$ rpki-client -vvf repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft File: AD5F121BCE742FD0358AE347D984F209BC381871.mft (raw, json) Hash identifier: dRPZAS/9pDL5ijZ42wY6jFdj0XVO+uhbbF+gRD9YtgM= Subject key identifier: AC:0E:AE:32:C4:01:AD:07:8F:A0:66:D8:53:01:D3:FC:A9:8A:FA:10 Authority key identifier: AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 Certificate issuer: /CN=AD5F121BCE742FD0358AE347D984F209BC381871 Certificate serial: 56BAB59EB2AB99AB23FFFE0727DE64FFA74F8442 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft Manifest number: 0364 Signing time: Wed 25 Mar 2026 14:01:38 +0000 Manifest this update: Wed 25 Mar 2026 13:56:38 +0000 Manifest next update: Sat 28 Mar 2026 16:58:38 +0000 Files and hashes: 1: AD5F121BCE742FD0358AE347D984F209BC381871.crl (hash: Q1Lw3Q2i/hdQcm1h1wRFOsP++j2uIoHOfYb0wx+6Q5s=) 2: 3130332e3137302e32342e302f32332d3234203d3e20313432333630.roa (hash: RMi8wIknD/gpfFnF26an+gZf/7MdAT/Qz50WllzD+8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:ba:b5:9e:b2:ab:99:ab:23:ff:fe:07:27:de:64:ff:a7:4f:84:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5F121BCE742FD0358AE347D984F209BC381871 Validity Not Before: Mar 25 13:56:38 2026 GMT Not After : Mar 28 16:58:38 2026 GMT Subject: CN=AC0EAE32C401AD078FA066D85301D3FCA98AFA10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:5e:28:67:02:13:84:6f:02:0d:1c:bf:cf:25: 1f:ab:f8:bf:b5:86:9d:3b:cc:8f:80:18:fc:2f:3a: 4d:ee:2b:03:92:77:80:d9:c8:56:22:b5:37:96:b6: 95:12:81:f0:94:15:3c:9a:35:78:57:51:47:e3:7a: 2b:f9:90:b3:47:b9:1e:bb:4e:c1:44:ed:90:f0:93: 82:9f:49:64:9c:09:f0:f6:92:19:6b:ca:96:8c:62: f1:58:4b:f9:19:c9:d7:8e:17:41:f1:b1:49:81:e6: 56:18:a2:d7:36:4d:3b:ac:02:81:0d:f2:9a:4a:0b: a5:7f:cb:7c:ea:28:36:03:63:15:15:74:c0:00:ae: db:38:7b:a7:f0:f7:e7:8b:66:82:35:c5:76:85:01: 7e:db:cd:ca:6b:0b:35:97:1c:6f:fa:13:35:3a:9d: 88:c5:ab:18:2b:f7:0b:12:99:af:78:c2:88:e0:a0: ff:be:0a:04:b1:04:30:ad:a6:e1:05:7c:52:48:aa: e1:21:5f:c8:b5:c3:fc:5a:ba:33:4a:ad:2d:68:40: 19:bd:22:eb:e9:f0:14:0f:74:29:a9:69:01:2b:31: 81:db:e0:8c:c8:e1:c8:a8:f8:f1:c0:91:e0:a2:13: 53:d3:fe:2d:3e:3a:99:f0:e8:37:54:5d:97:aa:90: 95:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:0E:AE:32:C4:01:AD:07:8F:A0:66:D8:53:01:D3:FC:A9:8A:FA:10 X509v3 Authority Key Identifier: keyid:AD:5F:12:1B:CE:74:2F:D0:35:8A:E3:47:D9:84:F2:09:BC:38:18:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5F121BCE742FD0358AE347D984F209BC381871.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b40b09e-e9f8-4826-92b5-ba9d57579b26/0/AD5F121BCE742FD0358AE347D984F209BC381871.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:09:d8:40:f1:79:60:ab:3a:78:74:a7:7c:86:72:c4:1c:82: 20:c7:c0:0c:81:a0:5b:05:86:27:d8:1a:46:52:0c:84:44:19: 34:74:cf:66:8e:ce:ed:8c:9a:5e:89:a1:93:e8:8b:9a:fe:4c: 49:3e:a1:66:05:cb:53:33:ab:f6:8b:a5:8f:32:d7:31:34:dc: 0a:e4:f8:b6:8f:99:0e:dd:f8:f4:42:71:8e:1f:f1:4d:c9:26: e2:6b:a1:80:b8:74:f1:d4:dd:ab:96:2e:84:fc:da:80:9c:c2: fc:6b:a1:1b:1f:c8:c4:08:0e:44:65:0d:a9:07:f0:57:93:e1: b4:81:d9:0e:c9:d8:a0:46:4b:f2:d3:3e:35:e9:f1:3f:c7:d5: 14:c5:f1:f3:3b:cf:88:6d:53:14:2a:e5:56:45:29:db:f5:30: de:41:98:e2:72:c0:b9:d8:28:cb:11:6b:00:dc:f1:5d:fc:04: 47:ec:29:c0:77:bc:aa:02:39:80:05:9f:48:4c:46:7b:49:8e: 55:a8:49:94:7a:7d:3f:15:43:ef:5b:65:25:5c:87:2c:df:56: 4a:85:61:d6:94:25:e7:3d:d4:c4:f2:1b:be:c4:46:d8:7c:34: be:64:04:c7:e8:55:49:75:06:f8:7b:46:b5:47:2e:07:1c:6f: 46:e3:c0:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVrq1nrKrmasj//4HJ95k/6dPhEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlC QzM4MTg3MTAeFw0yNjAzMjUxMzU2MzhaFw0yNjAzMjgxNjU4MzhaMDMxMTAvBgNV BAMTKEFDMEVBRTMyQzQwMUFEMDc4RkEwNjZEODUzMDFEM0ZDQTk4QUZBMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRXihnAhOEbwINHL/PJR+r+L+1 hp07zI+AGPwvOk3uKwOSd4DZyFYitTeWtpUSgfCUFTyaNXhXUUfjeiv5kLNHuR67 TsFE7ZDwk4KfSWScCfD2khlrypaMYvFYS/kZydeOF0HxsUmB5lYYotc2TTusAoEN 8ppKC6V/y3zqKDYDYxUVdMAArts4e6fw9+eLZoI1xXaFAX7bzcprCzWXHG/6EzU6 nYjFqxgr9wsSma94wojgoP++CgSxBDCtpuEFfFJIquEhX8i1w/xaujNKrS1oQBm9 Iuvp8BQPdCmpaQErMYHb4IzI4cio+PHAkeCiE1PT/i0+Opnw6DdUXZeqkJVJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrA6uMsQBrQePoGbYUwHT/KmK+hAwHwYDVR0j BBgwFoAUrV8SG850L9A1iuNH2YTyCbw4GHEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjQwYjA5ZS1lOWY4LTQ4MjYtOTJiNS1iYTlkNTc1NzliMjYvMC9BRDVGMTIxQkNF NzQyRkQwMzU4QUUzNDdEOTg0RjIwOUJDMzgxODcxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYyMDlCQzM4 MTg3MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I0MGIwOWUtZTlmOC00ODI2LTky YjUtYmE5ZDU3NTc5YjI2LzAvQUQ1RjEyMUJDRTc0MkZEMDM1OEFFMzQ3RDk4NEYy MDlCQzM4MTg3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYJ2EDxeWCrOnh0p3yGcsQcgiDHwAyBoFsF hifYGkZSDIREGTR0z2aOzu2Mml6JoZPoi5r+TEk+oWYFy1Mzq/aLpY8y1zE03Ark +LaPmQ7d+PRCcY4f8U3JJuJroYC4dPHU3auWLoT82oCcwvxroRsfyMQIDkRlDakH 8FeT4bSB2Q7J2KBGS/LTPjXp8T/H1RTF8fM7z4htUxQq5VZFKdv1MN5BmOJywLnY KMsRawDc8V38BEfsKcB3vKoCOYAFn0hMRntJjlWoSZR6fT8VQ+9bZSVchyzfVkqF YdaUJec91MTyG77ERth8NL5kBMfoVUl1Bvh7RrVHLgccb0bjwAA= -----END CERTIFICATE-----Generated at Thu Mar 26 12:58:02 2026 by rpki-client