$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: jACGfHc/PyuKKf4u3kvC/LFRvv7Or7UV5c4xZPNm0GM= Subject key identifier: 95:84:93:8D:D6:50:24:E7:97:CA:FA:DB:B3:32:2E:E2:DE:D7:CB:DE Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 78BDCB5482BEEEE04B1F4E25BFEA446A76252B2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 04B7 Signing time: Tue 24 Mar 2026 20:10:00 +0000 Manifest this update: Tue 24 Mar 2026 20:05:00 +0000 Manifest next update: Sat 28 Mar 2026 02:14:00 +0000 Files and hashes: 1: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) 2: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: KAoQ80qHyGxN39+JE7AFGi2XXp5iLhQj+IHXq3JOnHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:bd:cb:54:82:be:ee:e0:4b:1f:4e:25:bf:ea:44:6a:76:25:2b:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Mar 24 20:05:00 2026 GMT Not After : Mar 28 02:14:00 2026 GMT Subject: CN=9584938DD65024E797CAFADBB3322EE2DED7CBDE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:88:80:a0:59:b3:a5:e0:2a:47:c6:d7:2d:ce: bd:6c:36:ec:15:13:28:5d:ad:d4:c6:6b:a3:25:cb: 94:1f:b6:f8:6c:39:ab:4f:63:1d:91:ea:46:51:b2: 7a:bd:b7:70:f7:b0:7f:e9:a9:86:4b:90:a6:86:f5: d9:7f:5f:2c:5e:19:f3:55:8f:a2:ed:02:d0:61:03: a9:41:18:02:46:90:58:bc:3b:18:df:24:77:40:34: c4:25:44:06:73:d9:9c:31:3f:3e:19:4e:7f:3a:d2: 72:a5:88:b8:d5:08:38:7e:51:fa:61:1b:01:45:51: 89:ca:30:67:42:50:bd:6a:28:42:83:db:6a:88:d6: 66:27:eb:02:fc:51:e6:8c:c9:f5:71:ee:80:30:94: 41:14:a4:75:d4:65:23:2f:e4:db:44:75:82:a2:a1: d4:a2:fa:8a:01:32:bc:78:8c:7e:a0:f0:87:7c:44: ac:0b:b8:0e:3b:9b:12:eb:f2:e1:02:74:28:ad:06: 3c:e9:81:54:e1:cf:f1:35:76:b7:3b:ec:8d:5e:0b: 74:5b:5e:2c:5e:bb:2e:23:de:4f:df:b9:6a:27:d3: 57:f5:18:df:b6:80:16:ac:0f:cc:ef:54:15:4f:da: 8f:3c:4f:7b:b7:64:38:db:17:f1:23:9f:ce:32:1a: 37:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:84:93:8D:D6:50:24:E7:97:CA:FA:DB:B3:32:2E:E2:DE:D7:CB:DE X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:30:ce:d2:74:38:c1:1a:ee:b5:53:39:fa:4c:61:a8:c8:4c: 33:ec:b1:df:4f:2e:1c:5f:f4:0d:6e:e9:75:15:ea:8f:ec:08: 16:a8:b8:0d:6f:6d:c5:47:9c:a1:94:3a:67:46:f7:5b:5a:02: 6f:0e:27:9a:ce:4a:7e:4f:a0:38:fa:2b:16:1e:04:e5:77:68: e7:4b:44:5e:36:11:ff:6a:51:02:ef:ce:5a:07:c5:1b:2f:a9: c5:b2:f5:5a:ad:85:35:d1:ac:68:c0:65:b8:f5:75:47:3e:db: d6:18:e1:ae:6f:65:60:74:ae:bc:e2:33:71:1b:82:2d:7c:b4: cf:ac:bd:be:c2:5b:5e:97:85:8d:c6:24:ea:6d:90:6b:55:6d: 20:7c:a5:21:4f:84:b7:27:d9:03:56:7a:f3:e3:4c:03:ac:2a: ae:36:27:da:41:a8:28:9f:18:7e:9d:53:76:9b:98:0c:79:c6: 99:ca:fd:4d:42:e8:03:1b:e3:4c:9d:26:55:7f:8f:a3:82:39: fb:ad:f5:50:19:d8:55:e9:70:bb:4c:59:4c:29:6f:ac:47:c0: 41:b3:bc:b9:28:fc:ba:dc:95:2a:20:9c:18:c8:de:f4:a3:24: 72:43:73:c3:8a:e8:64:68:09:0a:e4:ca:52:a3:32:39:13:ae: 7e:62:5a:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeL3LVIK+7uBLH04lv+pEanYlKy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNjAzMjQyMDA1MDBaFw0yNjAzMjgwMjE0MDBaMDMxMTAvBgNV BAMTKDk1ODQ5MzhERDY1MDI0RTc5N0NBRkFEQkIzMzIyRUUyREVEN0NCREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEiICgWbOl4CpHxtctzr1sNuwV EyhdrdTGa6Mly5QftvhsOatPYx2R6kZRsnq9t3D3sH/pqYZLkKaG9dl/XyxeGfNV j6LtAtBhA6lBGAJGkFi8OxjfJHdANMQlRAZz2ZwxPz4ZTn860nKliLjVCDh+Ufph GwFFUYnKMGdCUL1qKEKD22qI1mYn6wL8UeaMyfVx7oAwlEEUpHXUZSMv5NtEdYKi odSi+ooBMrx4jH6g8Id8RKwLuA47mxLr8uECdCitBjzpgVThz/E1drc77I1eC3Rb Xixeuy4j3k/fuWon01f1GN+2gBasD8zvVBVP2o88T3u3ZDjbF/Ejn84yGjfrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlYSTjdZQJOeXyvrbszIu4t7Xy94wHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEowztJ0OMEa7rVTOfpMYajITDPssd9PLhxf 9A1u6XUV6o/sCBaouA1vbcVHnKGUOmdG91taAm8OJ5rOSn5PoDj6KxYeBOV3aOdL RF42Ef9qUQLvzloHxRsvqcWy9VqthTXRrGjAZbj1dUc+29YY4a5vZWB0rrziM3Eb gi18tM+svb7CW16XhY3GJOptkGtVbSB8pSFPhLcn2QNWevPjTAOsKq42J9pBqCif GH6dU3abmAx5xpnK/U1C6AMb40ydJlV/j6OCOfut9VAZ2FXpcLtMWUwpb6xHwEGz vLko/LrclSognBjI3vSjJHJDc8OK6GRoCQrkylKjMjkTrn5iWgY= -----END CERTIFICATE-----Generated at Thu Mar 26 06:29:59 2026 by rpki-client