$ rpki-client -vvf repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft File: A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft (raw, json) Hash identifier: zkAiUoVX6lYoGqzlvwDFbLkETfjwh0gXVdI4cuvsvsI= Subject key identifier: FF:19:23:27:22:6A:47:78:45:F1:06:6C:02:01:AF:01:A1:DB:C5:61 Authority key identifier: A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 Certificate issuer: /CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Certificate serial: 73D5B38B749CFBF1F5C1DF1BC9A7D048EA1242DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft Manifest number: 0177 Signing time: Tue 24 Mar 2026 20:40:53 +0000 Manifest this update: Tue 24 Mar 2026 20:35:53 +0000 Manifest next update: Fri 27 Mar 2026 23:56:53 +0000 Files and hashes: 1: A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl (hash: giYNGa70XmrQ0WRgUaeWhSrQnY3WJP1ZlpQAh+flis8=) 2: 3130332e37362e33312e302f32342d3234203d3e20313530343732.roa (hash: HX5hc0JVA/bL3q1k/7p9S2Z5pWHfKNcOFGhiGTLHR6E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:56:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d5:b3:8b:74:9c:fb:f1:f5:c1:df:1b:c9:a7:d0:48:ea:12:42:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5959C75F8AC190DC22C7C3276CF95834D5CA687 Validity Not Before: Mar 24 20:35:53 2026 GMT Not After : Mar 27 23:56:53 2026 GMT Subject: CN=FF192327226A477845F1066C0201AF01A1DBC561 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6f:0c:af:12:11:e1:b9:80:3d:8d:b7:d7:cd: 5a:75:77:0c:e2:5c:0f:e1:04:30:87:7a:96:7c:f8: ed:ea:3d:16:91:d4:04:b8:dd:df:5e:87:bb:ce:cd: ac:e1:a6:d9:43:30:09:9f:c9:6e:1d:ed:0a:f0:b7: 2b:76:44:94:9a:5d:fc:89:aa:f9:b2:c6:f7:8b:b3: 4a:49:67:74:19:03:4b:9b:86:cc:66:ce:8c:19:62: ca:7b:3a:ba:b9:de:6f:c5:24:06:e5:57:62:de:2b: 1f:9c:e0:fc:a2:07:af:0a:e6:d5:62:ab:b0:85:4d: 56:3d:cf:16:5e:e6:1e:be:6c:97:65:cd:3c:4a:30: 04:9f:22:be:e9:31:c6:7e:69:58:0d:c5:9f:0b:be: ae:04:64:8f:b3:7e:5c:e5:89:17:98:7d:35:60:a5: 1b:0b:72:15:41:ef:fb:29:2b:5d:b4:1e:60:3d:bc: 9d:c4:76:44:d2:c5:03:d8:0c:0f:06:22:a1:2b:17: 91:53:c1:17:b0:34:f9:27:bc:9b:54:86:1a:8d:81: 49:99:ef:60:36:c3:96:e1:36:63:8e:c3:61:05:f4: 15:6d:5d:7a:b9:a8:36:5f:20:4b:7f:5f:74:3f:98: b2:f2:cf:3a:db:79:18:84:87:be:72:c9:1e:1b:d7: 69:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:19:23:27:22:6A:47:78:45:F1:06:6C:02:01:AF:01:A1:DB:C5:61 X509v3 Authority Key Identifier: keyid:A5:95:9C:75:F8:AC:19:0D:C2:2C:7C:32:76:CF:95:83:4D:5C:A6:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5959C75F8AC190DC22C7C3276CF95834D5CA687.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d61c750-880f-498b-a698-1f4780fa69ff/0/A5959C75F8AC190DC22C7C3276CF95834D5CA687.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3b:70:94:69:8c:90:88:94:63:65:8f:f8:e5:8d:c4:6f:8a: 19:57:a6:59:47:05:2d:a0:d0:6a:7a:ad:51:b7:af:9d:5f:7f: ef:39:33:4c:68:20:73:ea:3e:5d:11:ac:c5:e1:ef:e3:98:a8: 18:6f:9e:18:7e:25:65:bd:98:3f:08:bc:51:d4:dc:ce:6c:53: 0c:11:41:60:00:ef:0a:4a:db:ee:ef:b9:06:09:1c:57:be:12: e1:cb:d3:61:7a:0b:c9:29:cd:3f:60:b8:b8:63:d6:8c:ae:7b: 21:75:6b:68:d9:68:7d:1f:5b:78:54:e2:57:91:3c:95:a6:d7: 0a:98:53:cc:a2:81:57:31:d7:6f:1f:ba:f4:75:64:df:ef:a5: 23:da:b8:89:4f:da:d3:d6:3e:b4:3b:90:ca:c5:6e:d6:19:f2: 6a:fc:f1:24:46:66:4c:25:db:38:77:98:0b:06:67:09:4d:99: d3:96:bf:28:69:4b:8e:92:5b:49:9e:ea:20:67:34:67:34:f1: ef:6e:e0:88:d2:0e:0d:82:09:07:3c:12:7d:b8:2f:b6:87:05: 30:ce:a9:f6:2e:d2:4d:85:1e:1f:82:b6:fd:96:9b:1b:8d:cf: 9d:7a:5f:a2:60:40:bc:c1:2a:20:7d:d7:98:18:62:31:f7:43: 3d:bb:af:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9Wzi3Sc+/H1wd8byafQSOoSQtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0 RDVDQTY4NzAeFw0yNjAzMjQyMDM1NTNaFw0yNjAzMjcyMzU2NTNaMDMxMTAvBgNV BAMTKEZGMTkyMzI3MjI2QTQ3Nzg0NUYxMDY2QzAyMDFBRjAxQTFEQkM1NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGbwyvEhHhuYA9jbfXzVp1dwzi XA/hBDCHepZ8+O3qPRaR1AS43d9eh7vOzazhptlDMAmfyW4d7Qrwtyt2RJSaXfyJ qvmyxveLs0pJZ3QZA0ubhsxmzowZYsp7Orq53m/FJAblV2LeKx+c4PyiB68K5tVi q7CFTVY9zxZe5h6+bJdlzTxKMASfIr7pMcZ+aVgNxZ8Lvq4EZI+zflzliReYfTVg pRsLchVB7/spK120HmA9vJ3EdkTSxQPYDA8GIqErF5FTwRewNPknvJtUhhqNgUmZ 72A2w5bhNmOOw2EF9BVtXXq5qDZfIEt/X3Q/mLLyzzrbeRiEh75yyR4b12mHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/xkjJyJqR3hF8QZsAgGvAaHbxWEwHwYDVR0j BBgwFoAUpZWcdfisGQ3CLHwyds+Vg01cpocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDYxYzc1MC04ODBmLTQ5OGItYTY5OC0xZjQ3ODBmYTY5ZmYvMC9BNTk1OUM3NUY4 QUMxOTBEQzIyQzdDMzI3NkNGOTU4MzRENUNBNjg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1ODM0RDVD QTY4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2MWM3NTAtODgwZi00OThiLWE2 OTgtMWY0NzgwZmE2OWZmLzAvQTU5NTlDNzVGOEFDMTkwREMyMkM3QzMyNzZDRjk1 ODM0RDVDQTY4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI7cJRpjJCIlGNlj/jljcRvihlXpllHBS2g 0Gp6rVG3r51ff+85M0xoIHPqPl0RrMXh7+OYqBhvnhh+JWW9mD8IvFHU3M5sUwwR QWAA7wpK2+7vuQYJHFe+EuHL02F6C8kpzT9guLhj1oyueyF1a2jZaH0fW3hU4leR PJWm1wqYU8yigVcx128fuvR1ZN/vpSPauIlP2tPWPrQ7kMrFbtYZ8mr88SRGZkwl 2zh3mAsGZwlNmdOWvyhpS46SW0me6iBnNGc08e9u4IjSDg2CCQc8En24L7aHBTDO qfYu0k2FHh+Ctv2WmxuNz516X6JgQLzBKiB915gYYjH3Qz27r3A= -----END CERTIFICATE-----Generated at Thu Mar 26 22:31:58 2026 by rpki-client