$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: 2lwOZUkuY4dTo7YFIR/9XNd3uwOhAigKvXllFycvLqI= Subject key identifier: F7:70:9E:73:26:A4:32:52:E8:DD:EA:52:E7:AF:9F:14:9A:19:42:7E Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 3E1062CD730118C17F9D9D1B36F2F070B925842D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 02EB Signing time: Sat 28 Feb 2026 14:12:11 +0000 Manifest this update: Sat 28 Feb 2026 14:07:11 +0000 Manifest next update: Tue 03 Mar 2026 21:06:11 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: B7qsxmNCiFDVb/EzF6/OWG6wRRwskt5iooGLPvbf1l4=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: bAg6MsDstetOvzdA+3u3BpUGBWifQkKCKKizemY7LEk=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: oeYDG2ojbn2UU8RO5PDyI86B1bVuGfaVXnCJZIST5M8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:06:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:10:62:cd:73:01:18:c1:7f:9d:9d:1b:36:f2:f0:70:b9:25:84:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Feb 28 14:07:11 2026 GMT Not After : Mar 3 21:06:11 2026 GMT Subject: CN=F7709E7326A43252E8DDEA52E7AF9F149A19427E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:56:d2:24:7d:52:a4:24:52:03:b5:4d:6f:df: d7:53:b2:a7:fe:53:60:06:21:60:3c:de:26:a9:50: ba:ec:f9:27:cf:ab:1c:8f:82:4e:4e:b0:5f:2d:6f: 4e:10:5d:9a:ea:d1:65:6b:e5:12:bb:8a:a1:f3:eb: 04:a2:f8:b1:59:78:76:c8:27:dd:d9:23:78:d7:ad: 6d:f6:ff:23:14:3e:21:20:6e:45:6a:68:7f:67:f5: 8f:0c:c9:8a:96:01:aa:67:00:e9:e9:0b:1f:85:2a: 7d:7c:84:ba:60:78:9c:75:94:f0:87:39:6a:43:f1: c9:4b:1b:a0:81:f0:2f:5f:df:6b:7b:0f:cc:d1:ab: e1:a8:65:24:2c:77:63:30:dd:fe:90:58:4a:3f:f4: be:2c:4c:f6:e1:09:9a:77:30:31:d2:ae:bb:38:18: c0:a6:22:77:ff:ef:d4:1e:16:54:81:2b:92:35:5c: ba:12:29:d7:0c:d9:75:80:f0:98:25:ee:a8:fb:5e: fd:e8:bf:de:31:86:25:92:41:43:8f:d3:5d:52:60: cc:45:c3:78:1e:05:28:e2:1a:38:06:2c:38:43:11: 38:33:8c:87:d4:7a:18:fa:d1:6e:b2:84:c9:c7:b9: ba:2a:f0:db:a0:6a:d6:30:52:24:df:1e:5e:d5:6f: f8:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:70:9E:73:26:A4:32:52:E8:DD:EA:52:E7:AF:9F:14:9A:19:42:7E X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:af:ac:5f:69:76:13:77:91:aa:1a:6a:4c:f6:2c:59:92:ba: a9:44:d0:9a:1a:85:44:28:9e:de:1f:80:a1:ad:11:d1:4a:86: a9:07:3f:a5:97:47:b1:f6:bf:cf:44:a4:cb:5b:15:89:69:a6: da:1f:97:b0:ee:a0:61:56:b1:f9:5f:14:4a:dd:27:ea:a4:3f: a2:d8:bd:c7:15:0e:13:36:5e:b9:46:9a:08:b6:19:62:74:43: e8:ba:f4:82:de:33:a3:c6:67:2e:30:82:15:5b:88:3f:00:e5: 93:f4:05:a1:d9:f8:7d:6d:1d:d1:6f:37:d5:62:23:cc:ad:7f: 9b:3f:65:54:92:60:46:83:8c:9a:f2:a1:a3:00:fd:a5:09:4a: 16:bf:ac:d5:cd:90:79:57:55:17:34:e1:bf:cb:01:cd:f5:c0: c6:d8:ed:20:b4:4d:7a:1a:80:89:85:a0:43:57:5b:90:d9:ba: 51:91:56:6f:8f:c9:94:6a:a7:97:31:82:19:51:06:f7:03:6c: 3d:10:9f:49:dd:a6:4a:4b:be:f6:f6:30:ce:ae:3f:2c:9f:b9: 00:ec:20:ca:bb:d1:d4:a9:11:85:ed:4d:ce:a5:4c:d4:a2:25: 3f:25:54:ab:7a:45:06:33:fd:bd:60:24:22:cf:d9:a6:dd:a0: 62:e5:59:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPhBizXMBGMF/nZ0bNvLwcLklhC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNjAyMjgxNDA3MTFaFw0yNjAzMDMyMTA2MTFaMDMxMTAvBgNV BAMTKEY3NzA5RTczMjZBNDMyNTJFOERERUE1MkU3QUY5RjE0OUExOTQyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVtIkfVKkJFIDtU1v39dTsqf+ U2AGIWA83iapULrs+SfPqxyPgk5OsF8tb04QXZrq0WVr5RK7iqHz6wSi+LFZeHbI J93ZI3jXrW32/yMUPiEgbkVqaH9n9Y8MyYqWAapnAOnpCx+FKn18hLpgeJx1lPCH OWpD8clLG6CB8C9f32t7D8zRq+GoZSQsd2Mw3f6QWEo/9L4sTPbhCZp3MDHSrrs4 GMCmInf/79QeFlSBK5I1XLoSKdcM2XWA8Jgl7qj7Xv3ov94xhiWSQUOP011SYMxF w3geBSjiGjgGLDhDETgzjIfUehj60W6yhMnHuboq8NugatYwUiTfHl7Vb/jdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU93CecyakMlLo3epS56+fFJoZQn4wHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWvrF9pdhN3kaoaakz2LFmSuqlE0JoahUQo nt4fgKGtEdFKhqkHP6WXR7H2v89EpMtbFYlpptofl7DuoGFWsflfFErdJ+qkP6LY vccVDhM2XrlGmgi2GWJ0Q+i69ILeM6PGZy4wghVbiD8A5ZP0BaHZ+H1tHdFvN9Vi I8ytf5s/ZVSSYEaDjJryoaMA/aUJSha/rNXNkHlXVRc04b/LAc31wMbY7SC0TXoa gImFoENXW5DZulGRVm+PyZRqp5cxghlRBvcDbD0Qn0ndpkpLvvb2MM6uPyyfuQDs IMq70dSpEYXtTc6lTNSiJT8lVKt6RQYz/b1gJCLP2abdoGLlWb8= -----END CERTIFICATE-----Generated at Mon Mar 2 05:54:40 2026 by rpki-client