$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: ZmDpAYcXn5PH5NvrQy7O+2eI9C+LNnbauJ+2pCXNy5E= Subject key identifier: C0:40:1F:19:6B:7B:90:D5:7C:1F:13:D6:D8:86:02:1F:D3:40:6D:AF Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 27DCF61CD678C63E61D9BCA919200ADDA7E871AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 01D7 Signing time: Sun 01 Mar 2026 07:41:25 +0000 Manifest this update: Sun 01 Mar 2026 07:36:25 +0000 Manifest next update: Wed 04 Mar 2026 08:10:25 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: 1voL9wkw3AmKHYF9xEfIdX/0TupHIuTblxg4b1ycg+I=) 2: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: ql1r6btRm6e6TWZ741/BEGV0DvzwRTbZXBQKsJR8lTg=) 3: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: Unes0hIMv84A49Ol3GIkbwMDmJjZG9VuRsMwReAem+Y=) 4: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 5: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: wTxXY4luz0/VtdzVzXPjy+UsX7yymtg7UjU8UOo7Pyk=) 6: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: PiBS1eSkYGruf0EzBSz7Vd15f3UebbGpvtV9QFzbfxg=) 7: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: KAmpBoTLVKtQpzZQRpEjJRr9zTKNjSVFlisu1/zsLDs=) 8: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: i3sO/S07jEPRYcvnHXfiuZ1cxqgCcK6SbsDRRhfjCrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:10:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:dc:f6:1c:d6:78:c6:3e:61:d9:bc:a9:19:20:0a:dd:a7:e8:71:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Mar 1 07:36:25 2026 GMT Not After : Mar 4 08:10:25 2026 GMT Subject: CN=C0401F196B7B90D57C1F13D6D886021FD3406DAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:28:96:32:bf:f9:18:a6:63:b4:d6:24:16:ea: 7f:c5:00:79:47:66:f3:d3:41:02:1c:ef:b4:84:46: 40:d6:d6:e5:8a:f1:5b:ed:da:6c:d9:2a:b9:e7:b5: 39:26:0e:5c:85:00:61:24:f4:cc:37:1d:dc:7c:54: b5:48:6e:35:3a:c4:f5:c8:9b:70:1e:e3:58:0f:62: 99:35:07:ac:d9:08:26:73:a3:6b:3d:96:31:ae:05: ff:53:62:a7:3e:09:f8:15:cd:55:9f:ea:d0:68:6f: 76:6f:de:ea:5b:7c:43:71:02:0d:75:da:2e:62:23: a2:e0:e1:ca:88:8c:90:a2:20:14:1b:50:1e:76:73: d3:85:20:22:63:a4:45:5c:c7:da:ed:50:e8:7f:10: 8e:24:10:03:df:f7:e9:89:cc:3d:7b:8d:63:75:3d: af:ce:9c:10:c6:d5:4b:bf:2b:bf:b2:c7:11:7a:e8: b8:9b:7c:b3:0f:68:c6:4a:1f:97:6d:db:07:ac:41: 9b:0a:66:ab:87:71:a1:dc:c1:0c:bb:02:22:f9:84: 06:66:d4:67:57:29:84:26:22:a7:c5:51:e5:87:e2: a8:bd:de:8d:eb:84:72:99:9f:2e:9e:fa:8c:23:17: e3:6a:42:ef:93:b0:ca:01:33:e8:34:eb:88:a5:9b: 85:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:40:1F:19:6B:7B:90:D5:7C:1F:13:D6:D8:86:02:1F:D3:40:6D:AF X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:43:c2:f0:57:3f:04:d9:95:6e:9d:24:ae:40:d2:f3:85:b0: 8a:f2:dd:7f:1f:93:2e:6a:df:10:f7:22:d6:5a:f0:e1:d4:5e: fa:bc:17:f1:2e:79:2f:84:39:ad:94:ca:56:ee:06:f5:fb:24: 6b:4d:60:9b:01:3b:78:6d:52:10:02:5e:ce:1a:af:9d:83:a5: a5:44:45:11:8b:41:b7:17:7a:a3:76:e0:c0:c5:39:34:7c:c3: b5:f4:29:28:f8:9d:c9:67:63:38:3e:19:fc:fd:d6:e5:1d:40: 5d:a7:98:56:9b:0a:40:c2:c7:dd:31:84:8a:bf:62:c6:42:a1: e9:33:1c:d8:d9:04:98:82:bc:76:e6:5e:4c:7e:58:64:54:71: fa:c3:c4:38:18:1b:fc:cb:22:17:bd:ab:bd:38:be:71:cc:48: 4c:5e:f9:64:19:b8:be:d5:96:a3:26:e3:1a:cd:3b:e0:ae:7e: c6:b8:c1:72:de:e5:a6:9e:d3:4a:82:69:75:05:e2:22:28:58: f4:73:1c:be:74:96:73:bd:de:49:47:c1:b5:58:e8:bf:b7:05: d8:ea:75:42:1f:3e:78:b0:7c:8e:81:76:cb:02:f4:80:83:54: 29:93:d6:c3:66:36:ed:d7:36:4f:55:62:5f:74:bb:2c:8f:c1: a1:74:fd:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ9z2HNZ4xj5h2bypGSAK3afoca0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNjAzMDEwNzM2MjVaFw0yNjAzMDQwODEwMjVaMDMxMTAvBgNV BAMTKEMwNDAxRjE5NkI3QjkwRDU3QzFGMTNENkQ4ODYwMjFGRDM0MDZEQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPKJYyv/kYpmO01iQW6n/FAHlH ZvPTQQIc77SERkDW1uWK8Vvt2mzZKrnntTkmDlyFAGEk9Mw3Hdx8VLVIbjU6xPXI m3Ae41gPYpk1B6zZCCZzo2s9ljGuBf9TYqc+CfgVzVWf6tBob3Zv3upbfENxAg11 2i5iI6Lg4cqIjJCiIBQbUB52c9OFICJjpEVcx9rtUOh/EI4kEAPf9+mJzD17jWN1 Pa/OnBDG1Uu/K7+yxxF66LibfLMPaMZKH5dt2wesQZsKZquHcaHcwQy7AiL5hAZm 1GdXKYQmIqfFUeWH4qi93o3rhHKZny6e+owjF+NqQu+TsMoBM+g064ilm4X5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwEAfGWt7kNV8HxPW2IYCH9NAba8wHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9DwvBXPwTZlW6dJK5A0vOFsIry3X8fky5q 3xD3ItZa8OHUXvq8F/EueS+EOa2UylbuBvX7JGtNYJsBO3htUhACXs4ar52DpaVE RRGLQbcXeqN24MDFOTR8w7X0KSj4nclnYzg+Gfz91uUdQF2nmFabCkDCx90xhIq/ YsZCoekzHNjZBJiCvHbmXkx+WGRUcfrDxDgYG/zLIhe9q704vnHMSExe+WQZuL7V lqMm4xrNO+Cufsa4wXLe5aae00qCaXUF4iIoWPRzHL50lnO93klHwbVY6L+3Bdjq dUIfPniwfI6BdssC9ICDVCmT1sNmNu3XNk9VYl90uyyPwaF0/fU= -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:22 2026 by rpki-client