= Subject key identifier: 77:64:AD:96:08:76:D0:D6:BD:AB:F5:6A:D6:D0:8E:5C:22:C4:54:E9 Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE Certificate serial: 2A1A444ABD8C9EF6CE572364C67E710DA8CF43A8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft Manifest number: 021E Signing time: Mon 02 Mar 2026 01:02:00 +0000 Manifest this update: Mon 02 Mar 2026 00:57:00 +0000 Manifest next update: Thu 05 Mar 2026 06:49:00 +0000 Files and hashes: 1: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: XMfcxb2cyU/BTawAea91z/0xjspg0vqpK5L29ZTTMeY=) 2: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: JbD8g7eilGZH9mtfvV1ufD5ErbP1J2B0eQBPr/CdzyY=) 3: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: PrqwHi6VDGsbOfGzpQVys1jP9vQnIVrI8cB9N7l7cwc=) 4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: pDyawm8Ut1xJC/Kb1Iiv+fIq9ylWhbkOkOXsv+y8R04=) 5: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: tMxmqnyNs+AqUZmzCKA8ba+dMpF5PucwNl1kbWxh19Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:1a:44:4a:bd:8c:9e:f6:ce:57:23:64:c6:7e:71:0d:a8:cf:43:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE Validity Not Before: Mar 2 00:57:00 2026 GMT Not After : Mar 5 06:49:00 2026 GMT Subject: CN=7764AD960876D0D6BDABF56AD6D08E5C22C454E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:fb:4f:98:14:b8:0e:50:ac:4f:a7:f4:63:df: bf:14:aa:1b:a8:b8:c2:28:b5:56:f6:d8:29:c2:e9: 5b:a7:24:28:8b:c6:a2:e5:2b:83:6e:f0:72:db:c0: f9:04:d2:a0:43:ec:0d:e9:0a:d5:80:81:18:93:a7: 22:2c:b3:91:66:83:21:c6:98:e3:f9:a6:f8:b5:f9: 74:b7:14:2c:3f:51:39:1c:32:07:d5:d4:5a:a2:6e: 27:56:20:75:11:7b:49:c9:5a:a9:c4:76:20:c2:1f: 8e:ef:2d:58:94:8a:66:4a:94:33:82:bd:14:1b:08: ac:dd:9f:83:dd:28:f0:5f:f5:16:fd:98:95:2f:ee: 65:49:1f:9d:b2:db:5d:f6:18:f8:c4:fc:b5:86:0a: 6c:b2:49:86:7d:f0:34:13:96:e7:38:3d:a3:ba:1e: 93:3e:db:cb:56:66:29:36:d5:bd:32:c0:b7:3b:97: 52:93:0a:78:d6:53:6d:a9:6e:69:f1:32:cf:78:a4: 09:72:41:8f:58:da:55:99:59:b7:77:e3:ac:d9:bc: 39:55:2d:51:7f:73:55:7a:ee:a9:1b:51:e8:56:ce: 1e:8e:11:f1:a9:aa:53:9e:97:30:19:26:75:c6:fe: 23:7a:19:44:e9:6e:28:34:3a:e8:18:e1:21:13:b7: e7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:64:AD:96:08:76:D0:D6:BD:AB:F5:6A:D6:D0:8E:5C:22:C4:54:E9 X509v3 Authority Key Identifier: keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:23:e0:92:44:01:fd:1e:b0:6d:51:7b:1d:99:b0:8b:f7:37: 29:63:07:ad:4a:ef:f4:22:49:9c:db:7a:b5:e6:aa:68:86:28: 6a:36:6d:8e:85:10:16:dc:28:68:63:6b:9a:85:d7:2e:d3:37: 98:a7:ef:6b:88:1d:c1:96:d6:1a:2f:4e:49:a4:3d:d8:cc:5a: 18:ab:50:32:de:16:3d:dc:e4:a0:c8:cc:54:70:2c:ba:18:85: 4a:64:0c:30:4f:59:25:ab:1a:2b:33:6d:f9:e9:94:54:a2:39: e4:60:84:44:b8:e6:5f:7f:63:f7:31:fe:be:63:b9:0b:7c:31: eb:45:1e:30:61:75:fc:e5:88:2e:d6:78:85:53:93:2f:d3:98: 0c:75:72:06:ca:2a:94:38:57:67:ce:fc:df:09:94:79:d1:29: b5:d4:bb:b9:f1:03:e1:ca:57:5b:f2:a2:e1:2b:11:eb:e4:ab: f7:f9:99:61:bd:f2:d9:45:a2:51:bc:6d:41:cf:30:bf:51:a1: 97:d5:38:45:f8:f3:ca:db:6b:15:fd:6e:12:07:d3:56:74:af: a8:9a:bc:84:71:68:6d:59:93:52:aa:13:54:9d:52:41:fc:71: 3b:3d:5f:de:26:73:0d:6b:f0:f8:32:05:6a:5a:27:7b:df:78: a9:a8:b5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhpESr2MnvbOVyNkxn5xDajPQ6gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD RTY5MjhGRTAeFw0yNjAzMDIwMDU3MDBaFw0yNjAzMDUwNjQ5MDBaMDMxMTAvBgNV BAMTKDc3NjRBRDk2MDg3NkQwRDZCREFCRjU2QUQ2RDA4RTVDMjJDNDU0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa+0+YFLgOUKxPp/Rj378Uqhuo uMIotVb22CnC6VunJCiLxqLlK4Nu8HLbwPkE0qBD7A3pCtWAgRiTpyIss5FmgyHG mOP5pvi1+XS3FCw/UTkcMgfV1FqibidWIHURe0nJWqnEdiDCH47vLViUimZKlDOC vRQbCKzdn4PdKPBf9Rb9mJUv7mVJH52y2132GPjE/LWGCmyySYZ98DQTluc4PaO6 HpM+28tWZik21b0ywLc7l1KTCnjWU22pbmnxMs94pAlyQY9Y2lWZWbd346zZvDlV LVF/c1V67qkbUehWzh6OEfGpqlOelzAZJnXG/iN6GUTpbig0OugY4SETt+cRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd2Stlgh20Na9q/Vq1tCOXCLEVOkwHwYDVR0j BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5 QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5 MjhGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3 N0VDRTY5MjhGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAoj4JJEAf0esG1Rex2ZsIv3NyljB61K7/Qi SZzberXmqmiGKGo2bY6FEBbcKGhja5qF1y7TN5in72uIHcGW1hovTkmkPdjMWhir UDLeFj3c5KDIzFRwLLoYhUpkDDBPWSWrGiszbfnplFSiOeRghES45l9/Y/cx/r5j uQt8MetFHjBhdfzliC7WeIVTky/TmAx1cgbKKpQ4V2fO/N8JlHnRKbXUu7nxA+HK V1vyouErEevkq/f5mWG98tlFolG8bUHPML9RoZfVOEX488rbaxX9bhIH01Z0r6ia vIRxaG1Zk1KqE1SdUkH8cTs9X94mcw1r8PgyBWpaJ3vfeKmotSE= -----END CERTIFICATE-----Generated at Mon Mar 2 19:08:34 2026 by rpki-client