$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: KyVu0iyeN+S/178YLnm9XcqHKT/Pl+dCy8Q7d2ijjX0= Subject key identifier: 96:89:C5:86:C9:72:5C:41:E9:89:A1:FF:0D:B3:02:C7:A8:9C:41:06 Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 7ACEF4CD5F04DD5201204B7EC7C1FAEAB6FBC8EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: 016C Signing time: Thu 26 Mar 2026 20:41:38 +0000 Manifest this update: Thu 26 Mar 2026 20:36:38 +0000 Manifest next update: Mon 30 Mar 2026 06:13:38 +0000 Files and hashes: 1: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: vsmztK9yH7/4N0snZncEumt7hrRBkAim5Gtb3J9NvS4=) 2: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 04:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:ce:f4:cd:5f:04:dd:52:01:20:4b:7e:c7:c1:fa:ea:b6:fb:c8:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: Mar 26 20:36:38 2026 GMT Not After : Mar 30 06:13:38 2026 GMT Subject: CN=9689C586C9725C41E989A1FF0DB302C7A89C4106 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:83:c3:87:5f:54:f0:96:e2:2b:bd:08:f7:8a: e9:d1:7b:62:9b:51:6d:dd:9f:e3:38:61:3a:49:0e: ff:83:81:d4:41:3d:c1:cf:ae:37:08:a2:5d:8e:a9: 3e:79:a9:5c:36:5c:69:b7:af:b2:12:d7:71:b8:c6: b5:a6:95:ed:94:45:1d:49:11:fa:f5:a0:54:60:03: 60:48:59:d4:27:5d:63:a1:2a:7b:cd:4f:c0:77:a4: ea:d0:24:d4:73:bd:7d:33:dc:8c:f2:94:4b:f3:9b: 3d:18:7b:e2:7c:e5:bf:f1:2b:8e:9b:2f:f2:69:16: bb:dc:cc:25:2c:e3:cf:b3:ac:90:94:87:d3:ed:bd: 8e:14:07:63:f7:3b:40:fa:fb:24:2b:8f:d2:02:b0: 53:06:b1:c0:75:73:99:34:84:54:ef:f4:17:f5:95: 7d:c3:53:25:5a:46:e5:2c:39:1d:42:b9:49:fd:12: 30:31:8e:15:31:1a:83:9e:cd:ef:40:ac:41:6e:18: de:1a:f9:60:6d:79:8e:c9:b8:87:76:9b:5e:f6:bb: 75:10:09:bf:95:03:73:7a:73:59:50:bf:74:cd:9c: e1:f8:a0:7e:55:14:e2:10:aa:54:e3:92:37:70:de: a3:f9:e4:01:49:0d:37:24:b3:a6:33:36:4b:b3:23: 43:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:89:C5:86:C9:72:5C:41:E9:89:A1:FF:0D:B3:02:C7:A8:9C:41:06 X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:97:57:e5:06:e0:15:c4:8b:9f:48:7d:0e:30:bd:ed:04:2e: 47:82:f9:c7:cc:25:8a:96:92:35:da:f6:6e:27:82:7d:ac:77: 0b:e4:85:fc:79:2a:df:5d:4e:f9:fa:3e:a3:1c:13:9f:ce:ac: c9:45:00:35:46:1f:f4:e9:ed:40:25:04:75:be:26:43:1e:72: d3:6a:d0:56:87:4f:0b:19:78:e5:6f:ed:53:c2:da:e0:d8:c9: 9f:63:21:7c:df:12:69:69:b0:7c:0c:8a:31:c9:22:03:3b:a5: d4:a9:c3:92:74:2a:fa:1a:2b:0a:be:cc:11:ef:8c:09:38:07: 81:01:73:53:00:2c:e7:8e:63:e3:b8:ac:6b:fd:a5:8c:15:72: 8a:23:a8:07:cd:45:6e:b1:48:14:f7:44:3f:ee:6b:17:00:13: 52:87:35:f9:a9:b5:b3:f2:2b:a6:77:97:5c:4a:4a:68:9c:6b: 5e:fd:b8:e3:9d:97:74:4e:db:5b:75:d3:98:b8:1d:f7:be:9b: 87:84:8b:7a:1a:36:8b:d1:5a:31:30:dd:34:1c:b8:57:22:f8: bd:7b:2e:a3:1a:b2:e3:54:3b:61:78:73:d5:05:99:65:66:e9: 5d:0f:1b:94:8e:ec:dc:aa:55:63:57:27:b2:80:57:1a:86:7a: e5:f6:5b:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUes70zV8E3VIBIEt+x8H66rb7yO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNjAzMjYyMDM2MzhaFw0yNjAzMzAwNjEzMzhaMDMxMTAvBgNV BAMTKDk2ODlDNTg2Qzk3MjVDNDFFOTg5QTFGRjBEQjMwMkM3QTg5QzQxMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOg8OHX1TwluIrvQj3iunRe2Kb UW3dn+M4YTpJDv+DgdRBPcHPrjcIol2OqT55qVw2XGm3r7IS13G4xrWmle2URR1J Efr1oFRgA2BIWdQnXWOhKnvNT8B3pOrQJNRzvX0z3IzylEvzmz0Ye+J85b/xK46b L/JpFrvczCUs48+zrJCUh9PtvY4UB2P3O0D6+yQrj9ICsFMGscB1c5k0hFTv9Bf1 lX3DUyVaRuUsOR1CuUn9EjAxjhUxGoOeze9ArEFuGN4a+WBteY7JuId2m172u3UQ Cb+VA3N6c1lQv3TNnOH4oH5VFOIQqlTjkjdw3qP55AFJDTcks6YzNkuzI0OFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlonFhslyXEHpiaH/DbMCx6icQQYwHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKSXV+UG4BXEi59IfQ4wve0ELkeC+cfMJYqW kjXa9m4ngn2sdwvkhfx5Kt9dTvn6PqMcE5/OrMlFADVGH/Tp7UAlBHW+JkMectNq 0FaHTwsZeOVv7VPC2uDYyZ9jIXzfEmlpsHwMijHJIgM7pdSpw5J0KvoaKwq+zBHv jAk4B4EBc1MALOeOY+O4rGv9pYwVcoojqAfNRW6xSBT3RD/uaxcAE1KHNfmptbPy K6Z3l1xKSmica179uOOdl3RO21t105i4Hfe+m4eEi3oaNovRWjEw3TQcuFci+L17 LqMasuNUO2F4c9UFmWVm6V0PG5SO7NyqVWNXJ7KAVxqGeuX2W0A= -----END CERTIFICATE-----Generated at Fri Mar 27 05:08:04 2026 by rpki-client