$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: xovorX95BXlr9aHb8/rQOF+5yJ87Ip17w/9BdIEAxPs= Subject key identifier: 79:1C:FE:FA:DA:44:71:F9:6C:62:D3:28:06:39:AA:8B:84:A8:A5:16 Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 77EB892C39B4176BCB1689998C7A8AE23C0F3475 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 04AE Signing time: Wed 25 Mar 2026 23:51:49 +0000 Manifest this update: Wed 25 Mar 2026 23:46:49 +0000 Manifest next update: Sun 29 Mar 2026 10:19:49 +0000 Files and hashes: 1: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: FP9yRVVocgsiLkYITe4/d3F7j5DcDGO0BDh+CLnu4GM=) 2: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 3: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:eb:89:2c:39:b4:17:6b:cb:16:89:99:8c:7a:8a:e2:3c:0f:34:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Mar 25 23:46:49 2026 GMT Not After : Mar 29 10:19:49 2026 GMT Subject: CN=791CFEFADA4471F96C62D3280639AA8B84A8A516 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:50:d5:6c:a4:e0:44:bf:67:89:c4:5a:e6:a9: 0f:3f:f3:e9:e4:32:4b:73:99:d2:b7:6a:5c:d9:cd: 7d:37:f9:3b:5a:ea:c6:ca:77:ff:86:e7:9a:ab:4e: 5a:ff:6c:00:17:01:f7:2f:d6:e0:15:0a:e8:6c:7e: cb:46:ad:4d:94:2e:39:89:8d:d2:3f:ad:9c:09:6b: 17:84:40:eb:7f:73:37:2f:c5:f3:13:bf:84:1a:6b: d5:10:25:aa:d0:10:04:76:47:21:c6:5b:0e:65:50: 07:8f:da:0f:60:a7:06:1b:04:16:10:50:b9:51:9c: c1:08:dd:c9:8b:1c:06:19:fb:a6:a5:1a:2a:cf:36: aa:55:4e:d5:ee:84:b0:aa:f4:6a:de:4c:e1:de:a3: 56:05:5e:45:c8:18:8f:a9:5a:d6:73:3e:5f:fe:e8: 68:4b:37:26:32:d8:8e:98:56:73:61:66:5b:02:55: 5d:50:76:f7:ab:88:44:c9:5c:89:5d:d1:c2:39:35: 8b:3b:40:da:13:4f:a4:16:fb:35:66:e1:e3:60:76: 04:a9:d7:cc:46:45:da:79:d7:cf:df:65:f2:30:98: b8:b5:7c:5d:64:fa:9e:29:ad:d3:69:16:2c:8e:8b: 5e:79:06:d2:49:aa:6c:24:e3:5c:94:83:d8:71:5f: c3:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:1C:FE:FA:DA:44:71:F9:6C:62:D3:28:06:39:AA:8B:84:A8:A5:16 X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:b8:4f:55:8a:a0:3a:77:71:90:53:0f:51:16:63:38:d3:4a: 41:c5:2f:28:e9:69:1a:e7:db:f2:67:e5:ce:f9:e6:91:57:47: 98:27:c5:f9:cf:01:16:0c:db:69:73:01:8c:b3:cf:76:3b:30: 0e:05:67:d9:f2:af:b4:53:87:8c:0f:07:31:20:9b:67:4c:f2: ad:b5:c1:dc:b8:0e:a4:49:73:0e:55:c7:90:9f:a8:03:ad:6d: 98:8b:ea:c0:fe:41:28:50:9b:2a:56:41:83:74:84:e7:98:56: 36:b2:47:68:e1:cd:e9:3d:41:53:86:6e:97:22:f6:57:c3:ee: e4:0b:a3:bf:e8:b5:b4:43:03:bd:64:9d:7b:e8:98:00:fa:ea: e9:e5:d6:39:cb:d0:c6:74:58:95:7a:f0:b8:b7:72:f3:63:a7: ff:e6:b4:f4:8d:8b:3d:f6:20:eb:9b:fd:9b:98:7c:46:fe:c7: aa:9c:6b:8b:af:b5:8d:14:61:1d:05:72:c3:b4:e0:1d:49:12: ca:41:1c:e3:8a:ce:e7:df:d2:02:3f:6c:4c:04:4a:82:ba:9a: a5:17:14:9c:f3:40:66:13:50:10:a6:01:04:eb:dc:bb:5e:00: ec:bc:b0:bd:24:a8:d0:d0:02:6a:b0:8b:12:3f:fb:7c:a6:b4: f6:38:19:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd+uJLDm0F2vLFomZjHqK4jwPNHUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNjAzMjUyMzQ2NDlaFw0yNjAzMjkxMDE5NDlaMDMxMTAvBgNV BAMTKDc5MUNGRUZBREE0NDcxRjk2QzYyRDMyODA2MzlBQThCODRBOEE1MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNUNVspOBEv2eJxFrmqQ8/8+nk MktzmdK3alzZzX03+Tta6sbKd/+G55qrTlr/bAAXAfcv1uAVCuhsfstGrU2ULjmJ jdI/rZwJaxeEQOt/czcvxfMTv4Qaa9UQJarQEAR2RyHGWw5lUAeP2g9gpwYbBBYQ ULlRnMEI3cmLHAYZ+6alGirPNqpVTtXuhLCq9GreTOHeo1YFXkXIGI+pWtZzPl/+ 6GhLNyYy2I6YVnNhZlsCVV1QdveriETJXIld0cI5NYs7QNoTT6QW+zVm4eNgdgSp 18xGRdp518/fZfIwmLi1fF1k+p4prdNpFiyOi155BtJJqmwk41yUg9hxX8M9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeRz++tpEcflsYtMoBjmqi4SopRYwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACC4T1WKoDp3cZBTD1EWYzjTSkHFLyjpaRrn 2/Jn5c755pFXR5gnxfnPARYM22lzAYyzz3Y7MA4FZ9nyr7RTh4wPBzEgm2dM8q21 wdy4DqRJcw5Vx5CfqAOtbZiL6sD+QShQmypWQYN0hOeYVjayR2jhzek9QVOGbpci 9lfD7uQLo7/otbRDA71knXvomAD66unl1jnL0MZ0WJV68Li3cvNjp//mtPSNiz32 IOub/ZuYfEb+x6qca4uvtY0UYR0FcsO04B1JEspBHOOKzuff0gI/bEwESoK6mqUX FJzzQGYTUBCmAQTr3LteAOy8sL0kqNDQAmqwixI/+3ymtPY4GYs= -----END CERTIFICATE-----Generated at Thu Mar 26 22:13:15 2026 by rpki-client