$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: dIpg//3BI9IZOpaFnEWkzlY2joTtg/QstvwwJwe4QtQ= Subject key identifier: 19:D2:C8:5A:DF:D4:5A:66:59:46:7E:3F:95:55:56:49:B6:50:F7:CE Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 4C70DBEF868EC574F2484A9A6047C70E5FC4F45E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 055A Signing time: Tue 24 Mar 2026 23:21:38 +0000 Manifest this update: Tue 24 Mar 2026 23:16:38 +0000 Manifest next update: Sat 28 Mar 2026 04:49:38 +0000 Files and hashes: 1: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) 2: 285218D0288125F1010B5469F03888B08A661969.crl (hash: aXv3TxrNGwM1ecXZOYdRcxg0PW7S9ujIkJcU03VN2ns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:70:db:ef:86:8e:c5:74:f2:48:4a:9a:60:47:c7:0e:5f:c4:f4:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Mar 24 23:16:38 2026 GMT Not After : Mar 28 04:49:38 2026 GMT Subject: CN=19D2C85ADFD45A6659467E3F95555649B650F7CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:2e:37:14:f9:b8:f7:0f:d8:87:ec:f9:95:fd: 7e:23:9c:a3:84:e4:fa:ed:0c:d6:ac:0d:e7:31:78: 84:fe:16:c4:0c:25:14:b4:82:e9:03:1b:57:95:42: ac:68:e2:6b:b7:26:d1:a5:42:58:ca:0e:30:af:c9: 63:4b:3a:48:f3:b2:fb:ca:4e:d7:99:f5:22:41:7e: ee:4a:37:80:5e:6b:95:21:4c:86:4a:cd:fd:3b:f4: 77:8e:e9:8d:8b:5a:e6:48:e0:d8:1d:d4:17:4a:cf: 6d:f4:5b:e4:32:70:e0:dd:e0:e8:c4:0a:05:c4:b9: fa:b9:9f:d2:b2:1f:bb:ea:3d:82:a8:6d:fd:bb:be: 24:ae:c9:67:05:24:5e:c1:32:60:14:9a:1d:25:7e: 95:a8:c9:2a:e7:df:06:e9:08:86:87:a3:c5:44:2c: 58:16:f7:d4:79:ac:ac:23:cb:76:3b:60:83:35:0b: c8:9e:e4:16:9a:49:a4:72:77:6d:5f:79:73:43:9e: 62:d2:c3:61:ff:79:14:36:70:ad:7e:50:2c:ed:ea: e4:2a:57:90:45:54:cb:1e:10:c7:ce:60:c4:45:05: ab:b2:84:57:22:aa:fb:84:d5:1d:e0:6e:0a:d8:a3: 61:06:95:38:92:24:7d:38:d4:44:80:54:46:00:ac: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D2:C8:5A:DF:D4:5A:66:59:46:7E:3F:95:55:56:49:B6:50:F7:CE X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:2c:8f:6e:08:fa:3b:fa:35:5d:16:f5:90:93:39:b3:ec:ae: d7:61:cb:b2:71:96:1f:9a:66:e3:0e:72:76:68:e0:72:9c:ad: db:ef:a0:9b:f4:96:b1:51:68:d0:ef:fb:81:ae:c4:46:8a:b4: 43:43:03:76:b6:fa:c9:30:a8:eb:e6:63:53:4e:15:a5:f1:8c: 51:19:1d:82:45:17:89:31:24:d2:bc:b5:32:01:14:6d:fd:69: 2a:ae:9f:55:76:aa:bc:89:a2:31:3e:f1:63:6d:bf:06:d3:e7: 79:72:72:bd:1d:2d:49:38:dc:99:df:f7:7d:ee:fb:6a:c2:16: 25:b6:52:7a:e3:37:5f:a8:c4:cd:57:e2:77:49:ac:2b:37:81: aa:2a:47:66:de:a0:97:fa:23:bc:4e:86:f5:2f:84:64:ac:27: d1:cd:13:4e:df:27:e6:01:e8:5e:19:f6:5a:c4:7a:d5:33:cf: 1a:8a:8e:d2:af:10:a3:18:10:e6:c2:a6:34:3c:6c:8b:f3:2e: 73:ea:9a:ee:4f:fd:04:17:6b:17:bc:58:98:3a:35:0e:a7:1a: c5:8b:1d:f5:b3:91:d8:d0:b3:e0:04:c7:94:f5:55:6a:09:3b: 79:34:8a:10:5a:9d:cd:a8:32:1d:36:92:89:36:bd:bf:3b:68: 4c:75:b5:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTHDb74aOxXTySEqaYEfHDl/E9F4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNjAzMjQyMzE2MzhaFw0yNjAzMjgwNDQ5MzhaMDMxMTAvBgNV BAMTKDE5RDJDODVBREZENDVBNjY1OTQ2N0UzRjk1NTU1NjQ5QjY1MEY3Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbLjcU+bj3D9iH7PmV/X4jnKOE 5PrtDNasDecxeIT+FsQMJRS0gukDG1eVQqxo4mu3JtGlQljKDjCvyWNLOkjzsvvK TteZ9SJBfu5KN4Bea5UhTIZKzf079HeO6Y2LWuZI4Ngd1BdKz230W+QycODd4OjE CgXEufq5n9KyH7vqPYKobf27viSuyWcFJF7BMmAUmh0lfpWoySrn3wbpCIaHo8VE LFgW99R5rKwjy3Y7YIM1C8ie5BaaSaRyd21feXNDnmLSw2H/eRQ2cK1+UCzt6uQq V5BFVMseEMfOYMRFBauyhFciqvuE1R3gbgrYo2EGlTiSJH041ESAVEYArOVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdLIWt/UWmZZRn4/lVVWSbZQ984wHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUsj24I+jv6NV0W9ZCTObPsrtdhy7Jxlh+a ZuMOcnZo4HKcrdvvoJv0lrFRaNDv+4GuxEaKtENDA3a2+skwqOvmY1NOFaXxjFEZ HYJFF4kxJNK8tTIBFG39aSqun1V2qryJojE+8WNtvwbT53lycr0dLUk43Jnf933u +2rCFiW2UnrjN1+oxM1X4ndJrCs3gaoqR2beoJf6I7xOhvUvhGSsJ9HNE07fJ+YB 6F4Z9lrEetUzzxqKjtKvEKMYEObCpjQ8bIvzLnPqmu5P/QQXaxe8WJg6NQ6nGsWL HfWzkdjQs+AEx5T1VWoJO3k0ihBanc2oMh02kok2vb87aEx1tUM= -----END CERTIFICATE-----Generated at Thu Mar 26 15:47:51 2026 by rpki-client