$ rpki-client -vvf repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft File: A385F006CB4A332AED2E94013E7482A62617F17F.mft (raw, json) Hash identifier: hQgSSXG2Q4l1nG41yoDPL4upVPm79v6hynD6vK8243M= Subject key identifier: B9:B8:7A:8A:39:95:1B:27:9D:68:15:02:E0:E8:4C:66:36:28:64:DF Authority key identifier: A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F Certificate issuer: /CN=A385F006CB4A332AED2E94013E7482A62617F17F Certificate serial: 1FF29693D1F96D7BE52A37DABCC7867C705517F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft Manifest number: 03D4 Signing time: Thu 26 Mar 2026 03:01:43 +0000 Manifest this update: Thu 26 Mar 2026 02:56:43 +0000 Manifest next update: Sun 29 Mar 2026 07:29:43 +0000 Files and hashes: 1: A385F006CB4A332AED2E94013E7482A62617F17F.crl (hash: 6SGud/UbK9shrmiA85BcymWg8bp0szM/PoSOVfyfBZ0=) 2: 3130332e3136392e3138382e302f32332d3234203d3e20313432333437.roa (hash: bFimiAzva9LShsHLA11pXQ0Ytb437eF/rz76mDmBlA0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:29:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:f2:96:93:d1:f9:6d:7b:e5:2a:37:da:bc:c7:86:7c:70:55:17:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A385F006CB4A332AED2E94013E7482A62617F17F Validity Not Before: Mar 26 02:56:43 2026 GMT Not After : Mar 29 07:29:43 2026 GMT Subject: CN=B9B87A8A39951B279D681502E0E84C66362864DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8c:d8:00:fd:89:ea:ce:31:8e:af:06:dc:5d: ee:e2:6e:8e:44:9b:93:28:67:37:81:b9:6a:b3:ae: ae:07:e9:ca:7d:6e:7f:ca:e4:54:da:9d:b8:b3:e1: 7f:6b:6a:5e:30:55:40:3d:dc:4c:de:f2:93:f5:a4: d1:45:2d:93:8e:00:73:5c:e6:38:80:ba:e6:01:ca: 3d:6d:2c:22:7f:da:98:68:2c:07:48:73:fc:63:24: 93:bc:91:5f:3a:de:76:06:db:f4:59:72:ea:7e:97: b5:cf:a2:07:0f:47:b6:7e:3a:f6:41:34:70:20:d6: 4d:22:d2:43:94:71:97:4c:af:af:7e:53:23:a6:f4: f3:86:e7:28:8e:b8:0c:74:dd:71:cc:fb:1a:7a:c6: 75:da:ff:77:57:bf:25:4a:70:b3:7f:9f:46:9e:80: 67:73:d1:5c:b1:8a:95:95:a0:1f:2a:89:75:7a:0a: eb:c8:b2:67:8c:1d:67:6c:10:83:cf:89:07:67:e6: d5:23:15:e2:cb:3f:1e:ab:f5:2f:43:02:dc:b1:88: 03:e5:89:e7:79:a4:38:80:30:f0:93:72:44:cd:1f: 32:48:32:75:07:c3:3d:bb:4d:92:eb:f2:bd:63:14: 2d:68:c6:c0:c1:f6:01:fa:05:50:2f:0b:04:bd:d4: ff:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:B8:7A:8A:39:95:1B:27:9D:68:15:02:E0:E8:4C:66:36:28:64:DF X509v3 Authority Key Identifier: keyid:A3:85:F0:06:CB:4A:33:2A:ED:2E:94:01:3E:74:82:A6:26:17:F1:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A385F006CB4A332AED2E94013E7482A62617F17F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6e2a2e1-1b2d-48cc-9db3-67a81af67062/0/A385F006CB4A332AED2E94013E7482A62617F17F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:02:7b:49:b0:67:5d:1a:f7:d4:0a:3a:22:eb:1c:cd:66:72: 1a:2f:e2:aa:93:a4:05:1f:91:62:6e:0f:93:a8:01:2b:f3:82: 60:af:45:45:7c:15:49:49:c2:2b:21:ca:50:c7:4a:a2:79:11: 3d:50:d7:40:3d:62:93:41:b4:4a:11:16:06:9e:44:f4:87:f2: ab:12:61:58:fe:ef:28:6c:d4:15:2c:16:37:7c:0b:9e:42:9f: cc:e7:d5:8a:b6:fc:59:a6:ba:f1:76:63:1d:51:e6:63:6d:37: 0c:ec:e1:f2:5c:5d:1c:dd:d8:da:46:87:b0:d2:e4:04:2c:38: 42:1f:f0:9d:6c:a1:ff:49:08:99:64:9f:8d:10:89:6a:5a:16: 40:0a:0e:d1:d0:36:34:fd:cb:55:67:e8:41:7f:55:c8:ad:3a: f3:6d:39:3b:b4:c1:3a:62:0f:48:ed:71:25:06:df:16:5b:b0: 71:b3:ce:ed:32:aa:d5:db:8e:75:e4:74:21:38:1e:3c:41:f1: 87:65:1f:48:8b:9a:94:fd:ac:c5:1f:10:b3:ad:f7:14:ac:61: 06:9c:34:05:0e:82:2f:dc:80:1c:e1:f4:2f:ce:c3:13:42:ba: 0f:d4:aa:a6:7f:18:df:cc:10:da:54:f2:43:57:85:a0:1f:cf: 8b:8e:8b:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH/KWk9H5bXvlKjfavMeGfHBVF/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYy NjE3RjE3RjAeFw0yNjAzMjYwMjU2NDNaFw0yNjAzMjkwNzI5NDNaMDMxMTAvBgNV BAMTKEI5Qjg3QThBMzk5NTFCMjc5RDY4MTUwMkUwRTg0QzY2MzYyODY0REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOjNgA/YnqzjGOrwbcXe7ibo5E m5MoZzeBuWqzrq4H6cp9bn/K5FTanbiz4X9ral4wVUA93Eze8pP1pNFFLZOOAHNc 5jiAuuYByj1tLCJ/2phoLAdIc/xjJJO8kV863nYG2/RZcup+l7XPogcPR7Z+OvZB NHAg1k0i0kOUcZdMr69+UyOm9POG5yiOuAx03XHM+xp6xnXa/3dXvyVKcLN/n0ae gGdz0VyxipWVoB8qiXV6CuvIsmeMHWdsEIPPiQdn5tUjFeLLPx6r9S9DAtyxiAPl ied5pDiAMPCTckTNHzJIMnUHwz27TZLr8r1jFC1oxsDB9gH6BVAvCwS91P8xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUubh6ijmVGyedaBUC4OhMZjYoZN8wHwYDVR0j BBgwFoAUo4XwBstKMyrtLpQBPnSCpiYX8X8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmUyYTJlMS0xYjJkLTQ4Y2MtOWRiMy02N2E4MWFmNjcwNjIvMC9BMzg1RjAwNkNC NEEzMzJBRUQyRTk0MDEzRTc0ODJBNjI2MTdGMTdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgyQTYyNjE3 RjE3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlMmEyZTEtMWIyZC00OGNjLTlk YjMtNjdhODFhZjY3MDYyLzAvQTM4NUYwMDZDQjRBMzMyQUVEMkU5NDAxM0U3NDgy QTYyNjE3RjE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG4Ce0mwZ10a99QKOiLrHM1mchov4qqTpAUf kWJuD5OoASvzgmCvRUV8FUlJwishylDHSqJ5ET1Q10A9YpNBtEoRFgaeRPSH8qsS YVj+7yhs1BUsFjd8C55Cn8zn1Yq2/FmmuvF2Yx1R5mNtNwzs4fJcXRzd2NpGh7DS 5AQsOEIf8J1sof9JCJlkn40QiWpaFkAKDtHQNjT9y1Vn6EF/VcitOvNtOTu0wTpi D0jtcSUG3xZbsHGzzu0yqtXbjnXkdCE4HjxB8YdlH0iLmpT9rMUfELOt9xSsYQac NAUOgi/cgBzh9C/OwxNCug/UqqZ/GN/MENpU8kNXhaAfz4uOi6w= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:42 2026 by rpki-client