$ rpki-client -vvf repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft File: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft (raw, json) Hash identifier: YiUp/GlQlxkNLQHgCAnDAnFZ76NTz53ThA2VhUBb9fw= Subject key identifier: A6:B7:11:89:60:F5:5B:6F:97:30:6F:11:F5:C3:C5:25:9E:5F:DA:59 Authority key identifier: CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 Certificate issuer: /CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Certificate serial: 3F58E46DFBA3EC5AA1B937C226A14A38A3D05D8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft Manifest number: 0348 Signing time: Wed 25 Mar 2026 03:51:22 +0000 Manifest this update: Wed 25 Mar 2026 03:46:22 +0000 Manifest next update: Sat 28 Mar 2026 07:57:22 +0000 Files and hashes: 1: CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl (hash: dnNOOHY1I9m2juULrl51KDDyG3KIRuPUec1+zIj33Tg=) 2: 3130332e3137322e3139362e302f32332d3234203d3e20313432333934.roa (hash: Z1tGWFEjU6+Gt3zLjm1kyQrIJ2QvnjBbeJw3y7l63DU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:57:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:58:e4:6d:fb:a3:ec:5a:a1:b9:37:c2:26:a1:4a:38:a3:d0:5d:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA13A9BAC29315E5C5DACF0BC7388C342AD6E592 Validity Not Before: Mar 25 03:46:22 2026 GMT Not After : Mar 28 07:57:22 2026 GMT Subject: CN=A6B7118960F55B6F97306F11F5C3C5259E5FDA59 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:01:eb:49:c9:9b:6e:f5:ae:e2:62:34:1d:fd: e0:d4:d9:c7:5b:2e:fb:4a:95:f0:0f:04:f4:a3:05: d1:d4:94:48:87:4e:fa:9e:53:26:71:06:55:a7:0f: 66:5e:d6:21:8b:1b:12:05:1d:97:b5:ec:a8:15:09: 9d:8f:c9:87:19:64:59:96:e3:85:ec:55:b4:f7:69: 0d:df:c1:e8:a8:5e:58:2f:2c:00:e3:c1:33:58:96: dc:03:c8:82:78:43:51:73:a2:97:09:ae:4a:d7:b0: af:4f:1d:8e:2c:18:91:72:47:cb:7a:db:b7:d1:86: f7:49:46:37:25:ba:9c:f1:51:a1:b6:3c:78:0c:65: 33:4b:02:fe:3d:bb:ad:35:fb:bc:4c:b9:1d:06:42: ca:3e:a0:93:d6:68:17:8d:38:b8:16:5c:50:f0:98: 92:b9:b9:33:85:fb:04:94:76:d8:65:c0:e0:1e:29: 48:41:cd:c7:29:cb:49:3a:d4:0b:2b:ac:21:a4:8a: a0:f9:5d:43:cd:59:4c:f0:57:a3:c8:12:bf:8d:f6: 68:29:5f:96:3a:82:28:9a:a5:92:03:6d:82:68:75: 53:04:78:a2:f1:09:c5:bf:6b:a4:58:51:14:42:2e: f8:c6:84:ca:01:c6:58:52:57:71:f7:8c:1d:bb:ce: c7:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B7:11:89:60:F5:5B:6F:97:30:6F:11:F5:C3:C5:25:9E:5F:DA:59 X509v3 Authority Key Identifier: keyid:CA:13:A9:BA:C2:93:15:E5:C5:DA:CF:0B:C7:38:8C:34:2A:D6:E5:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c397cfc5-e0b0-4820-b859-79625201ecaf/0/CA13A9BAC29315E5C5DACF0BC7388C342AD6E592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:b6:4d:82:b2:8c:36:19:e9:0d:9a:19:5a:a7:28:cf:cc:bd: 67:fb:8d:f5:97:62:84:de:4e:ef:11:b2:df:9b:44:51:29:f9: d5:48:7f:41:fb:3e:f7:32:a5:d3:13:4a:68:63:0b:40:61:e4: d8:fb:22:13:5f:80:23:d4:0a:0f:97:02:0c:3b:68:9b:49:ea: 28:87:89:c7:0b:6c:62:d8:7a:b5:b9:75:42:90:ff:40:f2:45: fe:f1:a8:32:66:c8:85:44:3d:ae:fa:83:a1:9b:02:92:0a:07: 2f:cc:b3:af:df:47:12:fd:0f:82:b0:44:a6:85:9b:72:e1:59: 57:f0:4f:97:9c:95:4a:bb:8e:df:aa:38:77:83:5e:84:12:4f: 38:df:5e:7d:3d:62:91:36:ac:6b:35:5c:5a:03:a0:82:82:fc: 8e:b7:cc:be:ea:77:11:e9:54:80:3e:74:67:01:35:8b:34:d1: 82:b8:92:55:3c:0a:0b:2e:90:f0:01:f2:5a:25:29:7d:14:85: 0d:22:f5:52:1a:c5:7a:b9:03:e9:25:4f:48:ad:31:c4:1d:5f: fc:ee:44:9d:6c:d4:dd:28:8c:7d:7b:ac:e1:2f:58:5f:16:f9: f7:75:1a:39:51:53:23:ec:d8:9d:07:4c:94:d1:a4:e6:89:7c: 9f:a4:73:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP1jkbfuj7FqhuTfCJqFKOKPQXY0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQy QUQ2RTU5MjAeFw0yNjAzMjUwMzQ2MjJaFw0yNjAzMjgwNzU3MjJaMDMxMTAvBgNV BAMTKEE2QjcxMTg5NjBGNTVCNkY5NzMwNkYxMUY1QzNDNTI1OUU1RkRBNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAetJyZtu9a7iYjQd/eDU2cdb LvtKlfAPBPSjBdHUlEiHTvqeUyZxBlWnD2Ze1iGLGxIFHZe17KgVCZ2PyYcZZFmW 44XsVbT3aQ3fweioXlgvLADjwTNYltwDyIJ4Q1FzopcJrkrXsK9PHY4sGJFyR8t6 27fRhvdJRjclupzxUaG2PHgMZTNLAv49u601+7xMuR0GQso+oJPWaBeNOLgWXFDw mJK5uTOF+wSUdthlwOAeKUhBzccpy0k61AsrrCGkiqD5XUPNWUzwV6PIEr+N9mgp X5Y6giiapZIDbYJodVMEeKLxCcW/a6RYURRCLvjGhMoBxlhSV3H3jB27zsfhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUprcRiWD1W2+XMG8R9cPFJZ5f2lkwHwYDVR0j BBgwFoAUyhOpusKTFeXF2s8LxziMNCrW5ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j Mzk3Y2ZjNS1lMGIwLTQ4MjAtYjg1OS03OTYyNTIwMWVjYWYvMC9DQTEzQTlCQUMy OTMxNUU1QzVEQUNGMEJDNzM4OEMzNDJBRDZFNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhDMzQyQUQ2 RTU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM5N2NmYzUtZTBiMC00ODIwLWI4 NTktNzk2MjUyMDFlY2FmLzAvQ0ExM0E5QkFDMjkzMTVFNUM1REFDRjBCQzczODhD MzQyQUQ2RTU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABG2TYKyjDYZ6Q2aGVqnKM/MvWf7jfWXYoTe Tu8Rst+bRFEp+dVIf0H7PvcypdMTSmhjC0Bh5Nj7IhNfgCPUCg+XAgw7aJtJ6iiH iccLbGLYerW5dUKQ/0DyRf7xqDJmyIVEPa76g6GbApIKBy/Ms6/fRxL9D4KwRKaF m3LhWVfwT5eclUq7jt+qOHeDXoQSTzjfXn09YpE2rGs1XFoDoIKC/I63zL7qdxHp VIA+dGcBNYs00YK4klU8CgsukPAB8lolKX0UhQ0i9VIaxXq5A+klT0itMcQdX/zu RJ1s1N0ojH17rOEvWF8W+fd1GjlRUyPs2J0HTJTRpOaJfJ+kcxc= -----END CERTIFICATE-----Generated at Thu Mar 26 18:23:46 2026 by rpki-client