$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: ekJRPsvB3yWg1LGAQ4pqyr0FX1uXUwUhnEtqtL793UM= Subject key identifier: 00:F7:E1:CF:AF:CE:55:40:AB:C1:A6:4B:89:C0:F9:35:41:B3:C4:BF Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 1985ECDF311D076118972F4C8FB753A6E343E1C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 0123 Signing time: Tue 24 Mar 2026 18:22:42 +0000 Manifest this update: Tue 24 Mar 2026 18:17:42 +0000 Manifest next update: Fri 27 Mar 2026 21:49:42 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: SVB3cDLHRBBcCBUN1ZPXICieMTJrz/+KyIOD/2Oivv0=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:49:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:85:ec:df:31:1d:07:61:18:97:2f:4c:8f:b7:53:a6:e3:43:e1:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Mar 24 18:17:42 2026 GMT Not After : Mar 27 21:49:42 2026 GMT Subject: CN=00F7E1CFAFCE5540ABC1A64B89C0F93541B3C4BF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:af:f4:47:8b:a5:0a:8c:8e:32:3c:59:a9:54: b3:19:d6:c3:b6:e3:68:96:aa:79:06:fb:34:2e:1f: 0d:b1:4b:09:9a:83:03:ee:fe:12:b6:22:9c:b7:15: e5:03:a0:68:71:3a:87:fc:e9:de:db:8d:a3:69:25: 1b:ab:51:e5:34:91:12:ff:79:c9:35:a4:23:30:cc: 41:58:8b:88:0b:6c:0f:37:82:4b:14:ec:3a:76:95: 40:0e:8d:91:7a:88:32:48:2e:37:66:4c:67:9d:af: ee:e5:35:6b:f4:de:43:c8:bd:98:69:71:4d:fd:14: 51:6f:e8:90:67:49:8c:36:de:12:4b:b6:34:d1:35: 06:17:4e:84:9c:b9:f7:d8:33:f5:65:30:76:8f:a8: 64:ac:33:87:7e:f7:ac:7b:4d:d4:9c:80:d6:05:c4: d9:ba:9a:35:78:f8:6c:5c:67:5f:5e:4b:4c:23:23: 3b:64:45:cd:86:5e:db:70:69:8e:4f:00:ee:a6:03: b1:a7:cc:0a:13:30:b9:bb:c1:b6:36:d6:16:de:63: c3:da:7f:dc:9d:78:aa:f5:b0:90:33:bc:7c:87:ce: 3c:61:8b:b1:7a:86:45:98:bc:6f:be:6a:ee:24:97: 17:53:35:74:bf:18:21:ef:aa:c3:d8:8d:45:71:e6: 3d:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:F7:E1:CF:AF:CE:55:40:AB:C1:A6:4B:89:C0:F9:35:41:B3:C4:BF X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:b8:1a:5e:72:86:cc:cd:6c:b0:b8:3e:28:73:32:02:88:a7: ae:fe:12:a4:08:27:d0:d6:41:a1:0f:cf:4e:30:cc:bc:51:6a: 69:1b:5f:47:11:d9:56:e7:04:87:83:aa:03:c8:73:70:cc:58: 7e:cb:86:5e:37:47:6c:4b:c5:b6:f6:80:c3:d4:a8:f9:76:68: 92:83:2f:0a:46:60:34:44:b6:8c:56:96:65:ec:e4:dc:7a:15: e0:8c:3e:0c:af:14:37:e7:9a:1b:96:8d:e2:89:6f:6b:b0:48: ee:0c:28:30:b7:c2:f5:7a:18:67:68:c1:5d:2e:c9:b0:06:1c: c2:8a:2b:da:ce:96:08:62:95:04:81:7e:fc:64:b0:27:f2:3a: f5:73:d6:a3:ea:ca:30:f0:37:ff:b8:3f:a3:6d:17:45:32:3c: 5b:b8:eb:4d:73:3f:af:e2:5a:b8:ab:b8:5a:9e:9e:4a:ba:cf: e7:93:1e:a1:56:c8:73:af:e6:4c:10:a5:5f:5b:d0:d0:a5:db: fd:8d:35:7b:40:2e:f5:fc:8d:38:89:d2:99:d7:3c:d9:24:27: d4:83:dd:8d:cb:05:6c:ce:b3:f2:d8:3a:0d:3a:7b:8b:d0:8c: 3a:d5:5f:b3:d4:bd:32:48:d7:d5:56:46:c8:45:4d:80:3e:03: ae:47:a6:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYXs3zEdB2EYly9Mj7dTpuND4cgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNjAzMjQxODE3NDJaFw0yNjAzMjcyMTQ5NDJaMDMxMTAvBgNV BAMTKDAwRjdFMUNGQUZDRTU1NDBBQkMxQTY0Qjg5QzBGOTM1NDFCM0M0QkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcr/RHi6UKjI4yPFmpVLMZ1sO2 42iWqnkG+zQuHw2xSwmagwPu/hK2Ipy3FeUDoGhxOof86d7bjaNpJRurUeU0kRL/ eck1pCMwzEFYi4gLbA83gksU7Dp2lUAOjZF6iDJILjdmTGedr+7lNWv03kPIvZhp cU39FFFv6JBnSYw23hJLtjTRNQYXToScuffYM/VlMHaPqGSsM4d+96x7TdScgNYF xNm6mjV4+GxcZ19eS0wjIztkRc2GXttwaY5PAO6mA7GnzAoTMLm7wbY21hbeY8Pa f9ydeKr1sJAzvHyHzjxhi7F6hkWYvG++au4klxdTNXS/GCHvqsPYjUVx5j0rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAPfhz6/OVUCrwaZLicD5NUGzxL8wHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADy4Gl5yhszNbLC4PihzMgKIp67+EqQIJ9DW QaEPz04wzLxRamkbX0cR2VbnBIeDqgPIc3DMWH7Lhl43R2xLxbb2gMPUqPl2aJKD LwpGYDREtoxWlmXs5Nx6FeCMPgyvFDfnmhuWjeKJb2uwSO4MKDC3wvV6GGdowV0u ybAGHMKKK9rOlghilQSBfvxksCfyOvVz1qPqyjDwN/+4P6NtF0UyPFu4601zP6/i WriruFqenkq6z+eTHqFWyHOv5kwQpV9b0NCl2/2NNXtALvX8jTiJ0pnXPNkkJ9SD 3Y3LBWzOs/LYOg06e4vQjDrVX7PUvTJI19VWRshFTYA+A65Hptc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:27:28 2026 by rpki-client