$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: b10/179ar//bYv77F2J0x4hZ1YTcGHpOdi3wEz6YLUY= Subject key identifier: DC:CB:B1:29:3D:5A:FA:60:53:57:35:BA:6A:6F:E3:16:FB:42:60:B7 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 3D7DB61B3FBAE7F7660590465472A79FAA1522FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 02AE Signing time: Wed 25 Mar 2026 21:31:25 +0000 Manifest this update: Wed 25 Mar 2026 21:26:25 +0000 Manifest next update: Sun 29 Mar 2026 03:42:25 +0000 Files and hashes: 1: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) 2: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: 1gzpM0dhwk5N/hLl8tyeYqXqQDg2tvjygJ+uAU1ZSHw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:42:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:7d:b6:1b:3f:ba:e7:f7:66:05:90:46:54:72:a7:9f:aa:15:22:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Mar 25 21:26:25 2026 GMT Not After : Mar 29 03:42:25 2026 GMT Subject: CN=DCCBB1293D5AFA60535735BA6A6FE316FB4260B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:4c:22:52:c3:ce:42:d6:e7:7e:9e:45:e7:f4: 15:c7:e9:db:06:71:f5:3e:fe:b9:1a:6a:9a:0c:6f: 46:43:7d:da:8e:a9:6a:d1:fd:6a:d8:50:57:10:ed: 05:ff:bc:c3:ef:4c:92:3c:e2:0e:3f:29:a0:0a:55: 80:b8:91:58:a7:26:f5:91:32:57:81:79:b4:73:7b: f1:d3:2d:70:31:16:28:fb:d7:bd:55:a1:b7:2d:5b: 74:91:ff:0a:d0:43:c0:8c:44:1d:90:72:5c:99:10: fc:3e:3e:09:e5:d8:0b:cd:cf:f0:8a:f1:48:de:23: 6e:c8:14:1a:61:3f:ec:a2:21:66:c2:27:d3:8b:83: e5:12:62:1c:9b:11:79:bb:93:94:8e:09:0a:e6:56: 66:9c:a6:d1:69:14:45:56:65:a5:eb:3f:7b:5f:e2: c0:04:79:ec:72:7f:ea:c0:1f:8a:93:0e:b7:e1:63: a6:46:0a:69:39:3e:00:f6:39:51:3b:05:2c:8d:45: b0:81:85:2d:6d:26:38:b4:b8:8d:59:00:db:1e:09: 33:5b:d0:cf:df:f8:98:b1:58:61:8c:19:bb:75:4c: 4f:f5:1d:d0:62:9e:6d:5a:0c:0c:73:ef:ca:2a:38: c4:fe:9f:0e:87:86:ba:0e:c0:34:76:69:3d:2e:f9: 9c:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:CB:B1:29:3D:5A:FA:60:53:57:35:BA:6A:6F:E3:16:FB:42:60:B7 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:22:15:11:b2:ed:39:36:91:c6:c8:be:ce:b5:44:01:34:00: 66:87:67:82:b2:08:2e:33:07:96:a3:05:ce:b7:73:27:b0:95: e2:12:b5:5d:0b:44:a7:35:33:c6:d4:60:ae:05:fc:ab:88:52: d4:71:02:c0:9f:c8:2f:f1:5b:12:96:48:59:06:77:ad:3d:e2: 3a:05:36:54:f1:94:b5:50:87:b0:a7:ee:f0:e1:8b:34:94:ba: 05:ed:f4:f4:30:46:1b:82:d3:74:fe:1c:c8:de:16:fe:d0:9e: 64:7a:d2:0b:41:f2:56:05:f6:53:ce:ff:d1:68:20:8c:7b:ad: bc:e4:43:2a:cb:81:75:ac:b5:3d:dd:95:f5:ab:b1:f1:45:01: 18:a6:34:2a:76:c2:b1:28:24:b1:99:d4:ca:c8:c6:b2:0a:9b: 7d:b2:45:5d:64:37:aa:7d:de:25:82:c2:9f:d6:1a:2f:76:c0: 31:99:6a:dd:4d:b8:4c:1e:a2:d7:39:0c:6e:ea:55:c0:3e:a4: cf:b1:5e:57:4f:d7:35:e1:d6:d6:4d:fd:10:62:29:93:51:73: 6e:4c:46:78:63:ed:7c:d1:cb:6e:c5:11:66:ed:c2:0b:a3:d9: 06:f1:11:81:bd:c5:2c:df:13:2f:7d:6c:2d:15:05:a0:c7:c1: 74:e7:ac:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPX22Gz+65/dmBZBGVHKnn6oVIvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNjAzMjUyMTI2MjVaFw0yNjAzMjkwMzQyMjVaMDMxMTAvBgNV BAMTKERDQ0JCMTI5M0Q1QUZBNjA1MzU3MzVCQTZBNkZFMzE2RkI0MjYwQjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkTCJSw85C1ud+nkXn9BXH6dsG cfU+/rkaapoMb0ZDfdqOqWrR/WrYUFcQ7QX/vMPvTJI84g4/KaAKVYC4kVinJvWR MleBebRze/HTLXAxFij7171VobctW3SR/wrQQ8CMRB2QclyZEPw+Pgnl2AvNz/CK 8UjeI27IFBphP+yiIWbCJ9OLg+USYhybEXm7k5SOCQrmVmacptFpFEVWZaXrP3tf 4sAEeexyf+rAH4qTDrfhY6ZGCmk5PgD2OVE7BSyNRbCBhS1tJji0uI1ZANseCTNb 0M/f+JixWGGMGbt1TE/1HdBinm1aDAxz78oqOMT+nw6HhroOwDR2aT0u+ZzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3MuxKT1a+mBTVzW6am/jFvtCYLcwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACgiFRGy7Tk2kcbIvs61RAE0AGaHZ4KyCC4z B5ajBc63cyewleIStV0LRKc1M8bUYK4F/KuIUtRxAsCfyC/xWxKWSFkGd6094joF NlTxlLVQh7Cn7vDhizSUugXt9PQwRhuC03T+HMjeFv7QnmR60gtB8lYF9lPO/9Fo IIx7rbzkQyrLgXWstT3dlfWrsfFFARimNCp2wrEoJLGZ1MrIxrIKm32yRV1kN6p9 3iWCwp/WGi92wDGZat1NuEweotc5DG7qVcA+pM+xXldP1zXh1tZN/RBiKZNRc25M Rnhj7XzRy27FEWbtwguj2QbxEYG9xSzfEy99bC0VBaDHwXTnrLo= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:21 2026 by rpki-client