$ rpki-client -vvf repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft File: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft (raw, json) Hash identifier: Sk4kkCxDtw6V+Uiw9tLK6HgPzcqa1JhuHZnh1TRUJ6Y= Subject key identifier: FD:4D:72:63:BC:AC:C5:66:2D:6A:6F:D4:44:90:0E:77:F3:1C:3E:E7 Authority key identifier: 78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 Certificate issuer: /CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Certificate serial: 537E2BCF9E25D589CAB8EE724C676EF75F2632EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft Manifest number: E0 Signing time: Sat 28 Feb 2026 18:21:05 +0000 Manifest this update: Sat 28 Feb 2026 18:16:05 +0000 Manifest next update: Tue 03 Mar 2026 21:00:05 +0000 Files and hashes: 1: 784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl (hash: fmfiKmVuMRjyGEuPgiZGC632+Z8KNx4yxL7b7KzMIRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 21:00:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:7e:2b:cf:9e:25:d5:89:ca:b8:ee:72:4c:67:6e:f7:5f:26:32:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=784DD9373B7B0B18D45139EEFEF49F1BB41E0408 Validity Not Before: Feb 28 18:16:05 2026 GMT Not After : Mar 3 21:00:05 2026 GMT Subject: CN=FD4D7263BCACC5662D6A6FD444900E77F31C3EE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:69:f1:43:27:6b:ed:cb:aa:ce:58:52:13:70: 22:10:4f:5f:38:86:20:08:20:41:7d:c6:4c:a6:a6: 35:4a:f4:7e:14:88:04:47:79:3c:8b:fb:81:34:61: 3d:36:f3:b2:a5:b0:1b:60:77:19:c6:06:bd:98:cf: 4a:81:83:09:0a:7f:ef:3f:81:18:23:b0:3f:b3:0b: 92:5f:fa:c9:b2:8e:fb:4e:19:35:b2:74:37:9d:a8: 0d:a1:fc:88:ab:cb:93:a3:ee:fb:34:e6:11:3a:71: 58:c4:13:2e:6a:15:bc:4e:cd:c3:a4:43:da:27:00: 2f:17:f7:c0:f2:b8:65:89:e0:97:67:15:62:eb:7e: a8:00:c1:6b:14:04:0c:ac:02:8a:15:eb:b5:f0:db: 90:e4:73:8c:2b:d7:48:6e:ac:e4:7e:3f:ab:e9:fa: be:3c:cd:ee:94:88:ea:97:17:3c:c1:0f:8e:3a:2d: 4a:e7:b3:3d:f6:c1:d8:7d:44:fa:29:79:95:5e:17: 1e:a9:53:16:e8:0e:84:c6:56:54:38:6e:1c:49:0c: 41:14:c7:0e:b4:b6:76:b2:57:12:34:41:f0:5f:42: 97:45:b7:e0:af:04:a5:1f:fe:f4:b5:40:ba:c9:79: b5:a1:4d:17:fe:15:15:51:ad:68:3b:69:df:8b:c2: 92:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:4D:72:63:BC:AC:C5:66:2D:6A:6F:D4:44:90:0E:77:F3:1C:3E:E7 X509v3 Authority Key Identifier: keyid:78:4D:D9:37:3B:7B:0B:18:D4:51:39:EE:FE:F4:9F:1B:B4:1E:04:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e9af4db-cf6f-49b3-a05b-61a7b9c817c1/0/784DD9373B7B0B18D45139EEFEF49F1BB41E0408.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:42:75:3f:fa:6f:d1:c0:93:83:0c:f1:73:e8:43:27:2e:72: 13:e5:95:b5:90:87:34:7d:8f:e7:31:44:b0:dc:6d:41:93:4b: 47:3f:a0:b4:e0:43:a8:b6:27:49:5a:cb:d3:a5:8e:b4:ca:11: 67:6d:24:25:84:c6:66:bf:cc:65:51:97:ef:8f:f4:39:d1:c6: ff:68:c8:e4:e2:b1:48:8d:d5:27:1b:51:9d:a8:49:c5:12:a4: 4d:36:8a:a7:bf:6f:f5:aa:33:4a:90:40:46:af:3a:be:c3:f6: 84:85:a7:25:51:c2:ef:f5:af:cf:fc:f4:10:9d:de:e1:61:91: b0:3c:ba:d2:83:7f:5c:ba:3b:19:ee:ca:95:e1:6b:37:63:12: 97:86:32:ad:b5:0a:10:d9:d6:be:eb:e4:9e:6c:da:69:ea:44: 1f:a1:78:b2:f9:c2:d8:61:51:7c:ca:55:e7:dd:57:de:77:28: 7e:b0:b5:49:8e:2a:57:9a:eb:c6:07:5d:b9:40:68:91:d8:10: ff:a4:9c:b3:1d:85:fd:cf:13:11:2c:61:72:91:2a:61:a3:a6: 30:41:cc:d5:7e:c4:05:51:a2:dc:ad:3a:8c:37:94:9a:a4:90: 13:5f:c0:82:63:ee:7f:fc:3a:ab:02:b7:10:51:1c:cc:e6:ea: e1:86:f0:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU34rz54l1YnKuO5yTGdu918mMu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJC NDFFMDQwODAeFw0yNjAyMjgxODE2MDVaFw0yNjAzMDMyMTAwMDVaMDMxMTAvBgNV BAMTKEZENEQ3MjYzQkNBQ0M1NjYyRDZBNkZENDQ0OTAwRTc3RjMxQzNFRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5afFDJ2vty6rOWFITcCIQT184 hiAIIEF9xkympjVK9H4UiARHeTyL+4E0YT0287KlsBtgdxnGBr2Yz0qBgwkKf+8/ gRgjsD+zC5Jf+smyjvtOGTWydDedqA2h/Iiry5Oj7vs05hE6cVjEEy5qFbxOzcOk Q9onAC8X98DyuGWJ4JdnFWLrfqgAwWsUBAysAooV67Xw25Dkc4wr10hurOR+P6vp +r48ze6UiOqXFzzBD446LUrnsz32wdh9RPopeZVeFx6pUxboDoTGVlQ4bhxJDEEU xw60tnayVxI0QfBfQpdFt+CvBKUf/vS1QLrJebWhTRf+FRVRrWg7ad+LwpLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/U1yY7ysxWYtam/URJAOd/McPucwHwYDVR0j BBgwFoAUeE3ZNzt7CxjUUTnu/vSfG7QeBAgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTlhZjRkYi1jZjZmLTQ5YjMtYTA1Yi02MWE3YjljODE3YzEvMC83ODRERDkzNzNC N0IwQjE4RDQ1MTM5RUVGRUY0OUYxQkI0MUUwNDA4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlGMUJCNDFF MDQwOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U5YWY0ZGItY2Y2Zi00OWIzLWEw NWItNjFhN2I5YzgxN2MxLzAvNzg0REQ5MzczQjdCMEIxOEQ0NTEzOUVFRkVGNDlG MUJCNDFFMDQwOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpCdT/6b9HAk4MM8XPoQycuchPllbWQhzR9 j+cxRLDcbUGTS0c/oLTgQ6i2J0lay9OljrTKEWdtJCWExma/zGVRl++P9DnRxv9o yOTisUiN1ScbUZ2oScUSpE02iqe/b/WqM0qQQEavOr7D9oSFpyVRwu/1r8/89BCd 3uFhkbA8utKDf1y6OxnuypXhazdjEpeGMq21ChDZ1r7r5J5s2mnqRB+heLL5wthh UXzKVefdV953KH6wtUmOKlea68YHXblAaJHYEP+knLMdhf3PExEsYXKRKmGjpjBB zNV+xAVRotytOow3lJqkkBNfwIJj7n/8OqsCtxBRHMzm6uGG8JQ= -----END CERTIFICATE-----Generated at Mon Mar 2 20:36:36 2026 by rpki-client