$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: Ar+4ndxDc8GREHq1Pym3VX36UeB0I3T0igrMzYEZ4rA= Subject key identifier: 07:1A:50:19:DD:95:26:E5:45:06:45:19:62:29:52:36:26:E3:DA:B3 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 52957332BD75A64A02E9F2600CE93EDBE13CB235 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 0541 Signing time: Sat 28 Feb 2026 05:10:42 +0000 Manifest this update: Sat 28 Feb 2026 05:05:42 +0000 Manifest next update: Tue 03 Mar 2026 13:49:42 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: G7+bSZqWHSbL6FsO4b5vqocW17/mbqZTa3xBRWtv3zU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:95:73:32:bd:75:a6:4a:02:e9:f2:60:0c:e9:3e:db:e1:3c:b2:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Feb 28 05:05:42 2026 GMT Not After : Mar 3 13:49:42 2026 GMT Subject: CN=071A5019DD9526E5450645196229523626E3DAB3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:9f:46:49:58:1a:3d:23:35:aa:7b:32:43: f7:24:d0:6d:cf:cc:d9:2a:86:8a:bb:b0:4c:fe:53: a1:45:cc:f5:cb:7a:77:c0:cc:ab:80:ec:fa:8a:92: 0c:1f:5b:a9:5c:61:7b:d9:54:b7:c3:80:03:50:6f: 82:21:c7:70:44:fd:43:7e:b4:f0:7c:59:7b:3c:58: f5:f1:89:f6:54:e8:1a:f3:15:92:2f:d9:b6:a7:27: 36:53:cd:35:44:ab:7d:b2:18:56:fe:ce:e4:82:32: 01:4c:11:07:b2:67:d7:a4:d8:02:8d:8e:9f:31:27: eb:6b:ed:83:0e:89:41:56:30:db:07:78:ac:51:c5: 9a:3e:e2:36:7f:09:0f:d6:b6:d2:89:33:54:d8:52: b7:68:25:63:3d:3e:9f:38:69:15:e2:d3:6d:bd:6c: f6:55:c6:de:7b:f2:fd:82:44:be:ca:18:9d:a2:d9: 48:59:6f:34:6b:4d:0b:af:d2:d7:81:6f:4c:01:15: 0c:c1:72:b3:97:a5:49:71:5c:c4:f5:cc:bb:72:fc: 3b:b8:21:8f:5d:0d:50:e2:d9:6b:f9:8c:da:d4:ae: 9d:54:4a:6c:89:16:7c:3f:6a:43:d5:14:cb:74:74: e5:2f:f1:4b:f3:e2:b5:cd:7e:43:ff:2c:fb:05:c1: c8:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1A:50:19:DD:95:26:E5:45:06:45:19:62:29:52:36:26:E3:DA:B3 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:68:26:96:f0:02:b0:b4:5b:62:37:df:ff:e8:8a:1d:d9:af: ae:bc:71:d9:fc:10:8a:91:ea:29:62:55:79:ae:55:bf:58:96: 9c:fe:0a:5e:4f:19:0f:b8:f7:36:f0:0a:2e:6b:67:fd:93:b8: da:59:89:c8:37:31:d2:ad:ca:3a:26:09:45:19:12:6a:98:27: 16:74:ea:7e:15:49:0d:d9:21:f0:af:cf:45:15:35:4f:b8:02: 67:34:58:7c:6c:89:00:6d:e3:d9:55:df:b7:a2:23:96:ae:db: 4b:c1:71:0b:b2:1e:b9:72:16:40:70:06:2f:38:5d:33:6c:b3: ab:9d:89:83:95:b2:db:2c:53:a7:16:99:f8:c5:7a:d2:ca:13: 4b:82:ad:54:d2:d4:74:26:40:20:af:86:e8:2f:00:38:4d:75: 9e:28:b8:76:75:c3:31:22:3d:df:17:5e:29:23:71:64:88:a5: 71:db:43:d3:5c:e8:e8:05:6a:3c:bf:99:11:ea:8c:69:bc:28: 8c:31:16:07:df:b7:25:30:65:ba:6a:ce:1c:3e:19:19:ae:13: a1:91:e1:92:b6:87:31:36:7c:b6:1c:1a:89:7a:90:4b:62:30: 22:c4:6a:e3:4d:d9:db:63:b5:b2:c6:69:90:f4:9c:4b:a7:72: d5:0b:37:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpVzMr11pkoC6fJgDOk+2+E8sjUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNjAyMjgwNTA1NDJaFw0yNjAzMDMxMzQ5NDJaMDMxMTAvBgNV BAMTKDA3MUE1MDE5REQ5NTI2RTU0NTA2NDUxOTYyMjk1MjM2MjZFM0RBQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqup9GSVgaPSM1qnsyQ/ck0G3P zNkqhoq7sEz+U6FFzPXLenfAzKuA7PqKkgwfW6lcYXvZVLfDgANQb4Ihx3BE/UN+ tPB8WXs8WPXxifZU6BrzFZIv2banJzZTzTVEq32yGFb+zuSCMgFMEQeyZ9ek2AKN jp8xJ+tr7YMOiUFWMNsHeKxRxZo+4jZ/CQ/WttKJM1TYUrdoJWM9Pp84aRXi0229 bPZVxt578v2CRL7KGJ2i2UhZbzRrTQuv0teBb0wBFQzBcrOXpUlxXMT1zLty/Du4 IY9dDVDi2Wv5jNrUrp1USmyJFnw/akPVFMt0dOUv8Uvz4rXNfkP/LPsFwchFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxpQGd2VJuVFBkUZYilSNibj2rMwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1oJpbwArC0W2I33//oih3Zr668cdn8EIqR 6iliVXmuVb9Ylpz+Cl5PGQ+49zbwCi5rZ/2TuNpZicg3MdKtyjomCUUZEmqYJxZ0 6n4VSQ3ZIfCvz0UVNU+4Amc0WHxsiQBt49lV37eiI5au20vBcQuyHrlyFkBwBi84 XTNss6udiYOVstssU6cWmfjFetLKE0uCrVTS1HQmQCCvhugvADhNdZ4ouHZ1wzEi Pd8XXikjcWSIpXHbQ9Nc6OgFajy/mRHqjGm8KIwxFgfftyUwZbpqzhw+GRmuE6GR 4ZK2hzE2fLYcGol6kEtiMCLEauNN2dtjtbLGaZD0nEunctULN14= -----END CERTIFICATE-----Generated at Mon Mar 2 07:34:26 2026 by rpki-client