$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 7pIZGQGn13yCGKwnRmCT22G4m7bL5edp10isD+DqwnY= Subject key identifier: C1:33:1D:80:4A:E0:40:43:CC:39:61:C9:6E:F7:3E:35:AB:18:93:0A Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 0CC58A854381CDA4EBA1FA474AF9F5CEBD5D8260 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0277 Signing time: Sun 01 Mar 2026 10:20:03 +0000 Manifest this update: Sun 01 Mar 2026 10:15:03 +0000 Manifest next update: Wed 04 Mar 2026 13:43:03 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: cqBZE+XA1x1Ni3/pYgpZVrCjrqiyqCEsRkX59o0au3U=) 2: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: xfBxO1cpwHLH3mPIYYSSSWYs4NXVE5RlSEpIHuIsrj0=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: 3ORUUmkJ+o4nnE20LKRWQpDfQUx6WFMnIqRqb1dCAcA=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: PNalk4vA/Rkbr+Ga9Voh4gRAWTRSepvHB28AsR/h9Zs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c5:8a:85:43:81:cd:a4:eb:a1:fa:47:4a:f9:f5:ce:bd:5d:82:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Mar 1 10:15:03 2026 GMT Not After : Mar 4 13:43:03 2026 GMT Subject: CN=C1331D804AE04043CC3961C96EF73E35AB18930A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:4f:ed:9d:ce:95:64:6d:07:b3:64:5f:b5:6d: 3b:08:92:cf:c8:46:f5:36:b5:83:2e:61:2e:25:94: 0f:86:ed:dc:ca:66:58:a5:9b:d9:75:16:e5:e3:b8: e0:ec:5e:d7:96:83:7b:95:43:6d:8d:a7:bd:bf:67: f2:82:a4:cf:22:4d:e9:50:a2:75:ef:db:16:4c:9a: 87:03:ec:29:80:86:b0:b7:40:b3:d7:0f:03:c1:6b: 38:5b:75:9e:16:73:ff:07:42:7f:29:c7:1a:e0:13: b7:c9:1a:cf:1f:34:f1:04:76:2f:4e:56:69:fc:11: d8:ed:5d:20:be:f0:6c:17:a7:f8:68:04:0a:01:20: 39:a9:07:a9:30:ad:1b:c0:8c:63:00:08:17:96:1b: 87:52:0c:d4:8f:cd:07:8f:c7:b4:79:13:72:7e:29: 50:22:11:77:4b:e3:2f:b7:13:43:3c:12:a3:3a:7b: 74:93:a6:0a:94:af:dc:02:17:42:db:eb:16:e4:1a: 13:91:2d:e4:a7:96:91:b0:42:71:ca:31:b6:6c:04: d2:73:b5:4e:58:a3:0f:c3:54:17:d8:2a:89:15:aa: c7:2a:28:ce:e0:55:98:2a:50:0e:65:43:71:90:33: 21:85:8a:de:92:c5:8d:26:1e:a1:35:70:3c:46:7e: cb:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:33:1D:80:4A:E0:40:43:CC:39:61:C9:6E:F7:3E:35:AB:18:93:0A X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:d8:4c:97:f4:f5:9d:0a:80:4f:98:dd:dd:5b:24:b7:01:a6: 92:04:3f:6d:ce:11:c7:f2:12:04:dd:65:d4:ab:c4:9f:40:ac: 9f:ad:b6:92:46:ee:a7:43:03:ec:f1:24:fd:5a:41:71:4c:b5: b9:0e:02:91:05:1a:a5:df:de:b9:b6:b0:88:f9:d4:13:77:e7: 4a:3f:b9:63:cb:05:94:4a:d2:95:a5:5f:81:c5:a5:24:11:98: 72:df:53:e1:e9:fa:f5:48:52:95:7b:7e:c6:24:00:b1:0a:3d: 16:c1:39:c4:9f:0f:3f:2a:09:7e:45:4d:68:d0:32:fd:91:d7: 2a:ce:25:f6:fb:56:fe:28:fe:84:ec:7e:ed:05:67:25:d3:4c: 27:45:79:2d:75:b6:f4:5f:a5:ae:a9:7d:f6:60:1d:41:f9:32: 67:22:45:06:74:a8:58:e2:29:ce:ef:94:d5:08:e5:69:93:0b: c8:4f:c0:5a:07:0c:2b:de:0b:eb:f6:9c:f2:85:10:65:d5:ee: 27:bf:ad:b5:71:76:fc:51:77:8b:24:26:2e:f4:05:b4:01:e9: 23:48:f6:77:11:e9:06:b8:0f:57:48:8d:88:e9:d5:95:53:7d: 46:86:63:0b:4c:a5:ef:8e:b2:6d:c7:89:ad:1e:e5:ca:f3:25: 90:de:3b:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMWKhUOBzaTrofpHSvn1zr1dgmAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNjAzMDExMDE1MDNaFw0yNjAzMDQxMzQzMDNaMDMxMTAvBgNV BAMTKEMxMzMxRDgwNEFFMDQwNDNDQzM5NjFDOTZFRjczRTM1QUIxODkzMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOT+2dzpVkbQezZF+1bTsIks/I RvU2tYMuYS4llA+G7dzKZlilm9l1FuXjuODsXteWg3uVQ22Np72/Z/KCpM8iTelQ onXv2xZMmocD7CmAhrC3QLPXDwPBazhbdZ4Wc/8HQn8pxxrgE7fJGs8fNPEEdi9O Vmn8EdjtXSC+8GwXp/hoBAoBIDmpB6kwrRvAjGMACBeWG4dSDNSPzQePx7R5E3J+ KVAiEXdL4y+3E0M8EqM6e3STpgqUr9wCF0Lb6xbkGhORLeSnlpGwQnHKMbZsBNJz tU5Yow/DVBfYKokVqscqKM7gVZgqUA5lQ3GQMyGFit6SxY0mHqE1cDxGfsupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwTMdgErgQEPMOWHJbvc+NasYkwowHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADnYTJf09Z0KgE+Y3d1bJLcBppIEP23OEcfy EgTdZdSrxJ9ArJ+ttpJG7qdDA+zxJP1aQXFMtbkOApEFGqXf3rm2sIj51BN350o/ uWPLBZRK0pWlX4HFpSQRmHLfU+Hp+vVIUpV7fsYkALEKPRbBOcSfDz8qCX5FTWjQ Mv2R1yrOJfb7Vv4o/oTsfu0FZyXTTCdFeS11tvRfpa6pffZgHUH5MmciRQZ0qFji Kc7vlNUI5WmTC8hPwFoHDCveC+v2nPKFEGXV7ie/rbVxdvxRd4skJi70BbQB6SNI 9ncR6Qa4D1dIjYjp1ZVTfUaGYwtMpe+Osm3Hia0e5crzJZDeO38= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:40 2026 by rpki-client