$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: NodVbYjWF4Y8t8sF3Mbiu4jswNFeri5mtoyzEq+69mA= Subject key identifier: 07:14:53:03:E7:36:BF:EF:A9:25:9C:6F:D3:F3:48:6F:8F:92:DA:85 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 1C5952718BF4D17A3758DC417E4DFD118673CFD4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01FD Signing time: Sat 28 Feb 2026 12:40:06 +0000 Manifest this update: Sat 28 Feb 2026 12:35:06 +0000 Manifest next update: Tue 03 Mar 2026 19:32:06 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: v9nMdjUiAFgj/HQ4Hjr5TDNNNsBVPB9pxdCw6MN2TcM=) 2: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: nS2W+M5blNWeSHdC/e0iT+6uzyI/msV7CeC3QyUvyA8=) 3: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: 9FcGD3it6WHpEgCAGti6Cf/LNOqXF0Ed9Gg+bWJls/c=) 4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NeZfhHFd7F8kh7DbLUw4HnOkopSvleBfZOjwOjuAcxQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:32:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:59:52:71:8b:f4:d1:7a:37:58:dc:41:7e:4d:fd:11:86:73:cf:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Feb 28 12:35:06 2026 GMT Not After : Mar 3 19:32:06 2026 GMT Subject: CN=07145303E736BFEFA9259C6FD3F3486F8F92DA85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:5d:3c:fb:2e:18:01:e0:f7:ee:3b:a2:1c:83: 61:91:4f:3e:10:7f:b9:a8:07:8a:8b:2e:2f:a8:37: ac:5c:d7:3b:2a:31:2c:70:4f:23:1b:36:e2:4e:6e: 30:fc:77:88:fb:bc:3e:68:ae:cb:ce:96:be:9c:a8: cf:26:16:18:5a:5a:7e:3d:a9:1f:5b:09:65:34:26: 1a:38:25:b4:9d:d0:7c:8c:bb:e5:71:6f:15:b5:7c: 82:a8:d4:58:1f:e0:00:e4:62:4e:84:04:3c:fb:ff: 07:c5:fc:0c:ed:3a:42:76:87:b3:37:cf:96:18:fb: ba:68:84:c1:f1:1f:67:db:79:fd:58:75:d8:e9:ac: f0:a3:ad:d2:a1:35:78:fe:8e:e6:38:c0:67:94:f0: 03:68:0b:eb:85:c6:03:07:fb:09:af:01:96:84:bf: 1b:6c:da:b5:c8:f3:86:05:cb:93:e4:54:fa:1b:44: b2:c0:22:5f:f5:a9:9f:89:6e:81:02:cb:90:ea:68: 85:b5:00:9f:96:5f:3f:26:42:0d:97:18:4f:04:75: de:ab:d4:22:e0:d5:73:17:01:49:79:d8:b4:09:61: 9d:86:7a:9d:0a:9e:d9:53:6a:c0:07:8e:88:0b:41: ea:ab:70:7d:ff:2c:7f:63:39:c4:7d:71:69:4f:9b: b7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:14:53:03:E7:36:BF:EF:A9:25:9C:6F:D3:F3:48:6F:8F:92:DA:85 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:b1:06:03:3a:52:e8:c0:67:5b:e0:20:cb:b4:ff:39:c6:5c: 0e:98:49:2b:87:95:6d:b2:e2:96:44:4a:de:5a:56:0e:39:ce: 94:f3:7e:4b:09:f1:2e:22:34:16:c6:78:64:84:2f:76:58:dd: a1:14:6d:05:db:00:3d:6d:cd:6f:a1:0b:de:f5:23:50:c1:f4: b3:ac:2c:e2:54:c4:50:5b:9e:62:49:b8:62:dc:fc:62:0f:08: 5b:61:df:16:d2:86:a9:90:a0:40:88:29:92:f1:6e:dc:a0:21: 6a:80:7a:ee:8b:fc:5f:78:f1:3f:d7:a3:21:11:3a:7b:54:7f: b1:d2:ac:5b:6c:2a:8a:1f:a4:70:46:b3:c8:83:1d:91:a7:36: 24:de:e3:b0:16:09:04:7b:37:83:df:af:7f:dd:09:5b:30:81: ed:da:82:df:7b:28:b5:77:ee:f1:58:f7:b5:3f:84:4b:b8:5d: 39:71:a2:9c:01:40:b4:50:56:9e:32:b3:f9:e4:ce:16:39:fd: 4d:cf:b4:06:1b:f1:b1:a4:86:2a:1d:55:ae:fd:a3:f1:45:d9: 7d:0f:13:81:76:05:ce:9f:06:08:bb:7c:81:a8:38:8e:67:40: 15:cd:ea:a3:e4:87:df:6c:48:92:41:dc:08:98:a2:a5:ad:61: fd:ac:36:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHFlScYv00Xo3WNxBfk39EYZzz9QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNjAyMjgxMjM1MDZaFw0yNjAzMDMxOTMyMDZaMDMxMTAvBgNV BAMTKDA3MTQ1MzAzRTczNkJGRUZBOTI1OUM2RkQzRjM0ODZGOEY5MkRBODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZXTz7LhgB4PfuO6Icg2GRTz4Q f7moB4qLLi+oN6xc1zsqMSxwTyMbNuJObjD8d4j7vD5orsvOlr6cqM8mFhhaWn49 qR9bCWU0Jho4JbSd0HyMu+VxbxW1fIKo1Fgf4ADkYk6EBDz7/wfF/AztOkJ2h7M3 z5YY+7pohMHxH2fbef1YddjprPCjrdKhNXj+juY4wGeU8ANoC+uFxgMH+wmvAZaE vxts2rXI84YFy5PkVPobRLLAIl/1qZ+JboECy5DqaIW1AJ+WXz8mQg2XGE8Edd6r 1CLg1XMXAUl52LQJYZ2Gep0KntlTasAHjogLQeqrcH3/LH9jOcR9cWlPm7cjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBxRTA+c2v++pJZxv0/NIb4+S2oUwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuxBgM6UujAZ1vgIMu0/znGXA6YSSuHlW2y 4pZESt5aVg45zpTzfksJ8S4iNBbGeGSEL3ZY3aEUbQXbAD1tzW+hC971I1DB9LOs LOJUxFBbnmJJuGLc/GIPCFth3xbShqmQoECIKZLxbtygIWqAeu6L/F948T/XoyER OntUf7HSrFtsKoofpHBGs8iDHZGnNiTe47AWCQR7N4Pfr3/dCVswge3agt97KLV3 7vFY97U/hEu4XTlxopwBQLRQVp4ys/nkzhY5/U3PtAYb8bGkhiodVa79o/FF2X0P E4F2Bc6fBgi7fIGoOI5nQBXN6qPkh99sSJJB3AiYoqWtYf2sNnU= -----END CERTIFICATE-----Generated at Mon Mar 2 13:36:49 2026 by rpki-client