$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: BTfgTRWQoegleVFRp65wWUi6PVzLOTziT1QOP9PkXAs= Subject key identifier: 9E:B5:92:C4:18:98:46:BC:77:0E:C5:C1:D2:CB:E9:60:9F:3B:3A:54 Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 2DD4E52168EB3ACBADCE453A3BA10116E7E980D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 0120 Signing time: Thu 26 Mar 2026 08:12:43 +0000 Manifest this update: Thu 26 Mar 2026 08:07:43 +0000 Manifest next update: Sun 29 Mar 2026 09:11:43 +0000 Files and hashes: 1: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: FUlYxd11RmdjLHjYLYVZQBcKzfEYwjMN7/hxGjJ1Z3c=) 2: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 3: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:11:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:d4:e5:21:68:eb:3a:cb:ad:ce:45:3a:3b:a1:01:16:e7:e9:80:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Mar 26 08:07:43 2026 GMT Not After : Mar 29 09:11:43 2026 GMT Subject: CN=9EB592C4189846BC770EC5C1D2CBE9609F3B3A54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:43:38:7f:a7:ff:3a:d4:02:b6:8a:6d:b5:16: 2e:25:51:06:34:b9:48:0d:27:60:00:c4:b2:7c:51: 99:49:89:10:70:05:2a:f3:f6:cc:ac:09:73:5c:cf: 4e:fb:d2:dd:bc:05:e1:8e:fe:bd:93:e5:48:68:16: 8e:50:95:fb:78:33:05:ea:27:48:9f:05:dd:f3:14: 15:23:00:c8:6f:2d:f6:cb:8f:ca:21:8f:64:de:a1: ae:cb:47:17:68:e2:69:55:27:0f:24:54:49:fc:58: e6:ae:83:d5:e8:6e:17:5f:85:e3:8e:65:b0:1e:a1: 09:bc:61:d3:97:cf:7a:90:72:e2:ed:69:fd:99:cd: 68:6f:be:0c:30:6e:d2:22:95:26:a1:2c:79:8d:01: 13:dd:75:d4:a1:7b:d8:33:c7:14:f4:30:fe:b7:d5: b9:0f:52:94:69:be:53:ad:d9:31:d2:5f:40:50:02: f5:f2:91:cb:89:9e:e8:0c:91:f5:4f:e2:ab:e7:ce: 41:c7:a7:9d:ff:bc:26:d4:e0:66:d2:5b:f8:d3:61: 4d:39:86:57:71:7c:8f:fe:ce:c2:91:07:6a:5d:62: ef:30:dd:e2:82:c9:3a:a6:cd:20:78:88:e2:b7:d0: a0:4b:07:56:ff:88:47:26:17:c8:62:d2:6f:b8:35: 93:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:B5:92:C4:18:98:46:BC:77:0E:C5:C1:D2:CB:E9:60:9F:3B:3A:54 X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:8f:d1:ee:bc:8b:b7:ba:91:fb:4d:dc:ad:dd:38:38:34:eb: b6:f4:56:bd:12:1b:da:bd:76:02:8f:3c:7e:dc:18:73:17:57: a5:d1:8e:ee:5e:8d:5d:6d:e7:b9:c0:72:55:3f:79:d3:1b:89: 64:5a:0a:b5:5d:e2:d1:07:b0:46:6b:d5:84:09:c7:1b:d8:61: d0:27:c4:c5:30:ab:f6:16:ee:15:a5:e8:56:e8:6c:9e:b7:c2: 11:48:62:72:1e:ea:39:50:fe:47:bb:4b:45:4d:1a:ca:7c:33: 30:99:bd:dd:d8:31:6c:cb:28:ae:84:63:ec:ed:e2:19:b3:0b: 3c:46:d5:fc:fb:fd:ca:22:78:3d:17:c9:df:b3:2b:5a:1a:bf: f0:d2:60:a2:84:65:cf:bb:4f:c0:31:d9:8c:44:d0:c3:c0:34: e0:67:d5:fb:e8:53:49:57:89:99:8a:b0:d0:6d:a2:81:0c:61: 49:21:78:96:56:e9:2a:91:8f:1d:76:3b:37:d1:25:13:eb:37: 21:09:bb:b0:66:b6:e4:13:ba:9c:fc:c4:e1:2e:eb:c3:4a:95: e6:45:61:c1:e1:c2:e2:cc:9e:6f:8d:7f:bd:1b:cf:ce:09:c3: 61:ca:7b:f8:c4:13:14:ff:49:6c:b4:13:33:75:eb:a0:af:8b: 84:d7:30:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULdTlIWjrOsutzkU6O6EBFufpgNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjAzMjYwODA3NDNaFw0yNjAzMjkwOTExNDNaMDMxMTAvBgNV BAMTKDlFQjU5MkM0MTg5ODQ2QkM3NzBFQzVDMUQyQ0JFOTYwOUYzQjNBNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqQzh/p/861AK2im21Fi4lUQY0 uUgNJ2AAxLJ8UZlJiRBwBSrz9sysCXNcz0770t28BeGO/r2T5UhoFo5Qlft4MwXq J0ifBd3zFBUjAMhvLfbLj8ohj2Teoa7LRxdo4mlVJw8kVEn8WOaug9XobhdfheOO ZbAeoQm8YdOXz3qQcuLtaf2ZzWhvvgwwbtIilSahLHmNARPdddShe9gzxxT0MP63 1bkPUpRpvlOt2THSX0BQAvXykcuJnugMkfVP4qvnzkHHp53/vCbU4GbSW/jTYU05 hldxfI/+zsKRB2pdYu8w3eKCyTqmzSB4iOK30KBLB1b/iEcmF8hi0m+4NZMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnrWSxBiYRrx3DsXB0svpYJ87OlQwHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaP0e68i7e6kftN3K3dODg067b0Vr0SG9q9 dgKPPH7cGHMXV6XRju5ejV1t57nAclU/edMbiWRaCrVd4tEHsEZr1YQJxxvYYdAn xMUwq/YW7hWl6FbobJ63whFIYnIe6jlQ/ke7S0VNGsp8MzCZvd3YMWzLKK6EY+zt 4hmzCzxG1fz7/coieD0Xyd+zK1oav/DSYKKEZc+7T8Ax2YxE0MPANOBn1fvoU0lX iZmKsNBtooEMYUkheJZW6SqRjx12OzfRJRPrNyEJu7BmtuQTupz8xOEu68NKleZF YcHhwuLMnm+Nf70bz84Jw2HKe/jEExT/SWy0EzN166Cvi4TXMG0= -----END CERTIFICATE-----Generated at Thu Mar 26 12:16:19 2026 by rpki-client