$ rpki-client -vvf repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft File: 7195906BF48238F96B0510D75000910A519133F7.mft (raw, json) Hash identifier: FPFa6Y/oHSwu+18gbhy3Rx/UDw5cJQyecM4Rf+TF9fc= Subject key identifier: 9B:CD:D4:39:BC:7D:F4:25:E6:F4:BC:21:C6:53:36:5C:58:61:65:2F Authority key identifier: 71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 Certificate issuer: /CN=7195906BF48238F96B0510D75000910A519133F7 Certificate serial: 1FA2886E6FAF38AAB5E1331E3AD689DAE085BF86 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft Manifest number: 01EB Signing time: Mon 02 Mar 2026 02:51:41 +0000 Manifest this update: Mon 02 Mar 2026 02:46:41 +0000 Manifest next update: Thu 05 Mar 2026 13:26:41 +0000 Files and hashes: 1: 3130332e3136382e3135312e302f32342d3234203d3e20313432333131.roa (hash: s6WBhLaUVIxSMrwUa1GyQKxiSJ5Lxm0zhF+JRIxoxjM=) 2: 3130332e3136382e3135302e302f32342d3234203d3e20313432333131.roa (hash: FbNYGlqllOlMcgZqW/AYQTW3Ig+jNpTHmcZ/SLk/YWc=) 3: 7195906BF48238F96B0510D75000910A519133F7.crl (hash: ik8OJ7246ulh9L/4Lg7XwljBYFzSCx8z7M/JKYnzyZU=) 4: 3130332e3136382e3135302e302f32332d3233203d3e20313432333131.roa (hash: vej87BChpsakmxUSnkAXWyF/hseNZHZfP/+A76YToPE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:a2:88:6e:6f:af:38:aa:b5:e1:33:1e:3a:d6:89:da:e0:85:bf:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7195906BF48238F96B0510D75000910A519133F7 Validity Not Before: Mar 2 02:46:41 2026 GMT Not After : Mar 5 13:26:41 2026 GMT Subject: CN=9BCDD439BC7DF425E6F4BC21C653365C5861652F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:c1:be:8f:18:63:c3:bb:82:b5:35:23:c5:69: 72:08:e4:28:a9:bb:71:eb:e8:b2:7c:f4:cf:3a:9c: 06:6f:09:b9:95:4d:ce:00:51:aa:27:2f:1f:97:96: e5:6c:75:7d:a1:50:12:e1:81:54:37:22:f6:f0:5c: d3:68:79:23:f8:a4:cb:a2:e0:24:19:e7:6a:dd:8d: 47:a2:c3:86:d1:1b:98:71:65:b7:02:51:2f:ea:56: df:6e:39:29:91:be:07:f6:e9:2e:1a:91:23:26:6e: c6:83:ca:4d:4c:30:a3:ef:a0:65:e9:71:91:2b:7c: 1e:70:26:b6:6d:fc:f8:72:7d:aa:14:b0:f1:a8:02: 1e:5a:c4:eb:88:75:4d:7e:11:6e:6d:ad:36:ed:25: 55:1f:79:3b:41:13:ee:16:c2:80:08:12:cc:0a:6c: 0e:a3:78:14:f8:43:1b:86:2b:f1:0a:b3:19:a2:94: 12:2b:aa:9c:7e:ef:ee:6f:cf:f9:86:e8:51:91:66: 83:48:d7:0e:78:2b:f3:ce:db:51:cf:da:16:ba:f7: f4:a0:2a:30:92:bd:e0:82:87:08:84:81:85:86:43: 38:9d:43:1a:08:c2:c4:45:7d:34:35:c5:7f:7a:b2: 88:ed:1c:a5:1f:99:03:36:d4:7c:57:78:d8:6c:8c: f2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:CD:D4:39:BC:7D:F4:25:E6:F4:BC:21:C6:53:36:5C:58:61:65:2F X509v3 Authority Key Identifier: keyid:71:95:90:6B:F4:82:38:F9:6B:05:10:D7:50:00:91:0A:51:91:33:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7195906BF48238F96B0510D75000910A519133F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac32eee1-10f7-457d-a8c5-5f7f741a63da/0/7195906BF48238F96B0510D75000910A519133F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:42:56:5d:fb:47:02:ed:28:ca:0f:10:6b:0f:5e:65:ad:9f: 10:0e:38:75:65:f4:60:43:85:07:16:34:6c:87:2c:7b:a3:a7: 37:61:e0:1a:ef:65:4a:76:03:6e:94:a0:ce:ba:53:67:34:47: ad:0a:5a:18:9a:66:93:47:24:6c:2c:d5:ca:e8:75:cb:48:fe: 58:77:5c:aa:81:9f:92:14:51:02:3a:6d:be:a6:72:d7:f6:14: e7:31:b3:95:65:23:8d:72:12:0c:22:df:0a:cb:e6:63:57:09: a1:ec:93:12:f4:4b:09:7a:93:3a:32:e1:f7:1f:b9:c6:6d:e0: b6:cc:ef:f2:25:e6:99:b6:98:5b:3e:17:e6:b6:a7:9d:d0:6f: 2f:b5:67:16:dc:6b:b4:90:71:79:79:eb:a1:24:ee:0f:e9:01: 32:a8:c0:b3:d6:a5:40:e9:31:e2:9a:11:d7:c0:0a:41:de:94: 5d:19:1c:5a:68:5e:dc:4a:e4:5c:3a:45:e7:7d:5b:3f:a6:57: 6d:ff:32:44:a5:f5:ed:26:0a:9a:69:48:51:15:1e:e8:af:72: fc:48:d7:68:87:a6:25:a9:68:d7:11:3c:cf:c1:9b:70:f0:c3: 0b:8b:8e:04:76:d5:de:8d:79:6c:16:97:67:05:18:b1:44:d5: dd:77:0c:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH6KIbm+vOKq14TMeOtaJ2uCFv4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1 MTkxMzNGNzAeFw0yNjAzMDIwMjQ2NDFaFw0yNjAzMDUxMzI2NDFaMDMxMTAvBgNV BAMTKDlCQ0RENDM5QkM3REY0MjVFNkY0QkMyMUM2NTMzNjVDNTg2MTY1MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/wb6PGGPDu4K1NSPFaXII5Cip u3Hr6LJ89M86nAZvCbmVTc4AUaonLx+XluVsdX2hUBLhgVQ3IvbwXNNoeSP4pMui 4CQZ52rdjUeiw4bRG5hxZbcCUS/qVt9uOSmRvgf26S4akSMmbsaDyk1MMKPvoGXp cZErfB5wJrZt/PhyfaoUsPGoAh5axOuIdU1+EW5trTbtJVUfeTtBE+4WwoAIEswK bA6jeBT4QxuGK/EKsxmilBIrqpx+7+5vz/mG6FGRZoNI1w54K/PO21HP2ha69/Sg KjCSveCChwiEgYWGQzidQxoIwsRFfTQ1xX96sojtHKUfmQM21HxXeNhsjPLJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm83UObx99CXm9LwhxlM2XFhhZS8wHwYDVR0j BBgwFoAUcZWQa/SCOPlrBRDXUACRClGRM/cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h YzMyZWVlMS0xMGY3LTQ1N2QtYThjNS01ZjdmNzQxYTYzZGEvMC83MTk1OTA2QkY0 ODIzOEY5NkIwNTEwRDc1MDAwOTEwQTUxOTEzM0Y3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkxMEE1MTkx MzNGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWMzMmVlZTEtMTBmNy00NTdkLWE4 YzUtNWY3Zjc0MWE2M2RhLzAvNzE5NTkwNkJGNDgyMzhGOTZCMDUxMEQ3NTAwMDkx MEE1MTkxMzNGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhCVl37RwLtKMoPEGsPXmWtnxAOOHVl9GBD hQcWNGyHLHujpzdh4BrvZUp2A26UoM66U2c0R60KWhiaZpNHJGws1crodctI/lh3 XKqBn5IUUQI6bb6mctf2FOcxs5VlI41yEgwi3wrL5mNXCaHskxL0Swl6kzoy4fcf ucZt4LbM7/Il5pm2mFs+F+a2p53Qby+1Zxbca7SQcXl566Ek7g/pATKowLPWpUDp MeKaEdfACkHelF0ZHFpoXtxK5Fw6Red9Wz+mV23/MkSl9e0mCpppSFEVHuivcvxI 12iHpiWpaNcRPM/Bm3DwwwuLjgR21d6NeWwWl2cFGLFE1d13DHM= -----END CERTIFICATE-----Generated at Mon Mar 2 10:42:34 2026 by rpki-client