$ rpki-client -vvf repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft File: AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft (raw, json) Hash identifier: a1XJ+E+7NPqJm9RVYrbTnEopRsfqDFajkjodHaE3Z5w= Subject key identifier: 79:B7:34:D6:C0:A8:7E:24:C3:AD:EF:18:44:38:61:55:0F:9B:B3:31 Authority key identifier: AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 Certificate issuer: /CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Certificate serial: 4387F777C39D9E15E6E38325A247B6EDFE2A6064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject info access: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft Manifest number: 0217 Signing time: Tue 24 Mar 2026 18:53:12 +0000 Manifest this update: Tue 24 Mar 2026 18:48:12 +0000 Manifest next update: Fri 27 Mar 2026 23:53:12 +0000 Files and hashes: 1: AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl (hash: AXdUsYQcI67Dcj6aJPn1D+0Xjry5B2pR0imuK66FQ5I=) 2: 3130332e3135302e3232362e302f32332d3234203d3e20313333383030.roa (hash: QWfnQB0qvC1JfFFIpfKBeaSWuT6akGE7VeRHdRdprIk=) 3: 323430363a6263303a3a2f33322d3332203d3e20313430343032.roa (hash: gwBlMBrSpLgsa+ACTv/ospejLYlB+0aLA704l83TjHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:53:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:87:f7:77:c3:9d:9e:15:e6:e3:83:25:a2:47:b6:ed:fe:2a:60:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD5EA76D7ABBD8617C323F06E24EF5190568F494 Validity Not Before: Mar 24 18:48:12 2026 GMT Not After : Mar 27 23:53:12 2026 GMT Subject: CN=79B734D6C0A87E24C3ADEF18443861550F9BB331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:af:ec:ed:15:a4:49:3d:48:8e:ff:7f:bf:57: 7b:41:0d:df:c4:43:25:4e:0e:8e:36:9b:e2:01:20: ba:67:9b:4d:d9:28:46:65:eb:e9:3f:4a:f0:a8:49: e8:61:87:59:ae:ba:1e:af:af:15:d5:1e:e0:ac:46: fa:c2:b4:15:03:16:c3:dc:9e:af:1b:b1:43:b5:65: a1:f7:92:9c:6b:98:d1:90:17:62:e4:b1:40:89:04: ed:03:6a:25:c0:3c:08:f3:7e:c6:1e:bc:3e:2a:af: 01:5a:3c:3b:d9:0c:60:49:d9:ad:9a:b6:d4:82:d8: 92:a5:3e:49:86:3b:75:c1:22:77:33:99:cf:18:1a: 7f:17:71:cf:bf:71:0f:02:97:2a:b2:4f:d3:6d:94: 49:50:6f:5e:cd:32:c4:35:90:74:fb:f0:3e:c1:a8: a3:8f:30:7b:a5:da:0d:01:96:bb:8b:ed:c4:2a:85: 9f:c0:5d:1f:1d:8e:1f:9c:4b:07:a8:b4:00:e1:5b: 4f:58:c6:b9:e6:12:ed:c8:d7:a5:83:67:cd:8b:85: f8:a0:22:a0:97:01:c4:07:26:78:5d:95:02:1c:fb: 70:68:7d:92:ff:e3:ed:b4:0a:3d:57:ee:38:cd:69: e7:f9:43:43:b3:33:ac:b2:db:c9:c3:c6:43:cd:c1: 7b:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B7:34:D6:C0:A8:7E:24:C3:AD:EF:18:44:38:61:55:0F:9B:B3:31 X509v3 Authority Key Identifier: keyid:AD:5E:A7:6D:7A:BB:D8:61:7C:32:3F:06:E2:4E:F5:19:05:68:F4:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD5EA76D7ABBD8617C323F06E24EF5190568F494.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/829e7064-b352-43b6-9f09-514d68a2739e/0/AD5EA76D7ABBD8617C323F06E24EF5190568F494.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:dd:45:1d:c6:79:65:61:a7:7a:f9:4b:58:22:fc:d8:4d:3c: 31:8b:08:c9:14:f9:ca:c3:a2:71:8a:94:3b:2f:0e:34:c9:f4: eb:59:3b:df:eb:d1:23:5f:3a:6b:c6:c7:13:0d:e3:32:02:52: a5:b9:f9:6f:67:82:09:25:8f:f1:e9:74:cf:f4:a2:27:d8:2f: d6:00:f6:4b:c2:54:26:e2:af:8f:f7:c8:cd:cf:42:05:60:c2: e7:69:1c:e9:0b:af:8a:f1:54:78:05:dc:b4:a6:85:41:d3:5f: d9:61:a9:aa:4e:85:4c:28:68:c7:01:99:50:94:46:4c:15:67: e8:a5:6d:78:1d:ee:de:a3:48:46:7c:3b:80:72:18:6f:70:da: 0b:3c:fe:01:03:62:59:b2:85:02:41:95:f6:41:56:de:7d:6f: b6:80:58:35:1b:9e:e8:e3:cd:3f:aa:81:1c:53:c6:2c:20:d3: c5:32:07:96:ef:a4:d9:a1:2d:cf:71:3c:3b:5e:df:a6:aa:9e: 80:66:cf:09:b7:d3:bd:5c:61:ab:00:0c:eb:c7:27:24:52:82: 17:39:46:fd:0b:f1:9e:10:72:83:26:47:ab:f4:b3:fa:12:6a: a6:05:b4:be:d8:c2:91:e9:f5:8e:7e:37:2b:a1:d8:1a:9e:8f: 59:b3:75:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ4f3d8OdnhXm44Mloke27f4qYGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkw NTY4RjQ5NDAeFw0yNjAzMjQxODQ4MTJaFw0yNjAzMjcyMzUzMTJaMDMxMTAvBgNV BAMTKDc5QjczNEQ2QzBBODdFMjRDM0FERUYxODQ0Mzg2MTU1MEY5QkIzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHr+ztFaRJPUiO/3+/V3tBDd/E QyVODo42m+IBILpnm03ZKEZl6+k/SvCoSehhh1muuh6vrxXVHuCsRvrCtBUDFsPc nq8bsUO1ZaH3kpxrmNGQF2LksUCJBO0DaiXAPAjzfsYevD4qrwFaPDvZDGBJ2a2a ttSC2JKlPkmGO3XBInczmc8YGn8Xcc+/cQ8ClyqyT9NtlElQb17NMsQ1kHT78D7B qKOPMHul2g0BlruL7cQqhZ/AXR8djh+cSweotADhW09YxrnmEu3I16WDZ82Lhfig IqCXAcQHJnhdlQIc+3BofZL/4+20Cj1X7jjNaef5Q0OzM6yy28nDxkPNwXvRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebc01sCofiTDre8YRDhhVQ+bszEwHwYDVR0j BBgwFoAUrV6nbXq72GF8Mj8G4k71GQVo9JQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MjllNzA2NC1iMzUyLTQzYjYtOWYwOS01MTRkNjhhMjczOWUvMC9BRDVFQTc2RDdB QkJEODYxN0MzMjNGMDZFMjRFRjUxOTA1NjhGNDk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1MTkwNTY4 RjQ5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODI5ZTcwNjQtYjM1Mi00M2I2LTlm MDktNTE0ZDY4YTI3MzllLzAvQUQ1RUE3NkQ3QUJCRDg2MTdDMzIzRjA2RTI0RUY1 MTkwNTY4RjQ5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjdRR3GeWVhp3r5S1gi/NhNPDGLCMkU+crD onGKlDsvDjTJ9OtZO9/r0SNfOmvGxxMN4zICUqW5+W9nggklj/HpdM/0oifYL9YA 9kvCVCbir4/3yM3PQgVgwudpHOkLr4rxVHgF3LSmhUHTX9lhqapOhUwoaMcBmVCU RkwVZ+ilbXgd7t6jSEZ8O4ByGG9w2gs8/gEDYlmyhQJBlfZBVt59b7aAWDUbnujj zT+qgRxTxiwg08UyB5bvpNmhLc9xPDte36aqnoBmzwm3071cYasADOvHJyRSghc5 Rv0L8Z4QcoMmR6v0s/oSaqYFtL7YwpHp9Y5+Nyuh2Bqej1mzde4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:08:50 2026 by rpki-client