$ rpki-client -vvf repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft File: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft (raw, json) Hash identifier: L0MGIs33WveY8pVb87Wi4S4SoqzSR5Yz1YU/4XrgskY= Subject key identifier: 3D:E7:AC:FE:24:0D:46:C1:D6:0A:67:38:51:10:35:66:D5:60:1B:9A Authority key identifier: AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 Certificate issuer: /CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Certificate serial: 63D755090DFF64468ECCC35D97F963C29490B90B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft Manifest number: 01F4 Signing time: Tue 24 Mar 2026 18:41:17 +0000 Manifest this update: Tue 24 Mar 2026 18:36:17 +0000 Manifest next update: Fri 27 Mar 2026 18:53:17 +0000 Files and hashes: 1: 3130332e3135332e38322e302f32342d3234203d3e20313430343539.roa (hash: 5/bb2m/l4G8bQopKZ9eyezGHRGaLv9nfRV9c/BB9Gks=) 2: 3130332e3135332e38332e302f32342d3234203d3e20313439373034.roa (hash: CyqCQFsLxJfTBDBdmJ04cZzDUHG5T26HrmU816zhY/E=) 3: AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl (hash: 5/Frj2HLaXm+0M2hhRodkJKAkdZPSf9lJfNmj8FbYOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:d7:55:09:0d:ff:64:46:8e:cc:c3:5d:97:f9:63:c2:94:90:b9:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2 Validity Not Before: Mar 24 18:36:17 2026 GMT Not After : Mar 27 18:53:17 2026 GMT Subject: CN=3DE7ACFE240D46C1D60A673851103566D5601B9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:3f:4f:df:54:57:77:b5:ba:a1:e0:b0:ab:2e: b1:00:87:5f:3a:44:de:32:5f:6a:68:37:e1:0e:6f: 1c:44:f5:1e:9f:58:ee:0f:6c:aa:22:4b:b8:ef:b2: 50:e5:fd:7a:10:59:f9:68:f8:ee:58:c8:b9:46:7b: 72:b5:d8:04:a3:b9:75:28:36:23:04:b9:eb:14:f1: 6f:c4:33:31:52:2b:2f:e6:ac:36:f4:71:2d:37:22: 82:af:b9:60:8f:2b:41:a7:a1:61:2c:c3:3e:28:1a: 02:33:a3:6e:1f:41:21:7c:1e:04:ae:e6:b6:19:a4: 26:d2:23:28:c7:f8:c8:a6:b5:bf:38:6e:5a:15:ef: 15:b4:bc:b2:d2:ed:b8:5f:1f:7a:9b:33:5f:48:87: 63:25:b4:c6:66:72:4c:a7:68:12:1c:9b:b8:35:d9: a8:28:a5:0f:57:9d:6d:2d:99:12:8c:22:dc:28:e7: 33:19:13:81:74:23:93:85:38:b7:2c:a8:a1:c9:e9: a1:85:a8:c0:bf:58:4d:64:d9:e9:d3:66:94:32:8a: d9:cd:b5:ef:73:4a:ba:8a:23:79:ab:90:83:d3:12: b9:2b:0c:e9:45:ec:db:21:94:39:6c:16:ef:93:15: a0:79:f8:2f:db:8e:02:cf:85:30:a5:a9:6d:e9:dc: 4f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:E7:AC:FE:24:0D:46:C1:D6:0A:67:38:51:10:35:66:D5:60:1B:9A X509v3 Authority Key Identifier: keyid:AD:9B:CA:DB:23:5B:6D:EE:6C:AD:4E:B4:C5:3A:A8:B3:BA:73:FE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e76db1e-bf9a-49a8-bf76-9f314e7d1d8e/0/AD9BCADB235B6DEE6CAD4EB4C53AA8B3BA73FEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:52:a1:2f:15:79:0a:0d:98:49:ce:0d:53:44:b2:c1:f4:d0: a0:a1:ce:b4:5a:c8:79:70:c9:50:d8:97:ac:12:a1:ab:a6:4e: 98:60:16:06:58:96:17:29:aa:f9:1a:0e:09:a7:7b:fe:27:59: f0:65:16:7f:e3:e8:46:dc:7e:2e:96:a9:cb:ba:c2:0f:0f:43: fe:de:3c:25:1c:03:03:6f:eb:65:17:76:5b:cf:a0:05:f9:dd: 3a:7d:88:63:eb:1f:9d:51:d7:c2:a5:62:30:9b:ea:b4:5d:65: 8a:72:01:50:47:ff:06:65:4e:00:54:0d:a3:6b:94:5d:21:87: b4:47:6b:b6:48:84:7d:eb:66:fa:c4:81:fd:39:b9:8d:af:ac: 98:d1:ef:2a:a5:46:fa:60:fb:6f:50:a8:e8:e8:7e:df:f8:e9: ab:70:af:64:da:a9:d5:0e:f4:8e:a8:73:0b:c4:f9:40:cf:6e: c2:30:7f:89:7f:fd:44:28:8f:b9:c1:e5:c6:ef:43:79:30:a9: f2:f3:bd:47:88:01:a7:aa:fa:82:61:a5:4b:26:27:9f:90:b7: b9:5d:88:ac:2f:c2:b5:ae:91:5a:b5:82:c2:c5:31:d0:6a:1b: 65:6c:bd:9a:ed:ff:51:25:56:85:67:33:7a:a0:c5:92:1c:87: 38:1c:19:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY9dVCQ3/ZEaOzMNdl/ljwpSQuQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNC QTczRkVGMjAeFw0yNjAzMjQxODM2MTdaFw0yNjAzMjcxODUzMTdaMDMxMTAvBgNV BAMTKDNERTdBQ0ZFMjQwRDQ2QzFENjBBNjczODUxMTAzNTY2RDU2MDFCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7P0/fVFd3tbqh4LCrLrEAh186 RN4yX2poN+EObxxE9R6fWO4PbKoiS7jvslDl/XoQWflo+O5YyLlGe3K12ASjuXUo NiMEuesU8W/EMzFSKy/mrDb0cS03IoKvuWCPK0GnoWEswz4oGgIzo24fQSF8HgSu 5rYZpCbSIyjH+Mimtb84bloV7xW0vLLS7bhfH3qbM19Ih2MltMZmckynaBIcm7g1 2agopQ9XnW0tmRKMItwo5zMZE4F0I5OFOLcsqKHJ6aGFqMC/WE1k2enTZpQyitnN te9zSrqKI3mrkIPTErkrDOlF7NshlDlsFu+TFaB5+C/bjgLPhTClqW3p3E9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPees/iQNRsHWCmc4URA1ZtVgG5owHwYDVR0j BBgwFoAUrZvK2yNbbe5srU60xTqos7pz/vIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTc2ZGIxZS1iZjlhLTQ5YTgtYmY3Ni05ZjMxNGU3ZDFkOGUvMC9BRDlCQ0FEQjIz NUI2REVFNkNBRDRFQjRDNTNBQThCM0JBNzNGRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4QjNCQTcz RkVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2U3NmRiMWUtYmY5YS00OWE4LWJm NzYtOWYzMTRlN2QxZDhlLzAvQUQ5QkNBREIyMzVCNkRFRTZDQUQ0RUI0QzUzQUE4 QjNCQTczRkVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRSoS8VeQoNmEnODVNEssH00KChzrRayHlw yVDYl6wSoaumTphgFgZYlhcpqvkaDgmne/4nWfBlFn/j6Ebcfi6Wqcu6wg8PQ/7e PCUcAwNv62UXdlvPoAX53Tp9iGPrH51R18KlYjCb6rRdZYpyAVBH/wZlTgBUDaNr lF0hh7RHa7ZIhH3rZvrEgf05uY2vrJjR7yqlRvpg+29QqOjoft/46atwr2TaqdUO 9I6ocwvE+UDPbsIwf4l//UQoj7nB5cbvQ3kwqfLzvUeIAaeq+oJhpUsmJ5+Qt7ld iKwvwrWukVq1gsLFMdBqG2VsvZrt/1ElVoVnM3qgxZIchzgcGa4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:45:16 2026 by rpki-client