$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: ma3DLJWyvuthRFoXQ0YGjWJva38IPTNd9oG4YyRob0c= Subject key identifier: FD:40:0D:C1:A8:24:3A:52:7F:68:BF:22:A8:31:C4:EE:DB:F1:18:DA Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 6074E5B9A4DA3EFE532FC664FC228FA8259BDD03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: EA Signing time: Mon 02 Mar 2026 03:51:16 +0000 Manifest this update: Mon 02 Mar 2026 03:46:16 +0000 Manifest next update: Thu 05 Mar 2026 06:15:16 +0000 Files and hashes: 1: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: xgkP9hSfvo3eWixYxhPgTJ2xHP5NOPICnrOmxdlnf0w=) 2: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: XdvAlT7dYr0rIgwIFapXg1zX6SWW1AjtQQfUFNhrdwk=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: sRSgraKTbogwmlFJOr2rlVY3cH4E6yWnajOsmbqDWIQ=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: vCfsiCBtIlOugg7uUiCY5W27DPGj57q2k0yd5yu2I5s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:74:e5:b9:a4:da:3e:fe:53:2f:c6:64:fc:22:8f:a8:25:9b:dd:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Mar 2 03:46:16 2026 GMT Not After : Mar 5 06:15:16 2026 GMT Subject: CN=FD400DC1A8243A527F68BF22A831C4EEDBF118DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:32:de:39:21:9a:8f:e7:e6:00:81:ba:5c:77: 6c:7e:71:e9:9f:bd:bf:05:07:fd:74:76:df:2f:ea: 86:34:61:74:2b:22:6d:d3:b2:a7:4c:cd:c2:f0:33: 1f:de:bd:f9:69:9a:b9:dd:8c:d8:07:38:75:42:3f: c3:f8:00:5f:3c:f4:1d:ca:8b:58:7e:43:a4:22:34: 56:0f:e2:99:b8:a0:ea:9c:db:6a:1e:11:fb:f2:81: 45:58:53:29:8f:63:04:be:1f:47:50:9c:03:20:24: 49:c8:7c:c8:29:49:9c:23:7e:94:a1:5b:00:69:eb: ee:bb:ca:a8:fe:16:ab:95:20:02:d3:8f:ff:89:1d: f7:e3:5e:13:fb:da:44:7a:73:29:d2:d6:07:77:31: bf:39:4a:5a:ee:b0:3b:ce:e5:d1:da:5c:13:03:c3: f8:aa:fa:a1:f1:9d:6d:a0:d6:2c:7b:c4:89:2d:02: a1:f4:18:62:3a:f3:80:03:cb:05:a5:42:dc:80:a8: 44:14:e2:69:87:a2:21:0b:f4:8a:55:a1:03:9b:58: 3e:dc:f6:8c:ce:8c:19:a7:f0:43:f7:f1:84:af:d5: ac:2b:96:91:a8:de:85:64:d6:5d:84:07:42:37:da: f8:9e:a6:9f:3d:6f:45:1e:c7:dd:e9:6a:fc:f6:c7: a7:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:40:0D:C1:A8:24:3A:52:7F:68:BF:22:A8:31:C4:EE:DB:F1:18:DA X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c9:bb:a7:04:92:42:c8:a8:99:4c:f4:1d:07:d9:e9:c2:96: 66:05:c1:d4:c6:ce:55:1a:6f:e1:1a:05:55:96:6c:a1:4d:70: 22:60:74:47:50:2e:03:59:c2:dc:d0:65:b2:49:1c:64:16:ac: ea:8c:d6:57:87:42:3b:96:d8:61:0f:af:e3:21:a4:d2:d3:58: 18:b5:b5:ca:8f:57:3c:24:2d:f3:a2:3a:f7:40:77:89:ad:18: 12:57:57:e5:bf:12:03:eb:da:77:2f:39:a6:86:9a:f3:c0:3f: 1b:be:54:73:32:ca:78:f9:d7:96:c1:60:fb:9e:62:1d:7c:a4: 9c:2e:f1:4a:3f:c3:9d:99:af:e9:19:f5:ba:ca:6a:ba:fa:09: 58:79:ef:e0:dc:aa:b0:57:4c:9d:e3:8b:88:79:29:30:96:e7: 1a:57:3b:e3:a1:2f:0b:9b:b2:14:e5:6f:49:e7:d4:7b:a3:aa: 3b:b3:43:74:c9:52:15:a0:e4:2c:39:99:29:a0:a5:8a:6d:0a: a9:35:e1:f3:77:2c:94:87:dd:bf:6b:f9:3e:82:70:82:81:94: 1b:12:73:28:d8:5b:fc:f9:30:3e:ef:ca:6b:1c:fa:5f:94:27: 83:d5:c2:86:1a:e6:68:6a:11:13:cc:2c:15:ab:ca:a4:4a:f8: 65:1c:ca:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYHTluaTaPv5TL8Zk/CKPqCWb3QMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNjAzMDIwMzQ2MTZaFw0yNjAzMDUwNjE1MTZaMDMxMTAvBgNV BAMTKEZENDAwREMxQTgyNDNBNTI3RjY4QkYyMkE4MzFDNEVFREJGMTE4REEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvMt45IZqP5+YAgbpcd2x+cemf vb8FB/10dt8v6oY0YXQrIm3TsqdMzcLwMx/evflpmrndjNgHOHVCP8P4AF889B3K i1h+Q6QiNFYP4pm4oOqc22oeEfvygUVYUymPYwS+H0dQnAMgJEnIfMgpSZwjfpSh WwBp6+67yqj+FquVIALTj/+JHffjXhP72kR6cynS1gd3Mb85SlrusDvO5dHaXBMD w/iq+qHxnW2g1ix7xIktAqH0GGI684ADywWlQtyAqEQU4mmHoiEL9IpVoQObWD7c 9ozOjBmn8EP38YSv1awrlpGo3oVk1l2EB0I32viepp89b0Uex93pavz2x6dfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/UANwagkOlJ/aL8iqDHE7tvxGNowHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbJu6cEkkLIqJlM9B0H2enClmYFwdTGzlUa b+EaBVWWbKFNcCJgdEdQLgNZwtzQZbJJHGQWrOqM1leHQjuW2GEPr+MhpNLTWBi1 tcqPVzwkLfOiOvdAd4mtGBJXV+W/EgPr2ncvOaaGmvPAPxu+VHMyynj515bBYPue Yh18pJwu8Uo/w52Zr+kZ9brKarr6CVh57+DcqrBXTJ3ji4h5KTCW5xpXO+OhLwub shTlb0nn1HujqjuzQ3TJUhWg5Cw5mSmgpYptCqk14fN3LJSH3b9r+T6CcIKBlBsS cyjYW/z5MD7vymsc+l+UJ4PVwoYa5mhqERPMLBWryqRK+GUcyt4= -----END CERTIFICATE-----Generated at Mon Mar 2 13:26:37 2026 by rpki-client