$ rpki-client -vvf repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft File: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft (raw, json) Hash identifier: 9OafV8jK4zq7TfbD3KdaGHYxjNmHRIQpz+LaXPxmu18= Subject key identifier: D9:21:B1:EF:27:BB:FE:8E:D2:A4:AB:BD:56:6E:A1:43:53:7B:20:00 Authority key identifier: 7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 Certificate issuer: /CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Certificate serial: 0F3A28CD6246077006991CEB365D610CAB1DB4B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft Manifest number: 8B Signing time: Sun 01 Mar 2026 18:52:08 +0000 Manifest this update: Sun 01 Mar 2026 18:47:08 +0000 Manifest next update: Thu 05 Mar 2026 04:02:08 +0000 Files and hashes: 1: 7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl (hash: JwQHE2CCmSFd8ebXYTdV4JxiF28i6AVm56hsr0IgTtw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:02:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:3a:28:cd:62:46:07:70:06:99:1c:eb:36:5d:61:0c:ab:1d:b4:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8 Validity Not Before: Mar 1 18:47:08 2026 GMT Not After : Mar 5 04:02:08 2026 GMT Subject: CN=D921B1EF27BBFE8ED2A4ABBD566EA143537B2000 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:1d:db:cc:a9:ca:9b:2e:ba:e1:a8:bd:71:fc: 3b:07:b6:be:95:b7:e5:80:a1:3c:4c:0e:e0:61:46: d9:29:0e:ab:99:fa:cb:e1:c7:ef:e8:c7:ce:73:2f: 9e:5a:c2:f6:5d:5a:ac:bb:df:17:d9:de:d3:90:e4: aa:bf:b5:a2:23:92:78:99:51:80:84:82:89:2b:00: 20:72:7b:5c:cc:a1:31:d9:3d:c9:de:81:2a:e4:c7: 07:44:1a:ed:19:a5:b8:36:dd:2e:d7:40:4c:fa:ad: 42:20:61:66:e2:e0:0e:24:7a:51:28:3d:1b:e5:5f: 7e:f6:34:dd:9a:6d:d2:dd:cf:4e:01:ae:8c:97:f1: 44:9b:94:35:2a:95:04:a5:9e:80:4d:41:a5:df:27: 7e:27:93:6b:19:76:a8:45:a7:f5:35:0b:09:dc:02: ef:90:50:b6:56:d4:4e:87:b0:05:57:d3:2f:ad:80: 8b:59:60:55:83:18:aa:35:53:69:fd:63:fa:77:df: 3e:70:a6:2f:db:23:4d:87:cb:ef:d5:72:d2:78:f7: 6c:58:c7:07:86:44:64:09:26:64:65:2b:7d:ba:af: e9:36:f5:d3:26:c7:55:8d:1e:ec:64:af:fd:e9:38: 2c:7f:40:29:46:84:2c:13:b6:02:60:b2:f6:0a:e3: b1:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:21:B1:EF:27:BB:FE:8E:D2:A4:AB:BD:56:6E:A1:43:53:7B:20:00 X509v3 Authority Key Identifier: keyid:7E:EB:EF:D1:AE:72:51:99:E4:B0:23:CD:A2:2A:30:05:EF:BF:4D:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e20e800-25bb-4c78-a8b3-f0eb25c2e82a/0/7EEBEFD1AE725199E4B023CDA22A3005EFBF4DE8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:05:0d:34:0e:5c:3d:b0:f2:c3:a9:9d:5c:0f:a2:69:61:71: 0d:8b:26:75:c2:55:55:2f:0d:9d:10:de:80:10:5a:96:69:35: 6b:7e:38:9c:bc:0d:df:64:61:34:13:3f:5d:c2:7d:1c:73:f5: 56:19:2c:12:3f:96:98:99:4a:4a:6d:f2:ba:54:a6:52:dc:60: 59:eb:12:69:db:c5:03:e0:29:2f:74:6b:45:50:0b:65:a3:4b: 84:08:99:8c:12:67:31:49:a1:ec:66:08:d5:90:02:5e:eb:f0: 1a:7c:96:b7:51:ef:fd:01:55:64:e5:5b:5f:c8:73:45:79:81: 8a:9e:cf:35:b2:e8:91:d2:3d:f8:59:9f:79:7b:f4:1b:aa:58: 30:d9:e6:87:10:38:82:7b:c6:13:3d:88:7f:f2:c4:28:29:e9: 1f:3d:ea:0f:64:ca:5d:da:a1:79:04:3b:4d:15:fa:45:a3:4d: f8:8e:c2:cc:30:93:fa:db:03:35:1a:7d:95:53:02:f1:46:15: f4:23:eb:2f:e7:a2:d9:ce:07:54:fc:76:8c:a4:4c:c1:ca:f5: 08:b0:9a:55:d4:d3:a9:e7:87:4e:1c:70:6d:f0:9a:9e:de:58: cf:2f:f3:2b:e0:70:f6:e2:a7:a4:d1:68:0c:e9:f2:7f:de:de: a1:9b:18:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDzoozWJGB3AGmRzrNl1hDKsdtLYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVF RkJGNERFODAeFw0yNjAzMDExODQ3MDhaFw0yNjAzMDUwNDAyMDhaMDMxMTAvBgNV BAMTKEQ5MjFCMUVGMjdCQkZFOEVEMkE0QUJCRDU2NkVBMTQzNTM3QjIwMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuHdvMqcqbLrrhqL1x/DsHtr6V t+WAoTxMDuBhRtkpDquZ+svhx+/ox85zL55awvZdWqy73xfZ3tOQ5Kq/taIjkniZ UYCEgokrACBye1zMoTHZPcnegSrkxwdEGu0Zpbg23S7XQEz6rUIgYWbi4A4kelEo PRvlX372NN2abdLdz04BroyX8USblDUqlQSlnoBNQaXfJ34nk2sZdqhFp/U1Cwnc Au+QULZW1E6HsAVX0y+tgItZYFWDGKo1U2n9Y/p33z5wpi/bI02Hy+/VctJ492xY xweGRGQJJmRlK326r+k29dMmx1WNHuxkr/3pOCx/QClGhCwTtgJgsvYK47F5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2SGx7ye7/o7SpKu9Vm6hQ1N7IAAwHwYDVR0j BBgwFoAUfuvv0a5yUZnksCPNoiowBe+/TegwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZTIwZTgwMC0yNWJiLTRjNzgtYThiMy1mMGViMjVjMmU4MmEvMC83RUVCRUZEMUFF NzI1MTk5RTRCMDIzQ0RBMjJBMzAwNUVGQkY0REU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMwMDVFRkJG NERFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWUyMGU4MDAtMjViYi00Yzc4LWE4 YjMtZjBlYjI1YzJlODJhLzAvN0VFQkVGRDFBRTcyNTE5OUU0QjAyM0NEQTIyQTMw MDVFRkJGNERFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACwFDTQOXD2w8sOpnVwPomlhcQ2LJnXCVVUv DZ0Q3oAQWpZpNWt+OJy8Dd9kYTQTP13CfRxz9VYZLBI/lpiZSkpt8rpUplLcYFnr EmnbxQPgKS90a0VQC2WjS4QImYwSZzFJoexmCNWQAl7r8Bp8lrdR7/0BVWTlW1/I c0V5gYqezzWy6JHSPfhZn3l79BuqWDDZ5ocQOIJ7xhM9iH/yxCgp6R896g9kyl3a oXkEO00V+kWjTfiOwswwk/rbAzUafZVTAvFGFfQj6y/notnOB1T8doykTMHK9Qiw mlXU06nnh04ccG3wmp7eWM8v8yvgcPbip6TRaAzp8n/e3qGbGKI= -----END CERTIFICATE-----Generated at Mon Mar 2 17:28:10 2026 by rpki-client