$ rpki-client -vvf repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft File: A603F8DE41A0C254133C531FFB98C664160BB962.mft (raw, json) Hash identifier: cX9AcadNNEtrMyURPthavtSmrJm8JdsKg3IKodCUpIU= Subject key identifier: A8:B6:8F:E7:7B:55:A6:1E:B1:2E:4C:DD:0B:30:DC:2C:AA:B4:97:E0 Authority key identifier: A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 Certificate issuer: /CN=A603F8DE41A0C254133C531FFB98C664160BB962 Certificate serial: 179BE462C42CD61CAFF55710999AA8CBAA1EF598 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft Manifest number: 011E Signing time: Tue 24 Mar 2026 12:21:46 +0000 Manifest this update: Tue 24 Mar 2026 12:16:46 +0000 Manifest next update: Fri 27 Mar 2026 20:59:46 +0000 Files and hashes: 1: A603F8DE41A0C254133C531FFB98C664160BB962.crl (hash: wThOjan+QfzCdTpBxPayxPjM6LmFR3/TsQzs4rYV7yc=) 2: 3136302e32302e3234342e302f32342d3234203d3e20313532373939.roa (hash: A4SxOCYpMsvPg6bxzwOZR5xlNJbTnvovMLUlr03+yjM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:59:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:9b:e4:62:c4:2c:d6:1c:af:f5:57:10:99:9a:a8:cb:aa:1e:f5:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A603F8DE41A0C254133C531FFB98C664160BB962 Validity Not Before: Mar 24 12:16:46 2026 GMT Not After : Mar 27 20:59:46 2026 GMT Subject: CN=A8B68FE77B55A61EB12E4CDD0B30DC2CAAB497E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:69:22:3a:e3:07:0b:b7:e9:52:2d:bb:31:6b: 59:fe:77:54:71:b2:7a:74:92:01:01:94:86:c4:cb: e1:cb:05:da:dc:51:b9:d8:89:e6:90:90:e3:1b:06: 13:64:14:c6:b6:db:c3:21:74:3c:73:bf:63:63:77: aa:71:43:63:e4:f1:62:90:4f:1e:64:d1:84:f9:6f: 66:b1:79:df:39:4b:a6:e5:ee:07:6a:fe:7e:88:7b: 43:80:25:42:09:c0:1b:f6:ec:33:ef:8f:e0:a6:28: 44:d6:0a:1c:4c:99:b4:f5:a6:4b:d6:81:da:b2:10: 41:94:86:f8:6b:46:f9:86:b0:5b:d2:d9:84:e8:3e: 92:44:d3:ce:9d:ef:30:1a:5c:05:bb:59:d4:eb:40: 2b:a7:b6:05:c7:92:1e:07:de:61:d7:db:0e:ae:5e: cf:31:1e:14:08:44:91:5c:be:b4:f0:c7:70:65:a5: 1d:b4:c9:59:91:d0:ca:e3:72:fb:5f:7e:1f:22:a0: ae:7b:04:97:7f:31:2c:39:44:5f:0a:77:45:11:9c: 3a:c1:f5:3b:84:99:0d:4f:c3:e0:da:98:ce:7c:be: c4:b4:fd:5a:4c:2a:0c:8f:ad:35:b8:c3:40:a8:ed: 89:d5:c1:57:46:c5:18:e4:90:df:15:ed:7d:23:fa: 08:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B6:8F:E7:7B:55:A6:1E:B1:2E:4C:DD:0B:30:DC:2C:AA:B4:97:E0 X509v3 Authority Key Identifier: keyid:A6:03:F8:DE:41:A0:C2:54:13:3C:53:1F:FB:98:C6:64:16:0B:B9:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A603F8DE41A0C254133C531FFB98C664160BB962.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a9b8152e-aa86-4d8a-81da-e71086b2956c/0/A603F8DE41A0C254133C531FFB98C664160BB962.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:ff:ba:e8:7a:dd:e8:fb:3a:94:c2:8a:fd:ae:53:25:a4:b4: 6b:61:de:09:7b:cb:04:8a:9c:a2:d4:15:22:0e:c1:04:e9:dd: a4:0f:5c:80:c6:49:a9:c0:d4:9e:c4:1d:1a:a1:fc:e5:c8:25: bd:2f:87:33:2f:c9:50:0d:ab:4a:11:16:0b:eb:9f:54:6b:eb: 2d:a7:21:6b:80:2e:d8:80:e9:3d:44:f4:fc:1f:58:f3:f5:61: 6a:34:de:b7:10:9f:0b:c6:e9:60:d8:30:23:a1:a4:4f:8a:27: d5:c3:a7:5b:f9:2f:13:e5:89:17:ae:05:fc:43:94:ab:8f:b5: ae:64:51:46:07:7d:7a:23:45:0d:29:ce:c5:ad:06:de:98:0d: 7c:d1:e0:91:0d:f9:cf:3e:c8:e8:b6:d6:4a:02:c7:e4:d2:7a: e0:5c:db:1c:01:61:2f:1e:f1:6e:5c:fd:14:a5:cb:ee:26:d3: b9:bf:20:e9:b2:7b:7b:48:fd:33:b3:35:f9:7e:5c:73:b4:17: f7:4e:bf:b7:8d:fa:6b:75:68:47:70:d8:27:48:cb:ab:02:3c: 82:54:b3:58:2e:e1:4b:1f:10:2c:a5:48:9a:31:4d:03:34:e4: ed:f0:30:54:91:2d:dc:f2:39:40:ba:17:d9:b9:8d:45:2f:e9: 87:55:ca:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF5vkYsQs1hyv9VcQmZqoy6oe9ZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQx NjBCQjk2MjAeFw0yNjAzMjQxMjE2NDZaFw0yNjAzMjcyMDU5NDZaMDMxMTAvBgNV BAMTKEE4QjY4RkU3N0I1NUE2MUVCMTJFNENERDBCMzBEQzJDQUFCNDk3RTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoaSI64wcLt+lSLbsxa1n+d1Rx snp0kgEBlIbEy+HLBdrcUbnYieaQkOMbBhNkFMa228MhdDxzv2Njd6pxQ2Pk8WKQ Tx5k0YT5b2axed85S6bl7gdq/n6Ie0OAJUIJwBv27DPvj+CmKETWChxMmbT1pkvW gdqyEEGUhvhrRvmGsFvS2YToPpJE086d7zAaXAW7WdTrQCuntgXHkh4H3mHX2w6u Xs8xHhQIRJFcvrTwx3BlpR20yVmR0Mrjcvtffh8ioK57BJd/MSw5RF8Kd0URnDrB 9TuEmQ1Pw+DamM58vsS0/VpMKgyPrTW4w0Co7YnVwVdGxRjkkN8V7X0j+ggXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqLaP53tVph6xLkzdCzDcLKq0l+AwHwYDVR0j BBgwFoAUpgP43kGgwlQTPFMf+5jGZBYLuWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OWI4MTUyZS1hYTg2LTRkOGEtODFkYS1lNzEwODZiMjk1NmMvMC9BNjAzRjhERTQx QTBDMjU0MTMzQzUzMUZGQjk4QzY2NDE2MEJCOTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2NjQxNjBC Qjk2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTliODE1MmUtYWE4Ni00ZDhhLTgx ZGEtZTcxMDg2YjI5NTZjLzAvQTYwM0Y4REU0MUEwQzI1NDEzM0M1MzFGRkI5OEM2 NjQxNjBCQjk2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABb/uuh63ej7OpTCiv2uUyWktGth3gl7ywSK nKLUFSIOwQTp3aQPXIDGSanA1J7EHRqh/OXIJb0vhzMvyVANq0oRFgvrn1Rr6y2n IWuALtiA6T1E9PwfWPP1YWo03rcQnwvG6WDYMCOhpE+KJ9XDp1v5LxPliReuBfxD lKuPta5kUUYHfXojRQ0pzsWtBt6YDXzR4JEN+c8+yOi21koCx+TSeuBc2xwBYS8e 8W5c/RSly+4m07m/IOmye3tI/TOzNfl+XHO0F/dOv7eN+mt1aEdw2CdIy6sCPIJU s1gu4UsfECylSJoxTQM05O3wMFSRLdzyOUC6F9m5jUUv6YdVymo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:01:12 2026 by rpki-client