$ rpki-client -vvf repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft File: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft (raw, json) Hash identifier: dHti3Zw32q9EcJJw34Dc2wyZeRBndXspZu8hAzCk0yA= Subject key identifier: 12:95:A2:9B:BA:21:AF:4E:F1:CA:DE:92:B9:9D:A3:F9:BE:69:CA:B4 Authority key identifier: 7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 Certificate issuer: /CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Certificate serial: 77E0E519B265FA0FD9FBEC4973473CE18B27A076 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft Manifest number: FE Signing time: Sun 01 Mar 2026 07:02:17 +0000 Manifest this update: Sun 01 Mar 2026 06:57:17 +0000 Manifest next update: Wed 04 Mar 2026 09:30:17 +0000 Files and hashes: 1: 7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl (hash: JJOd3WmanTKc0sbLfx6IyO+F4ckSef1jLe0wMoAKJSM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:e0:e5:19:b2:65:fa:0f:d9:fb:ec:49:73:47:3c:e1:8b:27:a0:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D508B225350B0D204F1943F4F53D4D86AC4FC31 Validity Not Before: Mar 1 06:57:17 2026 GMT Not After : Mar 4 09:30:17 2026 GMT Subject: CN=1295A29BBA21AF4EF1CADE92B99DA3F9BE69CAB4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:d5:04:c6:ab:48:b0:32:ac:77:4f:6e:39:c3: 6e:a1:7a:53:c9:fc:8c:7b:f4:fb:2e:99:fc:a0:4f: 0b:85:82:2b:f3:32:70:9b:95:ce:a5:47:59:2c:0f: c2:b3:af:49:39:3f:32:08:00:c4:f0:c2:f7:d2:84: ab:7d:88:74:64:56:c8:c4:30:7a:ae:7e:27:b8:63: 5d:fb:75:f5:90:af:b5:ec:1f:aa:7a:7c:f4:3e:6b: 47:84:70:be:58:a9:28:d9:24:b0:b8:54:40:05:2e: 41:5c:9f:d1:d3:79:e3:c1:96:0e:66:d6:d4:4d:de: b5:08:3c:69:ac:5a:7a:48:ae:bd:94:dd:fc:15:b8: d3:e2:e6:c6:a7:24:8d:60:52:72:dd:72:24:5b:3b: cb:6f:cd:9c:4b:36:b8:17:b0:81:40:40:b9:98:44: 24:53:08:54:cb:ec:56:51:b3:47:26:6b:78:c9:70: 22:c0:c9:c4:c5:44:e7:14:58:9c:a9:80:f0:10:bf: 1e:84:55:c0:99:df:b7:ca:a4:76:e6:ca:2e:96:c3: a4:95:78:64:d4:b8:ca:17:25:9c:41:30:3f:ba:b6: 33:db:c7:c9:36:b6:9c:b0:18:63:a2:34:3e:57:ec: 1a:07:1d:74:94:e4:45:dd:1a:41:d4:87:20:c6:18: 50:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:95:A2:9B:BA:21:AF:4E:F1:CA:DE:92:B9:9D:A3:F9:BE:69:CA:B4 X509v3 Authority Key Identifier: keyid:7D:50:8B:22:53:50:B0:D2:04:F1:94:3F:4F:53:D4:D8:6A:C4:FC:31 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D508B225350B0D204F1943F4F53D4D86AC4FC31.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b3b230a-fff1-47f0-bf91-7ceb8d36096e/0/7D508B225350B0D204F1943F4F53D4D86AC4FC31.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:01:a6:bc:48:60:40:58:8c:21:d3:22:f8:df:e1:21:0d:bd: f9:c8:17:34:54:c6:70:91:ba:07:f4:c2:69:c4:68:a3:b9:b4: 48:97:8f:7b:eb:87:a2:35:4d:b1:8e:90:4e:16:a7:f8:26:74: 72:4c:0b:fc:1b:1c:8d:ca:6a:2b:7b:d5:f1:4f:97:2b:cd:88: f0:31:22:85:1d:84:1b:30:45:19:6b:57:21:f5:95:b0:6e:9d: e3:ce:60:e1:d2:60:aa:76:79:89:4b:cb:59:01:50:b0:a2:47: e0:fc:40:7c:e4:c8:fe:e5:40:73:82:96:2d:ef:7b:4e:5e:84: 9a:9a:61:09:e6:bd:c5:ce:9e:d8:f3:c0:5c:48:78:b3:38:4a: 01:3b:a4:60:aa:e7:5f:43:73:63:2c:cc:54:d6:36:54:62:49: ea:b6:15:55:17:7e:72:b1:31:64:b9:e8:e0:8d:1a:7c:7c:a6: dd:6e:e2:53:21:fe:d9:19:56:04:53:bd:5f:57:ef:f7:35:47: 87:c0:2e:5e:f8:4f:ca:31:dd:9d:2f:7f:22:0e:b4:37:fc:db: 57:45:7d:12:b4:bb:cc:63:c6:af:49:c2:08:c6:67:ab:ed:18: bc:a4:cd:f6:cb:40:b4:37:bb:b2:40:14:0b:c5:3f:d2:ba:d7: dd:cd:ae:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+DlGbJl+g/Z++xJc0c84YsnoHYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2 QUM0RkMzMTAeFw0yNjAzMDEwNjU3MTdaFw0yNjAzMDQwOTMwMTdaMDMxMTAvBgNV BAMTKDEyOTVBMjlCQkEyMUFGNEVGMUNBREU5MkI5OURBM0Y5QkU2OUNBQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg1QTGq0iwMqx3T245w26helPJ /Ix79PsumfygTwuFgivzMnCblc6lR1ksD8Kzr0k5PzIIAMTwwvfShKt9iHRkVsjE MHqufie4Y137dfWQr7XsH6p6fPQ+a0eEcL5YqSjZJLC4VEAFLkFcn9HTeePBlg5m 1tRN3rUIPGmsWnpIrr2U3fwVuNPi5sanJI1gUnLdciRbO8tvzZxLNrgXsIFAQLmY RCRTCFTL7FZRs0cma3jJcCLAycTFROcUWJypgPAQvx6EVcCZ37fKpHbmyi6Ww6SV eGTUuMoXJZxBMD+6tjPbx8k2tpywGGOiND5X7BoHHXSU5EXdGkHUhyDGGFBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEpWim7ohr07xyt6SuZ2j+b5pyrQwHwYDVR0j BBgwFoAUfVCLIlNQsNIE8ZQ/T1PU2GrE/DEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjNiMjMwYS1mZmYxLTQ3ZjAtYmY5MS03Y2ViOGQzNjA5NmUvMC83RDUwOEIyMjUz NTBCMEQyMDRGMTk0M0Y0RjUzRDREODZBQzRGQzMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0RDg2QUM0 RkMzMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWIzYjIzMGEtZmZmMS00N2YwLWJm OTEtN2NlYjhkMzYwOTZlLzAvN0Q1MDhCMjI1MzUwQjBEMjA0RjE5NDNGNEY1M0Q0 RDg2QUM0RkMzMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4BprxIYEBYjCHTIvjf4SENvfnIFzRUxnCR ugf0wmnEaKO5tEiXj3vrh6I1TbGOkE4Wp/gmdHJMC/wbHI3Kait71fFPlyvNiPAx IoUdhBswRRlrVyH1lbBunePOYOHSYKp2eYlLy1kBULCiR+D8QHzkyP7lQHOCli3v e05ehJqaYQnmvcXOntjzwFxIeLM4SgE7pGCq519Dc2MszFTWNlRiSeq2FVUXfnKx MWS56OCNGnx8pt1u4lMh/tkZVgRTvV9X7/c1R4fALl74T8ox3Z0vfyIOtDf821dF fRK0u8xjxq9JwgjGZ6vtGLykzfbLQLQ3u7JAFAvFP9K6193NrlE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:46 2026 by rpki-client