$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft File: A5D12164B9484E51D4BE4B03823526989B147558.mft (raw, json) Hash identifier: swQLE9cdjtbnbXZABuoFiPq8B5wHkgB+0AbK5x/SVHc= Subject key identifier: AF:EC:CC:A8:22:A7:0B:81:91:89:F3:EA:2A:08:A7:38:1B:21:C2:71 Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 Certificate issuer: /CN=A5D12164B9484E51D4BE4B03823526989B147558 Certificate serial: 021A3944C7BBA8EF3FF2271A444AA0422AB4B63C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft Manifest number: 025E Signing time: Wed 25 Mar 2026 12:51:55 +0000 Manifest this update: Wed 25 Mar 2026 12:46:55 +0000 Manifest next update: Sat 28 Mar 2026 23:46:55 +0000 Files and hashes: 1: 3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (hash: PXxNlgw2OfA/wRFGRdyIWGrXN37hg4U811iQwNKlUIk=) 2: A5D12164B9484E51D4BE4B03823526989B147558.crl (hash: cgqw2IdwB1uSmSjiFX8u1nYoIBgUyf7JFiG3FFvshdQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1a:39:44:c7:bb:a8:ef:3f:f2:27:1a:44:4a:a0:42:2a:b4:b6:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558 Validity Not Before: Mar 25 12:46:55 2026 GMT Not After : Mar 28 23:46:55 2026 GMT Subject: CN=AFECCCA822A70B819189F3EA2A08A7381B21C271 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:45:65:e9:fc:b3:15:1e:ba:24:7a:dd:99:e9: 7f:ee:2b:eb:c7:26:fb:7a:2b:fb:67:fc:38:b8:2e: d2:bb:04:ae:ba:11:e5:10:c4:35:ca:71:74:78:a7: 6a:17:11:13:22:29:e7:fd:80:ff:1f:85:10:7d:ed: 0f:f0:e1:1c:44:ad:51:19:16:db:22:b4:9d:59:4c: f7:66:a7:81:5e:bd:6f:cd:7e:8f:65:c3:ed:56:1c: 0e:2c:2a:c2:d2:71:9e:1f:62:d5:ea:fe:ee:1d:77: b2:3e:4a:c6:70:be:9e:47:a1:15:9d:23:e4:84:da: de:55:42:fe:9b:b1:aa:ec:91:a7:1e:d6:6b:dd:93: 87:20:80:1a:86:31:15:c1:cb:90:36:46:07:c9:33: c4:65:51:f3:12:1c:0d:77:9b:ea:91:17:f9:de:06: 4e:1f:f0:6d:7f:a5:95:3e:f0:4e:c2:34:2e:64:bc: 34:40:05:0f:83:45:66:b6:d6:27:d1:24:d7:70:d0: e8:fb:8f:d3:17:24:ba:ba:af:67:80:4d:70:46:b7: c9:f7:09:e2:61:f2:5c:2f:4f:b0:ae:34:dc:06:db: a5:67:3f:11:6f:84:23:15:4f:50:4b:c6:ed:d4:eb: bf:63:49:1b:ea:eb:71:06:6c:da:37:71:00:a8:6a: 4c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:EC:CC:A8:22:A7:0B:81:91:89:F3:EA:2A:08:A7:38:1B:21:C2:71 X509v3 Authority Key Identifier: keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:46:20:8d:9a:26:04:68:ce:aa:fa:9b:d7:a9:79:01:05:9e: 04:b9:81:15:17:e1:60:ec:b3:78:f4:4f:1c:71:53:74:29:68: 56:5c:f0:9b:5d:1c:03:b3:f2:ed:ec:d7:56:53:15:66:f4:64: f0:b9:93:0d:b3:ae:02:aa:6f:4c:2b:3c:55:5a:c8:97:ae:97: f7:1c:ba:48:e0:36:e0:c5:25:9b:96:f9:07:4f:12:29:48:10: cd:81:59:a3:4f:64:c3:4e:d3:ef:08:52:70:84:6b:87:e9:d6: 6c:98:a3:cf:46:d4:98:9e:92:38:62:19:8c:58:18:36:cc:97: 68:0b:80:82:72:ac:6b:a5:1b:4a:27:70:c3:1d:2a:76:ce:9c: d8:25:f8:8a:ad:cd:41:c1:a6:cf:1a:01:91:e4:2b:15:29:6b: 89:9b:d5:23:76:09:5d:e6:aa:3e:6c:14:22:46:5a:14:f1:0b: 90:b8:df:19:5c:8f:bd:a4:12:96:3b:cd:9e:bc:e9:8d:80:dd: 0b:31:f2:71:93:89:9c:74:1d:4a:92:59:d1:9e:ef:54:2e:d7: 82:a9:ec:5b:8a:69:4d:7e:a2:7e:8c:31:29:10:24:98:7d:1f: 7b:ee:8f:e3:b2:ba:8b:7f:8f:d8:ce:8b:42:1c:ff:24:f2:da: 28:2b:75:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAho5RMe7qO8/8icaREqgQiq0tjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5 QjE0NzU1ODAeFw0yNjAzMjUxMjQ2NTVaFw0yNjAzMjgyMzQ2NTVaMDMxMTAvBgNV BAMTKEFGRUNDQ0E4MjJBNzBCODE5MTg5RjNFQTJBMDhBNzM4MUIyMUMyNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlRWXp/LMVHroket2Z6X/uK+vH Jvt6K/tn/Di4LtK7BK66EeUQxDXKcXR4p2oXERMiKef9gP8fhRB97Q/w4RxErVEZ FtsitJ1ZTPdmp4FevW/Nfo9lw+1WHA4sKsLScZ4fYtXq/u4dd7I+SsZwvp5HoRWd I+SE2t5VQv6bsarskace1mvdk4cggBqGMRXBy5A2RgfJM8RlUfMSHA13m+qRF/ne Bk4f8G1/pZU+8E7CNC5kvDRABQ+DRWa21ifRJNdw0Oj7j9MXJLq6r2eATXBGt8n3 CeJh8lwvT7CuNNwG26VnPxFvhCMVT1BLxu3U679jSRvq63EGbNo3cQCoakxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+zMqCKnC4GRifPqKginOBshwnEwHwYDVR0j BBgwFoAUpdEhZLlITlHUvksDgjUmmJsUdVgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTJjYWNjZi0zMjdlLTQyYmQtOWIzMS0wYTg3M2QyZTY2OTIvMC9BNUQxMjE2NEI5 NDg0RTUxRDRCRTRCMDM4MjM1MjY5ODlCMTQ3NTU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2OTg5QjE0 NzU1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUyY2FjY2YtMzI3ZS00MmJkLTli MzEtMGE4NzNkMmU2NjkyLzAvQTVEMTIxNjRCOTQ4NEU1MUQ0QkU0QjAzODIzNTI2 OTg5QjE0NzU1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFVGII2aJgRozqr6m9epeQEFngS5gRUX4WDs s3j0TxxxU3QpaFZc8JtdHAOz8u3s11ZTFWb0ZPC5kw2zrgKqb0wrPFVayJeul/cc ukjgNuDFJZuW+QdPEilIEM2BWaNPZMNO0+8IUnCEa4fp1myYo89G1JiekjhiGYxY GDbMl2gLgIJyrGulG0oncMMdKnbOnNgl+IqtzUHBps8aAZHkKxUpa4mb1SN2CV3m qj5sFCJGWhTxC5C43xlcj72kEpY7zZ686Y2A3Qsx8nGTiZx0HUqSWdGe71Qu14Kp 7FuKaU1+on6MMSkQJJh9H3vuj+Oyuot/j9jOi0Ic/yTy2igrdRQ= -----END CERTIFICATE-----Generated at Thu Mar 26 18:09:47 2026 by rpki-client