$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: hKb6FWOroppCqqmpWdcAs8Ummp3bUKZTM7Wu2wqc+V4= Subject key identifier: 29:61:05:4F:BB:CE:68:0A:2F:1C:4F:23:7D:AB:A5:87:CF:D7:63:FA Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 2A35C628C1305D83AD03AA2906B481BC2EEDB509 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0271 Signing time: Thu 26 Mar 2026 02:32:33 +0000 Manifest this update: Thu 26 Mar 2026 02:27:33 +0000 Manifest next update: Sun 29 Mar 2026 10:19:33 +0000 Files and hashes: 1: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: Jwy1d1wRxMdi8A4XqyHN/B+x7cm/QQYN3t8/2zSHtC0=) 2: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: M0AUI1pCCQGDUTBoH7C4DRRLknJoPGFTXz+BysiMZwA=) 3: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: y4O5dSQRMeH84EShY7UTqOa6lldWSvXCyPUWEuCTnEQ=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: UocS01XlJbKSBac7WbRNzZaivUhUbWcSE2n+KruMfoM=) 5: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: aSU+DaClXnYNCWm36r1XHtwIOO4xtOawwUDVGXGyiPs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:35:c6:28:c1:30:5d:83:ad:03:aa:29:06:b4:81:bc:2e:ed:b5:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Mar 26 02:27:33 2026 GMT Not After : Mar 29 10:19:33 2026 GMT Subject: CN=2961054FBBCE680A2F1C4F237DABA587CFD763FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8a:7c:66:2b:d2:d4:a3:8c:e9:14:19:c2:19: 33:fa:93:79:9b:bc:77:36:e3:2d:4e:5a:ff:dd:5a: 4a:d0:51:97:4d:41:23:ea:37:ec:17:af:73:63:32: 3c:b8:b4:f4:60:7b:39:3f:69:07:71:44:e6:89:38: a4:3d:c9:0d:0a:2e:b1:3b:b7:14:b3:74:dd:9a:9d: bb:1d:44:a3:8f:de:e6:18:70:89:99:61:06:81:8b: 81:23:93:1e:3e:f9:b8:ac:2c:8c:3a:8e:6d:10:c7: 90:9c:45:43:ec:e4:7c:82:57:60:7b:77:4a:a2:89: a1:6b:d2:8e:1d:35:8f:97:c2:75:4c:9b:69:02:28: 0f:00:7a:a1:a9:68:cc:47:34:11:d8:c3:dc:cb:50: 2b:cf:91:68:61:81:51:a7:e9:76:db:fe:0c:34:80: 69:05:60:d2:0f:cd:2d:06:77:38:b4:15:c3:5a:3f: f8:bf:41:bd:02:de:95:9b:97:ef:af:fa:37:9e:91: 15:e3:58:31:43:96:ff:d4:b7:fc:c5:17:21:13:03: e9:a1:11:d8:14:d1:85:0f:dd:b1:b4:63:d3:d1:d5: 3a:de:5c:dd:e9:40:3d:37:ea:2e:36:c6:5f:00:49: 0f:ea:3c:c9:5f:d4:a4:c2:03:62:0c:da:66:b4:19: 48:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:61:05:4F:BB:CE:68:0A:2F:1C:4F:23:7D:AB:A5:87:CF:D7:63:FA X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:9e:cc:fa:1e:c7:b2:a6:bc:c5:5c:40:fb:f4:c9:f0:03:5d: ee:8d:9f:04:d2:6d:1c:dd:57:b1:90:d7:14:7e:7c:3a:48:90: d5:ec:ee:4c:f2:c4:29:3f:45:0f:55:01:c8:95:6b:f4:fa:53: 2e:13:cc:58:19:d4:1b:e8:4b:4d:9f:4f:46:f2:65:09:4a:98: 63:54:58:ae:ca:51:a0:28:45:52:33:1e:69:91:f5:49:d3:23: 0c:93:6c:8c:7f:32:ba:59:de:8c:1f:8b:42:40:66:d0:c2:a7: a3:a8:f9:99:d0:ce:b5:af:3d:a9:58:27:90:44:77:9d:90:2a: 18:09:23:2d:30:2c:3e:59:34:ba:5b:ad:43:26:63:e5:98:f7: 36:56:66:71:0d:78:bb:6d:59:84:01:7a:5a:41:d5:86:6a:64: 32:9f:57:b3:12:8c:10:dd:6a:29:66:ac:03:2e:f5:d3:8e:b5: 80:c0:5c:78:be:68:ac:9a:81:99:9a:9c:22:a1:c3:52:f7:cc: 21:07:b6:84:f9:23:d7:b3:35:bd:d3:b3:80:a9:ea:b8:90:2e: d3:ec:04:1e:1d:1f:4b:96:35:17:c3:7a:f6:3e:eb:85:0a:39: 31:e6:38:ed:69:ba:0e:38:12:ff:b9:3b:d4:ba:e3:93:4c:5a: 8d:26:64:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKjXGKMEwXYOtA6opBrSBvC7ttQkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNjAzMjYwMjI3MzNaFw0yNjAzMjkxMDE5MzNaMDMxMTAvBgNV BAMTKDI5NjEwNTRGQkJDRTY4MEEyRjFDNEYyMzdEQUJBNTg3Q0ZENzYzRkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKinxmK9LUo4zpFBnCGTP6k3mb vHc24y1OWv/dWkrQUZdNQSPqN+wXr3NjMjy4tPRgezk/aQdxROaJOKQ9yQ0KLrE7 txSzdN2anbsdRKOP3uYYcImZYQaBi4Ejkx4++bisLIw6jm0Qx5CcRUPs5HyCV2B7 d0qiiaFr0o4dNY+XwnVMm2kCKA8AeqGpaMxHNBHYw9zLUCvPkWhhgVGn6Xbb/gw0 gGkFYNIPzS0Gdzi0FcNaP/i/Qb0C3pWbl++v+jeekRXjWDFDlv/Ut/zFFyETA+mh EdgU0YUP3bG0Y9PR1TreXN3pQD036i42xl8ASQ/qPMlf1KTCA2IM2ma0GUizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKWEFT7vOaAovHE8jfaulh8/XY/owHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmezPoex7KmvMVcQPv0yfADXe6NnwTSbRzd V7GQ1xR+fDpIkNXs7kzyxCk/RQ9VAciVa/T6Uy4TzFgZ1BvoS02fT0byZQlKmGNU WK7KUaAoRVIzHmmR9UnTIwyTbIx/MrpZ3owfi0JAZtDCp6Oo+ZnQzrWvPalYJ5BE d52QKhgJIy0wLD5ZNLpbrUMmY+WY9zZWZnENeLttWYQBelpB1YZqZDKfV7MSjBDd ailmrAMu9dOOtYDAXHi+aKyagZmanCKhw1L3zCEHtoT5I9ezNb3Ts4Cp6riQLtPs BB4dH0uWNRfDevY+64UKOTHmOO1pug44Ev+5O9S645NMWo0mZLs= -----END CERTIFICATE-----Generated at Thu Mar 26 16:19:23 2026 by rpki-client