$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: Ua/jSB37V+iWc6nEQifXz8Vf5G/4+8ki3XM1JGSNDhY= Subject key identifier: A6:79:01:56:B6:DC:2B:25:9B:A0:ED:29:33:42:82:F9:E3:71:86:4A Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 363D81F0A2A4B4F58879E4586B5A656BDC80ED33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: CA Signing time: Sat 28 Feb 2026 05:31:05 +0000 Manifest this update: Sat 28 Feb 2026 05:26:05 +0000 Manifest next update: Tue 03 Mar 2026 06:13:05 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: ScM8Q2LMGZOkrNtPg/8PjLIyPY1b7rJ+ByzrKdDmKiU=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: K59ii8tzbVPGt8MTtE2gWSv0pBBP2Ej/ulAqZrln84M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 06:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:3d:81:f0:a2:a4:b4:f5:88:79:e4:58:6b:5a:65:6b:dc:80:ed:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Feb 28 05:26:05 2026 GMT Not After : Mar 3 06:13:05 2026 GMT Subject: CN=A6790156B6DC2B259BA0ED29334282F9E371864A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:ee:67:e6:b6:fd:c4:4a:11:0f:9e:4d:18:27: f2:67:3a:90:43:9a:2b:4c:7f:cb:aa:42:db:ad:cf: 34:25:8d:ab:3c:4c:0a:0d:b4:a7:71:18:f5:f2:bf: a5:ed:fd:50:56:83:69:a6:f5:72:20:e9:7e:25:fe: 9e:be:6c:fa:e1:f6:5b:4a:5d:4b:b7:ad:ee:b6:53: 3e:b8:09:8d:03:0f:76:d3:36:0f:33:79:64:e5:4f: 7b:67:fa:5f:88:60:a7:a8:5d:2d:5b:5e:df:7a:68: a7:91:be:75:90:04:fd:7b:af:5c:19:ad:3c:bf:d4: 55:85:f7:f9:a8:25:f9:a5:76:42:39:7a:a6:e5:da: 96:e9:32:39:1c:9b:fe:59:92:d1:3d:4c:a3:78:08: 6d:a0:9a:4d:22:c8:0c:08:1d:53:39:74:43:86:a4: 9c:bc:c4:15:3d:a7:cc:93:ab:7a:c4:81:81:1c:24: 0e:4e:f9:28:d0:35:d9:c9:2c:95:a3:bd:43:98:dd: 5b:2f:30:26:9e:f7:33:49:f2:cb:28:2e:dd:d6:05: c4:cb:1d:b6:5c:5a:52:a0:9a:05:3f:a2:65:48:84: 14:eb:e9:76:54:6e:c9:66:73:e8:87:4b:d2:fa:64: de:1f:b7:28:0b:1f:44:8c:86:5c:0d:99:55:ba:97: 8f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:79:01:56:B6:DC:2B:25:9B:A0:ED:29:33:42:82:F9:E3:71:86:4A X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:ba:b3:2a:67:9b:48:a9:de:ee:58:e1:c6:5c:cb:d4:5c:ba: 48:22:95:98:68:90:2c:4c:41:45:74:1d:be:b3:d8:3b:6f:6e: ff:27:f5:66:47:58:c5:22:dd:f9:2d:e8:2e:59:dc:39:11:6f: ef:67:05:18:a0:17:f4:2f:c3:31:89:1f:b5:8c:59:d9:7a:10: 18:6c:4e:d3:0e:c2:ae:dd:e3:b7:b0:d4:1d:f6:9d:b6:b1:f2: 69:f6:ea:cb:51:a8:ad:92:91:30:5a:26:74:00:0e:29:7e:4c: b9:4c:7d:3b:52:04:66:3b:49:4d:e5:90:b5:61:24:58:5c:85: 6a:28:57:52:6d:4f:2c:e8:d1:f8:e4:bd:94:78:9b:cb:16:b3: 36:a8:a7:c1:3c:fb:84:2b:35:61:eb:46:64:9b:1b:11:c1:ef: d9:b0:94:d0:01:d3:63:36:15:51:86:3e:d0:98:bc:fc:68:ab: 8f:44:36:6c:7a:ad:91:5b:46:e9:81:56:d9:05:70:05:55:56: 81:6d:24:d5:77:f3:b3:74:3e:b1:fe:26:22:40:33:b0:7d:31: a9:51:94:b6:bb:a5:08:02:16:76:57:ac:2c:01:a2:f9:d5:39: 7e:b0:d0:e3:18:c4:1e:ea:46:ec:00:ef:64:7a:5f:73:45:86: b0:5c:61:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNj2B8KKktPWIeeRYa1pla9yA7TMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNjAyMjgwNTI2MDVaFw0yNjAzMDMwNjEzMDVaMDMxMTAvBgNV BAMTKEE2NzkwMTU2QjZEQzJCMjU5QkEwRUQyOTMzNDI4MkY5RTM3MTg2NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCp7mfmtv3EShEPnk0YJ/JnOpBD mitMf8uqQtutzzQljas8TAoNtKdxGPXyv6Xt/VBWg2mm9XIg6X4l/p6+bPrh9ltK XUu3re62Uz64CY0DD3bTNg8zeWTlT3tn+l+IYKeoXS1bXt96aKeRvnWQBP17r1wZ rTy/1FWF9/moJfmldkI5eqbl2pbpMjkcm/5ZktE9TKN4CG2gmk0iyAwIHVM5dEOG pJy8xBU9p8yTq3rEgYEcJA5O+SjQNdnJLJWjvUOY3VsvMCae9zNJ8ssoLt3WBcTL HbZcWlKgmgU/omVIhBTr6XZUbslmc+iHS9L6ZN4ftygLH0SMhlwNmVW6l49jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpnkBVrbcKyWboO0pM0KC+eNxhkowHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKq6sypnm0ip3u5Y4cZcy9RcukgilZhokCxM QUV0Hb6z2Dtvbv8n9WZHWMUi3fkt6C5Z3DkRb+9nBRigF/QvwzGJH7WMWdl6EBhs TtMOwq7d47ew1B32nbax8mn26stRqK2SkTBaJnQADil+TLlMfTtSBGY7SU3lkLVh JFhchWooV1JtTyzo0fjkvZR4m8sWszaop8E8+4QrNWHrRmSbGxHB79mwlNAB02M2 FVGGPtCYvPxoq49ENmx6rZFbRumBVtkFcAVVVoFtJNV387N0PrH+JiJAM7B9MalR lLa7pQgCFnZXrCwBovnVOX6w0OMYxB7qRuwA72R6X3NFhrBcYSw= -----END CERTIFICATE-----Generated at Mon Mar 2 05:01:11 2026 by rpki-client