$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: u/UAhFhqrEHVaOxEFAyOIkyHt7RtP7Tas11i3Tvu92o= Subject key identifier: C3:84:A6:1E:41:E0:0E:0B:D5:1D:0C:3D:BD:0C:E5:F2:1C:B1:E6:21 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 7E54ECDE323ACB33A19D9D49EEE237C4C63B7CE3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 0256 Signing time: Sun 01 Mar 2026 23:01:45 +0000 Manifest this update: Sun 01 Mar 2026 22:56:44 +0000 Manifest next update: Thu 05 Mar 2026 03:39:44 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: SapOMMIVothLtXId44y92PXYWgqYBrvZdRlhJ/EEALc=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: ruqE2F34CZN/5KqJhiyDZO8euZHnYhKqfwBiaFPn2lc=) 3: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: YP4OUHr99euTE6uaMKQZX/mPwh2xe6ylVlce0M8IWGQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:54:ec:de:32:3a:cb:33:a1:9d:9d:49:ee:e2:37:c4:c6:3b:7c:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Mar 1 22:56:44 2026 GMT Not After : Mar 5 03:39:44 2026 GMT Subject: CN=C384A61E41E00E0BD51D0C3DBD0CE5F21CB1E621 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4a:cf:13:af:6e:35:82:dc:8d:62:88:ce:8f: b6:75:d8:70:fc:64:df:1f:e8:eb:16:8a:3c:b9:05: 9a:b7:ab:82:92:fa:69:9a:5a:10:b1:86:bc:19:c0: a3:69:65:a5:2a:c3:41:a4:57:4c:2b:65:49:75:12: 61:a1:24:e9:29:7c:5d:6d:b3:66:f9:c4:30:86:19: 2e:ec:b0:2a:f8:ec:39:67:8c:f7:a0:a1:ce:e0:4e: f0:20:ca:3b:3d:b9:54:25:a8:2e:db:b9:6d:a4:b7: 71:fd:b7:2f:a1:57:fd:da:76:ba:04:c7:e6:1c:4d: 6d:a5:2f:66:ff:0c:69:83:bc:ef:d2:05:c1:44:30: f6:e6:20:1b:3e:5f:71:c6:5b:6d:1d:05:7c:2c:dc: 33:1d:93:bb:df:11:ac:9a:fa:54:c4:4f:59:15:f2: da:30:f3:30:e1:5c:30:42:0e:79:38:1c:52:94:3e: c1:46:ba:68:51:b9:dc:cb:49:ad:b9:ec:55:85:f6: cd:4a:c9:ec:73:7f:fd:a9:46:81:6b:83:db:bb:eb: e1:92:7c:9b:52:8e:2b:1f:06:f8:53:d4:32:b0:fa: 7a:d3:62:98:29:5a:9d:a2:14:e0:de:0d:46:d9:62: ed:0c:ab:35:95:88:47:04:a3:02:39:2c:0b:24:2e: 3a:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:84:A6:1E:41:E0:0E:0B:D5:1D:0C:3D:BD:0C:E5:F2:1C:B1:E6:21 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:03:12:e7:41:4c:cf:d9:bf:d4:39:70:4e:62:f2:2b:01:70: c6:ce:51:b0:62:da:36:16:c7:36:d7:92:78:17:bc:97:9e:f8: 74:81:be:e3:06:55:9a:b0:7c:f8:7a:8f:8a:02:c7:65:1b:35: b9:8f:58:c8:65:b1:93:97:d9:38:7b:51:58:97:38:39:27:5e: 38:b1:25:3b:ce:ef:34:9f:9a:9c:6d:cf:54:1f:4c:f6:cb:7a: 86:3d:57:b7:7e:9a:47:4c:24:cc:3a:62:05:8d:54:c6:8a:e3: 63:e0:54:a0:3e:11:0f:73:c4:b8:99:60:8d:5a:e0:7f:fe:53: 66:6c:c9:03:7b:5d:3b:56:e4:86:f1:44:75:38:3b:43:2e:79: 57:be:02:1b:5a:3d:b6:60:c8:d5:a6:82:f6:40:60:44:c9:3f: 51:7e:f9:da:12:96:61:fe:ea:59:37:14:02:1a:15:42:6a:ff: 4d:64:88:35:7e:cf:25:e0:ec:ff:47:72:c8:1d:45:7a:46:55: fb:02:90:eb:ae:2b:34:4b:89:59:68:57:19:07:13:f6:8f:b1: a1:87:5e:61:36:e6:e3:6c:bf:b0:31:2b:50:d1:e0:6a:5a:45: b7:36:56:3b:a8:2c:a9:74:52:51:5d:a3:3a:df:d0:61:2b:3f: 3c:6a:1d:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflTs3jI6yzOhnZ1J7uI3xMY7fOMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNjAzMDEyMjU2NDRaFw0yNjAzMDUwMzM5NDRaMDMxMTAvBgNV BAMTKEMzODRBNjFFNDFFMDBFMEJENTFEMEMzREJEMENFNUYyMUNCMUU2MjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGSs8Tr241gtyNYojOj7Z12HD8 ZN8f6OsWijy5BZq3q4KS+mmaWhCxhrwZwKNpZaUqw0GkV0wrZUl1EmGhJOkpfF1t s2b5xDCGGS7ssCr47DlnjPegoc7gTvAgyjs9uVQlqC7buW2kt3H9ty+hV/3adroE x+YcTW2lL2b/DGmDvO/SBcFEMPbmIBs+X3HGW20dBXws3DMdk7vfEaya+lTET1kV 8tow8zDhXDBCDnk4HFKUPsFGumhRudzLSa257FWF9s1Kyexzf/2pRoFrg9u76+GS fJtSjisfBvhT1DKw+nrTYpgpWp2iFODeDUbZYu0MqzWViEcEowI5LAskLjqhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw4SmHkHgDgvVHQw9vQzl8hyx5iEwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABMDEudBTM/Zv9Q5cE5i8isBcMbOUbBi2jYW xzbXkngXvJee+HSBvuMGVZqwfPh6j4oCx2UbNbmPWMhlsZOX2Th7UViXODknXjix JTvO7zSfmpxtz1QfTPbLeoY9V7d+mkdMJMw6YgWNVMaK42PgVKA+EQ9zxLiZYI1a 4H/+U2ZsyQN7XTtW5IbxRHU4O0MueVe+AhtaPbZgyNWmgvZAYETJP1F++doSlmH+ 6lk3FAIaFUJq/01kiDV+zyXg7P9HcsgdRXpGVfsCkOuuKzRLiVloVxkHE/aPsaGH XmE25uNsv7AxK1DR4GpaRbc2VjuoLKl0UlFdozrf0GErPzxqHVM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:42:53 2026 by rpki-client