$ rpki-client -vvf repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft File: 7AD0DDB5789DE529C8697A033978C381FFE40D83.mft (raw, json) Hash identifier: Jf/hP67CvW1vqDCT+MVunqRrVuzryX+HotJj0fGEvwg= Subject key identifier: DC:51:03:F2:23:E2:86:8A:CC:BE:B6:60:54:02:D5:84:01:58:66:F1 Authority key identifier: 7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 Certificate issuer: /CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Certificate serial: 776D8EF31BAE8578DE3CD5AF1D1AB7D4A69FB4CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft Manifest number: 0250 Signing time: Sun 01 Mar 2026 00:51:42 +0000 Manifest this update: Sun 01 Mar 2026 00:46:42 +0000 Manifest next update: Wed 04 Mar 2026 06:05:42 +0000 Files and hashes: 1: 7AD0DDB5789DE529C8697A033978C381FFE40D83.crl (hash: fUs4660/qmgCz5img3/lCASVWC7+yUvJjgV/X/+uWoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:05:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:6d:8e:f3:1b:ae:85:78:de:3c:d5:af:1d:1a:b7:d4:a6:9f:b4:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7AD0DDB5789DE529C8697A033978C381FFE40D83 Validity Not Before: Mar 1 00:46:42 2026 GMT Not After : Mar 4 06:05:42 2026 GMT Subject: CN=DC5103F223E2868ACCBEB6605402D584015866F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7d:7d:8f:50:5e:8f:74:8a:97:2d:5b:ff:af: 17:f2:19:82:f3:8b:78:91:f6:c9:b5:a2:c2:8e:04: d6:23:26:e8:6e:a0:88:fe:b9:66:91:bd:5f:24:ff: ca:0f:b6:bb:9f:f1:12:fd:e6:08:74:79:a8:4f:8f: d6:8e:0c:72:e2:3e:cb:3a:7e:2e:90:b9:56:37:3f: d4:c8:e1:74:05:85:68:98:d6:7c:05:da:75:65:9f: 6a:69:e6:2b:3c:58:75:36:dc:68:c6:1c:73:d2:9e: 15:f0:a9:df:92:8c:d8:c4:82:73:54:22:6d:bd:62: 29:68:1a:7e:cb:91:83:dd:ee:b5:fc:bb:90:f3:1d: 0a:06:23:e9:96:27:00:97:16:b6:5b:95:f2:6e:94: 7e:7c:f7:3d:7d:e6:33:04:9d:21:b8:a2:bc:ab:2b: d3:98:13:bf:35:ee:ad:c2:18:c3:d3:f4:0c:3e:c0: 99:80:73:02:7c:2d:d4:43:88:e9:4a:58:fb:c9:2f: fb:09:2a:27:01:49:23:f5:4c:03:b9:f1:04:3d:69: fc:06:b7:f9:c6:9f:9b:6d:de:b7:b0:bd:9b:1d:44: 75:b2:ab:23:95:44:20:33:f3:0b:1f:34:ad:25:df: ae:5d:ea:cf:d4:c3:fc:cc:93:ef:42:78:d2:15:cc: ff:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:51:03:F2:23:E2:86:8A:CC:BE:B6:60:54:02:D5:84:01:58:66:F1 X509v3 Authority Key Identifier: keyid:7A:D0:DD:B5:78:9D:E5:29:C8:69:7A:03:39:78:C3:81:FF:E4:0D:83 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7AD0DDB5789DE529C8697A033978C381FFE40D83.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af2b1786-1833-4d0a-a139-464433393d78/0/7AD0DDB5789DE529C8697A033978C381FFE40D83.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:f7:da:c2:0b:c2:f6:5d:6e:9a:59:ed:69:98:7d:75:87:23: 8f:9b:89:9e:c9:d1:ae:65:9f:96:04:8b:61:04:ba:8a:5a:63: ce:38:47:1e:73:52:58:ab:75:9c:6c:d6:9c:2d:19:ee:68:ec: 68:a0:77:cf:46:62:73:17:cc:3d:28:c2:a5:f4:93:35:c7:62: 2b:a1:43:d6:27:69:20:a9:25:91:9f:65:e4:d6:73:9d:4b:f6: f7:c3:0a:85:70:2c:d9:35:e5:07:ef:aa:0e:6f:c8:46:1f:8f: 00:63:74:3c:65:3b:de:d1:ca:26:e0:b2:47:b2:5d:02:b7:31: a4:c5:32:90:b9:2a:76:ce:6d:a3:7e:99:80:3f:10:87:70:51: cb:60:c1:e8:7f:bb:ed:88:15:b6:0d:c7:d7:63:84:40:fd:46: fa:2d:2c:76:33:c7:46:5e:41:7a:9f:6d:69:7b:d8:50:52:e5: 2c:8b:ec:48:02:2d:11:e8:fd:97:53:81:2d:12:e8:84:97:15: ee:ac:fd:a5:43:a1:65:7f:1b:7e:eb:6d:c8:a3:bb:00:68:5f: f0:c9:f2:3a:d9:03:32:b4:f2:c4:3c:70:0f:aa:63:7c:aa:2f: 19:bd:ac:e7:f2:b1:12:c1:3c:1e:67:ab:93:b4:e2:f8:c8:83: ee:4c:9e:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd22O8xuuhXjePNWvHRq31KaftM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFG RkU0MEQ4MzAeFw0yNjAzMDEwMDQ2NDJaFw0yNjAzMDQwNjA1NDJaMDMxMTAvBgNV BAMTKERDNTEwM0YyMjNFMjg2OEFDQ0JFQjY2MDU0MDJENTg0MDE1ODY2RjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGfX2PUF6PdIqXLVv/rxfyGYLz i3iR9sm1osKOBNYjJuhuoIj+uWaRvV8k/8oPtruf8RL95gh0eahPj9aODHLiPss6 fi6QuVY3P9TI4XQFhWiY1nwF2nVln2pp5is8WHU23GjGHHPSnhXwqd+SjNjEgnNU Im29YiloGn7LkYPd7rX8u5DzHQoGI+mWJwCXFrZblfJulH589z195jMEnSG4oryr K9OYE7817q3CGMPT9Aw+wJmAcwJ8LdRDiOlKWPvJL/sJKicBSSP1TAO58QQ9afwG t/nGn5tt3rewvZsdRHWyqyOVRCAz8wsfNK0l365d6s/Uw/zMk+9CeNIVzP9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3FED8iPihorMvrZgVALVhAFYZvEwHwYDVR0j BBgwFoAUetDdtXid5SnIaXoDOXjDgf/kDYMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjJiMTc4Ni0xODMzLTRkMGEtYTEzOS00NjQ0MzMzOTNkNzgvMC83QUQwRERCNTc4 OURFNTI5Qzg2OTdBMDMzOTc4QzM4MUZGRTQwRDgzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMzODFGRkU0 MEQ4My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYyYjE3ODYtMTgzMy00ZDBhLWEx MzktNDY0NDMzMzkzZDc4LzAvN0FEMEREQjU3ODlERTUyOUM4Njk3QTAzMzk3OEMz ODFGRkU0MEQ4My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/32sILwvZdbppZ7WmYfXWHI4+biZ7J0a5l n5YEi2EEuopaY844Rx5zUlirdZxs1pwtGe5o7Gigd89GYnMXzD0owqX0kzXHYiuh Q9YnaSCpJZGfZeTWc51L9vfDCoVwLNk15Qfvqg5vyEYfjwBjdDxlO97Ryibgskey XQK3MaTFMpC5KnbObaN+mYA/EIdwUctgweh/u+2IFbYNx9djhED9RvotLHYzx0Ze QXqfbWl72FBS5SyL7EgCLRHo/ZdTgS0S6ISXFe6s/aVDoWV/G37rbcijuwBoX/DJ 8jrZAzK08sQ8cA+qY3yqLxm9rOfysRLBPB5nq5O04vjIg+5Mnrk= -----END CERTIFICATE-----Generated at Mon Mar 2 15:19:44 2026 by rpki-client