$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: JrEZEa1taP9yKX7N7/vVcHFZtjYHlS23neX3PjjuYDM= Subject key identifier: 0D:CD:6B:27:AC:35:5B:C7:7B:4C:C2:43:64:66:9D:8E:45:40:9D:E9 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 6D6505E725AF8B4837EA35D15BC611CAA5D64A62 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0174 Signing time: Wed 25 Mar 2026 09:00:00 +0000 Manifest this update: Wed 25 Mar 2026 08:55:00 +0000 Manifest next update: Sat 28 Mar 2026 15:46:00 +0000 Files and hashes: 1: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: FVC9U104HX1crPghvB1iPA83fchbbAHthWaFrkUH4AQ=) 2: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:46:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:65:05:e7:25:af:8b:48:37:ea:35:d1:5b:c6:11:ca:a5:d6:4a:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Mar 25 08:55:00 2026 GMT Not After : Mar 28 15:46:00 2026 GMT Subject: CN=0DCD6B27AC355BC77B4CC24364669D8E45409DE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:74:cc:2c:a7:6b:26:29:58:46:37:8b:37:8c: 6e:5c:72:ec:98:1d:44:95:ee:84:8e:32:96:43:d0: ab:51:c5:b3:d3:77:e7:6c:c6:68:96:3e:26:2c:b7: 7f:f1:82:41:15:42:13:3b:20:82:eb:20:4d:12:ae: 8d:66:f8:f9:cd:20:28:f1:ba:a3:20:2f:77:46:e7: 62:cd:38:48:61:b1:02:b0:68:e9:af:04:cd:8d:31: cb:68:76:a9:4b:b0:ef:98:78:a5:67:3b:ca:0e:10: 7f:e7:53:8e:be:61:5b:61:63:cd:f6:6d:99:52:e8: c2:37:be:27:56:1e:0c:43:a6:03:6a:84:23:8d:60: c7:9f:c8:69:8b:9d:1e:03:7b:23:88:4b:58:1d:d7: 5f:c7:7f:aa:f7:70:a0:1d:36:81:eb:c0:e0:a3:1a: 3a:f8:13:cd:ff:0b:e7:a3:75:0a:20:c7:37:27:58: 30:77:5e:32:9c:f3:5c:b7:80:56:32:92:ff:d9:fd: e4:53:88:5a:ee:c4:ad:53:4e:23:29:61:3b:bc:a5: 97:be:32:3f:df:d4:69:03:6d:b3:12:a0:49:b8:3e: 9b:f2:6b:27:8d:bd:64:79:fc:dc:07:c1:54:95:5b: c4:7e:47:60:8b:7e:c2:73:29:e3:39:43:40:fe:5a: 85:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:CD:6B:27:AC:35:5B:C7:7B:4C:C2:43:64:66:9D:8E:45:40:9D:E9 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:6a:4c:56:6e:7b:8c:89:70:49:65:4b:96:ae:be:df:aa:b2: 9d:b2:04:8b:1c:7a:7b:d1:62:87:1a:e2:8b:a3:e1:ca:71:be: 40:89:63:38:b0:08:6f:8f:03:8f:f6:49:36:67:d4:e5:b6:ff: c1:29:62:19:50:f7:48:03:3d:f0:48:c6:2e:f1:a7:13:c6:06: de:80:1d:ce:ff:3c:71:c2:40:67:c7:e7:70:18:df:c0:de:ea: 0f:d1:75:2f:d6:60:be:a9:7e:37:db:eb:c4:87:f7:b3:85:4b: ec:c4:3a:da:69:06:5f:0c:04:82:db:bb:15:3e:e5:cc:a0:18: c1:ad:32:b2:67:dd:94:d2:bf:e8:9d:cd:66:f0:eb:2b:26:97: 22:97:ed:73:e7:85:95:11:e8:78:4b:1f:e9:30:32:1e:0c:3c: ff:19:b9:5c:5b:52:fc:bf:e4:8f:46:f2:1d:e8:c1:70:75:c5: 71:14:b6:23:0c:87:0c:cc:a8:06:04:08:33:eb:fe:f6:89:06: b9:cc:86:16:bc:f9:17:f1:8e:10:22:6b:c7:66:17:95:2b:16: e9:16:12:0f:cb:e6:67:cf:02:ba:37:94:1d:2e:60:f1:d9:f3: c4:6c:79:10:6f:da:54:cc:c5:fe:a6:4e:c4:f1:bf:b6:0b:93: 57:56:bd:c6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbWUF5yWvi0g36jXRW8YRyqXWSmIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNjAzMjUwODU1MDBaFw0yNjAzMjgxNTQ2MDBaMDMxMTAvBgNV BAMTKDBEQ0Q2QjI3QUMzNTVCQzc3QjRDQzI0MzY0NjY5RDhFNDU0MDlERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBdMwsp2smKVhGN4s3jG5ccuyY HUSV7oSOMpZD0KtRxbPTd+dsxmiWPiYst3/xgkEVQhM7IILrIE0Sro1m+PnNICjx uqMgL3dG52LNOEhhsQKwaOmvBM2NMctodqlLsO+YeKVnO8oOEH/nU46+YVthY832 bZlS6MI3vidWHgxDpgNqhCONYMefyGmLnR4DeyOIS1gd11/Hf6r3cKAdNoHrwOCj Gjr4E83/C+ejdQogxzcnWDB3XjKc81y3gFYykv/Z/eRTiFruxK1TTiMpYTu8pZe+ Mj/f1GkDbbMSoEm4PpvyayeNvWR5/NwHwVSVW8R+R2CLfsJzKeM5Q0D+WoUHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDc1rJ6w1W8d7TMJDZGadjkVAnekwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1qTFZue4yJcEllS5auvt+qsp2yBIscenvR Yoca4ouj4cpxvkCJYziwCG+PA4/2STZn1OW2/8EpYhlQ90gDPfBIxi7xpxPGBt6A Hc7/PHHCQGfH53AY38De6g/RdS/WYL6pfjfb68SH97OFS+zEOtppBl8MBILbuxU+ 5cygGMGtMrJn3ZTSv+idzWbw6ysmlyKX7XPnhZUR6HhLH+kwMh4MPP8ZuVxbUvy/ 5I9G8h3owXB1xXEUtiMMhwzMqAYECDPr/vaJBrnMhha8+RfxjhAia8dmF5UrFukW Eg/L5mfPAro3lB0uYPHZ88RseRBv2lTMxf6mTsTxv7YLk1dWvcY= -----END CERTIFICATE-----Generated at Fri Mar 27 05:41:39 2026 by rpki-client