$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json) Hash identifier: i69GZOiR/cPQtFwo/8LwlSERJvJxfFH6ljpND2W074U= Subject key identifier: C2:1B:AE:F9:A4:1F:75:FA:94:99:5D:50:C9:3D:2A:70:51:3F:4E:CE Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Certificate serial: 108B4B4F54D940E523B5614183F4DC1C20F47E0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft Manifest number: 02CB Signing time: Sun 01 Mar 2026 04:41:52 +0000 Manifest this update: Sun 01 Mar 2026 04:36:52 +0000 Manifest next update: Wed 04 Mar 2026 15:49:52 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=) 2: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: oI9sp8uQx+IzVjQOASSw3K/JiQ6f+MEhz0lffdtQcnk=) 3: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: bgLc0wXOVn9w5v/YbQRRsK2+epF0KGKuwlh4tr4ebCY=) 4: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: gQUi+SSlZWbgtxREEtY9XyZ6mEDQwkMmGKLNXyWWZlc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:49:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:8b:4b:4f:54:d9:40:e5:23:b5:61:41:83:f4:dc:1c:20:f4:7e:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Validity Not Before: Mar 1 04:36:52 2026 GMT Not After : Mar 4 15:49:52 2026 GMT Subject: CN=C21BAEF9A41F75FA94995D50C93D2A70513F4ECE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:f4:0a:96:72:79:09:89:57:24:6e:83:0f:7c: f6:00:e4:1b:c9:cf:d6:2e:74:3e:b9:fc:53:98:0c: cf:51:21:b5:a7:49:59:8d:8f:7c:6c:db:7c:6b:8c: c0:fb:e2:6a:2c:81:c4:ec:83:94:41:c5:4d:c7:bc: cb:39:36:14:3c:0c:35:47:d3:9f:0b:c2:f1:7a:1c: 83:82:db:cc:67:4f:7a:a4:41:e0:ef:eb:05:a3:84: 47:be:c7:b8:be:8c:f4:2c:29:3b:a6:6f:c6:37:10: c4:dc:92:a4:f8:6d:e1:15:a5:26:cd:93:b7:84:26: cc:8d:95:fc:75:08:14:2c:07:e1:b5:e6:52:ff:25: 43:0e:4d:2d:dd:b3:47:e2:e4:e6:23:a7:ee:9b:52: 90:d3:cf:7e:7e:67:4b:60:33:1c:e3:b7:0c:05:83: 58:54:31:32:38:7e:02:6b:89:7d:06:d5:0e:40:e8: 8a:84:b8:bd:9d:0b:dd:81:a5:d1:3e:cc:f6:b0:aa: c6:dd:d9:da:51:bb:5e:e9:e5:b3:c3:29:b9:cf:b9: 69:f9:92:39:26:a5:5b:f6:03:83:6b:e0:94:b1:b5: af:43:03:f5:63:85:7d:15:4d:34:a1:5f:fe:1a:9b: f3:fa:5c:80:47:ed:fc:81:a4:7c:57:4c:06:13:12: e9:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:1B:AE:F9:A4:1F:75:FA:94:99:5D:50:C9:3D:2A:70:51:3F:4E:CE X509v3 Authority Key Identifier: keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:4d:b1:22:16:e7:aa:08:11:b0:2a:8e:b0:fa:3f:7a:d3:88: 42:bf:6d:ca:0d:fc:53:ab:a6:8e:f5:13:c9:ba:3d:2f:1a:a4: 1f:d7:4b:3b:96:a9:68:c5:66:b1:de:9b:32:11:c1:88:8b:ae: 28:5a:93:f0:48:4a:03:18:8c:9c:b6:18:53:0e:7e:aa:20:d7: 47:4f:c4:1f:9c:fa:cd:9b:1e:e4:b4:d7:dd:c1:97:0f:78:3a: 7a:f6:f8:44:42:ae:0c:51:a6:71:4c:13:97:8a:57:2a:5d:4c: 95:80:08:f6:3d:2e:53:d2:c6:e8:ad:f4:d3:ec:c2:62:53:3a: e4:d0:47:f9:f8:a5:54:b2:57:c2:02:47:03:51:3c:23:4e:61: 9d:2f:4f:ba:09:04:0d:b1:36:df:af:bb:9d:45:8d:9a:19:7e: 9b:bc:55:b2:3d:7e:ff:7d:9b:25:3b:06:00:df:4d:b8:6b:36: 19:03:10:fc:af:ef:9c:ff:bc:13:2d:e7:c1:29:3c:81:a4:22: 55:ef:46:24:f0:4d:66:e2:63:f5:a4:4f:1a:e1:17:78:3d:47: cf:d6:1f:f3:72:5e:2f:6d:f0:67:65:67:0a:a7:7a:5e:d0:38: 43:82:61:58:c6:da:59:bd:3d:94:fa:70:3c:9d:ba:42:3d:32: 56:3d:49:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEItLT1TZQOUjtWFBg/TcHCD0fgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE Q0U5NzRCNjAeFw0yNjAzMDEwNDM2NTJaFw0yNjAzMDQxNTQ5NTJaMDMxMTAvBgNV BAMTKEMyMUJBRUY5QTQxRjc1RkE5NDk5NUQ1MEM5M0QyQTcwNTEzRjRFQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv9AqWcnkJiVckboMPfPYA5BvJ z9YudD65/FOYDM9RIbWnSVmNj3xs23xrjMD74mosgcTsg5RBxU3HvMs5NhQ8DDVH 058LwvF6HIOC28xnT3qkQeDv6wWjhEe+x7i+jPQsKTumb8Y3EMTckqT4beEVpSbN k7eEJsyNlfx1CBQsB+G15lL/JUMOTS3ds0fi5OYjp+6bUpDTz35+Z0tgMxzjtwwF g1hUMTI4fgJriX0G1Q5A6IqEuL2dC92BpdE+zPawqsbd2dpRu17p5bPDKbnPuWn5 kjkmpVv2A4Nr4JSxta9DA/VjhX0VTTShX/4am/P6XIBH7fyBpHxXTAYTEunnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwhuu+aQfdfqUmV1QyT0qcFE/Ts4wHwYDVR0j BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1 QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5 NzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0My MjREQ0U5NzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtNsSIW56oIEbAqjrD6P3rTiEK/bcoN/FOr po71E8m6PS8apB/XSzuWqWjFZrHemzIRwYiLrihak/BISgMYjJy2GFMOfqog10dP xB+c+s2bHuS0193Blw94Onr2+ERCrgxRpnFME5eKVypdTJWACPY9LlPSxuit9NPs wmJTOuTQR/n4pVSyV8ICRwNRPCNOYZ0vT7oJBA2xNt+vu51FjZoZfpu8VbI9fv99 myU7BgDfTbhrNhkDEPyv75z/vBMt58EpPIGkIlXvRiTwTWbiY/WkTxrhF3g9R8/W H/NyXi9t8GdlZwqnel7QOEOCYVjG2lm9PZT6cDydukI9MlY9SV0= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:10 2026 by rpki-client