$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: SQFVoyWLi2IAcH4biyZZUpGv9JCaONF+wnqe86CZzD0= Subject key identifier: 8A:8E:1F:9E:38:F9:5C:1A:92:5F:59:7E:0E:36:DC:11:AA:98:25:FD Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 061324AE7E99CF7F7B00FBAB23C8E2B6EF538150 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 03D0 Signing time: Sat 28 Feb 2026 13:42:14 +0000 Manifest this update: Sat 28 Feb 2026 13:37:14 +0000 Manifest next update: Wed 04 Mar 2026 00:34:14 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: Zzov4g0Ejq3YdQG3pDZev2Z7neMKU7xdHlmYMI6fGxo=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:34:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:13:24:ae:7e:99:cf:7f:7b:00:fb:ab:23:c8:e2:b6:ef:53:81:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Feb 28 13:37:14 2026 GMT Not After : Mar 4 00:34:14 2026 GMT Subject: CN=8A8E1F9E38F95C1A925F597E0E36DC11AA9825FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:1c:1c:b1:4f:fa:ca:04:f4:b7:da:96:83:eb: 29:6d:a0:18:25:0b:f2:fe:dc:2b:54:32:81:f7:3f: 3c:ee:a4:c9:95:20:d6:db:dd:6a:f5:a3:81:65:b0: 86:15:1b:32:cc:2d:5f:d9:b9:37:f7:60:ad:3f:c4: 1b:12:51:fc:f1:68:bb:f7:08:eb:c8:65:52:64:20: b3:7a:4c:0b:19:21:b3:08:3e:38:88:4a:4a:1a:e4: 41:79:99:df:42:0c:be:19:02:b7:91:66:90:5a:0b: 0d:bd:d7:7d:2e:33:ee:eb:b5:d1:bd:bd:73:7b:bd: f2:55:c4:4d:fc:7c:bd:0d:e3:02:24:b1:ac:b2:45: 47:07:30:cd:43:8d:e1:18:7a:9f:3c:b6:a7:61:74: 77:46:07:7b:44:d6:aa:e3:17:76:5e:34:2b:35:a5: 30:9d:ef:3c:7e:ba:92:32:51:90:2c:10:51:8b:37: 4a:0a:1b:97:31:28:f8:7f:3f:65:ce:3e:f1:66:98: 6c:e8:78:fb:45:5f:ab:81:06:95:32:c8:a8:fb:8c: 02:e9:4f:6c:6f:da:7c:39:2b:f2:8d:a5:99:30:a1: 61:46:c4:55:d7:b2:08:a4:3a:a0:8f:2c:8f:42:2b: ab:9e:e7:ee:04:5d:fa:c5:4e:18:e7:9f:10:94:3a: a6:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:8E:1F:9E:38:F9:5C:1A:92:5F:59:7E:0E:36:DC:11:AA:98:25:FD X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3f:1b:26:7c:26:57:26:2f:52:3c:1c:14:f9:18:b6:9e:03: 24:99:7b:d4:c3:dc:3c:af:93:b6:b5:cb:2c:44:77:5f:4b:9e: e8:ff:17:03:c4:62:27:b9:29:ea:96:56:39:36:e5:8d:30:c4: c0:d2:d3:5d:1c:04:78:2a:60:14:d8:be:69:41:cb:af:5a:a5: 01:0a:fc:56:09:9a:86:e4:81:26:ef:61:af:6f:02:f4:2a:2b: 23:ec:2d:59:7d:51:1d:88:b7:b3:2d:4b:7a:b0:e8:7b:f2:7f: 64:5c:37:c5:8b:5c:10:40:71:84:23:b3:ba:ec:44:0f:8f:17: d3:59:e6:14:a0:b8:c0:f5:23:ce:48:af:8e:4a:bb:be:60:62: 61:05:cc:60:49:af:62:d4:de:ab:b4:ac:9d:5e:99:3e:14:dd: 37:cb:dd:07:79:4a:1e:f6:b9:83:08:e4:fb:59:82:8a:78:39: 71:bc:02:21:60:af:42:b6:1b:da:f3:23:fd:60:32:db:9c:99: f3:99:b1:64:d7:cd:3b:d3:fd:bb:81:d0:5c:5c:28:4b:dc:17: 39:87:ca:41:e3:96:7c:74:26:e8:19:15:17:c2:66:56:ae:69: 77:47:07:09:40:7c:5d:bd:2d:9a:b0:02:41:96:0b:0c:f6:90: f4:8f:5f:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBhMkrn6Zz397APurI8jitu9TgVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNjAyMjgxMzM3MTRaFw0yNjAzMDQwMDM0MTRaMDMxMTAvBgNV BAMTKDhBOEUxRjlFMzhGOTVDMUE5MjVGNTk3RTBFMzZEQzExQUE5ODI1RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDHByxT/rKBPS32paD6yltoBgl C/L+3CtUMoH3PzzupMmVINbb3Wr1o4FlsIYVGzLMLV/ZuTf3YK0/xBsSUfzxaLv3 COvIZVJkILN6TAsZIbMIPjiISkoa5EF5md9CDL4ZAreRZpBaCw29130uM+7rtdG9 vXN7vfJVxE38fL0N4wIksayyRUcHMM1DjeEYep88tqdhdHdGB3tE1qrjF3ZeNCs1 pTCd7zx+upIyUZAsEFGLN0oKG5cxKPh/P2XOPvFmmGzoePtFX6uBBpUyyKj7jALp T2xv2nw5K/KNpZkwoWFGxFXXsgikOqCPLI9CK6ue5+4EXfrFThjnnxCUOqavAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUio4fnjj5XBqSX1l+DjbcEaqYJf0wHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQ/GyZ8JlcmL1I8HBT5GLaeAySZe9TD3Dyv k7a1yyxEd19Lnuj/FwPEYie5KeqWVjk25Y0wxMDS010cBHgqYBTYvmlBy69apQEK /FYJmobkgSbvYa9vAvQqKyPsLVl9UR2It7MtS3qw6Hvyf2RcN8WLXBBAcYQjs7rs RA+PF9NZ5hSguMD1I85Ir45Ku75gYmEFzGBJr2LU3qu0rJ1emT4U3TfL3Qd5Sh72 uYMI5PtZgop4OXG8AiFgr0K2G9rzI/1gMtucmfOZsWTXzTvT/buB0FxcKEvcFzmH ykHjlnx0JugZFRfCZlauaXdHBwlAfF29LZqwAkGWCwz2kPSPX9E= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:31 2026 by rpki-client