$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: 4WfiPtvf89wosnBKBNL8uAaAd971U6ca8SXhzYxZqVQ= Subject key identifier: 9F:23:0A:D4:56:E1:B2:1E:0E:5A:2F:71:60:25:15:B8:6B:3B:88:29 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 0A9A74BB3317EB80B1ECF3CAAF385861EF61C0C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 0565 Signing time: Wed 25 Mar 2026 15:01:27 +0000 Manifest this update: Wed 25 Mar 2026 14:56:27 +0000 Manifest next update: Sun 29 Mar 2026 02:38:27 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 2: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: NgErAFrhT/llQJ03qSGpw23O7UIPZXUpQzQeXr8cBts=) 3: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) 4: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 5: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 6: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 7: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 8: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:38:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:9a:74:bb:33:17:eb:80:b1:ec:f3:ca:af:38:58:61:ef:61:c0:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Mar 25 14:56:27 2026 GMT Not After : Mar 29 02:38:27 2026 GMT Subject: CN=9F230AD456E1B21E0E5A2F71602515B86B3B8829 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:d5:3d:8f:0a:74:be:58:16:2b:40:fc:c6:3a: 85:9d:1d:17:3b:0e:d8:96:af:a2:1e:98:16:d4:a4: 58:af:1c:a4:90:0a:07:96:5a:b5:19:bd:f1:3c:5f: f7:67:78:6f:af:6d:f6:55:72:97:b5:f5:ce:65:7c: df:db:bb:8d:4d:09:c8:09:b4:3d:cb:87:35:c0:b4: 60:f5:86:63:6d:c1:32:9e:c3:d4:f9:99:c3:a4:06: 59:95:a9:e8:84:10:00:aa:53:af:4d:96:17:61:93: f1:d4:dd:a7:36:9d:ac:59:f5:cf:67:be:48:4e:26: 36:de:0d:45:fc:62:6f:79:fe:ed:8e:fa:4b:cd:c9: f7:e2:65:90:b1:2f:9c:a8:36:9e:6e:a1:55:1a:aa: f6:7b:2b:56:b1:3a:38:f8:b6:9a:8f:de:36:a3:ba: 31:aa:13:de:db:89:7d:55:d4:7d:d8:70:5c:b6:37: a9:e1:19:32:c9:ee:5e:7b:32:1a:33:37:a6:d8:76: 87:10:2e:cd:7f:1f:4f:91:35:79:ab:02:ef:0d:b0: 39:81:7c:85:16:c6:db:57:79:5b:97:7a:b2:d6:43: 4a:14:d7:c9:e5:eb:b8:c2:4d:c3:db:2e:ad:a6:cb: 3c:38:99:a6:af:7e:c2:2c:32:e5:8f:72:f8:79:66: d4:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:23:0A:D4:56:E1:B2:1E:0E:5A:2F:71:60:25:15:B8:6B:3B:88:29 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d7:a6:c2:9b:3f:61:c6:93:3c:b8:d8:1f:8a:e0:f7:02:f3: 68:45:7f:1c:71:0b:0f:7d:fd:31:ee:5a:47:64:c3:8c:d3:fd: 3d:09:f7:6e:a7:db:9a:ca:36:c7:81:5b:af:3c:03:ad:b1:21: 59:8e:1a:3d:1a:47:b8:31:37:a5:40:b2:81:ba:d3:40:0f:9d: 63:59:ca:30:66:be:88:8a:e5:2b:92:ba:47:31:e2:83:a1:a5: 58:ad:2d:de:94:77:5e:45:c2:0d:f1:0c:95:04:f1:fd:ba:c6: 01:97:49:73:4b:b3:1e:de:8d:67:b8:ae:44:bf:69:0e:3e:3c: 9b:77:f3:ff:13:be:73:8a:67:c4:60:21:5e:79:d4:c7:b2:98: 75:61:c0:2d:5b:72:b5:8f:5d:d6:27:ad:5e:23:dd:aa:d2:d3: d4:d2:45:bb:df:b1:18:1e:f8:7d:ac:cd:e3:3a:ef:2f:ae:c9: 4f:82:f5:96:39:26:30:31:18:57:6d:00:d7:57:d2:89:ad:79: 24:4f:7d:a4:d2:32:82:ee:62:a0:ad:ac:15:62:55:39:64:d8: bb:fc:27:f9:2e:41:5f:8b:a4:a9:bc:14:b7:c3:86:c7:36:79: e4:11:86:0b:af:32:7c:45:b1:09:e0:2d:45:ce:cc:28:28:f7: a8:ca:25:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCpp0uzMX64Cx7PPKrzhYYe9hwMMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNjAzMjUxNDU2MjdaFw0yNjAzMjkwMjM4MjdaMDMxMTAvBgNV BAMTKDlGMjMwQUQ0NTZFMUIyMUUwRTVBMkY3MTYwMjUxNUI4NkIzQjg4MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi1T2PCnS+WBYrQPzGOoWdHRc7 DtiWr6IemBbUpFivHKSQCgeWWrUZvfE8X/dneG+vbfZVcpe19c5lfN/bu41NCcgJ tD3LhzXAtGD1hmNtwTKew9T5mcOkBlmVqeiEEACqU69Nlhdhk/HU3ac2naxZ9c9n vkhOJjbeDUX8Ym95/u2O+kvNyffiZZCxL5yoNp5uoVUaqvZ7K1axOjj4tpqP3jaj ujGqE97biX1V1H3YcFy2N6nhGTLJ7l57MhozN6bYdocQLs1/H0+RNXmrAu8NsDmB fIUWxttXeVuXerLWQ0oU18nl67jCTcPbLq2myzw4maavfsIsMuWPcvh5ZtRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnyMK1Fbhsh4OWi9xYCUVuGs7iCkwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3XpsKbP2HGkzy42B+K4PcC82hFfxxxCw99 /THuWkdkw4zT/T0J926n25rKNseBW688A62xIVmOGj0aR7gxN6VAsoG600APnWNZ yjBmvoiK5SuSukcx4oOhpVitLd6Ud15Fwg3xDJUE8f26xgGXSXNLsx7ejWe4rkS/ aQ4+PJt38/8TvnOKZ8RgIV551MeymHVhwC1bcrWPXdYnrV4j3arS09TSRbvfsRge +H2szeM67y+uyU+C9ZY5JjAxGFdtANdX0omteSRPfaTSMoLuYqCtrBViVTlk2Lv8 J/kuQV+LpKm8FLfDhsc2eeQRhguvMnxFsQngLUXOzCgo96jKJeg= -----END CERTIFICATE-----Generated at Thu Mar 26 18:08:07 2026 by rpki-client