$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: yGRu3PDxuH0a3fReAFsxA0n/pvImgOSwqA4TquSzm+U= Subject key identifier: 30:58:DB:4B:F1:E9:B8:62:E1:56:0F:0A:5F:DC:CA:8F:08:39:D6:4E Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 67F0CF3E8C5430CC45BDD60A84254D8399D28581 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 021B Signing time: Sun 01 Mar 2026 07:41:36 +0000 Manifest this update: Sun 01 Mar 2026 07:36:36 +0000 Manifest next update: Wed 04 Mar 2026 10:45:36 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: jpx9eCE8V+ORSpHEfzLEyxN7MhA7P79bZAwRGhI3siQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 10:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:f0:cf:3e:8c:54:30:cc:45:bd:d6:0a:84:25:4d:83:99:d2:85:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Mar 1 07:36:36 2026 GMT Not After : Mar 4 10:45:36 2026 GMT Subject: CN=3058DB4BF1E9B862E1560F0A5FDCCA8F0839D64E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:96:d5:a3:1e:72:4c:cd:8a:c6:13:e7:86:58: 71:f6:71:07:a3:30:aa:1d:9c:8a:5e:ff:46:ef:12: 70:f2:2a:19:25:33:a4:a1:6d:da:9a:ef:49:56:d4: 16:60:f0:cf:a8:3e:14:2f:d1:36:16:50:31:d1:0e: cf:22:b6:65:1f:d8:0c:21:db:a2:00:56:a0:a6:90: 8d:f1:51:a9:ce:f3:1d:21:e3:60:84:43:6f:dc:c1: 3c:5e:a4:88:8c:f3:6b:d8:14:3d:c0:6b:ae:10:fa: e3:9d:b7:03:38:5b:8e:6e:0a:00:c6:7e:70:4d:03: 01:02:46:e7:cf:9a:41:96:5c:65:02:12:e8:e7:ce: 42:9f:6d:da:89:a9:88:4b:0c:fa:31:6b:ec:f7:05: 2a:6b:dd:d6:55:08:49:9a:d2:3a:21:2a:13:ee:46: 28:e2:a0:eb:d6:9d:6b:f4:31:ed:82:a4:45:27:67: 4c:df:48:6f:70:57:45:ea:99:23:3b:ff:07:f6:c4: 67:82:d2:71:61:a2:ba:f8:7f:f3:a9:58:a2:b9:81: 35:c9:4e:2c:78:6b:0b:ca:bf:44:9b:25:14:72:22: d0:9f:c7:36:89:a7:b4:7b:6c:97:74:9b:fd:54:ad: 67:4e:5b:68:32:64:09:70:7a:96:21:29:7b:92:7b: b0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:58:DB:4B:F1:E9:B8:62:E1:56:0F:0A:5F:DC:CA:8F:08:39:D6:4E X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:43:78:28:47:74:d7:6f:03:48:8b:70:51:e1:d5:23:6a:7f: f1:0a:5f:03:4d:3a:18:b7:0f:9b:c5:01:3a:c9:0c:99:b8:f7: a5:c3:46:32:d3:20:9d:21:33:4f:9f:3a:3b:a9:99:b4:7a:1a: 86:ac:d5:e3:74:ab:e4:95:e2:2f:34:ea:e7:2f:d6:c1:ea:14: 96:9f:d6:3d:24:f9:35:a2:8f:b7:a3:87:b0:bd:78:86:9d:ac: 86:d7:d1:57:c2:49:6d:d6:2d:f5:63:2f:63:42:ea:78:6b:62: 5f:30:c3:4e:74:70:1c:aa:af:21:8d:3b:87:12:8a:78:96:d5: a5:fc:b7:7d:a0:c3:c0:0d:a7:86:71:c2:e9:93:c1:88:91:58: 00:50:e1:f1:0d:ff:6b:ed:b7:f9:a3:08:e1:a9:e6:81:b0:1b: 4f:a0:0f:5b:fa:d3:df:65:af:13:02:42:13:be:0a:fd:d5:d8: 10:78:58:e0:39:9b:74:6c:56:ef:46:38:92:97:ad:38:f0:f6: ac:b7:c2:14:b1:b7:e5:3e:2b:29:09:d8:42:85:60:2b:e8:4e: 35:f2:a3:89:d8:ae:a2:f1:45:d2:ae:48:d3:da:fe:0c:77:c2: a9:18:6a:df:9b:6e:a6:7f:e4:ff:b2:c8:82:48:3d:f7:de:bc: a0:4c:b8:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ/DPPoxUMMxFvdYKhCVNg5nShYEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNjAzMDEwNzM2MzZaFw0yNjAzMDQxMDQ1MzZaMDMxMTAvBgNV BAMTKDMwNThEQjRCRjFFOUI4NjJFMTU2MEYwQTVGRENDQThGMDgzOUQ2NEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtltWjHnJMzYrGE+eGWHH2cQej MKodnIpe/0bvEnDyKhklM6Shbdqa70lW1BZg8M+oPhQv0TYWUDHRDs8itmUf2Awh 26IAVqCmkI3xUanO8x0h42CEQ2/cwTxepIiM82vYFD3Aa64Q+uOdtwM4W45uCgDG fnBNAwECRufPmkGWXGUCEujnzkKfbdqJqYhLDPoxa+z3BSpr3dZVCEma0johKhPu RijioOvWnWv0Me2CpEUnZ0zfSG9wV0XqmSM7/wf2xGeC0nFhorr4f/OpWKK5gTXJ Tix4awvKv0SbJRRyItCfxzaJp7R7bJd0m/1UrWdOW2gyZAlwepYhKXuSe7ApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMFjbS/HpuGLhVg8KX9zKjwg51k4wHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtDeChHdNdvA0iLcFHh1SNqf/EKXwNNOhi3 D5vFATrJDJm496XDRjLTIJ0hM0+fOjupmbR6Goas1eN0q+SV4i806ucv1sHqFJaf 1j0k+TWij7ejh7C9eIadrIbX0VfCSW3WLfVjL2NC6nhrYl8ww050cByqryGNO4cS iniW1aX8t32gw8ANp4ZxwumTwYiRWABQ4fEN/2vtt/mjCOGp5oGwG0+gD1v6099l rxMCQhO+Cv3V2BB4WOA5m3RsVu9GOJKXrTjw9qy3whSxt+U+KykJ2EKFYCvoTjXy o4nYrqLxRdKuSNPa/gx3wqkYat+bbqZ/5P+yyIJIPffevKBMuMM= -----END CERTIFICATE-----Generated at Mon Mar 2 02:37:27 2026 by rpki-client