$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: RIvWgEibiw37mndizLOsGeVw/diw/8xA2HI+1BGEKuI= Subject key identifier: 93:EF:BE:22:A3:3D:15:05:FD:20:FA:55:45:57:14:D0:3B:D4:72:65 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 64D7549C7ED669EBEFF20919875D3580AE095646 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04FB Signing time: Thu 26 Mar 2026 12:11:14 +0000 Manifest this update: Thu 26 Mar 2026 12:06:14 +0000 Manifest next update: Mon 30 Mar 2026 00:08:14 +0000 Files and hashes: 1: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: /kRDFufJEejCm6adgQaDBBTnG4YMUvdOP4WG/WNfPj4=) 2: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M=) 3: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) 4: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 5: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:d7:54:9c:7e:d6:69:eb:ef:f2:09:19:87:5d:35:80:ae:09:56:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Mar 26 12:06:14 2026 GMT Not After : Mar 30 00:08:14 2026 GMT Subject: CN=93EFBE22A33D1505FD20FA55455714D03BD47265 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:66:50:8b:ba:1b:76:2d:8d:55:88:ab:a1:e3: e0:76:f3:42:2d:5f:69:5e:b9:af:98:29:8d:e8:c9: a8:3c:10:0e:9a:e1:7b:e7:06:f7:39:7a:4a:26:68: dd:26:b6:69:34:a0:e1:69:90:2a:c4:3f:e6:d5:19: 44:aa:42:24:5b:df:4b:88:a5:74:7a:f4:d4:53:5f: 47:27:35:81:29:d4:9f:f1:61:db:77:f1:85:2e:6c: 11:48:37:8c:a3:b7:31:09:8e:43:c8:f5:42:bb:6b: 17:67:11:2d:9f:a6:ca:b4:8c:d7:15:6c:f0:92:80: 70:be:04:2d:7c:46:f3:2f:02:a7:40:96:c1:23:37: 88:97:e6:d6:46:04:b6:5a:91:6c:36:e9:3c:52:bd: d5:97:6b:d4:92:68:9b:49:af:9f:68:e1:9c:5d:5e: c8:8b:95:63:16:87:20:20:ee:13:73:24:f6:4a:74: 5a:d5:3c:d7:29:33:06:f9:b2:e2:0f:30:16:56:9b: 4e:a2:55:dd:ed:ce:40:7d:8e:95:0f:9a:d6:a2:60: 4e:06:cf:3a:18:cd:2e:7d:1b:12:1c:d0:6b:39:e7: 15:c4:8b:6a:01:94:f5:ec:9e:f2:cf:d2:1f:62:5a: ea:84:69:2b:d5:26:53:e9:4e:06:f6:21:67:ee:b8: da:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 93:EF:BE:22:A3:3D:15:05:FD:20:FA:55:45:57:14:D0:3B:D4:72:65 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:86:95:d2:52:35:a7:66:d8:a6:5a:41:43:72:3f:30:c5:d4: d5:b4:8f:32:71:d1:e9:1c:73:c5:77:cb:53:98:a2:13:8a:e3: ba:c4:ce:c4:de:6d:e6:58:27:39:f3:fa:23:6a:05:d9:a6:95: 5d:99:ee:b2:9e:d4:df:81:fc:47:bf:4f:f0:27:b4:4c:99:4b: d6:f8:c5:99:ec:69:0c:30:d8:36:63:4c:f2:aa:07:0b:26:0d: d5:77:7a:90:84:25:ff:91:20:45:95:8d:0c:62:c1:8f:6b:75: db:d0:05:06:53:65:6a:96:48:93:be:11:c6:76:14:f6:dc:9b: 75:4d:22:80:7b:f3:46:7d:c6:a0:ab:4f:bb:fc:a1:31:91:10: 96:8e:66:ec:5d:59:00:9c:af:11:56:69:d2:5a:54:14:82:2a: 4e:0a:46:04:93:ef:ba:2f:4f:53:40:d2:4d:9c:7c:82:97:6f: 25:b8:08:29:f4:17:35:89:fe:d3:dc:52:c7:75:28:d2:dc:59: a2:ce:de:8b:92:26:f4:51:09:9d:70:18:7c:5e:f3:4f:d9:3b: c7:15:a1:4b:a1:67:d0:6d:0e:84:df:9a:1b:d8:1c:a3:4a:36: a5:40:36:21:fe:00:8a:75:08:ff:eb:0c:79:a1:0b:95:81:ec: 43:d1:f6:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZNdUnH7Waevv8gkZh101gK4JVkYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNjAzMjYxMjA2MTRaFw0yNjAzMzAwMDA4MTRaMDMxMTAvBgNV BAMTKDkzRUZCRTIyQTMzRDE1MDVGRDIwRkE1NTQ1NTcxNEQwM0JENDcyNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjZlCLuht2LY1ViKuh4+B280It X2leua+YKY3oyag8EA6a4XvnBvc5ekomaN0mtmk0oOFpkCrEP+bVGUSqQiRb30uI pXR69NRTX0cnNYEp1J/xYdt38YUubBFIN4yjtzEJjkPI9UK7axdnES2fpsq0jNcV bPCSgHC+BC18RvMvAqdAlsEjN4iX5tZGBLZakWw26TxSvdWXa9SSaJtJr59o4Zxd XsiLlWMWhyAg7hNzJPZKdFrVPNcpMwb5suIPMBZWm06iVd3tzkB9jpUPmtaiYE4G zzoYzS59GxIc0Gs55xXEi2oBlPXsnvLP0h9iWuqEaSvVJlPpTgb2IWfuuNoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUk+++IqM9FQX9IPpVRVcU0DvUcmUwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeGldJSNadm2KZaQUNyPzDF1NW0jzJx0ekc c8V3y1OYohOK47rEzsTebeZYJznz+iNqBdmmlV2Z7rKe1N+B/Ee/T/AntEyZS9b4 xZnsaQww2DZjTPKqBwsmDdV3epCEJf+RIEWVjQxiwY9rddvQBQZTZWqWSJO+EcZ2 FPbcm3VNIoB780Z9xqCrT7v8oTGREJaOZuxdWQCcrxFWadJaVBSCKk4KRgST77ov T1NA0k2cfIKXbyW4CCn0FzWJ/tPcUsd1KNLcWaLO3ouSJvRRCZ1wGHxe80/ZO8cV oUuhZ9BtDoTfmhvYHKNKNqVANiH+AIp1CP/rDHmhC5WB7EPR9uw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:38:06 2026 by rpki-client