$ rpki-client -vvf repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft File: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft (raw, json) Hash identifier: vPFaNmVKZCe0G8YbhPNMTxdp5RqTfDcFza9V/wyPIOk= Subject key identifier: F2:6E:6C:13:87:3A:36:30:99:49:C1:2E:37:B0:54:A9:41:6C:F2:15 Authority key identifier: 7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A Certificate issuer: /CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Certificate serial: 3A50165D9F520C6749759B74DC77B2790EB07B43 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft Manifest number: 016A Signing time: Sat 28 Feb 2026 10:11:42 +0000 Manifest this update: Sat 28 Feb 2026 10:06:42 +0000 Manifest next update: Tue 03 Mar 2026 10:42:42 +0000 Files and hashes: 1: 3130332e3133322e3136392e302f32342d3234203d3e20313339393830.roa (hash: YYnSVH0s4DjSEyWcGqkNP3J7ej8/N95y0I96Ya7UVn0=) 2: 7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl (hash: +S8+HAeg2ob4oQihejp+/IiYZ+O91j36RZ3t4Ax2kk0=) 3: 323030313a6466323a633638303a3a2f34382d3438203d3e20313339393830.roa (hash: qQqB2dTLr4xmCPqrovkLKFh60qxbylHoj3Xk9uQwJdI=) 4: 3130332e3134382e37392e302f32342d3234203d3e20313339393830.roa (hash: prunEGeOFiQXN1Qgy35XW66Os/Zb7gkIG+vEYQIhWTQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:50:16:5d:9f:52:0c:67:49:75:9b:74:dc:77:b2:79:0e:b0:7b:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C33921B29322EBAAC6645FC4B920923F5E49E1A Validity Not Before: Feb 28 10:06:42 2026 GMT Not After : Mar 3 10:42:42 2026 GMT Subject: CN=F26E6C13873A36309949C12E37B054A9416CF215 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:32:cf:2c:85:61:e5:e5:06:2a:cb:94:5e:52: b4:a5:60:b5:6b:c6:35:50:23:69:ac:01:ab:80:25: b6:f7:b9:75:a0:18:86:b2:94:2e:18:82:c4:9b:15: d6:37:e4:ff:fb:52:07:c2:d5:e2:42:19:16:a5:8a: 8d:90:f5:cd:9e:61:3c:05:42:24:1b:01:0c:fd:fe: 94:68:2a:f0:c2:83:6f:43:e1:55:39:d4:67:41:2f: 11:be:31:d5:4e:44:bb:65:94:57:7d:ff:75:70:15: e5:3b:66:5e:c8:3d:c8:0f:f2:12:cc:4c:19:9e:fa: 88:54:1f:f8:5e:15:19:90:55:21:48:c6:a3:4c:0a: c3:c7:ab:97:bd:19:dd:9e:ce:0c:04:aa:54:64:c1: 1c:ae:0b:a8:fd:6d:b0:e2:05:6a:79:55:df:ea:4b: 17:66:0d:29:42:35:a5:78:55:05:47:08:78:d5:12: 65:a4:71:95:97:a8:92:80:77:0d:d2:c4:cb:35:08: fc:d0:b4:c4:1a:fd:c3:61:3f:93:9e:0e:4b:5a:e7: f3:3b:9d:46:03:02:38:2b:7b:54:07:9c:0d:eb:21: 0f:85:f0:cf:47:9c:90:be:fb:5f:80:d4:38:37:bf: bd:e2:35:d7:bb:7c:b4:e2:e6:30:05:20:66:fc:fa: f6:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:6E:6C:13:87:3A:36:30:99:49:C1:2E:37:B0:54:A9:41:6C:F2:15 X509v3 Authority Key Identifier: keyid:7C:33:92:1B:29:32:2E:BA:AC:66:45:FC:4B:92:09:23:F5:E4:9E:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C33921B29322EBAAC6645FC4B920923F5E49E1A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae4cd96-cfc1-4577-ad3f-7983c0523c10/0/7C33921B29322EBAAC6645FC4B920923F5E49E1A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:dd:15:ba:82:65:11:40:b6:00:96:94:20:35:40:74:df:75: 00:1a:00:ac:cf:55:22:fc:f0:2e:bd:99:4c:80:e4:12:4b:2a: 4b:7a:67:57:2e:30:a2:7a:dc:b1:a5:da:4c:f1:7d:b7:95:e7: 6c:42:b4:18:b1:d3:bb:01:51:b2:84:79:9d:f4:a7:52:2d:94: 20:b0:92:9e:2a:2b:ed:38:e8:03:b9:a8:40:54:0e:15:d0:b7: 56:2a:be:92:9c:8e:55:fe:13:6a:0d:1f:30:c6:0e:1d:52:a8: b3:c7:50:85:7a:e6:9e:60:6d:87:a5:76:55:53:eb:f7:b9:24: a2:8a:33:56:b1:0d:75:d4:78:c8:de:92:f5:de:73:6a:67:61: f7:1a:67:d6:e5:27:48:44:33:62:dc:b8:2a:e1:05:83:1b:19: 64:15:be:c9:13:70:11:fd:f8:fc:e9:c5:7c:18:6b:18:8f:24: 44:af:11:39:e5:96:a6:e6:70:e3:01:f6:ee:02:7b:c0:69:1e: a7:93:b7:9b:85:a5:a2:6a:52:ca:4e:80:eb:09:76:6a:52:29: a4:f5:43:07:f7:82:d5:3b:85:b3:a2:5f:d0:fa:48:e8:a4:c2: 4a:5b:47:9f:f4:27:4f:6c:87:92:88:79:3c:22:94:f7:11:06: ec:f6:04:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlAWXZ9SDGdJdZt03HeyeQ6we0MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNG NUU0OUUxQTAeFw0yNjAyMjgxMDA2NDJaFw0yNjAzMDMxMDQyNDJaMDMxMTAvBgNV BAMTKEYyNkU2QzEzODczQTM2MzA5OTQ5QzEyRTM3QjA1NEE5NDE2Q0YyMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVMs8shWHl5QYqy5ReUrSlYLVr xjVQI2msAauAJbb3uXWgGIaylC4YgsSbFdY35P/7UgfC1eJCGRalio2Q9c2eYTwF QiQbAQz9/pRoKvDCg29D4VU51GdBLxG+MdVORLtllFd9/3VwFeU7Zl7IPcgP8hLM TBme+ohUH/heFRmQVSFIxqNMCsPHq5e9Gd2ezgwEqlRkwRyuC6j9bbDiBWp5Vd/q SxdmDSlCNaV4VQVHCHjVEmWkcZWXqJKAdw3SxMs1CPzQtMQa/cNhP5OeDkta5/M7 nUYDAjgre1QHnA3rIQ+F8M9HnJC++1+A1Dg3v73iNde7fLTi5jAFIGb8+vaDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8m5sE4c6NjCZScEuN7BUqUFs8hUwHwYDVR0j BBgwFoAUfDOSGykyLrqsZkX8S5IJI/XknhowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU0Y2Q5Ni1jZmMxLTQ1NzctYWQzZi03OTgzYzA1MjNjMTAvMC83QzMzOTIxQjI5 MzIyRUJBQUM2NjQ1RkM0QjkyMDkyM0Y1RTQ5RTFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5MjNGNUU0 OUUxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlNGNkOTYtY2ZjMS00NTc3LWFk M2YtNzk4M2MwNTIzYzEwLzAvN0MzMzkyMUIyOTMyMkVCQUFDNjY0NUZDNEI5MjA5 MjNGNUU0OUUxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALDdFbqCZRFAtgCWlCA1QHTfdQAaAKzPVSL8 8C69mUyA5BJLKkt6Z1cuMKJ63LGl2kzxfbeV52xCtBix07sBUbKEeZ30p1ItlCCw kp4qK+046AO5qEBUDhXQt1YqvpKcjlX+E2oNHzDGDh1SqLPHUIV65p5gbYeldlVT 6/e5JKKKM1axDXXUeMjekvXec2pnYfcaZ9blJ0hEM2LcuCrhBYMbGWQVvskTcBH9 +PzpxXwYaxiPJESvETnllqbmcOMB9u4Ce8BpHqeTt5uFpaJqUspOgOsJdmpSKaT1 Qwf3gtU7hbOiX9D6SOikwkpbR5/0J09sh5KIeTwilPcRBuz2BCQ= -----END CERTIFICATE-----Generated at Mon Mar 2 12:24:32 2026 by rpki-client