$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: dwXmFfMtxD1LD+Q8XXxHHllrp/nz2e8wakbKl1ettec= Subject key identifier: B5:0B:F2:02:33:D3:AD:0F:1C:C5:15:74:7D:FB:8E:1A:46:42:34:D5 Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 0BE4E83DEF8E5410033E8C74D2A4FF80B5C410B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 0172 Signing time: Sun 01 Mar 2026 14:01:29 +0000 Manifest this update: Sun 01 Mar 2026 13:56:29 +0000 Manifest next update: Wed 04 Mar 2026 22:37:29 +0000 Files and hashes: 1: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: DZ98r4l8EOEDhWe3n97zslheZQTs0//HnpFjbuc5eX0=) 2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: 5MhHdS5d9rGYEWQQUwZMj2uRPg7u67+gzfI6p1UW8Ho=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:37:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:e4:e8:3d:ef:8e:54:10:03:3e:8c:74:d2:a4:ff:80:b5:c4:10:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Mar 1 13:56:29 2026 GMT Not After : Mar 4 22:37:29 2026 GMT Subject: CN=B50BF20233D3AD0F1CC515747DFB8E1A464234D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c4:c1:ee:f2:77:1f:bc:90:22:9a:5f:53:1a: 90:77:cb:00:10:58:d8:ea:27:31:ce:78:e1:f5:e6: 4d:27:b5:79:c1:ce:ac:2c:5e:c3:d1:9d:ba:3b:2f: b3:aa:f8:36:1f:68:6a:3d:5e:9d:82:8f:de:30:9d: 98:9c:a8:ab:db:12:ac:a3:cc:ff:4c:57:80:05:d7: 89:a6:8d:e6:e9:60:ee:f9:87:d6:24:ef:ce:c9:bf: ef:7e:1b:81:6b:38:6f:1a:34:9e:81:d2:74:11:a3: 72:fa:e5:22:bf:46:76:24:ae:da:40:97:54:fa:70: ed:27:18:91:0b:9a:52:34:c0:b8:01:a7:0c:06:b0: 4b:b4:a0:3a:76:a8:bf:f0:80:86:82:e0:f7:1d:0f: 3e:cd:de:d4:1c:ac:f7:a3:c2:cf:af:fa:0d:5d:af: 10:e8:bf:39:cd:6d:22:34:67:55:42:23:a9:b0:75: b5:75:f0:b2:4c:e4:04:79:52:2f:c9:c3:f3:b4:cf: 8f:bc:0f:dd:f7:fd:84:2d:24:55:ae:a2:c1:81:7d: c3:7f:e1:97:f7:54:9e:78:32:d7:7d:ca:21:72:b7: 85:89:5d:db:a8:b5:2d:d9:85:5a:fb:ef:46:e8:ba: 8e:72:58:ca:d2:bd:42:e2:36:dd:7d:d8:53:12:17: ab:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:0B:F2:02:33:D3:AD:0F:1C:C5:15:74:7D:FB:8E:1A:46:42:34:D5 X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:d2:99:34:27:66:4b:71:a0:5c:b8:32:21:b5:4c:23:4a:4c: e1:21:f5:cc:a6:69:b0:3f:f2:e0:4c:9d:95:9c:0d:93:35:8b: 00:87:90:e3:bf:2b:89:7c:23:44:53:67:ca:bc:d4:0a:08:a6: 49:0d:48:9e:f5:4a:ff:ae:7d:1e:d9:1b:c9:33:0a:0d:9b:b1: bc:82:a4:af:7d:4f:66:d2:3e:70:8e:f0:15:20:f3:25:0b:21: 85:9a:ff:3c:f1:7b:16:c3:11:66:12:16:96:b4:67:5b:21:c1: 9c:65:ac:6e:50:67:70:e1:60:12:09:fd:47:52:db:81:4b:31: a7:6c:f9:c4:08:48:3c:ed:9e:2f:25:9d:4e:12:23:8f:25:b9: 43:71:13:57:ff:18:ae:7e:e6:38:58:5b:ec:cc:e6:ae:b7:49: 16:17:1b:89:0a:86:f5:24:0e:8f:b3:f3:59:44:75:15:df:e9: 0a:42:3b:8a:3e:76:78:d6:96:11:82:40:79:8a:49:87:ee:ed: 02:1a:3f:98:ff:82:6e:87:a1:27:c0:2d:b4:7d:71:44:78:6e: 02:40:18:78:66:85:5c:ca:98:69:2d:4d:8f:5b:1f:db:22:18: 26:de:e8:e5:ed:15:6b:db:0c:85:81:ee:2d:22:e1:c7:78:35: a7:7c:a2:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC+ToPe+OVBADPox00qT/gLXEELIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNjAzMDExMzU2MjlaFw0yNjAzMDQyMjM3MjlaMDMxMTAvBgNV BAMTKEI1MEJGMjAyMzNEM0FEMEYxQ0M1MTU3NDdERkI4RTFBNDY0MjM0RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAxMHu8ncfvJAiml9TGpB3ywAQ WNjqJzHOeOH15k0ntXnBzqwsXsPRnbo7L7Oq+DYfaGo9Xp2Cj94wnZicqKvbEqyj zP9MV4AF14mmjebpYO75h9Yk787Jv+9+G4FrOG8aNJ6B0nQRo3L65SK/RnYkrtpA l1T6cO0nGJELmlI0wLgBpwwGsEu0oDp2qL/wgIaC4PcdDz7N3tQcrPejws+v+g1d rxDovznNbSI0Z1VCI6mwdbV18LJM5AR5Ui/Jw/O0z4+8D933/YQtJFWuosGBfcN/ 4Zf3VJ54Mtd9yiFyt4WJXduotS3ZhVr770bouo5yWMrSvULiNt192FMSF6uLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtQvyAjPTrQ8cxRV0ffuOGkZCNNUwHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfSmTQnZktxoFy4MiG1TCNKTOEh9cymabA/ 8uBMnZWcDZM1iwCHkOO/K4l8I0RTZ8q81AoIpkkNSJ71Sv+ufR7ZG8kzCg2bsbyC pK99T2bSPnCO8BUg8yULIYWa/zzxexbDEWYSFpa0Z1shwZxlrG5QZ3DhYBIJ/UdS 24FLMads+cQISDztni8lnU4SI48luUNxE1f/GK5+5jhYW+zM5q63SRYXG4kKhvUk Do+z81lEdRXf6QpCO4o+dnjWlhGCQHmKSYfu7QIaP5j/gm6HoSfALbR9cUR4bgJA GHhmhVzKmGktTY9bH9siGCbe6OXtFWvbDIWB7i0i4cd4Nad8oi4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:00:18 2026 by rpki-client