$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: twDdy1DwO0705x45tVHfVMC/qgnAgeErxeAc76HZWjk= Subject key identifier: 68:92:1A:6E:04:ED:D0:5C:C6:2A:02:2E:DD:10:EE:42:D2:19:30:8A Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 135AE16C89892AEB55E88612C360C1573644F8C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 02B0 Signing time: Sun 01 Mar 2026 21:31:48 +0000 Manifest this update: Sun 01 Mar 2026 21:26:48 +0000 Manifest next update: Wed 04 Mar 2026 21:58:48 +0000 Files and hashes: 1: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: ceY23gZq7fyvuACT0VzLXjn2OzCRdbTZW+mufK3gDDU=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: zAqV6QY/TappIht3b1tctxgtErOisyD+TbFdtRBFjYk=) 3: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: Ltn5BosW03svaejDgoIU6YCJy0AlEi6wL9J4JkgohQs=) 4: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: 5B/tN2XTSVc7IkCa3bkZUZXee71PBWdrKh/L7WGgSKQ=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: l9uygWTtqWMPyZojlz6MhHbKKXqBISgxnKW2QuyQglM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5a:e1:6c:89:89:2a:eb:55:e8:86:12:c3:60:c1:57:36:44:f8:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Mar 1 21:26:48 2026 GMT Not After : Mar 4 21:58:48 2026 GMT Subject: CN=68921A6E04EDD05CC62A022EDD10EE42D219308A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:12:91:29:0d:a1:0a:21:d8:46:5c:98:49:2f: 65:46:2e:6f:5b:79:ac:5f:ea:12:b1:99:f8:49:96: 72:a5:b2:76:72:bf:7c:95:44:55:85:0a:d2:a5:e0: b7:81:a7:df:91:dc:fd:3c:a6:8e:15:29:bf:09:d8: 6b:0e:80:c5:d0:87:21:d9:87:88:16:81:54:b0:a0: 1e:4b:6c:03:c0:77:92:6f:d6:c6:1b:a5:38:bd:4a: 0d:e3:25:94:07:66:44:b1:58:a6:e7:dd:b5:dc:14: 55:17:7c:72:f4:c7:0a:e6:10:f1:27:cf:78:ac:7d: bf:1c:54:6b:ea:12:00:7d:3b:63:12:d8:c9:54:28: b1:65:c3:54:b1:f0:9d:20:30:be:b2:f8:49:b0:fa: b7:d2:56:7a:5f:a7:07:5b:a5:3a:6d:cf:70:be:f2: af:de:10:19:60:2a:c7:df:da:83:6a:ea:83:b2:8a: 70:1e:65:96:43:00:a4:bd:8b:0f:42:9c:74:98:d6: ba:4a:50:70:0a:9c:07:44:6b:cc:76:7c:80:46:c9: b2:ff:3a:93:8f:92:e9:2a:dd:0d:dc:0c:ec:2f:bb: 59:a5:f9:57:43:ee:ed:a1:29:77:d9:4b:4d:65:44: 6c:f1:e0:90:df:e2:c1:25:7c:63:42:96:9e:51:d7: 9f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:92:1A:6E:04:ED:D0:5C:C6:2A:02:2E:DD:10:EE:42:D2:19:30:8A X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:ba:a8:8f:9f:56:dd:c0:c6:ce:f8:33:0a:b8:16:05:3b:29: 80:01:c4:f6:33:b9:0e:45:9d:8e:9c:9c:b8:54:23:f0:07:b6: ad:28:d2:e1:fc:5b:5e:dc:f8:f0:d1:d0:8d:a9:eb:fe:ad:b2: 10:9b:51:4c:3d:dd:7d:9c:bd:86:5b:ba:1c:12:92:3c:f1:93: 7f:da:d0:13:7b:55:7a:f6:1d:9c:ee:01:f7:d4:6b:f6:15:c9: 06:4e:4b:98:4d:13:c5:a9:4e:54:c9:54:c4:ed:11:b0:6d:3d: fe:3c:49:1d:ac:cb:e5:91:d1:8d:c7:3c:84:16:9b:0f:20:66: 6d:6d:86:61:f1:78:dc:86:c6:e0:d7:26:9a:a9:50:ec:37:a1: b6:3a:31:4a:c6:49:8b:45:c8:f7:1f:33:4c:9e:cb:10:ea:23: bb:56:6e:bf:98:a6:a2:d1:91:14:a4:ba:2e:6a:37:fa:f0:95: e7:eb:0f:65:ba:e4:68:a8:59:89:87:ea:af:d7:38:6a:71:2e: 49:07:f6:5d:c3:0c:fd:f9:c9:8d:17:a6:93:ba:da:83:cd:9d: 59:69:17:49:fe:25:f0:af:14:19:bc:8d:d2:63:b3:75:48:56: 11:e2:34:d4:2f:a0:e7:e4:44:15:eb:6b:36:cc:73:bd:88:06: 30:98:c4:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1rhbImJKutV6IYSw2DBVzZE+McwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNjAzMDEyMTI2NDhaFw0yNjAzMDQyMTU4NDhaMDMxMTAvBgNV BAMTKDY4OTIxQTZFMDRFREQwNUNDNjJBMDIyRUREMTBFRTQyRDIxOTMwOEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmEpEpDaEKIdhGXJhJL2VGLm9b eaxf6hKxmfhJlnKlsnZyv3yVRFWFCtKl4LeBp9+R3P08po4VKb8J2GsOgMXQhyHZ h4gWgVSwoB5LbAPAd5Jv1sYbpTi9Sg3jJZQHZkSxWKbn3bXcFFUXfHL0xwrmEPEn z3isfb8cVGvqEgB9O2MS2MlUKLFlw1Sx8J0gML6y+Emw+rfSVnpfpwdbpTptz3C+ 8q/eEBlgKsff2oNq6oOyinAeZZZDAKS9iw9CnHSY1rpKUHAKnAdEa8x2fIBGybL/ OpOPkukq3Q3cDOwvu1ml+VdD7u2hKXfZS01lRGzx4JDf4sElfGNClp5R158rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaJIabgTt0FzGKgIu3RDuQtIZMIowHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFO6qI+fVt3Axs74Mwq4FgU7KYABxPYzuQ5F nY6cnLhUI/AHtq0o0uH8W17c+PDR0I2p6/6tshCbUUw93X2cvYZbuhwSkjzxk3/a 0BN7VXr2HZzuAffUa/YVyQZOS5hNE8WpTlTJVMTtEbBtPf48SR2sy+WR0Y3HPIQW mw8gZm1thmHxeNyGxuDXJpqpUOw3obY6MUrGSYtFyPcfM0yeyxDqI7tWbr+YpqLR kRSkui5qN/rwlefrD2W65GioWYmH6q/XOGpxLkkH9l3DDP35yY0XppO62oPNnVlp F0n+JfCvFBm8jdJjs3VIVhHiNNQvoOfkRBXrazbMc72IBjCYxPI= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:50 2026 by rpki-client