$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: HGPYACrgNp67IZV5gR4i6fsIX5LtL9sIbdbwZDXIs4w= Subject key identifier: EF:D2:9C:14:EF:2E:B4:01:53:F9:E4:F2:2B:93:49:A3:A9:7C:D3:B0 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 24E94BA5B827561494061947904654C6F331BF61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 0286 Signing time: Thu 26 Mar 2026 04:50:54 +0000 Manifest this update: Thu 26 Mar 2026 04:45:54 +0000 Manifest next update: Sun 29 Mar 2026 14:54:54 +0000 Files and hashes: 1: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=) 2: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=) 3: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=) 4: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: Ra0vLHf+K3Ri8tHVZw9Y7cziauJBc2zz6xSeQrJgcRk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e9:4b:a5:b8:27:56:14:94:06:19:47:90:46:54:c6:f3:31:bf:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Mar 26 04:45:54 2026 GMT Not After : Mar 29 14:54:54 2026 GMT Subject: CN=EFD29C14EF2EB40153F9E4F22B9349A3A97CD3B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:da:9d:a9:54:02:ed:f7:69:fe:2a:31:71:cf: 44:b4:bf:4e:90:a6:58:20:07:ae:d3:65:0c:f6:64: b9:01:db:8a:20:4f:e7:2f:09:e8:52:32:b0:9e:5b: 0d:fb:e2:4c:36:27:cc:f3:a3:c2:33:ad:05:1e:f6: ce:4b:cc:0c:e4:4e:30:22:41:80:ed:8d:30:fb:97: 7b:80:f0:34:dc:b4:4c:a5:0d:ad:5c:ed:47:10:26: ce:00:e7:5a:7e:dd:f0:11:33:04:74:a2:4b:5c:25: d8:ce:85:53:e4:8b:c9:e6:cb:f0:d4:dd:c8:f5:f9: 6e:5a:60:13:d3:fc:03:c2:46:43:8d:39:a7:17:97: 7b:64:1c:20:85:f6:50:a1:ab:b3:cc:ac:12:11:9d: 64:56:21:1e:24:7b:8c:76:95:00:a2:95:4d:fd:96: 6e:85:5a:45:78:be:ab:5d:39:fe:43:ed:d1:4e:5e: ca:51:d4:52:77:62:3f:6d:22:1b:42:79:90:53:7c: 49:46:b1:0a:1f:7f:73:a8:ff:c4:cb:cb:0f:3e:91: 76:3f:ab:6f:75:a5:1b:b0:bf:ef:48:36:5b:3b:3c: f0:75:9d:f5:76:e5:87:e3:74:da:71:ab:e8:66:a6: 3f:1d:d0:8d:52:bf:e0:7c:62:68:69:58:7f:9f:f4: 54:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:D2:9C:14:EF:2E:B4:01:53:F9:E4:F2:2B:93:49:A3:A9:7C:D3:B0 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:1a:e7:77:d4:35:9c:c7:0a:c5:77:5b:c3:0f:31:54:66:59: 1a:8f:79:94:2e:86:06:2a:38:28:75:f8:04:5a:11:68:78:7f: 15:9c:2d:3b:c1:04:9c:99:6f:96:1e:d7:2d:1b:b9:32:d9:e9: 09:71:2a:7b:14:fe:83:9d:92:cb:e0:60:6d:0f:49:55:0b:e4: 06:b2:f5:41:75:5f:9f:f7:60:62:5c:f6:dd:8b:62:0d:af:35: ec:c7:59:f2:e5:69:c8:22:81:1e:70:e9:06:d0:ef:8a:0c:56: 19:00:11:ee:7d:8e:00:2d:bc:80:83:b1:6f:9a:1e:80:ba:75: 78:ba:58:66:bd:0f:c2:e7:41:6a:ec:7a:e3:fd:e3:4c:f3:5b: f2:d9:35:04:84:b9:41:41:f1:54:cf:fd:ec:7e:0b:8c:f8:ac: cf:d7:51:27:75:6f:3f:0f:a1:ad:21:42:a7:04:c3:be:69:91: b4:ec:1c:c4:99:f0:d5:f7:1f:23:d0:20:71:ea:41:ae:09:bb: ce:45:25:c3:d0:9c:15:db:ee:10:24:e9:a9:39:32:46:9d:cd: 6e:13:0b:33:1d:0a:25:a0:7a:1e:f1:cb:ad:7a:49:f2:dd:28: 87:cb:ca:96:34:c1:40:f9:c5:11:f4:23:0b:a4:0e:bc:36:ca: 26:f6:9b:eb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOlLpbgnVhSUBhlHkEZUxvMxv2EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNjAzMjYwNDQ1NTRaFw0yNjAzMjkxNDU0NTRaMDMxMTAvBgNV BAMTKEVGRDI5QzE0RUYyRUI0MDE1M0Y5RTRGMjJCOTM0OUEzQTk3Q0QzQjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB2p2pVALt92n+KjFxz0S0v06Q plggB67TZQz2ZLkB24ogT+cvCehSMrCeWw374kw2J8zzo8IzrQUe9s5LzAzkTjAi QYDtjTD7l3uA8DTctEylDa1c7UcQJs4A51p+3fARMwR0oktcJdjOhVPki8nmy/DU 3cj1+W5aYBPT/APCRkONOacXl3tkHCCF9lChq7PMrBIRnWRWIR4ke4x2lQCilU39 lm6FWkV4vqtdOf5D7dFOXspR1FJ3Yj9tIhtCeZBTfElGsQoff3Oo/8TLyw8+kXY/ q291pRuwv+9INls7PPB1nfV25YfjdNpxq+hmpj8d0I1Sv+B8YmhpWH+f9FSPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU79KcFO8utAFT+eTyK5NJo6l807AwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJga53fUNZzHCsV3W8MPMVRmWRqPeZQuhgYq OCh1+ARaEWh4fxWcLTvBBJyZb5Ye1y0buTLZ6QlxKnsU/oOdksvgYG0PSVUL5Aay 9UF1X5/3YGJc9t2LYg2vNezHWfLlacgigR5w6QbQ74oMVhkAEe59jgAtvICDsW+a HoC6dXi6WGa9D8LnQWrseuP940zzW/LZNQSEuUFB8VTP/ex+C4z4rM/XUSd1bz8P oa0hQqcEw75pkbTsHMSZ8NX3HyPQIHHqQa4Ju85FJcPQnBXb7hAk6ak5MkadzW4T CzMdCiWgeh7xy616SfLdKIfLypY0wUD5xRH0IwukDrw2yib2m+s= -----END CERTIFICATE-----Generated at Thu Mar 26 21:06:17 2026 by rpki-client