$ rpki-client -vvf repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft File: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft (raw, json) Hash identifier: vt3xhXj952eYPxHqLScUWGM226k9CzmT/zo2xxY7k+Y= Subject key identifier: 05:E3:61:01:72:BA:FD:47:AA:3C:80:67:18:FC:45:4C:B8:6D:DC:5F Authority key identifier: 7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 Certificate issuer: /CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Certificate serial: 149F6EBA9143726544938985607C4A5DCB9C2905 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft Manifest number: 01AA Signing time: Sat 28 Feb 2026 17:22:37 +0000 Manifest this update: Sat 28 Feb 2026 17:17:37 +0000 Manifest next update: Tue 03 Mar 2026 17:52:37 +0000 Files and hashes: 1: 7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl (hash: MzpPnhpmNR45N3jGC8ckr5L90LEjTHj/6lPltl3UQ0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:52:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:9f:6e:ba:91:43:72:65:44:93:89:85:60:7c:4a:5d:cb:9c:29:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA308A66EF705BEE42CA04631A0E3901DAF88D8 Validity Not Before: Feb 28 17:17:37 2026 GMT Not After : Mar 3 17:52:37 2026 GMT Subject: CN=05E3610172BAFD47AA3C806718FC454CB86DDC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:4d:51:cd:aa:a3:5a:47:18:99:a3:e4:98:4d: a8:20:2a:ac:f2:3e:a8:a7:ce:2d:8a:ca:4f:2e:e9: 63:cf:fc:31:8b:a7:39:fd:c2:2c:01:0b:5c:ba:2e: 30:b1:76:02:e2:88:6a:f2:2f:1f:dc:25:cb:10:d3: 59:68:a4:0b:44:8d:c8:e6:db:69:82:6a:80:a1:63: df:9e:11:20:71:5d:06:2f:82:cd:71:ef:99:ab:0f: e6:a2:9f:04:92:7d:f7:39:b0:28:10:a8:3a:11:7a: 0d:7f:f5:7c:f8:8e:85:aa:be:17:81:81:c5:20:f9: 09:e2:d6:d9:29:2a:b0:b0:6b:d3:04:e5:aa:98:9c: b4:aa:93:b6:64:d8:c2:ec:19:a9:27:14:27:1f:92: e8:ca:f3:f0:71:bf:e6:ac:fd:8d:72:e4:55:91:90: 64:5d:5e:82:82:ec:a4:2a:6b:23:29:9c:c2:7e:01: 12:c8:6a:6e:57:e6:a1:23:2f:ec:05:48:6b:22:87: 9a:82:5e:38:6c:e5:2b:cc:3d:a9:f2:82:c5:30:f8: 0c:21:b6:0b:ab:d8:64:26:65:8d:d3:d4:f0:38:33: 6f:8c:86:69:24:b9:29:26:5d:27:50:61:77:66:cd: a3:0f:4d:32:de:14:a9:eb:ec:83:d9:58:91:38:2a: 92:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:E3:61:01:72:BA:FD:47:AA:3C:80:67:18:FC:45:4C:B8:6D:DC:5F X509v3 Authority Key Identifier: keyid:7D:A3:08:A6:6E:F7:05:BE:E4:2C:A0:46:31:A0:E3:90:1D:AF:88:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0fb5ff37-394a-4eba-a470-10af37cf75dc/0/7DA308A66EF705BEE42CA04631A0E3901DAF88D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:97:f5:fb:11:08:49:e0:40:de:48:50:18:5b:62:f3:a1:41: 8c:a5:85:7d:5a:d3:12:85:ea:9c:ad:40:ed:29:69:26:71:75: 4e:70:3a:3e:48:65:b9:91:13:5b:0b:17:bd:73:8c:6d:96:a1: 5a:c4:8c:cf:ac:71:6c:b1:7f:7c:73:c2:19:e5:0b:25:17:7c: a8:74:f2:b1:f9:37:10:65:2c:c1:66:26:20:49:cb:0b:44:5a: a1:6d:b0:34:62:97:78:8e:73:4e:d8:94:89:22:c8:2f:13:7a: b5:a5:55:b6:7a:31:53:5c:bf:52:b0:ae:d0:3c:c9:2c:ed:b5: 73:29:90:4a:43:87:b6:3d:ff:c9:b4:60:7f:49:2b:60:fa:d0: 94:cf:36:4b:7a:1a:28:26:75:4b:fb:4d:15:e2:b2:9e:e3:fe: cd:93:87:06:79:44:88:a9:37:d1:65:ed:71:d6:43:cb:4e:1d: 92:4e:60:34:61:60:db:8a:a0:6a:f6:51:ff:b7:a6:a7:68:ad: 06:73:b4:47:ba:b6:38:87:dc:ef:4d:60:3d:08:07:bc:fe:26: fe:d7:92:12:79:2d:e7:b6:7d:59:56:87:5e:ef:14:62:ab:55: 29:b7:e3:b5:7c:55:a1:d9:45:02:5a:44:17:93:49:8d:f8:0d: 0f:be:46:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFJ9uupFDcmVEk4mFYHxKXcucKQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAx REFGODhEODAeFw0yNjAyMjgxNzE3MzdaFw0yNjAzMDMxNzUyMzdaMDMxMTAvBgNV BAMTKDA1RTM2MTAxNzJCQUZENDdBQTNDODA2NzE4RkM0NTRDQjg2RERDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBTVHNqqNaRxiZo+SYTaggKqzy Pqinzi2Kyk8u6WPP/DGLpzn9wiwBC1y6LjCxdgLiiGryLx/cJcsQ01lopAtEjcjm 22mCaoChY9+eESBxXQYvgs1x75mrD+ainwSSffc5sCgQqDoReg1/9Xz4joWqvheB gcUg+Qni1tkpKrCwa9ME5aqYnLSqk7Zk2MLsGaknFCcfkujK8/Bxv+as/Y1y5FWR kGRdXoKC7KQqayMpnMJ+ARLIam5X5qEjL+wFSGsih5qCXjhs5SvMPanygsUw+Awh tgur2GQmZY3T1PA4M2+MhmkkuSkmXSdQYXdmzaMPTTLeFKnr7IPZWJE4KpK9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBeNhAXK6/UeqPIBnGPxFTLht3F8wHwYDVR0j BBgwFoAUfaMIpm73Bb7kLKBGMaDjkB2viNgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZmI1ZmYzNy0zOTRhLTRlYmEtYTQ3MC0xMGFmMzdjZjc1ZGMvMC83REEzMDhBNjZF RjcwNUJFRTQyQ0EwNDYzMUEwRTM5MDFEQUY4OEQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUzOTAxREFG ODhEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGZiNWZmMzctMzk0YS00ZWJhLWE0 NzAtMTBhZjM3Y2Y3NWRjLzAvN0RBMzA4QTY2RUY3MDVCRUU0MkNBMDQ2MzFBMEUz OTAxREFGODhEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACCX9fsRCEngQN5IUBhbYvOhQYylhX1a0xKF 6pytQO0paSZxdU5wOj5IZbmRE1sLF71zjG2WoVrEjM+scWyxf3xzwhnlCyUXfKh0 8rH5NxBlLMFmJiBJywtEWqFtsDRil3iOc07YlIkiyC8TerWlVbZ6MVNcv1KwrtA8 ySzttXMpkEpDh7Y9/8m0YH9JK2D60JTPNkt6GigmdUv7TRXisp7j/s2ThwZ5RIip N9Fl7XHWQ8tOHZJOYDRhYNuKoGr2Uf+3pqdorQZztEe6tjiH3O9NYD0IB7z+Jv7X khJ5Lee2fVlWh17vFGKrVSm347V8VaHZRQJaRBeTSY34DQ++RhY= -----END CERTIFICATE-----Generated at Mon Mar 2 07:47:03 2026 by rpki-client