$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: mwoIlKjQjhs5JxwundrKfNJhTDJGP4rRqXtql/p0yjo= Subject key identifier: E7:35:AF:FD:28:A7:A3:15:16:CC:A0:9C:36:65:21:76:D1:ED:8E:AB Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 11869BE6114911F9D5D2B6550355C024FC6CF31E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 0536 Signing time: Tue 24 Mar 2026 17:11:52 +0000 Manifest this update: Tue 24 Mar 2026 17:06:52 +0000 Manifest next update: Sat 28 Mar 2026 01:27:52 +0000 Files and hashes: 1: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: sQYEU0x82dJTHF208hbn1XdN3HFLHuIAF4u60prmRm8=) 2: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) 3: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:27:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:86:9b:e6:11:49:11:f9:d5:d2:b6:55:03:55:c0:24:fc:6c:f3:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Mar 24 17:06:52 2026 GMT Not After : Mar 28 01:27:52 2026 GMT Subject: CN=E735AFFD28A7A31516CCA09C36652176D1ED8EAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:95:35:76:21:8b:65:79:56:d7:3f:76:41: 8c:2b:37:58:ae:c0:3e:7c:3c:fc:66:b8:61:f6:41: cd:16:00:3a:ed:4f:2e:b0:52:df:cf:56:b5:a3:aa: a6:60:51:fd:4c:d9:41:58:d9:a2:8a:0f:64:b6:a2: 29:03:c4:5b:dd:2a:ad:9e:06:7f:4e:41:42:06:05: 80:36:c9:d9:d8:58:f1:d1:40:17:50:85:f3:61:1e: 64:c1:6c:ca:34:7d:bb:b2:58:53:56:ed:cb:e9:e5: 5f:69:82:05:24:77:91:ad:c0:4e:20:56:bf:54:34: ed:c5:16:cf:6f:fd:48:44:11:a2:a5:24:92:91:a6: dd:2d:10:a0:4c:ce:72:14:25:2a:a1:52:e1:ce:17: 78:43:be:53:fa:16:fc:0b:db:f9:15:29:e6:88:38: c5:92:6d:47:b4:cf:21:e6:6a:7d:10:09:37:e9:76: 57:59:f0:57:00:f5:d9:ee:d0:92:92:33:6c:1d:8d: c9:bb:8b:77:14:b9:f4:a4:4b:0b:1c:dd:6d:ff:42: fd:61:de:d6:ca:e9:0f:43:36:32:fe:b8:81:20:78: ca:cf:a5:34:d1:25:77:d3:01:71:f7:3f:75:d0:a8: b3:8a:76:58:f5:c0:fd:a4:df:fb:c9:fb:b4:69:b5: 61:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:35:AF:FD:28:A7:A3:15:16:CC:A0:9C:36:65:21:76:D1:ED:8E:AB X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:df:cb:2c:76:b4:c3:92:15:3f:f0:ce:89:be:a0:7a:e5:b3: b5:63:a6:9f:30:b9:1d:fe:25:05:f8:23:ea:69:13:7a:fc:d9: fc:81:c4:b2:92:eb:60:02:83:2e:60:8a:5a:2a:f9:c7:c5:9b: da:0b:75:93:a5:4b:69:3a:cd:36:c4:f6:43:41:da:e1:7f:ff: 09:4b:4a:3b:22:62:8d:bb:b1:78:62:95:98:b8:4f:5f:5a:7a: 5f:02:a6:09:1a:26:3f:56:73:24:59:a9:ab:68:74:de:2b:f8: 05:3a:ca:2e:a7:1f:59:a6:05:f6:3b:63:2d:74:ac:47:a5:d1: c5:1c:67:1f:48:f7:80:d2:f8:a9:34:dc:9b:be:32:bf:16:91: d9:8a:4c:c6:94:42:2c:d8:17:be:d6:89:ce:8b:5c:d6:37:5d: c9:08:80:5a:66:6e:f0:2a:4c:40:07:1a:cb:05:f5:ef:38:2a: c9:5d:16:e4:82:f2:82:05:c0:28:12:27:e1:86:95:6e:a1:3d: 68:2f:55:5e:a9:8e:27:21:cf:b9:cb:54:f6:2c:21:45:bd:8e: 10:44:47:a5:90:1d:f0:db:02:54:ce:b3:1c:7c:41:b3:31:71: 1e:fb:7d:d4:24:df:ac:36:c4:91:b0:56:1a:ff:d2:b1:a4:b7: 6c:f1:df:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEYab5hFJEfnV0rZVA1XAJPxs8x4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNjAzMjQxNzA2NTJaFw0yNjAzMjgwMTI3NTJaMDMxMTAvBgNV BAMTKEU3MzVBRkZEMjhBN0EzMTUxNkNDQTA5QzM2NjUyMTc2RDFFRDhFQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCho5U1diGLZXlW1z92QYwrN1iu wD58PPxmuGH2Qc0WADrtTy6wUt/PVrWjqqZgUf1M2UFY2aKKD2S2oikDxFvdKq2e Bn9OQUIGBYA2ydnYWPHRQBdQhfNhHmTBbMo0fbuyWFNW7cvp5V9pggUkd5GtwE4g Vr9UNO3FFs9v/UhEEaKlJJKRpt0tEKBMznIUJSqhUuHOF3hDvlP6FvwL2/kVKeaI OMWSbUe0zyHman0QCTfpdldZ8FcA9dnu0JKSM2wdjcm7i3cUufSkSwsc3W3/Qv1h 3tbK6Q9DNjL+uIEgeMrPpTTRJXfTAXH3P3XQqLOKdlj1wP2k3/vJ+7RptWErAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5zWv/SinoxUWzKCcNmUhdtHtjqswHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDfyyx2tMOSFT/wzom+oHrls7Vjpp8wuR3+ JQX4I+ppE3r82fyBxLKS62ACgy5giloq+cfFm9oLdZOlS2k6zTbE9kNB2uF//wlL SjsiYo27sXhilZi4T19ael8CpgkaJj9WcyRZqatodN4r+AU6yi6nH1mmBfY7Yy10 rEel0cUcZx9I94DS+Kk03Ju+Mr8WkdmKTMaUQizYF77Wic6LXNY3XckIgFpmbvAq TEAHGssF9e84KsldFuSC8oIFwCgSJ+GGlW6hPWgvVV6pjichz7nLVPYsIUW9jhBE R6WQHfDbAlTOsxx8QbMxcR77fdQk36w2xJGwVhr/0rGkt2zx33o= -----END CERTIFICATE-----Generated at Thu Mar 26 19:16:27 2026 by rpki-client