$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: QiJB+YeDVelNsjF8J2ddVNTQsaiN3RldVhZ2JBlBB4w= Subject key identifier: E9:34:A8:DA:A2:2D:CF:9F:9F:CF:5A:DE:CE:7B:A8:13:13:23:0B:C2 Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 62732E2922028D35D5FB1016A6DDEB418EB61A54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01EE Signing time: Tue 24 Mar 2026 15:20:53 +0000 Manifest this update: Tue 24 Mar 2026 15:15:53 +0000 Manifest next update: Fri 27 Mar 2026 19:16:53 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: +k5mfp8WKh2mBNfMaRbcEk/ISHOxS5LH+IXb62KBVew=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: fp/oWSUeXGTrPiTprsbkQ9UXZFAnoLEYMcQ89AiXon8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:16:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:73:2e:29:22:02:8d:35:d5:fb:10:16:a6:dd:eb:41:8e:b6:1a:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Mar 24 15:15:53 2026 GMT Not After : Mar 27 19:16:53 2026 GMT Subject: CN=E934A8DAA22DCF9F9FCF5ADECE7BA81313230BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9e:51:5e:39:b7:3a:2d:56:87:26:34:f9:cb: c7:f7:58:5c:91:e0:8b:ce:48:d9:d3:1a:8f:ea:17: 06:0a:bd:48:22:3c:53:a5:ed:22:03:2c:4a:95:bd: 0b:5f:f4:77:58:0f:21:f3:df:07:e4:45:36:ae:91: 76:a8:84:97:ea:47:71:57:40:d7:5d:31:85:7c:fc: 8a:c0:42:d9:84:92:e7:b8:3c:d5:4e:ac:69:2b:b2: 1a:5b:e7:20:b5:d3:e0:d7:58:6b:53:74:9c:c6:7f: a5:95:3b:ab:0f:d0:4d:94:16:8b:c4:6d:9c:df:58: ce:a1:c8:b3:27:e7:26:e7:a9:80:9f:bc:a5:8e:62: 21:a1:3a:9e:5e:e3:bb:4f:9a:c9:da:95:7f:b4:ec: e3:fb:97:75:3f:41:1f:cc:e4:07:de:64:aa:41:5c: 61:ff:0d:04:1c:30:57:ff:ff:35:2a:7d:8c:69:92: bf:ac:74:16:32:87:5c:57:e6:47:7a:35:c7:2d:29: 23:38:d0:4c:f5:7c:4b:f5:71:93:52:ad:12:22:6d: b1:83:0e:05:20:be:c9:02:e4:3d:dc:6f:02:eb:f5: 4b:28:93:82:38:49:b2:5d:ad:2c:80:29:e9:f8:b2: 0c:a3:fd:47:ca:26:98:b8:23:3d:b1:00:72:c9:a0: 7f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:34:A8:DA:A2:2D:CF:9F:9F:CF:5A:DE:CE:7B:A8:13:13:23:0B:C2 X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:51:65:92:d9:62:20:d2:a9:32:77:9f:ab:aa:f4:4a:06:1f: ef:29:6b:9c:0d:44:c4:55:9f:2f:b5:ca:4c:32:50:e0:ea:df: 7d:5a:4a:cd:e8:17:ea:5a:62:d0:de:c0:64:57:14:0d:df:af: bb:0a:ec:a9:18:1c:cb:50:55:bb:80:f4:29:eb:02:65:c5:2a: f3:ba:17:66:96:e0:5d:ea:81:f8:8f:c1:04:b7:3a:ec:87:19: a2:ae:de:13:77:f7:79:2b:b4:51:a6:95:3f:55:3f:a3:ce:b3: 42:45:88:a0:2f:22:3d:64:58:d1:1a:9e:b0:74:f2:29:3c:d5: 1a:8a:a8:c5:45:7a:18:e9:9c:85:ae:73:4f:16:ac:2c:58:bc: 92:f0:cb:ef:bf:1b:e5:00:6a:7f:76:11:14:91:16:1c:30:d0: ed:30:03:a7:4d:1f:cd:dc:2b:cf:38:dc:5c:2d:69:70:07:fb: 15:85:ad:bc:0c:d0:2a:63:0b:ea:d2:3b:1b:f2:f6:0c:18:10: 34:e8:17:47:3c:f1:97:44:55:16:be:5b:bc:0e:d0:74:b1:d5: 4f:95:bc:83:ad:05:d7:39:74:23:b7:48:fd:fe:b8:bd:13:49: b5:a6:80:7e:ac:35:2e:89:e4:f0:ac:0a:15:bc:59:20:ee:9a: 57:ff:12:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYnMuKSICjTXV+xAWpt3rQY62GlQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNjAzMjQxNTE1NTNaFw0yNjAzMjcxOTE2NTNaMDMxMTAvBgNV BAMTKEU5MzRBOERBQTIyRENGOUY5RkNGNUFERUNFN0JBODEzMTMyMzBCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nlFeObc6LVaHJjT5y8f3WFyR 4IvOSNnTGo/qFwYKvUgiPFOl7SIDLEqVvQtf9HdYDyHz3wfkRTaukXaohJfqR3FX QNddMYV8/IrAQtmEkue4PNVOrGkrshpb5yC10+DXWGtTdJzGf6WVO6sP0E2UFovE bZzfWM6hyLMn5ybnqYCfvKWOYiGhOp5e47tPmsnalX+07OP7l3U/QR/M5AfeZKpB XGH/DQQcMFf//zUqfYxpkr+sdBYyh1xX5kd6NcctKSM40Ez1fEv1cZNSrRIibbGD DgUgvskC5D3cbwLr9Usok4I4SbJdrSyAKen4sgyj/UfKJpi4Iz2xAHLJoH+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6TSo2qItz5+fz1reznuoExMjC8IwHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJRZZLZYiDSqTJ3n6uq9EoGH+8pa5wNRMRV ny+1ykwyUODq331aSs3oF+paYtDewGRXFA3fr7sK7KkYHMtQVbuA9CnrAmXFKvO6 F2aW4F3qgfiPwQS3OuyHGaKu3hN393krtFGmlT9VP6POs0JFiKAvIj1kWNEanrB0 8ik81RqKqMVFehjpnIWuc08WrCxYvJLwy++/G+UAan92ERSRFhww0O0wA6dNH83c K8843FwtaXAH+xWFrbwM0CpjC+rSOxvy9gwYEDToF0c88ZdEVRa+W7wO0HSx1U+V vIOtBdc5dCO3SP3+uL0TSbWmgH6sNS6J5PCsChW8WSDumlf/Egk= -----END CERTIFICATE-----Generated at Thu Mar 26 17:09:11 2026 by rpki-client