$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: QmfF3umyFyIduWOTUI7Wwqx2T3wsdtAPhw1i/CuAtRY= Subject key identifier: 97:5B:FB:61:B9:92:66:AE:F6:13:26:FA:51:F6:E0:37:DA:D2:46:6F Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 6F4399B637A659FA9F746BCA4FBAF547EB140485 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 0239 Signing time: Wed 25 Mar 2026 16:10:48 +0000 Manifest this update: Wed 25 Mar 2026 16:05:48 +0000 Manifest next update: Sat 28 Mar 2026 23:50:48 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 3: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 4: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: JsqnOvzsyZLpLmx5lv3dxKZxVCxD5laSzJLDib+fPno=) 5: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:43:99:b6:37:a6:59:fa:9f:74:6b:ca:4f:ba:f5:47:eb:14:04:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Mar 25 16:05:48 2026 GMT Not After : Mar 28 23:50:48 2026 GMT Subject: CN=975BFB61B99266AEF61326FA51F6E037DAD2466F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:ab:34:ab:f2:a6:5f:d3:82:45:a4:f3:6e:fe: 50:45:c6:97:48:75:96:db:77:e5:61:a3:69:f2:56: e2:3c:6e:2b:8f:b2:17:ef:21:d9:10:5a:ba:6c:d8: 19:3e:a1:c2:bc:c9:0a:c5:c3:b0:60:0d:bc:20:b5: a9:aa:e9:15:19:c2:0e:cb:3f:fc:8d:2b:75:67:2a: ac:c1:5e:de:7f:95:99:19:f4:cd:a6:be:71:64:81: 68:c1:f7:e7:e4:52:ba:f8:5a:3a:e6:2e:c1:92:4d: 1e:e7:0a:61:57:0e:dc:b4:82:c2:8b:93:2a:6f:ce: 6b:ba:cf:2b:11:8c:75:7c:89:3e:d9:68:56:13:c4: e4:3a:c9:fc:1d:2f:af:5b:ed:4a:5b:01:b5:6d:2c: 31:ad:91:f1:3a:56:50:0c:f8:3f:03:66:0f:41:29: dd:63:a2:55:ae:ae:1a:a6:3c:80:42:93:65:76:5a: 05:d2:b0:10:dd:a0:1f:b9:ba:a1:3d:2b:55:7d:51: d4:20:c8:90:fa:01:d4:42:a5:74:11:d5:bf:bc:b5: a3:3c:be:25:da:ec:f3:85:22:9e:dc:97:1c:12:cc: 8b:e9:99:09:74:1d:90:38:42:3f:cb:c6:d4:cb:a2: 8e:e8:16:e1:23:9e:ba:c8:e8:c9:c8:29:df:44:8b: 89:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5B:FB:61:B9:92:66:AE:F6:13:26:FA:51:F6:E0:37:DA:D2:46:6F X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:b4:ec:19:94:94:8c:9e:49:eb:1e:b5:ec:e8:7b:f9:fa:1f: 12:33:f6:9b:de:89:e5:65:7a:32:c8:a9:d7:8b:5a:61:15:b6: 85:f2:20:ca:ea:e9:7f:86:ec:c7:9f:ac:87:83:31:6e:33:ca: db:e6:f1:e5:83:99:cd:af:95:ea:b0:42:40:2d:f6:f2:bb:4b: 6c:4e:62:63:b0:45:71:47:56:06:38:bc:a5:28:3a:d5:57:01: 0b:2b:41:c6:5d:6f:99:24:a8:90:57:03:48:02:11:c4:05:ae: 7b:c4:67:34:9c:e1:68:c7:ab:44:49:fc:08:74:03:f8:7b:f6: ba:34:c5:35:1c:34:0f:67:70:d2:82:29:f8:ae:f6:9e:fa:2f: 38:51:62:1c:0a:e4:30:5a:1f:65:58:7b:38:ba:a1:a9:82:5f: eb:93:75:d3:84:fa:a4:d4:f6:7c:ad:22:8f:53:c9:ad:ab:37: 1a:60:ec:43:18:39:77:59:4f:78:2c:65:c6:74:7d:6e:5b:8d: 38:af:a9:c6:f4:cb:54:69:84:c0:e6:08:13:43:d0:99:f9:f2: 20:f3:b5:a4:f4:35:23:89:99:ed:0f:6e:3e:93:a0:68:c7:10: d4:e0:3e:d1:bd:f3:a5:d7:d7:99:16:e2:66:33:24:4a:ed:c2: e2:73:1b:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb0OZtjemWfqfdGvKT7r1R+sUBIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNjAzMjUxNjA1NDhaFw0yNjAzMjgyMzUwNDhaMDMxMTAvBgNV BAMTKDk3NUJGQjYxQjk5MjY2QUVGNjEzMjZGQTUxRjZFMDM3REFEMjQ2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWqzSr8qZf04JFpPNu/lBFxpdI dZbbd+Vho2nyVuI8biuPshfvIdkQWrps2Bk+ocK8yQrFw7BgDbwgtamq6RUZwg7L P/yNK3VnKqzBXt5/lZkZ9M2mvnFkgWjB9+fkUrr4WjrmLsGSTR7nCmFXDty0gsKL kypvzmu6zysRjHV8iT7ZaFYTxOQ6yfwdL69b7UpbAbVtLDGtkfE6VlAM+D8DZg9B Kd1jolWurhqmPIBCk2V2WgXSsBDdoB+5uqE9K1V9UdQgyJD6AdRCpXQR1b+8taM8 viXa7POFIp7clxwSzIvpmQl0HZA4Qj/LxtTLoo7oFuEjnrrI6MnIKd9Ei4mvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl1v7YbmSZq72Eyb6UfbgN9rSRm8wHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa07BmUlIyeSesetezoe/n6HxIz9pveieVl ejLIqdeLWmEVtoXyIMrq6X+G7MefrIeDMW4zytvm8eWDmc2vleqwQkAt9vK7S2xO YmOwRXFHVgY4vKUoOtVXAQsrQcZdb5kkqJBXA0gCEcQFrnvEZzSc4WjHq0RJ/Ah0 A/h79ro0xTUcNA9ncNKCKfiu9p76LzhRYhwK5DBaH2VYezi6oamCX+uTddOE+qTU 9nytIo9Tya2rNxpg7EMYOXdZT3gsZcZ0fW5bjTivqcb0y1RphMDmCBND0Jn58iDz taT0NSOJme0Pbj6ToGjHENTgPtG986XX15kW4mYzJErtwuJzGzg= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:12 2026 by rpki-client