$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: Cit9AWMnkEiQO1q6VMvv+R98D49OXATtZdNf6NUMl0E= Subject key identifier: 2D:F1:C9:C9:77:EF:95:16:5E:E6:BD:DA:75:1F:B8:75:8E:E4:9B:56 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 4701D7A5F4D064137E8F8DFD24367A0044C8950C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 0108 Signing time: Sun 01 Mar 2026 17:02:10 +0000 Manifest this update: Sun 01 Mar 2026 16:57:10 +0000 Manifest next update: Wed 04 Mar 2026 18:39:10 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: fQceffTmYRnbNjicgRpuYyb/4lkMqGQl3frgDYRCohQ=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:39:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:01:d7:a5:f4:d0:64:13:7e:8f:8d:fd:24:36:7a:00:44:c8:95:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Mar 1 16:57:10 2026 GMT Not After : Mar 4 18:39:10 2026 GMT Subject: CN=2DF1C9C977EF95165EE6BDDA751FB8758EE49B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ec:e8:06:5b:17:3c:4b:ec:40:ba:a7:20:3b: c5:ab:52:54:18:28:70:34:92:fb:05:a7:e1:bb:e5: 7f:e1:11:c2:e2:7b:ba:45:a7:09:81:93:eb:17:70: 80:39:48:29:ff:e6:20:00:58:24:55:bc:b5:36:f5: 76:d4:0b:48:a2:bc:e0:3d:66:24:5d:bf:35:23:ce: 8b:f0:cb:8e:d5:8d:74:78:08:21:ec:ff:3b:60:a2: 47:69:55:b5:6a:56:67:7b:23:4f:d1:3a:d6:05:83: f6:37:bc:3f:bb:bc:e6:d5:29:ef:1e:00:c9:b8:f8: ce:0b:a5:84:6d:65:64:68:88:16:7c:a4:1e:a6:4d: a2:a5:0e:33:65:25:d3:c3:cc:8e:49:66:cf:0c:42: 40:a7:d2:96:1a:03:6b:84:d0:87:7f:70:59:80:d6: eb:1c:b8:e5:ed:fc:47:cf:cb:35:df:bf:f3:32:bf: 35:ee:a4:77:02:85:32:3e:f7:04:32:c2:f7:10:42: e8:d3:02:67:cb:67:8d:fe:81:6a:2a:55:e3:61:a3: 41:5d:89:01:ba:9c:c6:63:58:dd:3c:9a:08:a2:9f: 54:31:40:a7:38:33:1c:71:6f:e3:c4:95:77:7c:a4: 3c:01:14:0b:37:db:84:a6:4a:91:1c:85:8e:74:52: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:F1:C9:C9:77:EF:95:16:5E:E6:BD:DA:75:1F:B8:75:8E:E4:9B:56 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:0c:f6:88:b4:52:bc:1f:bf:02:fc:f4:c3:ff:98:41:f4:3f: 9d:53:4e:0b:5c:65:5c:c5:ed:e4:d9:c1:80:b4:38:8a:0e:e3: 68:7e:7e:ee:1d:07:16:37:5d:73:10:ab:f1:34:e9:0d:93:01: 4a:9f:fc:9a:e2:51:e1:de:8b:d4:e1:e7:1f:86:93:37:db:f9: 48:52:50:41:62:98:ee:56:6a:d8:87:9b:9b:b4:2d:8d:6e:7f: f9:8b:2c:ed:d6:f0:ad:f6:95:77:5e:c0:02:13:9e:a3:3f:fc: 41:d2:23:f5:29:a5:76:95:9e:cc:15:b1:46:58:14:e7:33:98: da:c7:e5:c6:2b:c5:b6:79:4d:bf:2e:97:1d:22:e3:b7:05:33: df:bc:bd:6a:b8:04:f6:9f:1a:f6:a5:35:57:f8:ec:b3:b8:73: 47:25:e2:d6:67:6f:37:f3:91:45:6d:51:bc:df:2a:4d:60:6b: a9:4b:0f:98:c4:ca:05:9f:09:60:ef:40:4c:91:8a:40:db:b1: a1:c4:5e:70:64:bd:27:61:a2:4d:9d:3a:04:7e:61:92:f5:c8: fb:6b:e9:3e:ac:d2:d3:27:39:1b:0b:0e:4b:b9:ed:ea:95:6d: 2d:76:d0:05:d0:49:f6:ac:88:5f:2f:f0:c5:a2:81:2d:19:db: 15:b6:4b:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURwHXpfTQZBN+j439JDZ6AETIlQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNjAzMDExNjU3MTBaFw0yNjAzMDQxODM5MTBaMDMxMTAvBgNV BAMTKDJERjFDOUM5NzdFRjk1MTY1RUU2QkREQTc1MUZCODc1OEVFNDlCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx7OgGWxc8S+xAuqcgO8WrUlQY KHA0kvsFp+G75X/hEcLie7pFpwmBk+sXcIA5SCn/5iAAWCRVvLU29XbUC0iivOA9 ZiRdvzUjzovwy47VjXR4CCHs/ztgokdpVbVqVmd7I0/ROtYFg/Y3vD+7vObVKe8e AMm4+M4LpYRtZWRoiBZ8pB6mTaKlDjNlJdPDzI5JZs8MQkCn0pYaA2uE0Id/cFmA 1uscuOXt/EfPyzXfv/MyvzXupHcChTI+9wQywvcQQujTAmfLZ43+gWoqVeNho0Fd iQG6nMZjWN08mgiin1QxQKc4Mxxxb+PElXd8pDwBFAs324SmSpEchY50UhtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULfHJyXfvlRZe5r3adR+4dY7km1YwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgM9oi0UrwfvwL89MP/mEH0P51TTgtcZVzF 7eTZwYC0OIoO42h+fu4dBxY3XXMQq/E06Q2TAUqf/JriUeHei9Th5x+Gkzfb+UhS UEFimO5WatiHm5u0LY1uf/mLLO3W8K32lXdewAITnqM//EHSI/UppXaVnswVsUZY FOczmNrH5cYrxbZ5Tb8ulx0i47cFM9+8vWq4BPafGvalNVf47LO4c0cl4tZnbzfz kUVtUbzfKk1ga6lLD5jEygWfCWDvQEyRikDbsaHEXnBkvSdhok2dOgR+YZL1yPtr 6T6s0tMnORsLDku57eqVbS120AXQSfasiF8v8MWigS0Z2xW2S0Q= -----END CERTIFICATE-----Generated at Mon Mar 2 18:25:24 2026 by rpki-client