$ rpki-client -vvf repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft File: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft (raw, json) Hash identifier: FtGGcgTT6rLu2JToRFQ9Cm3oQg8FphF8uTG87Ppobi8= Subject key identifier: 03:E2:10:6A:DE:78:B1:6B:82:C5:21:07:83:DF:6D:48:3F:04:3A:93 Authority key identifier: 7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C Certificate issuer: /CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Certificate serial: 5C2D81E39FE72F78E6811D712831A25AFFE330AA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft Manifest number: 7C Signing time: Sun 01 Mar 2026 10:51:23 +0000 Manifest this update: Sun 01 Mar 2026 10:46:23 +0000 Manifest next update: Wed 04 Mar 2026 20:41:23 +0000 Files and hashes: 1: 3130332e3133342e36362e302f32342d3234203d3e203435333132.roa (hash: WRfY/rBH6p7PK9emmqpsCXbVvrKz6VH5x4tTkw/6VAg=) 2: 3130332e3133342e36362e302f32332d3234203d3e203435333132.roa (hash: AvEPI0bAoOmymUfdeDC6gmwMLJ9H1XDm/x+gGjdHvOw=) 3: 7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl (hash: qWt1yKeoU7EsQs9cuKqrBT3UPKibRZWvkRKE6aNNJPs=) 4: 3130332e3133342e36372e302f32342d3234203d3e203435333132.roa (hash: E6gkUAkUB565OD/KSAK3yf+TxFTGQrj7xHTIY9Gqph4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:41:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2d:81:e3:9f:e7:2f:78:e6:81:1d:71:28:31:a2:5a:ff:e3:30:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F9ECE743A3074E61F56CD11161AA58A6BB4092C Validity Not Before: Mar 1 10:46:23 2026 GMT Not After : Mar 4 20:41:23 2026 GMT Subject: CN=03E2106ADE78B16B82C5210783DF6D483F043A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:02:88:da:3d:b7:8e:fa:71:7f:3b:52:cf:84: 23:1c:f2:43:2e:f8:d6:03:ef:63:e1:28:26:cf:d0: 31:4b:a0:99:88:5f:cf:71:30:6e:4c:25:55:9d:8b: 59:1c:58:af:e4:09:03:43:f3:75:8b:4d:75:df:9a: 31:ae:68:0a:8a:3b:a1:22:6a:98:3c:b7:0a:2f:bd: 07:68:20:df:cb:2a:f4:aa:89:6d:74:81:f4:5d:fb: 4d:d7:f3:08:4e:b9:a6:12:b2:c3:e4:9a:2a:7d:a6: 2b:9d:bc:b0:29:c2:51:83:36:56:ee:06:c8:d6:d3: a9:65:b9:a7:5f:4d:96:a3:b8:d3:dc:cc:9b:e2:51: 63:70:f3:47:ed:d8:1b:e2:df:df:82:77:72:3d:c4: e0:41:d1:88:91:52:a6:9a:b1:dc:f1:59:92:fd:f2: c3:2a:2d:f6:bd:7c:de:c3:dd:9f:5c:0a:82:c5:c7: a8:6b:bc:03:21:1f:c5:13:ad:62:27:83:14:72:98: 94:24:19:76:bf:54:9c:a1:c9:7c:e5:8d:11:bb:8e: 9f:39:17:3c:29:bf:d2:9f:b2:33:b6:8b:ed:4b:f1: c8:21:cf:38:fc:db:35:1a:51:50:3d:88:99:70:f9: e9:34:6c:9c:ce:1b:81:23:4f:cd:af:be:45:69:45: b4:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:E2:10:6A:DE:78:B1:6B:82:C5:21:07:83:DF:6D:48:3F:04:3A:93 X509v3 Authority Key Identifier: keyid:7F:9E:CE:74:3A:30:74:E6:1F:56:CD:11:16:1A:A5:8A:6B:B4:09:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf66bfa6-dc4c-4108-932c-204b62e86272/0/7F9ECE743A3074E61F56CD11161AA58A6BB4092C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:98:d0:c9:f4:79:7d:32:d9:bc:0f:a9:d8:e5:bf:57:be:cd: 50:71:b5:b1:15:c2:e7:88:37:a2:f5:e2:0d:7a:c3:9f:9d:af: cb:aa:04:59:8b:c9:75:cf:d0:e4:5f:03:af:5e:bb:ee:50:b1: 66:26:f2:6d:3e:60:87:9f:bb:c4:07:cb:c8:8b:76:de:ce:d3: 44:86:7a:85:a5:ac:a5:bb:7d:bb:d8:09:2a:21:cf:18:45:48: e0:fd:7e:74:b8:d4:9a:a7:8d:3a:da:6e:14:91:fb:06:13:af: 86:05:cc:9b:44:86:c1:1c:e7:5f:55:7d:1c:c9:cd:c8:e0:f2: 78:c0:30:09:a3:1f:e1:21:f9:31:62:60:e5:da:28:0d:d1:36: 1d:94:4d:8d:76:4c:cd:be:bb:41:c6:1e:96:b0:46:74:64:44: 7b:45:63:cc:0c:d7:79:d1:5a:f7:ec:46:c5:ec:a6:fe:e8:0b: f3:31:15:a6:1c:65:c5:bb:d3:1d:fd:db:3a:a6:e5:e5:6f:6f: f8:f2:74:8d:13:5c:8a:85:39:cd:e2:34:55:5f:9b:52:ce:35: 22:f2:d6:58:f1:6c:7c:57:d9:b7:57:8f:b8:90:a8:10:94:29: 0b:e7:23:64:a5:b3:31:46:ea:22:0f:44:65:76:30:9c:be:09: f3:01:b1:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXC2B45/nL3jmgR1xKDGiWv/jMKowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2 QkI0MDkyQzAeFw0yNjAzMDExMDQ2MjNaFw0yNjAzMDQyMDQxMjNaMDMxMTAvBgNV BAMTKDAzRTIxMDZBREU3OEIxNkI4MkM1MjEwNzgzREY2RDQ4M0YwNDNBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4AojaPbeO+nF/O1LPhCMc8kMu +NYD72PhKCbP0DFLoJmIX89xMG5MJVWdi1kcWK/kCQND83WLTXXfmjGuaAqKO6Ei apg8twovvQdoIN/LKvSqiW10gfRd+03X8whOuaYSssPkmip9piudvLApwlGDNlbu BsjW06lluadfTZajuNPczJviUWNw80ft2Bvi39+Cd3I9xOBB0YiRUqaasdzxWZL9 8sMqLfa9fN7D3Z9cCoLFx6hrvAMhH8UTrWIngxRymJQkGXa/VJyhyXzljRG7jp85 Fzwpv9KfsjO2i+1L8cghzzj82zUaUVA9iJlw+ek0bJzOG4EjT82vvkVpRbR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA+IQat54sWuCxSEHg99tSD8EOpMwHwYDVR0j BBgwFoAUf57OdDowdOYfVs0RFhqlimu0CSwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjY2YmZhNi1kYzRjLTQxMDgtOTMyYy0yMDRiNjJlODYyNzIvMC83RjlFQ0U3NDNB MzA3NEU2MUY1NkNEMTExNjFBQTU4QTZCQjQwOTJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1OEE2QkI0 MDkyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmY2NmJmYTYtZGM0Yy00MTA4LTkz MmMtMjA0YjYyZTg2MjcyLzAvN0Y5RUNFNzQzQTMwNzRFNjFGNTZDRDExMTYxQUE1 OEE2QkI0MDkyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+Y0Mn0eX0y2bwPqdjlv1e+zVBxtbEVwueI N6L14g16w5+dr8uqBFmLyXXP0ORfA69eu+5QsWYm8m0+YIefu8QHy8iLdt7O00SG eoWlrKW7fbvYCSohzxhFSOD9fnS41JqnjTrabhSR+wYTr4YFzJtEhsEc519VfRzJ zcjg8njAMAmjH+Eh+TFiYOXaKA3RNh2UTY12TM2+u0HGHpawRnRkRHtFY8wM13nR WvfsRsXspv7oC/MxFaYcZcW70x392zqm5eVvb/jydI0TXIqFOc3iNFVfm1LONSLy 1ljxbHxX2bdXj7iQqBCUKQvnI2SlszFG6iIPRGV2MJy+CfMBsTM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:40 2026 by rpki-client