$ rpki-client -vvf repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft File: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft (raw, json) Hash identifier: iESJCVz8j/+boz2ztPrc3rV0owcSV2zDTvPHgmKa3rA= Subject key identifier: 76:59:CA:12:33:14:23:1D:91:03:94:8D:11:09:14:1B:BB:6B:AC:7A Authority key identifier: A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 Certificate issuer: /CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Certificate serial: 062A191809FB0091E7D842A9C690744A71638E11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject info access: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft Manifest number: 0287 Signing time: Tue 24 Mar 2026 20:21:29 +0000 Manifest this update: Tue 24 Mar 2026 20:16:29 +0000 Manifest next update: Sat 28 Mar 2026 00:44:29 +0000 Files and hashes: 1: 3130332e3138342e3132382e302f32342d3234203d3e20313439363830.roa (hash: qAILqHxIh//KPfkbqwXoLWKwUymM3YkGbuohytyxcQQ=) 2: A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl (hash: FVhSAkQOC/3JfCPP9uhbx29WkWc7Opxqh5rcxKOrv90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:44:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2a:19:18:09:fb:00:91:e7:d8:42:a9:c6:90:74:4a:71:63:8e:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794 Validity Not Before: Mar 24 20:16:29 2026 GMT Not After : Mar 28 00:44:29 2026 GMT Subject: CN=7659CA123314231D9103948D1109141BBB6BAC7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:b4:ca:47:03:ef:9b:86:07:78:4d:ee:18:8b: 2c:18:fe:2a:ce:19:2e:55:b7:4f:84:c6:fb:b1:0d: a6:e7:9d:14:11:fd:25:3d:92:21:05:b8:da:c9:3f: 3e:44:49:04:02:57:30:28:de:fe:22:7a:a3:3b:b5: b3:72:92:44:c6:d1:54:4f:0a:05:1f:01:c5:a3:17: 67:cd:c1:db:8a:4b:e4:86:a6:ac:14:c1:8b:ce:15: 01:a8:0d:bc:c8:2d:d2:a5:4e:e4:bd:83:b5:2e:26: 3d:49:26:47:ff:ee:61:dc:d6:94:e9:bf:be:0d:de: 58:24:06:5e:52:99:7c:a3:6b:64:14:67:e3:8b:f5: e7:09:40:aa:b4:31:58:0a:3e:fa:72:5d:d7:43:62: f7:8b:1a:62:36:c7:0f:91:b1:8e:3c:cd:35:4f:01: fd:2b:e6:97:42:33:e5:b9:52:d3:e2:5f:fd:33:23: 2b:d6:f9:57:77:67:b1:4d:60:7a:e5:cd:11:a3:9f: bd:ee:27:62:24:4c:07:6d:e3:31:3e:ff:3f:46:b5: 09:28:a8:b2:32:22:fb:28:a4:f2:97:55:2b:1c:28: 3f:0a:5b:07:25:b9:71:db:41:9a:7c:1c:7c:ae:ec: c7:0d:3d:42:1c:9b:b0:2a:ff:d8:d7:1d:2f:cd:55: b2:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:59:CA:12:33:14:23:1D:91:03:94:8D:11:09:14:1B:BB:6B:AC:7A X509v3 Authority Key Identifier: keyid:A3:3F:F7:49:65:A9:60:8D:9E:5C:3C:2E:3E:F8:02:EA:1E:5C:D7:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/993e3d26-4aaf-4e96-ad49-5273f0a4e6ed/0/A33FF74965A9608D9E5C3C2E3EF802EA1E5CD794.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:d9:5d:fe:1b:0b:30:13:5e:1b:56:a8:d8:bf:87:86:c5:bb: f4:c6:65:59:08:ba:80:b6:11:78:d8:7a:da:1d:3e:2e:d2:1c: ec:6b:65:07:3a:42:ea:c8:0d:b4:65:90:ea:24:65:97:41:f5: 00:e1:8d:39:ad:d1:ad:84:e9:77:ad:8f:a9:3a:f1:86:0c:86: 5a:2f:48:9e:63:0c:c0:90:c8:14:ec:e2:5d:c2:3a:c2:dc:0c: 73:2b:c1:14:b1:98:cd:1c:81:5c:d9:60:f9:dd:3c:33:79:b4: 55:2b:49:2a:4a:ba:07:bb:40:b3:e4:42:c2:09:4f:e3:b8:59: 84:be:f0:73:62:45:d0:67:5e:cd:f2:13:de:4b:87:b0:5e:30: dc:e9:64:d5:e2:23:9b:6b:4e:9c:e6:ea:23:8b:22:2d:f6:11: 99:c0:1b:e2:dd:20:ec:06:2c:87:2a:95:97:83:98:66:8f:92: d0:4f:e0:3d:37:4f:59:de:1a:ec:64:85:3a:cc:06:19:16:3c: 80:4c:ea:51:e3:3c:c6:ba:b5:d8:bb:bd:09:e9:93:f8:4c:9c: 0d:7d:bc:e0:f6:01:0a:f9:42:8f:0a:1f:da:1f:14:00:29:28: 90:ce:03:4c:d1:8d:2e:c3:45:90:9f:2c:02:d0:e9:1e:81:83: 2c:01:50:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBioZGAn7AJHn2EKpxpB0SnFjjhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUEx RTVDRDc5NDAeFw0yNjAzMjQyMDE2MjlaFw0yNjAzMjgwMDQ0MjlaMDMxMTAvBgNV BAMTKDc2NTlDQTEyMzMxNDIzMUQ5MTAzOTQ4RDExMDkxNDFCQkI2QkFDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUtMpHA++bhgd4Te4YiywY/irO GS5Vt0+ExvuxDabnnRQR/SU9kiEFuNrJPz5ESQQCVzAo3v4ieqM7tbNykkTG0VRP CgUfAcWjF2fNwduKS+SGpqwUwYvOFQGoDbzILdKlTuS9g7UuJj1JJkf/7mHc1pTp v74N3lgkBl5SmXyja2QUZ+OL9ecJQKq0MVgKPvpyXddDYveLGmI2xw+RsY48zTVP Af0r5pdCM+W5UtPiX/0zIyvW+Vd3Z7FNYHrlzRGjn73uJ2IkTAdt4zE+/z9GtQko qLIyIvsopPKXVSscKD8KWwcluXHbQZp8HHyu7McNPUIcm7Aq/9jXHS/NVbLlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdlnKEjMUIx2RA5SNEQkUG7trrHowHwYDVR0j BBgwFoAUoz/3SWWpYI2eXDwuPvgC6h5c15QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTNlM2QyNi00YWFmLTRlOTYtYWQ0OS01MjczZjBhNGU2ZWQvMC9BMzNGRjc0OTY1 QTk2MDhEOUU1QzNDMkUzRUY4MDJFQTFFNUNENzk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAyRUExRTVD RDc5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTkzZTNkMjYtNGFhZi00ZTk2LWFk NDktNTI3M2YwYTRlNmVkLzAvQTMzRkY3NDk2NUE5NjA4RDlFNUMzQzJFM0VGODAy RUExRTVDRDc5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3ZXf4bCzATXhtWqNi/h4bFu/TGZVkIuoC2 EXjYetodPi7SHOxrZQc6QurIDbRlkOokZZdB9QDhjTmt0a2E6Xetj6k68YYMhlov SJ5jDMCQyBTs4l3COsLcDHMrwRSxmM0cgVzZYPndPDN5tFUrSSpKuge7QLPkQsIJ T+O4WYS+8HNiRdBnXs3yE95Lh7BeMNzpZNXiI5trTpzm6iOLIi32EZnAG+LdIOwG LIcqlZeDmGaPktBP4D03T1neGuxkhTrMBhkWPIBM6lHjPMa6tdi7vQnpk/hMnA19 vOD2AQr5Qo8KH9ofFAApKJDOA0zRjS7DRZCfLALQ6R6BgywBUG4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:21 2026 by rpki-client