$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: yw4wcjxE28XM+FJimHATXK1cWiEE+UnLddP+77SmeTc= Subject key identifier: 78:83:93:D7:C3:D0:C2:49:5D:77:A7:CC:49:2F:DC:F2:70:6D:0A:EA Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 6964DACAA25452BA1655DDBCDD805E4A37E70A9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: D5 Signing time: Sun 01 Mar 2026 00:42:36 +0000 Manifest this update: Sun 01 Mar 2026 00:37:36 +0000 Manifest next update: Wed 04 Mar 2026 02:05:36 +0000 Files and hashes: 1: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: Hqhnx//jVZP95onwEI0OBrLR64pykRBuzcZGE3p30eA=) 2: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: 0rqaY28k1qKmtYy4sqNJeu6TR3NmCct3st2uKHz4Kkw=) 3: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: da7FZv0wwu0NgAl+k4INGAA7MG+JDxJrpPp3i49uNg8=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: oiY8bQ+d3an3MLZGl2PnLxS3g6sHhrZaRpjEwIP9wlY=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: qDPmCUCvpl2ggw/iTR1lXmer3/EVY6LQXV8BhrJSCJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:05:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:64:da:ca:a2:54:52:ba:16:55:dd:bc:dd:80:5e:4a:37:e7:0a:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Mar 1 00:37:36 2026 GMT Not After : Mar 4 02:05:36 2026 GMT Subject: CN=788393D7C3D0C2495D77A7CC492FDCF2706D0AEA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:20:66:9d:a6:72:73:ad:a7:54:6c:0b:ac:5a: 24:32:88:fc:87:c6:37:99:6a:d7:9a:fb:d1:d6:0c: 6b:0e:6f:37:3b:ba:6e:89:58:30:8b:7c:d9:be:3d: e6:5b:7c:6d:80:40:2a:50:93:5d:38:27:c9:4f:70: c0:cc:da:85:49:eb:c7:a4:55:53:52:78:49:60:ad: 19:7f:d8:d8:af:f9:a5:a0:7c:cb:49:10:8c:46:8d: 58:5c:72:cd:f5:3f:8b:db:89:e0:9f:b2:77:bb:69: 0c:35:01:3f:8c:b0:c8:dd:6b:bd:e1:89:14:10:03: e2:dc:88:a6:14:0f:12:50:3c:76:85:65:e8:84:7f: d2:f7:d4:7f:ab:0b:d3:2f:92:6d:58:d9:a3:15:f2: 81:dd:a6:7f:22:e1:b1:60:99:1b:38:61:d5:2a:9e: 63:b8:95:d1:7d:4e:67:fe:ff:96:5d:67:a6:ac:79: b6:1c:e6:a6:3f:17:3b:69:ed:65:88:f1:a9:56:ff: 0c:4d:ec:3d:90:7a:07:a5:fa:a1:d0:46:6f:dd:01: 74:6b:e1:36:ef:bf:e4:60:a7:c5:02:65:61:58:17: cc:aa:70:1e:90:78:7d:6a:b0:1c:80:3f:a6:a0:29: a0:37:d2:36:f7:ef:30:77:b1:26:94:e7:d3:e6:b4: 22:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:83:93:D7:C3:D0:C2:49:5D:77:A7:CC:49:2F:DC:F2:70:6D:0A:EA X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:8a:5b:ac:6b:d4:9d:96:c5:11:7a:a9:92:e6:e7:c6:b1:47: 25:32:26:ea:4c:97:cc:0d:ec:46:2c:68:fa:00:eb:a1:aa:32: c2:a4:24:f0:5e:d3:80:e0:96:e2:c1:ec:05:d5:c3:2b:22:46: 1a:05:84:5e:ef:65:85:11:53:08:da:e7:53:f7:b7:41:dc:df: b1:34:2b:64:b8:82:3a:b3:27:dc:d6:74:ab:bc:59:c9:23:30: 4c:20:b5:ee:5d:e3:06:00:96:8b:9b:36:ac:bf:bb:80:77:5a: 12:e9:b3:66:b0:32:3f:99:f5:b8:3e:90:e2:f1:38:b4:55:f5: 2a:fe:10:0b:5c:43:b8:cf:39:f0:ae:49:24:61:47:69:0b:90: ee:d2:2e:d6:8d:c9:ba:0b:49:11:cb:c3:fd:41:65:18:06:b7: 13:ac:52:0b:2a:8a:03:8c:fc:cf:93:fc:50:58:82:19:58:14: 28:aa:51:cc:66:b7:d2:c4:1d:d0:80:22:b5:76:98:f1:1e:50: 56:6e:f7:0b:78:f0:e0:8b:a6:21:85:c1:11:fc:1c:0f:8a:ae: 43:5e:42:c6:64:cf:4c:a6:78:52:ee:70:5b:c2:c7:9c:a5:91: 66:c3:d0:2a:60:f4:95:ad:09:42:b3:44:81:67:9c:94:fe:df: 99:ba:52:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWTayqJUUroWVd283YBeSjfnCpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNjAzMDEwMDM3MzZaFw0yNjAzMDQwMjA1MzZaMDMxMTAvBgNV BAMTKDc4ODM5M0Q3QzNEMEMyNDk1RDc3QTdDQzQ5MkZEQ0YyNzA2RDBBRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrIGadpnJzradUbAusWiQyiPyH xjeZatea+9HWDGsObzc7um6JWDCLfNm+PeZbfG2AQCpQk104J8lPcMDM2oVJ68ek VVNSeElgrRl/2Niv+aWgfMtJEIxGjVhccs31P4vbieCfsne7aQw1AT+MsMjda73h iRQQA+LciKYUDxJQPHaFZeiEf9L31H+rC9Mvkm1Y2aMV8oHdpn8i4bFgmRs4YdUq nmO4ldF9Tmf+/5ZdZ6asebYc5qY/Fztp7WWI8alW/wxN7D2Qegel+qHQRm/dAXRr 4Tbvv+Rgp8UCZWFYF8yqcB6QeH1qsByAP6agKaA30jb37zB3sSaU59PmtCJlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeIOT18PQwkldd6fMSS/c8nBtCuowHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHaKW6xr1J2WxRF6qZLm58axRyUyJupMl8wN 7EYsaPoA66GqMsKkJPBe04DgluLB7AXVwysiRhoFhF7vZYURUwja51P3t0Hc37E0 K2S4gjqzJ9zWdKu8WckjMEwgte5d4wYAloubNqy/u4B3WhLps2awMj+Z9bg+kOLx OLRV9Sr+EAtcQ7jPOfCuSSRhR2kLkO7SLtaNyboLSRHLw/1BZRgGtxOsUgsqigOM /M+T/FBYghlYFCiqUcxmt9LEHdCAIrV2mPEeUFZu9wt48OCLpiGFwRH8HA+KrkNe QsZkz0ymeFLucFvCx5ylkWbD0Cpg9JWtCUKzRIFnnJT+35m6Upk= -----END CERTIFICATE-----Generated at Mon Mar 2 12:00:09 2026 by rpki-client