$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: 1wd1iWwCEGEpzD2jy6jxZtGBNK7GHtcsgP9fHHs7ePo= Subject key identifier: B3:7A:72:15:29:13:B4:6E:32:15:FC:49:AD:9A:2D:73:9D:B5:E6:F6 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 39710B84E6D9F616D521AD427E31FC2D68105485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0273 Signing time: Tue 24 Mar 2026 11:11:53 +0000 Manifest this update: Tue 24 Mar 2026 11:06:53 +0000 Manifest next update: Fri 27 Mar 2026 22:57:53 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: rkOVxCYKuAZex9bknAcNCNidirQQtusbxpu7yY8pphU=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: 29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:57:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:71:0b:84:e6:d9:f6:16:d5:21:ad:42:7e:31:fc:2d:68:10:54:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Mar 24 11:06:53 2026 GMT Not After : Mar 27 22:57:53 2026 GMT Subject: CN=B37A72152913B46E3215FC49AD9A2D739DB5E6F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e8:ed:48:45:20:de:55:24:68:e9:33:f0:b1: f2:d0:ac:f7:ec:3d:6c:7b:9d:8f:e4:0f:59:6a:15: 2d:46:68:17:e1:fd:51:ca:d2:5c:54:27:9e:5c:62: fe:87:57:17:60:21:9e:4e:17:6b:e2:46:97:3a:92: fb:8a:7b:18:98:57:86:32:4d:06:b2:2c:8c:5b:c2: 12:d7:93:da:0f:29:a5:b9:55:6c:9f:57:53:19:6d: 44:0e:c8:c4:86:06:62:50:75:7f:dd:e3:ea:a8:11: d8:d4:77:68:eb:76:fa:1c:08:57:32:a6:0a:06:6d: 7b:f9:e2:5a:a5:c0:3c:32:cd:59:56:2f:ff:53:1c: 97:a3:ae:fa:cc:64:76:89:e4:64:0e:73:6e:e7:0c: 42:b9:d7:fc:f5:1b:f0:59:51:2b:f8:1e:a8:6b:2f: 40:8c:70:36:ea:d3:ff:d2:19:f5:a6:30:51:94:24: eb:57:30:e8:ea:ce:b5:9d:cf:bb:40:85:8f:e2:10: c0:23:47:9b:7b:f5:be:0c:ba:d3:42:78:36:50:88: f6:5c:cd:47:4e:b9:f0:53:16:0b:e8:d9:bf:16:d5: 1c:c7:18:10:3a:00:67:a3:4b:4b:59:f4:92:65:20: 8d:a5:c7:5b:e6:f4:3d:df:16:14:ed:37:71:92:92: 5e:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:7A:72:15:29:13:B4:6E:32:15:FC:49:AD:9A:2D:73:9D:B5:E6:F6 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:2c:77:dc:0d:7f:d9:5f:99:fd:83:c5:2d:0f:62:e2:40:36: 24:8b:d0:42:f1:36:6b:4f:e6:d4:c3:04:d8:fc:53:e2:bb:51: b6:4c:d3:d8:91:64:d3:07:f4:fc:3b:8a:a0:76:f6:19:97:c8: e0:54:01:70:a1:b0:d6:d8:38:06:f8:7d:e8:98:4e:d1:8f:db: 13:8d:b8:24:d2:e5:62:72:55:02:21:2e:3e:21:ed:19:67:31: a9:14:0f:bf:fb:41:76:fb:ce:77:09:a4:35:a5:e7:d6:59:89: c8:8b:76:63:e3:84:98:6c:59:ea:91:38:fc:bd:ab:e3:c2:51: 18:e4:55:3e:37:8a:4e:9d:0e:6f:81:e0:27:03:4a:89:49:ac: f5:50:8a:d8:81:df:34:9a:51:3a:dc:14:a9:cf:25:6e:57:e7: 7e:fb:6c:05:9b:4e:63:6c:23:ff:75:23:7f:35:6c:33:51:f8: 19:e8:fb:00:cd:7f:37:4a:7b:90:4f:5e:d9:ac:97:59:06:05: 4d:25:c7:a4:79:c0:f8:17:f5:66:f5:ff:70:71:87:64:1b:91: c1:f8:75:e4:b0:b0:2c:da:3b:3c:97:e7:f2:b2:df:9d:24:bb: 4e:6b:75:e0:49:46:e8:93:76:63:af:80:d0:54:48:ce:f6:9d: ce:a6:0a:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOXELhObZ9hbVIa1CfjH8LWgQVIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNjAzMjQxMTA2NTNaFw0yNjAzMjcyMjU3NTNaMDMxMTAvBgNV BAMTKEIzN0E3MjE1MjkxM0I0NkUzMjE1RkM0OUFEOUEyRDczOURCNUU2RjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt6O1IRSDeVSRo6TPwsfLQrPfs PWx7nY/kD1lqFS1GaBfh/VHK0lxUJ55cYv6HVxdgIZ5OF2viRpc6kvuKexiYV4Yy TQayLIxbwhLXk9oPKaW5VWyfV1MZbUQOyMSGBmJQdX/d4+qoEdjUd2jrdvocCFcy pgoGbXv54lqlwDwyzVlWL/9THJejrvrMZHaJ5GQOc27nDEK51/z1G/BZUSv4Hqhr L0CMcDbq0//SGfWmMFGUJOtXMOjqzrWdz7tAhY/iEMAjR5t79b4MutNCeDZQiPZc zUdOufBTFgvo2b8W1RzHGBA6AGejS0tZ9JJlII2lx1vm9D3fFhTtN3GSkl47AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs3pyFSkTtG4yFfxJrZotc5215vYwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA4sd9wNf9lfmf2DxS0PYuJANiSL0ELxNmtP 5tTDBNj8U+K7UbZM09iRZNMH9Pw7iqB29hmXyOBUAXChsNbYOAb4feiYTtGP2xON uCTS5WJyVQIhLj4h7RlnMakUD7/7QXb7zncJpDWl59ZZiciLdmPjhJhsWeqROPy9 q+PCURjkVT43ik6dDm+B4CcDSolJrPVQitiB3zSaUTrcFKnPJW5X5377bAWbTmNs I/91I381bDNR+Bno+wDNfzdKe5BPXtmsl1kGBU0lx6R5wPgX9Wb1/3Bxh2QbkcH4 deSwsCzaOzyX5/Ky350ku05rdeBJRuiTdmOvgNBUSM72nc6mCkk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:48:24 2026 by rpki-client