$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: 0Lhnr732mKEQJgbsfOYxyyd+zUo+XqMTisVozuqHMho= Subject key identifier: 8B:D7:1A:C5:BC:43:05:91:1E:19:C6:97:EA:FC:E4:98:36:99:7D:4C Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 01CE41F983DE602F3178F9379E00DCE2B6D8AAD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 021C Signing time: Tue 24 Mar 2026 20:31:19 +0000 Manifest this update: Tue 24 Mar 2026 20:26:19 +0000 Manifest next update: Sat 28 Mar 2026 06:12:19 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: fplip+PLTmoKu7fLpbCCpxnl83ywFeuS7f4tCfEIgQI=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:12:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:ce:41:f9:83:de:60:2f:31:78:f9:37:9e:00:dc:e2:b6:d8:aa:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Mar 24 20:26:19 2026 GMT Not After : Mar 28 06:12:19 2026 GMT Subject: CN=8BD71AC5BC4305911E19C697EAFCE49836997D4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a5:16:bd:fb:5e:cc:2d:a8:f3:3d:3e:91:ed: 31:4f:c1:b2:8b:7a:e4:dd:81:4f:b6:73:eb:91:ca: ff:2e:f7:a0:4f:a7:26:32:63:32:07:46:8c:ae:03: ca:7c:cd:aa:41:ce:ac:75:06:4a:5d:1d:4d:c6:26: 43:a3:8e:66:dc:72:b4:94:be:28:da:86:e9:26:ff: 15:65:c7:9e:0a:bc:56:ab:bd:aa:96:38:14:15:55: 95:a8:2f:44:31:30:e9:13:06:f1:9e:3b:70:9b:70: eb:86:ab:04:ad:61:69:c6:5a:6a:05:dc:a7:87:b3: e1:8d:60:43:32:0c:e6:af:fc:7a:2e:b1:ee:3d:3b: d8:04:d8:02:09:c4:9e:75:87:10:1c:22:2d:58:73: b6:ca:3f:78:7f:b3:c0:59:9c:45:07:b4:4a:53:56: bd:ed:c9:4d:05:92:8d:93:ad:36:26:2b:3d:47:80: b7:db:f3:bf:7d:2f:73:f1:ab:6f:74:63:d9:01:fd: e7:fd:24:ff:7f:db:3b:d2:1e:7f:df:b4:30:5d:0b: ed:a9:94:ef:0d:c6:16:7e:90:b1:df:54:ab:d7:cb: d8:f3:da:a7:92:a5:ef:5b:28:6b:27:88:56:dc:1f: aa:bb:07:ff:34:b1:b8:8e:31:4c:5c:3d:44:04:56: 35:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:D7:1A:C5:BC:43:05:91:1E:19:C6:97:EA:FC:E4:98:36:99:7D:4C X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:0a:ff:ac:1d:5c:dc:af:68:bf:5d:cb:60:0a:e7:77:0e:40: 6a:77:67:aa:f5:be:37:2c:ba:9d:ff:96:fc:b3:c5:f6:5e:6f: d4:dd:1e:f9:d1:4f:84:e5:a4:e2:b4:9c:8c:c5:78:2e:98:bd: 04:f1:c9:cf:dc:1f:87:10:b8:e0:c6:1b:fe:eb:60:f4:07:d9: 54:c1:88:38:2d:f3:6e:78:77:98:db:a3:33:85:e5:86:f2:27: 6b:0d:56:b0:ee:74:41:9d:3c:34:67:92:0a:35:c8:1e:c6:3d: 07:85:ef:e2:57:3c:d7:85:8d:d0:8f:26:e9:bb:fc:8a:a5:fc: f8:a8:11:38:be:53:1f:17:4b:54:b0:7b:7c:a0:13:89:47:98: 48:36:9f:a3:3e:a5:70:7b:19:f1:e7:e6:5a:2b:4c:b4:85:dc: 55:96:ad:1d:c5:c4:d1:7a:dd:84:83:60:7d:2e:7e:06:24:03: 2a:ad:37:10:a3:63:8d:0c:4b:91:83:3c:bc:90:73:b2:20:10: c9:7b:31:a2:cd:23:83:42:6b:fe:b5:0b:84:7a:c3:dc:87:b6: 66:52:6d:8b:d4:38:d1:84:a4:47:18:28:02:7b:fd:9b:28:70: 2d:e1:74:f6:84:16:a2:5d:40:82:f4:b6:b0:da:0c:a7:de:a7: 89:40:12:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAc5B+YPeYC8xePk3ngDc4rbYqtMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNjAzMjQyMDI2MTlaFw0yNjAzMjgwNjEyMTlaMDMxMTAvBgNV BAMTKDhCRDcxQUM1QkM0MzA1OTExRTE5QzY5N0VBRkNFNDk4MzY5OTdENEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspRa9+17MLajzPT6R7TFPwbKL euTdgU+2c+uRyv8u96BPpyYyYzIHRoyuA8p8zapBzqx1BkpdHU3GJkOjjmbccrSU vijahukm/xVlx54KvFarvaqWOBQVVZWoL0QxMOkTBvGeO3CbcOuGqwStYWnGWmoF 3KeHs+GNYEMyDOav/House49O9gE2AIJxJ51hxAcIi1Yc7bKP3h/s8BZnEUHtEpT Vr3tyU0Fko2TrTYmKz1HgLfb8799L3Pxq290Y9kB/ef9JP9/2zvSHn/ftDBdC+2p lO8NxhZ+kLHfVKvXy9jz2qeSpe9bKGsniFbcH6q7B/80sbiOMUxcPUQEVjXfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi9caxbxDBZEeGcaX6vzkmDaZfUwwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkK/6wdXNyvaL9dy2AK53cOQGp3Z6r1vjcs up3/lvyzxfZeb9TdHvnRT4TlpOK0nIzFeC6YvQTxyc/cH4cQuODGG/7rYPQH2VTB iDgt8254d5jbozOF5YbyJ2sNVrDudEGdPDRnkgo1yB7GPQeF7+JXPNeFjdCPJum7 /Iql/PioETi+Ux8XS1Swe3ygE4lHmEg2n6M+pXB7GfHn5lorTLSF3FWWrR3FxNF6 3YSDYH0ufgYkAyqtNxCjY40MS5GDPLyQc7IgEMl7MaLNI4NCa/61C4R6w9yHtmZS bYvUONGEpEcYKAJ7/ZsocC3hdPaEFqJdQIL0trDaDKfep4lAEsQ= -----END CERTIFICATE-----Generated at Thu Mar 26 17:55:19 2026 by rpki-client