$ rpki-client -vvf repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft File: A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft (raw, json) Hash identifier: KuDAeuWDxaI5o9uZDyyn4Oliu5wOM09pz4zCa5srnQ4= Subject key identifier: AB:0C:16:26:3D:77:32:01:DD:A2:24:BC:B6:4C:92:00:34:BF:66:9E Authority key identifier: A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 Certificate issuer: /CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Certificate serial: 0DE15F9A79350C442FA5BC8E50B4BFF7A3EDCC11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft Manifest number: 017F Signing time: Thu 26 Mar 2026 08:32:28 +0000 Manifest this update: Thu 26 Mar 2026 08:27:28 +0000 Manifest next update: Sun 29 Mar 2026 14:27:28 +0000 Files and hashes: 1: A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl (hash: B/LmTJUe3QxdkvxnfqhAXE0LxRAadsSCYeuHWKkDo9o=) 2: 3130332e3134322e32302e302f32342d3234203d3e20313531353734.roa (hash: SrZZMNyD+weFJ6GOZ0htogUZ6HrLc/IW65Udx/Gnnmc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:27:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:e1:5f:9a:79:35:0c:44:2f:a5:bc:8e:50:b4:bf:f7:a3:ed:cc:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A35D0D096727FDBE2A4EED451994708ECB4A5F14 Validity Not Before: Mar 26 08:27:28 2026 GMT Not After : Mar 29 14:27:28 2026 GMT Subject: CN=AB0C16263D773201DDA224BCB64C920034BF669E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:70:8c:61:ea:bd:7a:f8:0c:c6:db:e9:3d:fe: 95:ed:de:14:1c:69:af:29:80:c1:f6:e8:93:be:28: 82:56:1d:5b:a2:75:55:11:ea:a6:7c:41:7c:47:37: 84:f7:48:9c:7e:c0:9d:7e:ab:6c:a9:84:5b:11:95: 19:06:af:11:ce:23:26:dd:54:7a:18:f2:f3:5d:31: 0e:53:fe:84:49:bd:30:e8:26:59:0b:d6:9e:fd:25: cc:1b:0b:e0:be:01:6c:c4:3d:46:30:54:1a:2a:e1: ad:67:5c:78:0a:4f:f9:98:13:c0:94:ba:77:77:85: f1:5c:80:c9:a9:5d:a0:a7:9d:4b:72:4a:9a:6a:b8: f9:35:e6:a0:64:cc:b0:0e:c0:9a:d3:27:c4:17:4a: b7:e2:3e:10:f1:17:a8:16:87:ba:3b:d1:8c:5f:91: d7:12:6b:8f:2f:34:51:17:72:86:0d:f5:5b:e6:aa: 64:52:a6:1d:93:17:bb:d3:8b:09:d8:a5:01:3e:19: 79:41:e5:24:8a:94:33:8f:74:91:3b:b1:e3:47:f7: 29:b6:5c:73:92:38:b6:71:e2:d1:f7:12:ad:2e:f2: af:02:cd:38:a1:82:1d:66:c7:19:59:c2:86:6d:4a: fd:4d:1c:d9:27:de:48:f1:52:f5:12:7f:3f:44:3e: 5d:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:16:26:3D:77:32:01:DD:A2:24:BC:B6:4C:92:00:34:BF:66:9E X509v3 Authority Key Identifier: keyid:A3:5D:0D:09:67:27:FD:BE:2A:4E:ED:45:19:94:70:8E:CB:4A:5F:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A35D0D096727FDBE2A4EED451994708ECB4A5F14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6deef218-0d9b-4d0d-a5c5-f832b8eb5aba/0/A35D0D096727FDBE2A4EED451994708ECB4A5F14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:c4:72:f3:66:f9:90:a4:e3:37:15:4e:aa:08:b7:60:45:80: f0:10:86:03:d7:55:09:33:69:f9:2e:fd:84:3b:68:ed:1c:e3: f4:07:d1:77:16:e7:1b:27:68:c6:2e:39:07:8a:1c:8a:f0:d5: 7b:a4:cc:7e:cc:04:07:98:1a:00:f9:9a:92:d3:d2:2b:f2:8f: 7a:54:be:9c:bb:dc:7d:85:bc:93:88:e4:c9:26:d2:33:f2:22: f4:7a:15:24:45:87:ac:0a:6c:c0:6c:31:76:f4:a1:2d:7e:6f: 5a:0c:3c:4e:1a:77:2b:d8:03:3b:12:85:07:18:3e:44:d0:c0: e1:e5:c1:f7:b6:39:59:da:65:bd:02:b4:0f:7e:19:01:33:c2: fd:79:57:11:d1:0e:0a:5a:11:2f:1f:ef:44:c3:e4:c4:b2:77: 53:16:32:e6:e7:4a:f0:a9:d9:73:4e:9b:5e:c1:08:26:29:a0: ad:93:e2:7e:dd:5a:1b:d7:e4:46:81:27:0b:43:e1:a8:74:0d: c8:f9:97:ac:5d:b6:7c:a9:67:63:81:87:14:a1:83:8e:e2:01: a7:14:9e:66:29:80:e1:5d:1c:09:4f:17:6e:cf:1f:4d:f9:ed: 57:89:04:d9:39:94:96:56:5d:28:50:bb:40:ab:a2:ac:21:4f: ad:13:83:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDeFfmnk1DEQvpbyOULS/96PtzBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVD QjRBNUYxNDAeFw0yNjAzMjYwODI3MjhaFw0yNjAzMjkxNDI3MjhaMDMxMTAvBgNV BAMTKEFCMEMxNjI2M0Q3NzMyMDFEREEyMjRCQ0I2NEM5MjAwMzRCRjY2OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMcIxh6r16+AzG2+k9/pXt3hQc aa8pgMH26JO+KIJWHVuidVUR6qZ8QXxHN4T3SJx+wJ1+q2yphFsRlRkGrxHOIybd VHoY8vNdMQ5T/oRJvTDoJlkL1p79JcwbC+C+AWzEPUYwVBoq4a1nXHgKT/mYE8CU und3hfFcgMmpXaCnnUtySppquPk15qBkzLAOwJrTJ8QXSrfiPhDxF6gWh7o70Yxf kdcSa48vNFEXcoYN9VvmqmRSph2TF7vTiwnYpQE+GXlB5SSKlDOPdJE7seNH9ym2 XHOSOLZx4tH3Eq0u8q8CzTihgh1mxxlZwoZtSv1NHNkn3kjxUvUSfz9EPl3BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqwwWJj13MgHdoiS8tkySADS/Zp4wHwYDVR0j BBgwFoAUo10NCWcn/b4qTu1FGZRwjstKXxQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZGVlZjIxOC0wZDliLTRkMGQtYTVjNS1mODMyYjhlYjVhYmEvMC9BMzVEMEQwOTY3 MjdGREJFMkE0RUVENDUxOTk0NzA4RUNCNEE1RjE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcwOEVDQjRB NUYxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmRlZWYyMTgtMGQ5Yi00ZDBkLWE1 YzUtZjgzMmI4ZWI1YWJhLzAvQTM1RDBEMDk2NzI3RkRCRTJBNEVFRDQ1MTk5NDcw OEVDQjRBNUYxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHEcvNm+ZCk4zcVTqoIt2BFgPAQhgPXVQkz afku/YQ7aO0c4/QH0XcW5xsnaMYuOQeKHIrw1XukzH7MBAeYGgD5mpLT0ivyj3pU vpy73H2FvJOI5Mkm0jPyIvR6FSRFh6wKbMBsMXb0oS1+b1oMPE4adyvYAzsShQcY PkTQwOHlwfe2OVnaZb0CtA9+GQEzwv15VxHRDgpaES8f70TD5MSyd1MWMubnSvCp 2XNOm17BCCYpoK2T4n7dWhvX5EaBJwtD4ah0Dcj5l6xdtnypZ2OBhxShg47iAacU nmYpgOFdHAlPF27PH0357VeJBNk5lJZWXShQu0CroqwhT60Tg2I= -----END CERTIFICATE-----Generated at Thu Mar 26 18:53:56 2026 by rpki-client