$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: 4P9exhGNb7mowfhfYK0OxXCAzWDrrUs5MM3SpdEOecE= Subject key identifier: C5:0B:0C:94:FE:CF:42:0A:1A:B1:8F:52:B4:F4:0B:E5:31:29:40:30 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 48C89AD7D113AC850FE7395DAFA0B41D7974CC27 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 01E2 Signing time: Wed 25 Mar 2026 14:41:27 +0000 Manifest this update: Wed 25 Mar 2026 14:36:27 +0000 Manifest next update: Sat 28 Mar 2026 17:42:27 +0000 Files and hashes: 1: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 2: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: PiBS1eSkYGruf0EzBSz7Vd15f3UebbGpvtV9QFzbfxg=) 3: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: ql1r6btRm6e6TWZ741/BEGV0DvzwRTbZXBQKsJR8lTg=) 4: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: wTxXY4luz0/VtdzVzXPjy+UsX7yymtg7UjU8UOo7Pyk=) 5: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: i3sO/S07jEPRYcvnHXfiuZ1cxqgCcK6SbsDRRhfjCrE=) 6: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: mxGnmXYxTc1OSBTakCMImGVD+kXbKh+lguvXSkkVebk=) 7: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: KAmpBoTLVKtQpzZQRpEjJRr9zTKNjSVFlisu1/zsLDs=) 8: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: 1voL9wkw3AmKHYF9xEfIdX/0TupHIuTblxg4b1ycg+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:42:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:c8:9a:d7:d1:13:ac:85:0f:e7:39:5d:af:a0:b4:1d:79:74:cc:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Mar 25 14:36:27 2026 GMT Not After : Mar 28 17:42:27 2026 GMT Subject: CN=C50B0C94FECF420A1AB18F52B4F40BE531294030 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a8:29:38:1a:c3:10:c3:85:c6:cd:d6:3d:09: 8a:2d:1c:a7:a2:87:25:48:c7:a4:6b:ed:46:b8:7b: 6c:c4:e9:55:11:24:9e:d6:34:0b:da:87:27:13:ed: 24:5c:31:01:a7:a1:82:fd:14:f1:22:e5:72:86:bf: 64:ae:48:2e:83:44:bc:c3:dc:03:3a:c3:04:ca:31: 88:3b:c7:f6:63:97:a5:a8:c0:90:a2:f9:3c:3f:fe: 2a:bd:db:4e:2a:cb:d8:3b:24:e6:e0:c5:0a:bd:34: 35:a5:15:fc:9b:18:21:c3:e8:78:f6:a8:ec:40:e0: 11:70:ed:4c:9a:ba:24:61:68:08:f8:10:95:5d:10: 5b:e3:3d:55:85:95:fe:aa:18:18:09:19:08:cd:e9: a2:7a:d1:26:6c:d5:b2:3d:33:0c:fa:b0:c8:aa:99: 1c:1d:e1:a8:4b:14:22:06:89:6c:e5:0e:a0:50:e9: 89:8b:25:f2:95:75:be:71:32:12:87:14:58:88:6c: 3b:b8:50:f0:9b:41:21:e6:90:40:44:6a:31:65:3f: e3:af:6b:6c:92:81:07:48:e1:82:47:e7:3c:07:22: 05:a6:c6:4e:6f:a6:70:27:ea:c3:45:68:78:41:15: 8f:a4:ee:9b:7f:da:de:c4:29:ae:7d:d7:16:b3:f4: 4b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:0B:0C:94:FE:CF:42:0A:1A:B1:8F:52:B4:F4:0B:E5:31:29:40:30 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:16:59:06:19:a8:00:2c:91:2d:4b:38:ef:e9:fa:0b:dd:ac: 69:32:9d:e6:c1:e8:c3:87:39:52:9e:7b:42:ad:31:ba:3b:c8: 27:5a:8d:43:f8:7e:18:58:b8:d7:49:cb:6c:c1:65:44:b2:ef: 7d:7b:c8:9e:e0:d5:30:91:cc:8a:f0:e2:45:fe:ad:ca:b2:ea: a6:1b:03:9c:e1:8f:07:18:29:f6:f7:62:c9:05:89:82:18:9f: 06:05:98:91:e5:65:16:37:04:e2:ab:f7:c3:57:00:4e:07:9e: 5f:db:51:ae:7b:40:ac:12:3d:dd:15:94:11:76:f2:fc:81:56: ce:dd:a7:2a:a5:bd:cf:cd:c5:51:22:c2:f1:c1:13:66:54:82: 64:b8:57:ac:f7:13:83:2f:aa:69:ab:12:bc:94:c2:01:30:2b: 8a:38:6f:d8:43:82:f6:a7:16:76:f8:a0:77:d7:fb:15:a4:fc: c7:a3:54:c5:c3:57:9d:80:ec:ad:7d:f0:db:1e:2f:9a:ed:d8: a4:f7:09:9e:cd:14:ba:44:cc:7a:7a:af:38:9f:4d:d6:7a:f4: f4:af:67:4f:53:02:45:14:6d:93:e1:ad:30:bc:48:19:eb:df: d9:d1:a9:e8:92:ed:44:e2:22:17:e1:63:fd:55:4c:e6:a0:3c: 5e:a2:59:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSMia19ETrIUP5zldr6C0HXl0zCcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNjAzMjUxNDM2MjdaFw0yNjAzMjgxNzQyMjdaMDMxMTAvBgNV BAMTKEM1MEIwQzk0RkVDRjQyMEExQUIxOEY1MkI0RjQwQkU1MzEyOTQwMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrqCk4GsMQw4XGzdY9CYotHKei hyVIx6Rr7Ua4e2zE6VURJJ7WNAvahycT7SRcMQGnoYL9FPEi5XKGv2SuSC6DRLzD 3AM6wwTKMYg7x/Zjl6WowJCi+Tw//iq9204qy9g7JObgxQq9NDWlFfybGCHD6Hj2 qOxA4BFw7UyauiRhaAj4EJVdEFvjPVWFlf6qGBgJGQjN6aJ60SZs1bI9Mwz6sMiq mRwd4ahLFCIGiWzlDqBQ6YmLJfKVdb5xMhKHFFiIbDu4UPCbQSHmkEBEajFlP+Ov a2ySgQdI4YJH5zwHIgWmxk5vpnAn6sNFaHhBFY+k7pt/2t7EKa591xaz9EvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxQsMlP7PQgoasY9StPQL5TEpQDAwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIWWQYZqAAskS1LOO/p+gvdrGkynebB6MOH OVKee0KtMbo7yCdajUP4fhhYuNdJy2zBZUSy7317yJ7g1TCRzIrw4kX+rcqy6qYb A5zhjwcYKfb3YskFiYIYnwYFmJHlZRY3BOKr98NXAE4Hnl/bUa57QKwSPd0VlBF2 8vyBVs7dpyqlvc/NxVEiwvHBE2ZUgmS4V6z3E4MvqmmrEryUwgEwK4o4b9hDgvan Fnb4oHfX+xWk/MejVMXDV52A7K198NseL5rt2KT3CZ7NFLpEzHp6rzifTdZ69PSv Z09TAkUUbZPhrTC8SBnr39nRqeiS7UTiIhfhY/1VTOagPF6iWS4= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:49 2026 by rpki-client