$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: Q0HSI5SQf6MILmjT4kzIyEwH3AmLlep9OkyDXZeD6Dc= Subject key identifier: 5F:66:18:67:7E:37:B7:2E:3A:8A:5D:54:14:5A:DC:DD:58:78:AF:C8 Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 4B1F0626C9897AC231A62C2EE97ED97DD11A2E6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 021A Signing time: Sun 01 Mar 2026 03:50:57 +0000 Manifest this update: Sun 01 Mar 2026 03:45:57 +0000 Manifest next update: Wed 04 Mar 2026 06:25:57 +0000 Files and hashes: 1: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: Uevi+gY60WYSw83RvLHQTgPfgtF/XRwUvssIYpUFUyI=) 2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: DnN4DbVNjWnQCkjXwlNPMidCO0/mBYN6hm7/J4O2GDg=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: /LiLN+J0a3bLX8pXdquoB9qjro5HIfp6bcZw4BWkMOQ=) 4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: m5zVdj5eik3LoKH8n3yc9tou1o5tmBbi5H5pOVeGB1Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:25:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:1f:06:26:c9:89:7a:c2:31:a6:2c:2e:e9:7e:d9:7d:d1:1a:2e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Mar 1 03:45:57 2026 GMT Not After : Mar 4 06:25:57 2026 GMT Subject: CN=5F6618677E37B72E3A8A5D54145ADCDD5878AFC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:37:4a:64:9e:65:c1:41:dd:4e:80:8c:bb:75: f5:21:72:96:b3:c9:f1:28:90:d0:41:30:da:a7:a3: 73:f8:14:b8:15:fe:46:44:a4:ba:31:6e:3c:a1:36: a2:bc:34:78:01:4e:f9:0f:e6:a1:43:2a:a1:e2:bf: 43:63:f1:2d:2a:04:ca:44:a0:0d:c8:82:55:96:0e: 32:a0:8e:29:e3:9c:0e:9d:e6:b3:12:8c:7e:40:42: b5:2c:07:c8:a6:53:b3:e0:e6:49:fc:39:70:e4:c5: 52:25:ae:f8:5b:81:67:4a:81:5b:d0:b2:ce:7e:9b: ac:85:ab:89:07:15:7d:ff:e5:ae:5e:1e:41:52:f4: 3e:6e:e9:5c:08:1e:3c:40:53:de:bc:98:9f:cf:b0: f0:53:fe:1c:1d:64:b5:7a:67:e9:d2:1f:87:cf:95: ff:7f:df:ba:f6:59:6f:0b:65:16:0d:86:48:c6:c1: 17:cc:5d:e4:8d:81:24:fa:5a:d7:3f:ab:58:76:58: 8e:22:a5:c9:72:69:54:99:da:d6:ad:92:73:1a:76: 49:47:98:45:ea:c2:96:4a:45:68:63:ad:65:c8:22: 8c:04:34:cb:71:22:44:85:45:d3:9f:48:78:7a:06: a3:6c:22:65:f5:90:f9:2a:a9:91:88:08:91:81:dc: 53:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:66:18:67:7E:37:B7:2E:3A:8A:5D:54:14:5A:DC:DD:58:78:AF:C8 X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:87:8d:70:f0:f9:cb:a8:3e:ea:ee:ed:35:fa:7e:cd:b5:75: 30:36:21:bc:fe:99:12:51:02:44:7e:1d:75:17:6a:9d:6e:f5: 01:b6:5d:d8:5a:91:5a:21:2e:73:56:c0:ea:ff:d2:6c:ff:c9: c1:d2:33:40:72:08:6c:79:20:c1:3e:a4:68:43:91:44:aa:63: ec:7e:bd:61:8a:0a:ad:3b:e0:57:6c:9b:ae:f8:e8:93:a6:6e: 7a:e1:aa:76:ee:f6:9f:cf:e9:c2:95:54:21:85:a1:b2:93:6f: 1e:a8:20:de:ef:e0:a8:7c:0e:1f:5d:1e:e9:c3:ac:cb:f0:84: f1:dd:ed:da:3c:94:62:2b:8e:83:4a:c1:ff:6e:5e:9e:97:53: e8:40:70:0e:01:13:76:42:6c:8a:dc:b0:32:79:d5:63:cd:52: 69:39:57:93:64:84:dc:4a:21:1f:3a:98:18:a4:79:19:db:fb: be:be:24:c7:31:c7:0f:06:9c:b6:31:df:c8:a7:31:cb:5a:13: 71:50:53:4b:e8:32:cb:79:06:a4:fd:30:c9:e0:d7:e6:74:7b: e9:e5:33:2f:31:32:20:10:8c:db:0a:ec:2f:3c:cb:12:07:e2: d6:4a:bd:aa:59:6c:87:f3:40:b0:0f:18:da:fc:80:10:97:45: bc:01:ab:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSx8GJsmJesIxpiwu6X7ZfdEaLm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNjAzMDEwMzQ1NTdaFw0yNjAzMDQwNjI1NTdaMDMxMTAvBgNV BAMTKDVGNjYxODY3N0UzN0I3MkUzQThBNUQ1NDE0NUFEQ0RENTg3OEFGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoN0pknmXBQd1OgIy7dfUhcpaz yfEokNBBMNqno3P4FLgV/kZEpLoxbjyhNqK8NHgBTvkP5qFDKqHiv0Nj8S0qBMpE oA3IglWWDjKgjinjnA6d5rMSjH5AQrUsB8imU7Pg5kn8OXDkxVIlrvhbgWdKgVvQ ss5+m6yFq4kHFX3/5a5eHkFS9D5u6VwIHjxAU968mJ/PsPBT/hwdZLV6Z+nSH4fP lf9/37r2WW8LZRYNhkjGwRfMXeSNgST6Wtc/q1h2WI4ipclyaVSZ2tatknMadklH mEXqwpZKRWhjrWXIIowENMtxIkSFRdOfSHh6BqNsImX1kPkqqZGICJGB3FP/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX2YYZ343ty46il1UFFrc3Vh4r8gwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALGHjXDw+cuoPuru7TX6fs21dTA2Ibz+mRJR AkR+HXUXap1u9QG2XdhakVohLnNWwOr/0mz/ycHSM0ByCGx5IME+pGhDkUSqY+x+ vWGKCq074Fdsm6746JOmbnrhqnbu9p/P6cKVVCGFobKTbx6oIN7v4Kh8Dh9dHunD rMvwhPHd7do8lGIrjoNKwf9uXp6XU+hAcA4BE3ZCbIrcsDJ51WPNUmk5V5NkhNxK IR86mBikeRnb+76+JMcxxw8GnLYx38inMctaE3FQU0voMst5BqT9MMng1+Z0e+nl My8xMiAQjNsK7C88yxIH4tZKvapZbIfzQLAPGNr8gBCXRbwBq/E= -----END CERTIFICATE-----Generated at Mon Mar 2 17:43:54 2026 by rpki-client