$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: ZNpvtz8X5VXx/4EtjnzlCk8nEA3IMEUjaB+638PlTG8= Subject key identifier: E9:7A:02:A9:EF:2C:37:D5:E2:E2:A6:4C:27:B8:5B:D9:B9:5E:EB:95 Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 0C2EA5C9A54AC15D81C7BD06F3FC5F6CF48AD321 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 01E9 Signing time: Sat 28 Feb 2026 21:12:33 +0000 Manifest this update: Sat 28 Feb 2026 21:07:33 +0000 Manifest next update: Wed 04 Mar 2026 06:24:33 +0000 Files and hashes: 1: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: nf4bqejLQos++Xxd11lUjJQx/XsYKb7NNYLBzQLaEwI=) 2: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: MMOGS7T9X8x7JT9s8oWcj5fdpc4Z+j40BumMkZopolM=) 3: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: yloFFDOEavyW9OOZ+KM+O5lOWtq7g/hDtLKYHcYmJYE=) 4: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: fdBGaDwbA3O0q2/vBfcwU5qvE8WWWviCtFtejPXVA+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:2e:a5:c9:a5:4a:c1:5d:81:c7:bd:06:f3:fc:5f:6c:f4:8a:d3:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Feb 28 21:07:33 2026 GMT Not After : Mar 4 06:24:33 2026 GMT Subject: CN=E97A02A9EF2C37D5E2E2A64C27B85BD9B95EEB95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:19:aa:e3:f6:eb:b9:bd:b6:67:92:5e:49:dd: d1:94:0c:da:af:ce:6d:97:ba:be:95:7c:7f:90:55: ce:57:e8:7c:df:e1:fc:7f:27:e2:75:a6:d0:94:93: e2:a5:97:ad:b6:3a:65:78:f7:ac:29:fd:6d:1c:3d: 64:e7:5c:d1:58:a0:53:e9:41:ea:14:38:8d:e8:d2: b2:f6:b1:58:98:40:af:be:04:7c:4c:e6:ce:7e:a5: 8a:d9:3f:a3:96:82:ff:70:6d:dc:cf:7d:61:58:c6: d2:47:76:3f:b7:73:1b:fd:7c:4b:de:45:02:48:65: 67:57:de:c2:0e:e0:7e:97:64:10:06:ea:be:2e:01: b3:6c:99:60:97:4d:58:6a:51:63:a5:c9:0b:fe:9b: 73:83:5c:db:89:68:5c:45:60:e9:da:eb:8b:a4:e8: c6:20:95:e5:f6:e6:27:1c:5a:78:78:08:0e:cb:ca: 98:b6:c4:9d:34:20:40:ba:33:0e:9b:4e:44:1c:e6: ae:b8:c3:dd:cd:73:eb:20:17:e8:11:71:25:86:7a: 89:51:86:fa:10:b6:36:98:6d:dd:bb:8f:47:42:23: a5:fd:ff:43:89:aa:57:3c:ad:47:78:f7:06:bb:b9: e9:2e:ce:38:bc:9d:47:d4:c9:d2:1f:2a:fd:30:60: d2:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:7A:02:A9:EF:2C:37:D5:E2:E2:A6:4C:27:B8:5B:D9:B9:5E:EB:95 X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:b1:71:7d:4d:9f:16:a3:f2:fa:6d:da:f6:9e:ef:46:c9:94: af:88:2e:67:36:12:e6:9e:63:11:e0:7a:31:d3:b7:6b:d5:d8: c8:a8:dc:c3:0d:41:68:c4:55:0c:b7:84:e0:e5:d6:82:87:46: dc:29:1f:f5:fa:4b:5a:d8:b0:09:f5:e2:9e:f4:dd:12:94:4b: 0c:27:bb:70:f7:f4:8a:2a:d5:f9:22:a5:77:38:fb:41:15:a2: a3:8b:2c:fc:c4:8d:e4:d6:35:86:d5:14:f8:b9:72:6d:3e:5c: 69:f3:63:60:b2:53:7d:b3:db:02:ef:e8:29:3e:f2:df:c9:d9: 6c:c4:99:47:83:ca:c8:52:ae:4d:71:28:eb:2d:4f:e2:05:85: 7b:33:3b:af:30:4d:92:d3:98:f2:d9:71:40:07:e0:f0:98:64: a1:3b:03:46:86:05:6e:81:dd:71:0b:96:c4:4b:be:9c:31:42: 9a:26:a8:3f:34:a9:3e:c8:49:a2:34:9f:f6:f6:bd:8d:64:23: 47:b3:dc:5e:08:04:6c:68:88:96:f6:e2:5e:c2:7f:ae:e9:89: 90:b3:b8:73:6d:87:4a:ca:6e:ae:79:4d:23:b6:8a:30:7d:05: 3f:97:ac:d1:06:0b:08:38:6a:ca:b3:7f:71:4c:fe:09:5a:d2: 2b:15:58:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDC6lyaVKwV2Bx70G8/xfbPSK0yEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNjAyMjgyMTA3MzNaFw0yNjAzMDQwNjI0MzNaMDMxMTAvBgNV BAMTKEU5N0EwMkE5RUYyQzM3RDVFMkUyQTY0QzI3Qjg1QkQ5Qjk1RUVCOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCGarj9uu5vbZnkl5J3dGUDNqv zm2Xur6VfH+QVc5X6Hzf4fx/J+J1ptCUk+Kll622OmV496wp/W0cPWTnXNFYoFPp QeoUOI3o0rL2sViYQK++BHxM5s5+pYrZP6OWgv9wbdzPfWFYxtJHdj+3cxv9fEve RQJIZWdX3sIO4H6XZBAG6r4uAbNsmWCXTVhqUWOlyQv+m3ODXNuJaFxFYOna64uk 6MYgleX25iccWnh4CA7Lypi2xJ00IEC6Mw6bTkQc5q64w93Nc+sgF+gRcSWGeolR hvoQtjaYbd27j0dCI6X9/0OJqlc8rUd49wa7uekuzji8nUfUydIfKv0wYNJJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6XoCqe8sN9Xi4qZMJ7hb2ble65UwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKxcX1Nnxaj8vpt2vae70bJlK+ILmc2Euae YxHgejHTt2vV2Mio3MMNQWjEVQy3hODl1oKHRtwpH/X6S1rYsAn14p703RKUSwwn u3D39Ioq1fkipXc4+0EVoqOLLPzEjeTWNYbVFPi5cm0+XGnzY2CyU32z2wLv6Ck+ 8t/J2WzEmUeDyshSrk1xKOstT+IFhXszO68wTZLTmPLZcUAH4PCYZKE7A0aGBW6B 3XELlsRLvpwxQpomqD80qT7ISaI0n/b2vY1kI0ez3F4IBGxoiJb24l7Cf67piZCz uHNth0rKbq55TSO2ijB9BT+XrNEGCwg4asqzf3FM/gla0isVWAA= -----END CERTIFICATE-----Generated at Mon Mar 2 02:06:56 2026 by rpki-client