$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: aFVCi32039jpT73lVRXnmcjeMV33t2dyHfqzBmzqmvU= Subject key identifier: 8F:CA:C4:CD:49:9C:3A:2B:02:4F:0F:AD:33:FF:3E:0D:7E:A0:92:3A Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 610D95E4E05E65E7F7836D7B5E8889B564D9DD9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 20:31:26 +0000 Manifest this update: Tue 24 Mar 2026 20:26:26 +0000 Manifest next update: Sat 28 Mar 2026 08:08:26 +0000 Files and hashes: 1: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 2: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 4: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: 9Rbj2fInTevB8pzAz4TBmw6iKAad4pc1TUSdzJHNlaw=) 5: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 6: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:08:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0d:95:e4:e0:5e:65:e7:f7:83:6d:7b:5e:88:89:b5:64:d9:dd:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Mar 24 20:26:26 2026 GMT Not After : Mar 28 08:08:26 2026 GMT Subject: CN=8FCAC4CD499C3A2B024F0FAD33FF3E0D7EA0923A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:6e:12:08:df:c8:25:22:4f:79:02:72:2e:8a: 02:62:35:5f:e8:ba:28:bd:1b:d2:4a:97:d0:7f:b2: 58:22:c4:87:6e:0c:f1:6d:98:ce:38:1d:00:c2:7b: 9e:55:c8:ec:4c:25:f6:49:7a:a5:7a:d6:a1:ce:67: 87:07:c0:a0:89:c9:dd:26:83:ff:36:81:25:10:b6: c2:4f:39:eb:f7:c2:21:fa:eb:82:80:b9:ac:71:87: a7:a9:14:ad:fa:b5:ab:67:96:28:2f:bc:99:af:95: 53:bf:d6:8b:2e:98:24:ee:7a:4c:7d:2e:c1:8c:2b: 7b:be:ea:9e:0b:9a:e4:48:b7:fc:10:67:9f:a6:dd: d1:63:7a:80:35:53:c8:08:bc:a5:9b:1e:81:56:5c: 1e:8d:2c:26:cd:0f:0e:cd:1a:63:c8:7a:08:c6:76: 6e:96:fb:29:c4:31:ef:ca:23:c5:b9:29:d5:d1:38: e4:36:d0:0f:73:d3:c3:d0:5f:e4:2b:50:86:a6:ad: 78:76:5c:49:17:ed:b6:05:3d:cc:e0:c6:cf:1f:c1: 75:69:3c:df:9e:58:a2:69:76:59:2a:51:c4:8e:9b: 56:8c:b5:30:ac:2a:93:9c:f7:92:32:a7:64:27:70: e8:27:4e:0d:b0:b8:12:ac:61:dc:71:1f:f6:e4:ea: 89:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:CA:C4:CD:49:9C:3A:2B:02:4F:0F:AD:33:FF:3E:0D:7E:A0:92:3A X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:52:88:fe:86:03:e9:14:21:cd:ec:0a:62:76:01:bd:46:51: c7:89:1a:9e:2f:23:2d:4c:2e:e7:51:b3:ca:7b:68:13:9e:5a: 81:73:26:a3:a0:9c:4c:bc:f0:c3:4a:41:66:ea:6d:ed:81:7e: b9:9b:4d:47:6a:ea:c5:98:5b:f9:41:86:12:04:61:ef:2b:f7: 92:82:b3:8a:2f:0b:78:79:99:3c:3b:e0:6e:29:61:7c:33:93: 18:73:a6:1e:eb:7e:85:ba:d5:9f:57:7c:ad:5a:6c:5f:f1:a4: 07:f7:69:35:99:36:b6:20:d4:98:3e:e1:34:0d:cb:4b:73:55: 9d:de:d4:4f:89:14:6e:99:00:9d:de:36:a5:9d:72:0d:0e:68: 40:de:43:c4:22:ce:ed:07:60:9d:e8:12:5e:e5:c9:fb:f6:1b: 39:b0:2d:92:48:1a:76:25:b7:71:95:ff:ff:91:6b:a0:79:f5: 1a:3c:e6:23:47:51:18:23:92:6b:35:76:5a:99:58:67:b9:c1: da:6a:8d:8b:ac:72:2b:cc:19:47:41:2c:a9:66:38:d5:9a:66: 73:20:25:c6:13:5f:28:9a:9d:e9:4e:17:52:64:7f:41:74:a8: d1:07:44:0a:ea:23:74:36:69:cf:7c:e9:9e:1f:48:07:41:f5: 30:87:0e:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQ2V5OBeZef3g217XoiJtWTZ3Z0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNjAzMjQyMDI2MjZaFw0yNjAzMjgwODA4MjZaMDMxMTAvBgNV BAMTKDhGQ0FDNENENDk5QzNBMkIwMjRGMEZBRDMzRkYzRTBEN0VBMDkyM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIbhII38glIk95AnIuigJiNV/o uii9G9JKl9B/slgixIduDPFtmM44HQDCe55VyOxMJfZJeqV61qHOZ4cHwKCJyd0m g/82gSUQtsJPOev3wiH664KAuaxxh6epFK36tatnligvvJmvlVO/1osumCTuekx9 LsGMK3u+6p4LmuRIt/wQZ5+m3dFjeoA1U8gIvKWbHoFWXB6NLCbNDw7NGmPIegjG dm6W+ynEMe/KI8W5KdXROOQ20A9z08PQX+QrUIamrXh2XEkX7bYFPczgxs8fwXVp PN+eWKJpdlkqUcSOm1aMtTCsKpOc95Iyp2QncOgnTg2wuBKsYdxxH/bk6olJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8rEzUmcOisCTw+tM/8+DX6gkjowHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABNSiP6GA+kUIc3sCmJ2Ab1GUceJGp4vIy1M LudRs8p7aBOeWoFzJqOgnEy88MNKQWbqbe2BfrmbTUdq6sWYW/lBhhIEYe8r95KC s4ovC3h5mTw74G4pYXwzkxhzph7rfoW61Z9XfK1abF/xpAf3aTWZNrYg1Jg+4TQN y0tzVZ3e1E+JFG6ZAJ3eNqWdcg0OaEDeQ8Qizu0HYJ3oEl7lyfv2GzmwLZJIGnYl t3GV//+Ra6B59Ro85iNHURgjkms1dlqZWGe5wdpqjYuscivMGUdBLKlmONWaZnMg JcYTXyianelOF1Jkf0F0qNEHRArqI3Q2ac986Z4fSAdB9TCHDvI= -----END CERTIFICATE-----Generated at Thu Mar 26 16:31:59 2026 by rpki-client