$ rpki-client -vvf repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft File: 7A8364745196ADEDA32E89F410EFDC19F658815A.mft (raw, json) Hash identifier: 8RZpT3va94+YqDJ/txb9wgJYCowfuUArcCuS++U+Zs4= Subject key identifier: CC:89:6A:82:05:48:CA:F6:BD:DF:30:45:95:41:47:7E:33:5F:BB:FD Authority key identifier: 7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A Certificate issuer: /CN=7A8364745196ADEDA32E89F410EFDC19F658815A Certificate serial: 52437DE35E8E71FDA869F84F5204CA6681B09A13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft Manifest number: 0104 Signing time: Sat 28 Feb 2026 17:30:00 +0000 Manifest this update: Sat 28 Feb 2026 17:25:00 +0000 Manifest next update: Wed 04 Mar 2026 02:07:00 +0000 Files and hashes: 1: 7A8364745196ADEDA32E89F410EFDC19F658815A.crl (hash: koy+rG/9U58o7BTBzDFKqmzoIovJHT9yyhsOmi8sgI8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:43:7d:e3:5e:8e:71:fd:a8:69:f8:4f:52:04:ca:66:81:b0:9a:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A8364745196ADEDA32E89F410EFDC19F658815A Validity Not Before: Feb 28 17:25:00 2026 GMT Not After : Mar 4 02:07:00 2026 GMT Subject: CN=CC896A820548CAF6BDDF30459541477E335FBBFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f2:f7:e3:3e:78:b4:4f:cf:c1:6d:6f:78:b8: 3d:83:99:5a:76:0d:0e:25:16:2b:f1:fb:32:70:11: 57:9c:50:42:85:67:43:90:e1:31:d5:cb:8e:d8:48: 98:5c:44:f5:be:95:ef:fd:89:4b:09:17:fe:05:71: 37:e8:d2:e3:57:8f:10:2f:b2:06:a0:c7:2e:34:3d: 18:2f:b9:5a:3b:4d:a6:d1:a4:57:43:a0:a0:96:73: c6:b0:56:e4:dc:db:31:d1:51:07:3c:31:68:c5:69: f0:0f:70:20:dd:05:38:9f:70:8e:cb:2a:88:b8:02: 7d:26:c6:9c:f1:8c:04:a0:54:4b:68:f2:41:be:dd: 2a:51:ce:77:05:06:d4:e3:a8:ff:c4:25:ff:5e:00: 95:95:04:33:2b:b5:eb:5b:aa:40:fa:38:1b:d4:33: 16:36:a0:de:7c:14:4a:a6:84:20:b5:01:52:24:38: c9:54:08:0d:96:cf:a3:1c:d7:46:76:60:c7:19:26: 09:2f:bc:33:d4:f4:bc:32:31:2a:71:f2:4c:0a:eb: 6c:91:41:40:ee:5f:c3:de:3f:c8:78:1b:a3:ff:7b: 36:f2:2b:03:ea:b4:6f:c1:d9:88:b0:4b:79:d0:6b: b1:83:83:a1:9f:ea:d3:e4:21:26:88:4a:cf:4f:4a: f8:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:89:6A:82:05:48:CA:F6:BD:DF:30:45:95:41:47:7E:33:5F:BB:FD X509v3 Authority Key Identifier: keyid:7A:83:64:74:51:96:AD:ED:A3:2E:89:F4:10:EF:DC:19:F6:58:81:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7A8364745196ADEDA32E89F410EFDC19F658815A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5679b4d1-d6b5-4820-a497-693b93ddf58e/0/7A8364745196ADEDA32E89F410EFDC19F658815A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:d4:b0:11:d4:94:d0:aa:e6:28:04:ea:b3:4f:e5:5d:8c:07: b5:cc:dc:e0:ae:76:58:0c:64:1b:6c:52:d9:1b:48:f5:4f:c3: b5:a9:20:2a:bd:69:67:a1:78:24:d5:50:91:79:93:a7:f6:bb: be:78:e1:47:76:2c:b3:16:d6:0a:36:68:cb:12:9b:f9:d9:31: 01:92:9d:99:c9:aa:f3:1c:b6:83:6c:b0:92:ac:83:1c:89:ea: ab:66:de:d0:d8:0c:58:f7:42:5b:82:33:b7:39:c0:5a:4c:ce: c7:5e:91:a4:a7:92:6f:f3:82:ef:72:f7:f6:42:80:b2:eb:ca: 06:5d:ec:d8:f5:eb:60:c1:53:7f:38:ac:2d:fa:0a:7c:c0:03: 7f:59:9e:9c:9a:2e:da:c1:a4:5d:e9:b2:0c:db:da:23:c0:bd: c4:9d:98:a6:8f:84:0b:4c:db:0a:ef:b8:5f:07:98:e5:c8:9c: 63:e8:02:28:b8:51:d5:64:34:1a:5b:61:09:b6:bf:4b:9c:32: 18:2a:74:05:42:88:f9:0f:ec:97:f2:9f:53:b4:39:c1:ab:1e: 18:96:8b:93:60:81:18:54:97:31:3b:5a:2f:55:3b:09:a3:f0: 4a:17:ff:35:1d:cc:92:d4:21:18:4b:87:19:34:8d:46:a8:ee: 54:d4:82:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUkN9416Ocf2oafhPUgTKZoGwmhMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlG NjU4ODE1QTAeFw0yNjAyMjgxNzI1MDBaFw0yNjAzMDQwMjA3MDBaMDMxMTAvBgNV BAMTKENDODk2QTgyMDU0OENBRjZCRERGMzA0NTk1NDE0NzdFMzM1RkJCRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt8vfjPni0T8/BbW94uD2DmVp2 DQ4lFivx+zJwEVecUEKFZ0OQ4THVy47YSJhcRPW+le/9iUsJF/4FcTfo0uNXjxAv sgagxy40PRgvuVo7TabRpFdDoKCWc8awVuTc2zHRUQc8MWjFafAPcCDdBTifcI7L Koi4An0mxpzxjASgVEto8kG+3SpRzncFBtTjqP/EJf9eAJWVBDMrtetbqkD6OBvU MxY2oN58FEqmhCC1AVIkOMlUCA2Wz6Mc10Z2YMcZJgkvvDPU9LwyMSpx8kwK62yR QUDuX8PeP8h4G6P/ezbyKwPqtG/B2YiwS3nQa7GDg6Gf6tPkISaISs9PSvhVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIlqggVIyva93zBFlUFHfjNfu/0wHwYDVR0j BBgwFoAUeoNkdFGWre2jLon0EO/cGfZYgVowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 Njc5YjRkMS1kNmI1LTQ4MjAtYTQ5Ny02OTNiOTNkZGY1OGUvMC83QTgzNjQ3NDUx OTZBREVEQTMyRTg5RjQxMEVGREMxOUY2NTg4MTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRDMTlGNjU4 ODE1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTY3OWI0ZDEtZDZiNS00ODIwLWE0 OTctNjkzYjkzZGRmNThlLzAvN0E4MzY0NzQ1MTk2QURFREEzMkU4OUY0MTBFRkRD MTlGNjU4ODE1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFvUsBHUlNCq5igE6rNP5V2MB7XM3OCudlgM ZBtsUtkbSPVPw7WpICq9aWeheCTVUJF5k6f2u7544Ud2LLMW1go2aMsSm/nZMQGS nZnJqvMctoNssJKsgxyJ6qtm3tDYDFj3QluCM7c5wFpMzsdekaSnkm/zgu9y9/ZC gLLrygZd7Nj162DBU384rC36CnzAA39ZnpyaLtrBpF3psgzb2iPAvcSdmKaPhAtM 2wrvuF8HmOXInGPoAii4UdVkNBpbYQm2v0ucMhgqdAVCiPkP7Jfyn1O0OcGrHhiW i5NggRhUlzE7Wi9VOwmj8EoX/zUdzJLUIRhLhxk0jUao7lTUgoE= -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:13 2026 by rpki-client