$ rpki-client -vvf repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft File: A70723C87D2C27B95BE6227C631E7D85EF89D513.mft (raw, json) Hash identifier: n60lKOsO/AxW1TGnhUYzSYpMCgfktNVPU+IsEqOJDwE= Subject key identifier: BA:D1:62:90:C9:2D:E4:08:15:FC:56:6E:5F:DB:60:94:B9:6B:53:5D Authority key identifier: A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 Certificate issuer: /CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Certificate serial: 1D2DB7078B2DC945F39CB71630F4C35EACF4E9F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 16:51:00 +0000 Manifest this update: Wed 25 Mar 2026 16:46:00 +0000 Manifest next update: Sat 28 Mar 2026 22:59:00 +0000 Files and hashes: 1: A70723C87D2C27B95BE6227C631E7D85EF89D513.crl (hash: x9BicMbzJYPmSfwrDw1U5aKvRcnA1d/TcJoE5HM6/lE=) 2: 3130332e34382e3132382e302f32322d3234203d3e203633383631.roa (hash: QAI5cYTeOrxvcausPsC1CnYV2kULdBh9ytAc4ZJZoM0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:59:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:2d:b7:07:8b:2d:c9:45:f3:9c:b7:16:30:f4:c3:5e:ac:f4:e9:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A70723C87D2C27B95BE6227C631E7D85EF89D513 Validity Not Before: Mar 25 16:46:00 2026 GMT Not After : Mar 28 22:59:00 2026 GMT Subject: CN=BAD16290C92DE40815FC566E5FDB6094B96B535D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:65:48:d0:d9:99:04:5e:1c:2a:75:a7:3f:aa: 62:be:09:3c:df:f8:17:1a:67:13:91:a3:30:b5:5b: b5:7c:b0:e2:b5:3e:27:78:21:e6:d3:9d:c2:49:40: 86:95:5a:37:18:46:b7:cd:2a:af:f6:74:d7:7a:b6: 65:5c:1a:35:19:ed:88:08:a8:23:4b:6b:28:c9:6f: fb:fa:d5:e1:1c:7d:27:a0:61:f2:ea:83:5b:29:1f: 31:fc:a1:f4:b4:37:93:cc:19:2e:4c:9d:99:27:cd: 4f:1d:45:c4:dd:cb:fe:35:53:e0:82:86:a3:59:cb: 30:51:5f:7d:a0:89:d1:08:e8:af:c2:1a:67:a5:e7: 18:5d:58:74:e1:c5:bb:78:ee:88:3b:58:cd:cc:3f: ff:9e:53:3a:18:94:83:bf:fa:93:82:f3:cf:bb:7c: 4d:1d:d8:7a:82:d9:68:a5:7c:97:e7:8d:32:1a:d3: 01:a6:91:e5:bb:3e:7a:c3:b7:7f:d7:25:92:6c:58: 66:e2:b0:27:a2:c3:46:dd:cd:67:ac:9f:08:b3:e4: 7d:14:f9:53:7f:79:6e:3e:0e:b5:aa:52:b8:29:90: 6f:34:10:33:b2:98:ad:9a:93:7f:45:b9:a7:07:77: 4a:a7:f3:1b:9f:7e:15:20:57:58:94:5b:0a:4e:b2: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:D1:62:90:C9:2D:E4:08:15:FC:56:6E:5F:DB:60:94:B9:6B:53:5D X509v3 Authority Key Identifier: keyid:A7:07:23:C8:7D:2C:27:B9:5B:E6:22:7C:63:1E:7D:85:EF:89:D5:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A70723C87D2C27B95BE6227C631E7D85EF89D513.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b709044-5718-4f1d-a6d0-8766ea73eaf4/0/A70723C87D2C27B95BE6227C631E7D85EF89D513.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:64:aa:c5:98:ba:ff:7a:45:91:09:eb:01:57:01:7b:30:d5: 42:18:04:c5:03:30:c3:c2:0a:1b:c3:b1:24:1c:7d:40:e7:55: db:a0:91:3b:d8:12:48:0c:3a:0f:3f:0e:77:b1:78:71:16:40: a4:0f:89:01:a7:be:d5:c3:7e:97:2f:d9:a4:ba:3f:5f:e2:08: 6d:d9:79:bf:e0:04:74:c2:f2:8f:cf:7a:7d:26:bb:2a:3e:c4: 29:d1:30:46:aa:f1:a4:d1:76:69:2e:a8:18:07:47:d8:af:55: c8:52:95:fb:d7:65:ab:cd:00:48:ff:4f:8a:32:da:52:5a:58: 49:fa:78:0d:95:d3:47:ee:61:76:5d:4e:e2:6c:b5:db:d4:11: 4c:a3:de:0c:53:17:ce:99:a1:e2:61:fd:ce:87:28:14:fc:0e: b5:bd:c0:b4:f3:1e:60:f9:9e:60:cc:53:53:38:94:40:8d:c4: 62:5e:49:32:0f:ce:61:19:56:1e:8c:d7:44:cc:76:49:b5:a0: 42:19:a7:df:53:36:71:42:c9:10:e6:8b:ab:ad:fd:b6:30:d0: d8:18:ab:4e:5e:dc:35:c5:7f:3b:5f:1e:a5:f5:c4:50:13:78: a0:92:ef:5c:3c:e7:cf:da:82:b5:36:e4:50:00:ea:38:37:7e: db:f8:aa:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHS23B4styUXznLcWMPTDXqz06fIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVF Rjg5RDUxMzAeFw0yNjAzMjUxNjQ2MDBaFw0yNjAzMjgyMjU5MDBaMDMxMTAvBgNV BAMTKEJBRDE2MjkwQzkyREU0MDgxNUZDNTY2RTVGREI2MDk0Qjk2QjUzNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ZUjQ2ZkEXhwqdac/qmK+CTzf +BcaZxORozC1W7V8sOK1Pid4IebTncJJQIaVWjcYRrfNKq/2dNd6tmVcGjUZ7YgI qCNLayjJb/v61eEcfSegYfLqg1spHzH8ofS0N5PMGS5MnZknzU8dRcTdy/41U+CC hqNZyzBRX32gidEI6K/CGmel5xhdWHThxbt47og7WM3MP/+eUzoYlIO/+pOC88+7 fE0d2HqC2WilfJfnjTIa0wGmkeW7PnrDt3/XJZJsWGbisCeiw0bdzWesnwiz5H0U +VN/eW4+DrWqUrgpkG80EDOymK2ak39FuacHd0qn8xuffhUgV1iUWwpOss7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUutFikMkt5AgV/FZuX9tglLlrU10wHwYDVR0j BBgwFoAUpwcjyH0sJ7lb5iJ8Yx59he+J1RMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjcwOTA0NC01NzE4LTRmMWQtYTZkMC04NzY2ZWE3M2VhZjQvMC9BNzA3MjNDODdE MkMyN0I5NUJFNjIyN0M2MzFFN0Q4NUVGODlENTEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdEODVFRjg5 RDUxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MDkwNDQtNTcxOC00ZjFkLWE2 ZDAtODc2NmVhNzNlYWY0LzAvQTcwNzIzQzg3RDJDMjdCOTVCRTYyMjdDNjMxRTdE ODVFRjg5RDUxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJhkqsWYuv96RZEJ6wFXAXsw1UIYBMUDMMPC ChvDsSQcfUDnVdugkTvYEkgMOg8/DnexeHEWQKQPiQGnvtXDfpcv2aS6P1/iCG3Z eb/gBHTC8o/Pen0muyo+xCnRMEaq8aTRdmkuqBgHR9ivVchSlfvXZavNAEj/T4oy 2lJaWEn6eA2V00fuYXZdTuJstdvUEUyj3gxTF86ZoeJh/c6HKBT8DrW9wLTzHmD5 nmDMU1M4lECNxGJeSTIPzmEZVh6M10TMdkm1oEIZp99TNnFCyRDmi6ut/bYw0NgY q05e3DXFfztfHqX1xFATeKCS71w858/agrU25FAA6jg3ftv4qk0= -----END CERTIFICATE-----Generated at Thu Mar 26 14:44:30 2026 by rpki-client