$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json) Hash identifier: JCN+1Tjf6ZJZB1/oMB6RcO72kGk+3xlrT3kwMJfjXoc= Subject key identifier: D3:E1:24:9D:63:F1:44:03:62:35:B8:E9:EE:3D:35:25:FA:5E:8F:CC Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A Certificate serial: 0911B88182F09015653B6B2BC7F3ABDD3DAD8736 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft Manifest number: 021E Signing time: Sun 01 Mar 2026 06:01:55 +0000 Manifest this update: Sun 01 Mar 2026 05:56:55 +0000 Manifest next update: Wed 04 Mar 2026 06:27:55 +0000 Files and hashes: 1: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=) 2: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: 0vaDHJ1lnH2WJ8BlvZuumazkni4FfuvbqXrQBMpjgSA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:27:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:11:b8:81:82:f0:90:15:65:3b:6b:2b:c7:f3:ab:dd:3d:ad:87:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A Validity Not Before: Mar 1 05:56:55 2026 GMT Not After : Mar 4 06:27:55 2026 GMT Subject: CN=D3E1249D63F144036235B8E9EE3D3525FA5E8FCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:72:81:06:08:61:ff:f9:f5:dc:f5:3d:e5:45: 05:1c:8d:1e:0a:4d:74:5e:2e:7f:aa:13:e6:ac:0b: 0b:b5:f0:7c:e1:6e:21:85:c4:12:7f:e7:b1:35:fc: 69:74:18:90:d2:bf:c2:fd:fd:24:29:ba:5e:24:b7: dc:34:27:4e:b9:41:33:94:ef:22:b6:36:1f:e9:4c: 43:b4:7f:78:3e:c4:0f:57:1a:a5:99:17:5f:4e:21: 5d:38:59:a3:cc:68:ba:19:81:ae:e8:c7:a4:3e:4f: 0a:93:f1:8a:6b:ff:90:93:a0:cd:fd:0f:50:0b:a1: 31:17:8a:c1:f4:d8:52:fe:44:d9:51:6b:ae:d5:3b: 97:4e:b5:a4:75:7b:59:63:43:40:4a:d1:41:a0:1e: 2a:53:e0:fa:1f:e5:f2:38:b1:de:57:f9:6e:46:cf: 53:f0:64:49:b6:9a:4f:80:b2:03:f1:00:9c:14:90: 4b:b8:7d:61:1a:af:1e:66:38:50:ed:54:60:d6:56: 17:a4:c5:af:c7:e4:59:54:35:ba:54:7d:12:84:bd: 46:fd:a3:e4:9b:68:72:9b:c0:0a:f9:ab:db:92:12: 57:10:2c:c8:c0:cd:89:ce:c6:b9:70:0f:21:21:23: dd:45:14:40:69:60:6a:8a:d9:93:cb:bf:21:43:51: fa:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:E1:24:9D:63:F1:44:03:62:35:B8:E9:EE:3D:35:25:FA:5E:8F:CC X509v3 Authority Key Identifier: keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:75:c7:6f:b0:7b:3c:38:b3:ab:6d:b7:6a:29:f8:c8:37:7c: 2f:a4:2e:c1:a3:a5:c8:bd:ec:55:3b:fa:bd:72:ca:8a:7d:96: 6f:f1:24:75:1b:eb:13:91:57:a9:c7:81:26:6f:22:c2:77:1c: a7:00:fe:81:5b:29:e4:61:e8:8e:83:d2:bc:89:be:fb:89:5b: 61:44:b7:6c:50:65:03:8a:10:2c:4c:bb:9c:50:2f:29:58:48: dd:a7:11:71:4e:e1:27:65:1b:bf:71:51:46:d0:f3:3e:63:f7: 06:47:79:1e:d0:a5:08:75:0a:40:67:23:69:20:6e:b1:f1:21: 6d:a3:9a:64:cd:ab:56:7e:9a:e6:5b:9d:85:3a:4b:c4:67:81: 77:d4:2c:0c:97:22:22:47:6e:79:f9:09:5f:9a:3b:4d:61:22: 91:fd:b4:2a:f4:75:9a:25:fb:e4:4b:37:41:29:83:4a:5e:66: 29:b0:4b:2d:e4:1a:87:6e:28:4c:be:24:05:6e:1f:97:5c:21: f7:07:87:7d:00:da:d9:82:87:21:8d:e3:c3:9a:b8:e7:47:3b: dd:3d:29:67:7e:83:7c:c0:6a:12:e7:2c:41:73:b5:21:e5:d6: 4b:da:f8:14:1e:45:c5:95:e4:bb:e8:a3:71:15:1e:bf:2b:5b: 75:94:15:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCRG4gYLwkBVlO2srx/Or3T2thzYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD MTQ1MzE4QTAeFw0yNjAzMDEwNTU2NTVaFw0yNjAzMDQwNjI3NTVaMDMxMTAvBgNV BAMTKEQzRTEyNDlENjNGMTQ0MDM2MjM1QjhFOUVFM0QzNTI1RkE1RThGQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDecoEGCGH/+fXc9T3lRQUcjR4K TXReLn+qE+asCwu18HzhbiGFxBJ/57E1/Gl0GJDSv8L9/SQpul4kt9w0J065QTOU 7yK2Nh/pTEO0f3g+xA9XGqWZF19OIV04WaPMaLoZga7ox6Q+TwqT8Ypr/5CToM39 D1ALoTEXisH02FL+RNlRa67VO5dOtaR1e1ljQ0BK0UGgHipT4Pof5fI4sd5X+W5G z1PwZEm2mk+AsgPxAJwUkEu4fWEarx5mOFDtVGDWVhekxa/H5FlUNbpUfRKEvUb9 o+SbaHKbwAr5q9uSElcQLMjAzYnOxrlwDyEhI91FFEBpYGqK2ZPLvyFDUfqxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0+EknWPxRANiNbjp7j01Jfpej8wwHwYDVR0j BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1 MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC11x2+wezw4s6ttt2op+Mg3fC+kLsGjpci9 7FU7+r1yyop9lm/xJHUb6xORV6nHgSZvIsJ3HKcA/oFbKeRh6I6D0ryJvvuJW2FE t2xQZQOKECxMu5xQLylYSN2nEXFO4SdlG79xUUbQ8z5j9wZHeR7QpQh1CkBnI2kg brHxIW2jmmTNq1Z+muZbnYU6S8RngXfULAyXIiJHbnn5CV+aO01hIpH9tCr0dZol ++RLN0Epg0peZimwSy3kGoduKEy+JAVuH5dcIfcHh30A2tmChyGN48OauOdHO909 KWd+g3zAahLnLEFztSHl1kva+BQeRcWV5Lvoo3EVHr8rW3WUFVw= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:19 2026 by rpki-client