$ rpki-client -vvf repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft File: A5BB79678DB1239CD393222080CAAF085BEE737F.mft (raw, json) Hash identifier: R39uOg++jAYSimaH3Oy/1hJTGmn7EF+Yu7P21FVriO4= Subject key identifier: 5E:5A:2A:56:17:7A:5D:ED:B1:03:DA:78:22:AA:2C:68:21:60:9C:14 Authority key identifier: A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F Certificate issuer: /CN=A5BB79678DB1239CD393222080CAAF085BEE737F Certificate serial: 61B9F69F28CAB6AEFE0E9CF8C7FBF95E8112369B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft Manifest number: 01BA Signing time: Thu 26 Mar 2026 02:22:37 +0000 Manifest this update: Thu 26 Mar 2026 02:17:37 +0000 Manifest next update: Sun 29 Mar 2026 07:40:37 +0000 Files and hashes: 1: A5BB79678DB1239CD393222080CAAF085BEE737F.crl (hash: zh/WAujALRCTY7xyUQK246ZM/eWrJ8pkpuqaGerkbP8=) 2: 3130332e39372e3232342e302f32342d3234203d3e20313530393233.roa (hash: huPH2F1DP0fchHSvvNbciHmA7KaDKFRvJu4CVI1hLtw=) 3: 3130332e39372e3232352e302f32342d3234203d3e20313530393233.roa (hash: AfZT+DYt+W7l5q6Eb5R0GGURTcYit/OtninY3XWSM0s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:40:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:b9:f6:9f:28:ca:b6:ae:fe:0e:9c:f8:c7:fb:f9:5e:81:12:36:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BB79678DB1239CD393222080CAAF085BEE737F Validity Not Before: Mar 26 02:17:37 2026 GMT Not After : Mar 29 07:40:37 2026 GMT Subject: CN=5E5A2A56177A5DEDB103DA7822AA2C6821609C14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:9d:fa:89:6d:77:4a:89:64:2d:4c:2a:24:f2: cc:9a:4f:40:86:0c:10:65:54:f3:67:b6:0b:b5:33: 43:97:b4:d7:69:c5:dc:86:e9:51:e1:52:5e:93:9d: 1a:49:31:96:bc:e7:81:14:87:78:c3:46:f2:8d:fa: 41:1e:f1:b0:ea:0b:38:13:7a:89:cb:e2:94:cc:da: 02:e2:32:18:c6:f9:01:b4:91:60:a1:68:8a:aa:a8: df:3b:1e:c5:14:77:d9:0e:43:dc:79:76:33:05:46: 48:c4:8e:ec:ac:79:5d:b1:40:57:6a:af:4d:27:d4: 5f:65:5c:d1:ca:f4:ff:74:9b:54:f6:32:ad:fb:85: 04:98:b6:aa:a7:4f:9e:15:52:bc:49:5f:46:21:02: 74:d3:90:ba:98:e4:44:1b:b6:45:59:b8:d4:98:bd: 45:2f:7d:79:6d:af:8b:9e:4a:b4:53:d1:60:b5:96: 8c:a8:d5:61:f6:d0:77:0d:84:7b:da:93:d4:69:22: 0b:0d:31:14:78:fb:c7:23:84:16:79:b5:7b:96:0c: 4f:80:99:84:99:03:36:2e:38:bb:18:04:06:9d:fe: 98:d3:97:65:55:bb:9f:41:b6:b6:c1:af:19:cd:fe: 9e:ff:7b:40:cb:77:0e:6e:72:8a:36:23:90:73:70: 46:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:5A:2A:56:17:7A:5D:ED:B1:03:DA:78:22:AA:2C:68:21:60:9C:14 X509v3 Authority Key Identifier: keyid:A5:BB:79:67:8D:B1:23:9C:D3:93:22:20:80:CA:AF:08:5B:EE:73:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BB79678DB1239CD393222080CAAF085BEE737F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74aaa2f1-63a9-4281-8942-fb5d824119a4/0/A5BB79678DB1239CD393222080CAAF085BEE737F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:31:0c:3a:90:f5:fa:34:60:7b:8d:ff:83:23:2b:bf:e4:52: 7d:13:7a:28:4d:21:ae:ea:01:6b:59:b4:c7:16:79:a2:7c:6e: 02:03:17:8c:80:2e:37:93:68:98:64:30:94:da:dc:31:3e:7d: 8b:01:32:29:32:11:01:27:46:56:e3:9d:a5:c2:fe:82:c3:49: c5:02:db:4b:58:f2:12:ad:8e:09:a6:ef:4e:68:4e:27:58:c1: 56:9f:cf:b6:02:e4:c2:6e:32:62:61:77:8e:eb:79:1d:0e:ba: c2:c2:c5:9d:c2:3f:72:ae:ad:ee:32:6e:1d:cc:f3:db:1c:83: f1:69:6f:7d:63:67:4d:29:7d:26:05:85:99:63:ab:6d:86:93: 6a:50:b0:dd:45:1a:9b:cb:44:c9:be:3b:96:2e:3b:5c:5d:8e: de:59:ec:74:7b:0b:d1:72:87:28:c4:57:4e:ff:18:05:37:17: 86:8b:68:ea:c7:ce:e0:d2:03:3a:51:a6:ff:48:6b:92:e0:a3: 1f:74:9a:a0:81:e8:13:46:95:92:8d:f7:3b:2d:be:3b:ab:e1: d4:cb:67:a7:c5:b3:fe:44:95:a7:bb:3d:75:b4:d2:a1:e2:2d: c1:fa:47:16:2a:d4:35:41:a4:77:67:15:42:9c:e6:b9:7d:6f: 44:1c:15:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYbn2nyjKtq7+Dpz4x/v5XoESNpswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1 QkVFNzM3RjAeFw0yNjAzMjYwMjE3MzdaFw0yNjAzMjkwNzQwMzdaMDMxMTAvBgNV BAMTKDVFNUEyQTU2MTc3QTVERURCMTAzREE3ODIyQUEyQzY4MjE2MDlDMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAnfqJbXdKiWQtTCok8syaT0CG DBBlVPNntgu1M0OXtNdpxdyG6VHhUl6TnRpJMZa854EUh3jDRvKN+kEe8bDqCzgT eonL4pTM2gLiMhjG+QG0kWChaIqqqN87HsUUd9kOQ9x5djMFRkjEjuyseV2xQFdq r00n1F9lXNHK9P90m1T2Mq37hQSYtqqnT54VUrxJX0YhAnTTkLqY5EQbtkVZuNSY vUUvfXltr4ueSrRT0WC1loyo1WH20HcNhHvak9RpIgsNMRR4+8cjhBZ5tXuWDE+A mYSZAzYuOLsYBAad/pjTl2VVu59BtrbBrxnN/p7/e0DLdw5ucoo2I5BzcEbPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXloqVhd6Xe2xA9p4IqosaCFgnBQwHwYDVR0j BBgwFoAUpbt5Z42xI5zTkyIggMqvCFvuc38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NGFhYTJmMS02M2E5LTQyODEtODk0Mi1mYjVkODI0MTE5YTQvMC9BNUJCNzk2NzhE QjEyMzlDRDM5MzIyMjA4MENBQUYwODVCRUU3MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFGMDg1QkVF NzM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzRhYWEyZjEtNjNhOS00MjgxLTg5 NDItZmI1ZDgyNDExOWE0LzAvQTVCQjc5Njc4REIxMjM5Q0QzOTMyMjIwODBDQUFG MDg1QkVFNzM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQxDDqQ9fo0YHuN/4MjK7/kUn0TeihNIa7q AWtZtMcWeaJ8bgIDF4yALjeTaJhkMJTa3DE+fYsBMikyEQEnRlbjnaXC/oLDScUC 20tY8hKtjgmm705oTidYwVafz7YC5MJuMmJhd47reR0OusLCxZ3CP3Kure4ybh3M 89scg/Fpb31jZ00pfSYFhZljq22Gk2pQsN1FGpvLRMm+O5YuO1xdjt5Z7HR7C9Fy hyjEV07/GAU3F4aLaOrHzuDSAzpRpv9Ia5Lgox90mqCB6BNGlZKN9zstvjur4dTL Z6fFs/5Elae7PXW00qHiLcH6RxYq1DVBpHdnFUKc5rl9b0QcFWQ= -----END CERTIFICATE-----Generated at Thu Mar 26 14:36:05 2026 by rpki-client