$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: 62vUhfEvJx9keWMBXpZE8e6Lbf+tiD7+MZcPhlfqRUg= Subject key identifier: 5D:77:A1:89:14:90:1A:86:FE:BC:A7:92:CA:3F:B2:97:9E:6E:3A:0F Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 6B9A2D702B78F0814397E25F9084B83985A01F60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: F7 Signing time: Sun 01 Mar 2026 20:42:29 +0000 Manifest this update: Sun 01 Mar 2026 20:37:29 +0000 Manifest next update: Thu 05 Mar 2026 00:36:29 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: 8DdlCdohyr42omjIKoo6FaovPmFBQr/evXhgYE1f2xI=) 2: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:36:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:9a:2d:70:2b:78:f0:81:43:97:e2:5f:90:84:b8:39:85:a0:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Mar 1 20:37:29 2026 GMT Not After : Mar 5 00:36:29 2026 GMT Subject: CN=5D77A18914901A86FEBCA792CA3FB2979E6E3A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:47:d9:3e:c4:a6:43:0c:b7:52:00:5c:03:7b: 94:19:d4:4d:ca:cb:e2:e3:8e:a7:94:ca:79:84:be: 50:b0:f4:cd:56:17:c0:80:3a:cd:a4:26:64:4f:ba: a2:3a:2b:d6:d4:04:7f:65:66:d3:4d:e4:52:4d:7d: 3d:23:7b:27:28:9c:27:4a:e2:85:61:ea:ac:da:ae: 64:12:7c:e4:6a:5a:58:61:c0:b5:1d:1d:d9:77:97: c4:ef:04:7a:bc:64:f7:09:fa:2b:ec:70:eb:a9:43: 35:e1:64:50:63:a6:4a:c2:02:fe:87:b7:ac:b6:b1: c5:bd:92:4a:c0:20:93:8a:16:8e:9f:8c:0f:34:95: 98:bf:ca:3a:12:53:7f:f5:67:ca:08:00:1c:be:a4: 3f:31:ae:67:b7:09:01:7b:56:88:97:47:72:fd:c5: d2:6c:37:7f:a1:9f:b1:d0:4d:0a:5c:59:a8:a4:f1: 1a:f4:12:4b:80:e0:82:98:af:57:33:03:b4:b0:92: ee:bd:9a:e5:75:a2:6b:e5:68:4d:6b:f0:be:8d:b5: a2:e0:f0:aa:5d:43:81:79:ef:8c:43:c3:5a:1f:38: 20:eb:31:4f:df:be:ae:2a:e8:9e:ec:61:c7:d7:31: e5:df:54:05:34:83:71:a1:6e:f8:b9:c2:2a:99:d4: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:77:A1:89:14:90:1A:86:FE:BC:A7:92:CA:3F:B2:97:9E:6E:3A:0F X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:2a:fd:ec:5c:e6:cb:f0:16:43:b2:a8:1d:3b:e3:8a:e1:2b: 9e:6c:ee:37:95:57:c3:2d:27:ef:9e:4b:cb:22:d9:6f:59:fa: 69:ed:f1:e0:07:6d:46:7e:72:75:4f:11:62:27:40:a7:37:ea: 0a:74:9b:9d:37:26:f5:f8:49:fa:26:30:9f:54:2b:c9:bf:c4: e9:ae:f8:d6:6a:94:58:89:40:ae:aa:7c:c3:cc:30:35:cb:1b: 38:d2:30:78:16:ae:20:21:0a:0e:91:d3:93:ef:dd:7a:34:bc: c1:e3:d3:d8:8f:9d:f0:50:f4:65:d5:c3:18:66:83:5e:ca:92: ee:8e:60:68:d6:84:2f:fd:7c:b5:b4:57:3d:13:49:92:e2:29: 61:10:bf:69:34:6c:28:02:cc:58:44:af:4f:17:c3:0e:d5:66: a7:2f:c9:d4:8a:98:94:0a:c7:ff:4b:d0:4f:07:2a:77:74:26: 9a:22:a0:0a:7b:5f:59:3b:02:83:ee:60:a7:87:c6:13:8f:b9: c3:5b:83:8c:e1:93:6d:6f:77:1a:f5:b9:eb:fd:86:61:aa:92: 6d:77:49:e9:05:c5:a3:a5:b0:e4:ae:2c:0e:60:e5:a4:77:29: b1:e8:e7:2f:3d:40:30:03:1b:85:06:eb:65:7f:ee:c8:47:22: 00:07:62:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5otcCt48IFDl+JfkIS4OYWgH2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNjAzMDEyMDM3MjlaFw0yNjAzMDUwMDM2MjlaMDMxMTAvBgNV BAMTKDVENzdBMTg5MTQ5MDFBODZGRUJDQTc5MkNBM0ZCMjk3OUU2RTNBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVR9k+xKZDDLdSAFwDe5QZ1E3K y+LjjqeUynmEvlCw9M1WF8CAOs2kJmRPuqI6K9bUBH9lZtNN5FJNfT0jeyconCdK 4oVh6qzarmQSfORqWlhhwLUdHdl3l8TvBHq8ZPcJ+ivscOupQzXhZFBjpkrCAv6H t6y2scW9kkrAIJOKFo6fjA80lZi/yjoSU3/1Z8oIABy+pD8xrme3CQF7VoiXR3L9 xdJsN3+hn7HQTQpcWaik8Rr0EkuA4IKYr1czA7Swku69muV1omvlaE1r8L6NtaLg 8KpdQ4F574xDw1ofOCDrMU/fvq4q6J7sYcfXMeXfVAU0g3Ghbvi5wiqZ1CCtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXXehiRSQGob+vKeSyj+yl55uOg8wHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABQq/exc5svwFkOyqB0744rhK55s7jeVV8Mt J++eS8si2W9Z+mnt8eAHbUZ+cnVPEWInQKc36gp0m503JvX4SfomMJ9UK8m/xOmu +NZqlFiJQK6qfMPMMDXLGzjSMHgWriAhCg6R05Pv3Xo0vMHj09iPnfBQ9GXVwxhm g17Kku6OYGjWhC/9fLW0Vz0TSZLiKWEQv2k0bCgCzFhEr08Xww7VZqcvydSKmJQK x/9L0E8HKnd0JpoioAp7X1k7AoPuYKeHxhOPucNbg4zhk21vdxr1uev9hmGqkm13 SekFxaOlsOSuLA5g5aR3KbHo5y89QDADG4UG62V/7shHIgAHYv8= -----END CERTIFICATE-----Generated at Mon Mar 2 14:30:43 2026 by rpki-client