$ rpki-client -vvf repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft File: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft (raw, json) Hash identifier: 0Is3JDcLeMU7XgZYKZyDKKsgsqp/g8OYJ+Muutg3QGo= Subject key identifier: 9A:DA:B8:CD:81:28:F3:02:1D:3C:7E:60:DB:24:C4:1D:E6:ED:FF:D6 Authority key identifier: A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 Certificate issuer: /CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Certificate serial: 76DD1832622E910F82077283C0EC2A55F7396817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft Manifest number: DC Signing time: Thu 26 Mar 2026 01:30:53 +0000 Manifest this update: Thu 26 Mar 2026 01:25:53 +0000 Manifest next update: Sun 29 Mar 2026 02:06:53 +0000 Files and hashes: 1: A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl (hash: W0FT+U96zTkUV/82OYtNFr3ti1f9pIkwl6yBoZJ4DtQ=) 2: 323030313a6466333a643163303a3a2f34382d3438203d3e20313532373538.roa (hash: +4jn9yUTCERVA3g9fI3ooLPb8eRAkmcilsOk4E3ZshQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:06:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:dd:18:32:62:2e:91:0f:82:07:72:83:c0:ec:2a:55:f7:39:68:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8E6492B5EFE9362C2CCDB1C25DA022A2E157782 Validity Not Before: Mar 26 01:25:53 2026 GMT Not After : Mar 29 02:06:53 2026 GMT Subject: CN=9ADAB8CD8128F3021D3C7E60DB24C41DE6EDFFD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e9:90:ca:19:33:7f:c4:79:7d:8e:f9:73:2c: 99:fc:89:82:44:4d:43:7b:c3:1f:5f:52:73:33:2c: 13:2c:4e:b8:ca:89:5c:37:2e:52:36:b9:95:cf:02: 07:88:c0:07:ed:89:a6:8d:71:c2:e1:ef:ce:6b:19: be:bd:8c:4e:fb:7c:5a:cf:d3:9c:2a:90:e9:5a:33: 08:a3:28:2d:5d:bd:41:0a:fc:1a:40:56:41:3f:ad: 64:a5:b9:b6:28:7d:67:09:89:f5:6d:56:b7:06:e6: 81:2a:9f:da:d8:f4:f7:f2:2e:49:06:c1:d3:f4:46: 18:ae:f8:78:e8:dd:ee:31:01:fe:96:88:e2:00:7e: 3e:5f:48:81:49:d2:23:da:ce:cc:4a:9c:6f:0b:08: b8:42:20:a1:40:c2:8c:9c:55:11:c7:cc:a1:11:84: 99:d0:71:cf:22:65:2c:43:41:e3:c0:b3:10:41:ce: 00:ea:e8:0b:43:95:dc:24:9f:c9:25:be:5e:93:a8: 11:aa:c5:81:9a:3e:98:b2:d1:43:a7:fd:38:51:ec: d8:89:bc:c1:e6:68:a0:fe:9f:ff:eb:67:86:7d:6a: 32:90:25:9f:d3:f5:2e:fb:c5:7f:c1:dd:c7:9c:98: f4:1e:0c:d9:91:88:19:7b:36:8b:2f:67:ce:fd:0d: 34:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:DA:B8:CD:81:28:F3:02:1D:3C:7E:60:DB:24:C4:1D:E6:ED:FF:D6 X509v3 Authority Key Identifier: keyid:A8:E6:49:2B:5E:FE:93:62:C2:CC:DB:1C:25:DA:02:2A:2E:15:77:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d7dd2519-3078-47d3-9e86-48fd3bde76c8/1/A8E6492B5EFE9362C2CCDB1C25DA022A2E157782.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:61:f4:ec:31:5a:d0:c8:e8:c3:4f:84:7d:26:70:bd:ae:b8: a8:a8:29:58:28:0e:9f:e1:d3:e3:98:6c:53:90:00:63:6d:12: f6:ee:da:78:5e:d3:93:0a:f9:1d:54:58:4a:fc:5c:a1:e3:b2: 15:92:e9:37:20:eb:2a:73:c1:44:87:ad:4d:e8:85:e3:8e:a0: 24:6e:43:8c:61:47:38:36:da:36:c8:af:92:fb:32:ae:b9:b1: 07:65:05:2d:57:88:66:ad:a5:ff:1a:02:10:79:22:68:7c:b5: b2:cc:1b:bf:42:47:03:65:47:dd:f0:25:68:51:ec:db:03:15: 7c:6b:ac:56:f6:88:b6:73:85:dd:28:51:d6:99:99:46:b5:9e: c5:3e:c3:df:32:cd:e9:6c:cb:28:61:f6:6d:76:7c:c2:e1:de: d4:56:c9:52:9d:dd:22:2e:4d:66:63:0d:56:bd:bb:b5:f5:0c: 8a:2a:c5:4e:d6:cb:30:66:49:ad:be:d2:a2:d0:ae:83:0f:f9: a9:8b:49:11:54:17:b6:cb:55:52:42:a7:38:76:25:79:99:7a: be:19:5e:f2:68:6d:a7:b9:21:c0:8d:51:a5:8e:0d:6c:ef:b4: 23:12:05:88:c6:1d:9a:85:c1:29:99:81:1a:8b:4d:45:b2:54: 60:eb:8a:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdt0YMmIukQ+CB3KDwOwqVfc5aBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEy RTE1Nzc4MjAeFw0yNjAzMjYwMTI1NTNaFw0yNjAzMjkwMjA2NTNaMDMxMTAvBgNV BAMTKDlBREFCOENEODEyOEYzMDIxRDNDN0U2MERCMjRDNDFERTZFREZGRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz6ZDKGTN/xHl9jvlzLJn8iYJE TUN7wx9fUnMzLBMsTrjKiVw3LlI2uZXPAgeIwAftiaaNccLh785rGb69jE77fFrP 05wqkOlaMwijKC1dvUEK/BpAVkE/rWSlubYofWcJifVtVrcG5oEqn9rY9PfyLkkG wdP0Rhiu+Hjo3e4xAf6WiOIAfj5fSIFJ0iPazsxKnG8LCLhCIKFAwoycVRHHzKER hJnQcc8iZSxDQePAsxBBzgDq6AtDldwkn8klvl6TqBGqxYGaPpiy0UOn/ThR7NiJ vMHmaKD+n//rZ4Z9ajKQJZ/T9S77xX/B3cecmPQeDNmRiBl7NosvZ879DTQfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmtq4zYEo8wIdPH5g2yTEHebt/9YwHwYDVR0j BBgwFoAUqOZJK17+k2LCzNscJdoCKi4Vd4IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k N2RkMjUxOS0zMDc4LTQ3ZDMtOWU4Ni00OGZkM2JkZTc2YzgvMS9BOEU2NDkyQjVF RkU5MzYyQzJDQ0RCMUMyNURBMDIyQTJFMTU3NzgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAyMkEyRTE1 Nzc4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDdkZDI1MTktMzA3OC00N2QzLTll ODYtNDhmZDNiZGU3NmM4LzEvQThFNjQ5MkI1RUZFOTM2MkMyQ0NEQjFDMjVEQTAy MkEyRTE1Nzc4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALph9OwxWtDI6MNPhH0mcL2uuKioKVgoDp/h 0+OYbFOQAGNtEvbu2nhe05MK+R1UWEr8XKHjshWS6Tcg6ypzwUSHrU3oheOOoCRu Q4xhRzg22jbIr5L7Mq65sQdlBS1XiGatpf8aAhB5Imh8tbLMG79CRwNlR93wJWhR 7NsDFXxrrFb2iLZzhd0oUdaZmUa1nsU+w98yzelsyyhh9m12fMLh3tRWyVKd3SIu TWZjDVa9u7X1DIoqxU7WyzBmSa2+0qLQroMP+amLSRFUF7bLVVJCpzh2JXmZer4Z XvJobae5IcCNUaWODWzvtCMSBYjGHZqFwSmZgRqLTUWyVGDrii0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:13:39 2026 by rpki-client