$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: pohXrToBKt7/bygfKVXvH2oF28JhAaPyr+wTy72O+wQ= Subject key identifier: 82:47:55:1D:21:AC:36:21:CA:6B:D8:4C:A2:02:03:8C:FD:9B:24:66 Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 66C65B2832DD84ADDC3F93A2E596E903645D8FAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 70 Signing time: Tue 24 Mar 2026 12:00:00 +0000 Manifest this update: Tue 24 Mar 2026 11:55:00 +0000 Manifest next update: Fri 27 Mar 2026 21:58:00 +0000 Files and hashes: 1: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 2: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 3: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: VWjr1JOcF7da2S4+4HyaDFXySoyqE59oA/WJOEBetgk=) 4: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 5: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 21:58:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:c6:5b:28:32:dd:84:ad:dc:3f:93:a2:e5:96:e9:03:64:5d:8f:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Mar 24 11:55:00 2026 GMT Not After : Mar 27 21:58:00 2026 GMT Subject: CN=8247551D21AC3621CA6BD84CA202038CFD9B2466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1c:7b:0a:1c:62:b1:2f:22:42:04:b9:c7:bf: a1:28:71:07:19:05:91:80:ac:70:6d:ee:9e:c1:45: 27:14:0d:e7:f5:f2:d5:ed:4e:e2:ea:96:3e:3a:09: 0b:14:51:ee:6f:22:08:3c:ce:9e:88:80:5b:dd:72: 5b:42:e0:c9:9a:cb:44:6b:39:1f:5f:63:a0:43:77: d4:76:48:dc:0f:3c:d9:be:71:00:44:a6:35:b5:45: 50:a1:f8:ef:7f:e0:b3:1c:32:c2:e0:1c:44:4f:03: 54:1f:e5:52:33:e7:46:51:ad:07:2a:16:9c:73:52: a4:95:2e:c9:c5:1e:1c:a3:48:64:25:21:98:e3:2a: 1f:b4:c6:29:5d:36:c0:78:80:47:00:c6:a9:11:be: 26:54:2a:7d:88:5c:5c:5e:9a:f8:5e:b4:90:c9:66: e8:e4:9c:91:e9:c5:24:12:bc:17:f1:91:c7:f7:b6: 94:a6:43:fa:a4:cd:8e:4b:d1:e2:eb:b1:35:c0:b5: b6:c4:e8:8b:70:44:a1:e4:be:45:ac:10:43:fa:35: 45:78:4f:b0:1b:58:25:e7:66:2a:44:a5:cb:fa:2a: 19:f8:5a:ed:1a:a4:52:e3:33:c3:7f:9d:42:64:bd: c5:7f:c2:05:ec:93:3c:c6:93:b5:48:f1:2e:9a:b1: 77:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:47:55:1D:21:AC:36:21:CA:6B:D8:4C:A2:02:03:8C:FD:9B:24:66 X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:63:7c:9c:8c:79:05:fa:82:67:0f:91:a7:a7:5f:d2:a6:5f: d0:f6:e7:59:81:59:f9:64:b3:a1:3c:d2:84:d7:e1:cb:9c:38: e1:ef:2d:13:ee:d2:09:99:42:1a:89:3f:65:4a:2e:d2:2e:f7: 6d:91:d1:36:1a:78:0b:5b:89:55:3b:0f:67:d9:b3:b2:68:c9: a0:e8:48:ed:63:13:53:62:9c:74:3d:52:c8:18:6d:bc:f6:d1: 3e:20:b3:70:d2:34:18:fe:d2:f7:66:b3:75:b9:a1:7f:4e:4f: 56:d9:b0:53:66:43:65:70:62:c9:62:39:04:87:0a:82:c9:b0: 31:d8:8f:8b:ab:a2:06:fd:70:98:4c:67:ce:75:ee:92:60:e3: 81:82:ba:4b:90:5a:3a:01:31:f5:16:55:3c:2c:c1:56:56:73: 23:aa:d0:a9:e1:33:a8:08:b9:e6:9e:f1:ec:29:e9:21:83:4d: d0:28:32:74:0c:8b:1a:09:91:05:67:d8:ce:51:d5:6a:60:75: 02:c0:28:ad:b9:a6:36:8a:ef:0a:f6:c2:a1:47:2d:c4:7b:57: dd:c7:27:c0:de:4d:7a:5a:a7:81:79:20:45:c6:49:cf:fd:b9: c8:82:22:02:3c:93:62:e4:4b:a4:9a:75:6a:b7:bc:4a:43:62: 06:1f:59:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsZbKDLdhK3cP5Oi5ZbpA2Rdj60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNjAzMjQxMTU1MDBaFw0yNjAzMjcyMTU4MDBaMDMxMTAvBgNV BAMTKDgyNDc1NTFEMjFBQzM2MjFDQTZCRDg0Q0EyMDIwMzhDRkQ5QjI0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HHsKHGKxLyJCBLnHv6EocQcZ BZGArHBt7p7BRScUDef18tXtTuLqlj46CQsUUe5vIgg8zp6IgFvdcltC4Mmay0Rr OR9fY6BDd9R2SNwPPNm+cQBEpjW1RVCh+O9/4LMcMsLgHERPA1Qf5VIz50ZRrQcq FpxzUqSVLsnFHhyjSGQlIZjjKh+0xildNsB4gEcAxqkRviZUKn2IXFxemvhetJDJ ZujknJHpxSQSvBfxkcf3tpSmQ/qkzY5L0eLrsTXAtbbE6ItwRKHkvkWsEEP6NUV4 T7AbWCXnZipEpcv6Khn4Wu0apFLjM8N/nUJkvcV/wgXskzzGk7VI8S6asXeVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgkdVHSGsNiHKa9hMogIDjP2bJGYwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZjfJyMeQX6gmcPkaenX9KmX9D251mBWflk s6E80oTX4cucOOHvLRPu0gmZQhqJP2VKLtIu922R0TYaeAtbiVU7D2fZs7JoyaDo SO1jE1NinHQ9UsgYbbz20T4gs3DSNBj+0vdms3W5oX9OT1bZsFNmQ2VwYsliOQSH CoLJsDHYj4urogb9cJhMZ8517pJg44GCukuQWjoBMfUWVTwswVZWcyOq0KnhM6gI ueae8ewp6SGDTdAoMnQMixoJkQVn2M5R1WpgdQLAKK25pjaK7wr2wqFHLcR7V93H J8DeTXpap4F5IEXGSc/9uciCIgI8k2LkS6SadWq3vEpDYgYfWYk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:21:00 2026 by rpki-client