$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: jBxGWwfVknTn1xqefnepOpCTQgPMhDPqvKIY6OPvyJ8= Subject key identifier: 9D:91:11:41:1A:DD:BB:C1:49:64:BA:5E:67:4C:B0:F1:D8:56:9E:89 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 11F99E38610DF88973F05B01185DE4C753086C13 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0209 Signing time: Sat 28 Feb 2026 21:01:43 +0000 Manifest this update: Sat 28 Feb 2026 20:56:43 +0000 Manifest next update: Tue 03 Mar 2026 21:59:43 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: 8yVu0EcfuD6kR8Rd480ITMDd2HZu/tST+CMymeEWCs8=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: cp5AZz8jsj7lkSzSuyAiGgYK8cjqibH/qG2rGgK+9is=) 3: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: ucCbwXx4y4Y9tjJj1wWolRQrWsXSQxItRBf8rwecRXg=) 4: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: zf/PohLzFCJiUqI9Mgfrev7PucURzdNsl2RNcKVdXxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:59:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:f9:9e:38:61:0d:f8:89:73:f0:5b:01:18:5d:e4:c7:53:08:6c:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Feb 28 20:56:43 2026 GMT Not After : Mar 3 21:59:43 2026 GMT Subject: CN=9D9111411ADDBBC14964BA5E674CB0F1D8569E89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:be:fc:1f:3a:32:e9:1f:b0:f6:d6:32:ae:aa: 82:ab:a9:12:72:6e:b1:09:e6:15:37:5c:f7:0e:6d: 99:c6:c5:cf:8b:78:7f:51:76:be:ac:82:58:d6:61: 1d:a6:dc:83:a3:fe:81:ea:6e:4d:e4:c0:dd:f2:92: 49:44:ba:04:e3:1d:ba:8c:5b:19:12:70:0d:e3:93: 3d:1a:22:66:8a:e1:0c:07:5d:ef:56:14:63:f0:8c: 02:60:eb:2f:c6:a5:76:60:1b:10:ff:ed:ca:c1:35: 9c:2a:1a:cd:aa:44:a7:63:77:58:9a:ad:99:8f:02: cd:ae:4f:61:17:38:d2:56:f5:54:ea:8f:0e:fb:1a: f9:56:81:b9:51:5b:28:eb:01:57:2d:ea:63:8d:c7: ed:dd:02:e5:53:fc:98:85:3e:62:ff:e4:51:66:f2: 6b:b1:79:30:74:bd:cd:3d:34:d7:97:73:1d:3e:71: b7:d2:f3:a0:70:32:53:53:d4:9c:25:5e:8b:43:74: 20:25:8b:c0:c5:00:c1:7c:bb:a2:be:34:df:0f:d1: 70:9d:88:a1:97:ed:28:e5:cb:63:2a:25:ec:08:6c: 81:40:3f:81:f3:0e:da:59:60:b4:fc:0f:3e:da:9c: d4:d0:09:60:7d:d4:34:db:30:7c:77:30:94:dc:9e: df:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:91:11:41:1A:DD:BB:C1:49:64:BA:5E:67:4C:B0:F1:D8:56:9E:89 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:21:7b:7b:7c:c4:74:d3:f6:61:4b:46:a6:b5:71:36:b9:9d: 21:9f:54:b6:c9:e3:19:af:d7:3c:8a:7d:00:ac:ee:33:f6:9c: 02:ff:cc:9b:83:b2:ab:d3:5b:c1:26:63:ec:42:34:e7:4e:89: 9a:14:cc:43:73:67:e5:f2:36:5d:26:a9:13:5a:0c:0f:fa:69: c6:e9:2e:4c:7a:e8:e3:5c:1d:2d:44:92:eb:06:e1:5b:5a:ac: a8:2e:08:a1:d4:44:33:13:11:11:46:47:37:09:b6:26:e2:f7: b0:7f:43:5d:d5:b1:ca:71:35:2d:8c:18:00:a7:90:41:1e:95: 4b:d5:ad:9e:ec:4c:58:d0:64:f8:89:ad:25:1c:f0:b1:71:82: e2:b0:28:ea:06:77:5a:0b:c6:f6:2f:52:cb:53:c4:95:70:40: ce:db:f3:f1:85:b5:f4:a8:1d:de:63:90:f0:cd:8b:76:64:d0: 6a:29:98:27:da:f4:78:f7:6d:7c:97:8b:49:ae:bd:e0:24:6e: 03:62:53:e3:a8:64:e7:66:8a:03:49:a8:6b:5c:5d:72:16:8b: 81:c7:f5:96:26:71:bb:25:da:fb:fa:aa:99:92:ca:e3:ce:2d: 56:f6:ae:1c:f2:8d:67:2b:23:fb:de:f3:47:ce:b9:03:7d:54: 6f:36:fd:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEfmeOGEN+Ilz8FsBGF3kx1MIbBMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNjAyMjgyMDU2NDNaFw0yNjAzMDMyMTU5NDNaMDMxMTAvBgNV BAMTKDlEOTExMTQxMUFEREJCQzE0OTY0QkE1RTY3NENCMEYxRDg1NjlFODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2vvwfOjLpH7D21jKuqoKrqRJy brEJ5hU3XPcObZnGxc+LeH9Rdr6sgljWYR2m3IOj/oHqbk3kwN3ykklEugTjHbqM WxkScA3jkz0aImaK4QwHXe9WFGPwjAJg6y/GpXZgGxD/7crBNZwqGs2qRKdjd1ia rZmPAs2uT2EXONJW9VTqjw77GvlWgblRWyjrAVct6mONx+3dAuVT/JiFPmL/5FFm 8muxeTB0vc09NNeXcx0+cbfS86BwMlNT1JwlXotDdCAli8DFAMF8u6K+NN8P0XCd iKGX7Sjly2MqJewIbIFAP4HzDtpZYLT8Dz7anNTQCWB91DTbMHx3MJTcnt+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnZERQRrdu8FJZLpeZ0yw8dhWnokwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYhe3t8xHTT9mFLRqa1cTa5nSGfVLbJ4xmv 1zyKfQCs7jP2nAL/zJuDsqvTW8EmY+xCNOdOiZoUzENzZ+XyNl0mqRNaDA/6acbp Lkx66ONcHS1EkusG4VtarKguCKHURDMTERFGRzcJtibi97B/Q13VscpxNS2MGACn kEEelUvVrZ7sTFjQZPiJrSUc8LFxguKwKOoGd1oLxvYvUstTxJVwQM7b8/GFtfSo Hd5jkPDNi3Zk0GopmCfa9Hj3bXyXi0muveAkbgNiU+OoZOdmigNJqGtcXXIWi4HH 9ZYmcbsl2vv6qpmSyuPOLVb2rhzyjWcrI/ve80fOuQN9VG82/Qo= -----END CERTIFICATE-----Generated at Mon Mar 2 01:14:19 2026 by rpki-client