$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: XxAzn0mPxOmXWz9v+nIDaOrSg4APXtf+WyJHcSKKNK0= Subject key identifier: 5F:70:B7:A8:98:51:01:17:21:93:6D:5A:A8:8E:5B:A7:74:6F:8A:AF Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 11B6BA2333BE95FD275CDF07C3E491CA3BE5FB4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 0252 Signing time: Fri 20 Mar 2026 05:11:31 +0000 Manifest this update: Fri 20 Mar 2026 05:06:31 +0000 Manifest next update: Mon 23 Mar 2026 05:49:31 +0000 Files and hashes: 1: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) 2: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: 5kWwmE7I8dI5NG5G1EDaZj34U7WpODRpVBzn+wfFbsQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 05:49:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:b6:ba:23:33:be:95:fd:27:5c:df:07:c3:e4:91:ca:3b:e5:fb:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Mar 20 05:06:31 2026 GMT Not After : Mar 23 05:49:31 2026 GMT Subject: CN=5F70B7A89851011721936D5AA88E5BA7746F8AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:31:ff:f2:ca:96:88:67:4e:99:b3:7f:65:1e: a2:3f:9e:2e:53:91:72:f2:a2:11:39:a5:a3:b2:04: 54:08:e2:c2:57:1c:03:3c:d3:69:37:ac:22:96:59: 62:4c:89:ab:6a:a5:9c:2e:dc:5c:53:c5:2e:70:6b: e7:59:03:5f:ff:34:82:53:18:37:0b:f6:30:2c:e8: 5e:f2:ae:73:92:0d:b3:2f:7b:e5:6e:65:67:4f:f8: f2:25:b3:dd:64:74:22:ae:a2:8d:92:9c:ab:6c:00: 9c:ed:fd:44:ae:47:df:d3:c6:94:7b:6e:25:bb:9d: e2:69:ee:53:d1:60:ad:eb:15:31:78:88:9d:f1:14: b6:c9:d2:ee:af:50:bd:d6:fd:e9:aa:14:7b:98:4f: 33:e6:4d:70:1e:82:f1:25:4f:a4:fd:59:2d:3f:51: 05:e9:1d:f3:57:bf:fb:bc:43:9e:5c:7e:36:f6:06: a1:78:3c:8d:6c:b5:e8:71:44:aa:59:3b:42:66:f5: b4:85:cb:a4:ea:cc:cb:80:5f:fb:67:be:c1:bc:7b: 90:89:bf:d7:f6:aa:ab:0b:dd:05:69:aa:86:c4:ae: 0a:91:d7:f9:e5:8f:5e:e2:ea:5a:a6:35:37:4e:4f: 7b:c6:fa:09:5c:d7:37:4b:47:a5:8c:79:db:1c:14: f7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:70:B7:A8:98:51:01:17:21:93:6D:5A:A8:8E:5B:A7:74:6F:8A:AF X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:5f:49:99:b1:3b:40:db:45:30:00:ca:1b:39:21:99:f2:eb: b7:90:ff:35:9a:cc:8b:32:09:85:e3:74:bf:74:06:bf:27:be: 97:49:6d:d1:87:80:74:2b:bd:e9:97:d4:88:89:ba:e9:49:a1: a7:39:28:d3:c5:9f:b2:02:66:19:77:fb:42:b3:39:e1:21:9c: 9c:c5:05:65:55:1b:5a:d5:f7:3a:c0:dd:ac:5b:75:34:ae:17: ef:fe:67:fc:ec:11:51:0e:42:71:29:5a:a0:cf:cc:56:6e:0f: b8:78:67:18:e3:ab:00:1f:dc:c2:79:3a:fe:c6:1f:f1:7d:98: f2:f4:a1:aa:50:c1:a6:c2:65:66:f1:be:3c:db:ce:dd:95:d7: 70:07:95:8c:3a:50:60:2c:86:77:a0:ac:a8:bb:ea:4f:ca:5f: d5:cd:d7:62:c9:d2:d6:db:5d:cb:56:4f:84:45:63:d1:b4:55: f0:a4:15:61:10:f1:84:bb:a4:e8:d3:e4:52:f2:d3:74:f1:9b: 45:29:f9:a9:a2:cd:6f:95:26:dd:f1:e9:08:ca:89:1f:9a:3a: 22:bf:45:61:b7:54:bf:20:17:fd:a0:02:5f:b5:7b:4f:2f:47: cf:cd:ca:90:51:f1:85:f6:9f:62:31:3c:47:50:9e:c6:d9:da: 98:33:fb:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEba6IzO+lf0nXN8Hw+SRyjvl+0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNjAzMjAwNTA2MzFaFw0yNjAzMjMwNTQ5MzFaMDMxMTAvBgNV BAMTKDVGNzBCN0E4OTg1MTAxMTcyMTkzNkQ1QUE4OEU1QkE3NzQ2RjhBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtMf/yypaIZ06Zs39lHqI/ni5T kXLyohE5paOyBFQI4sJXHAM802k3rCKWWWJMiatqpZwu3FxTxS5wa+dZA1//NIJT GDcL9jAs6F7yrnOSDbMve+VuZWdP+PIls91kdCKuoo2SnKtsAJzt/USuR9/TxpR7 biW7neJp7lPRYK3rFTF4iJ3xFLbJ0u6vUL3W/emqFHuYTzPmTXAegvElT6T9WS0/ UQXpHfNXv/u8Q55cfjb2BqF4PI1stehxRKpZO0Jm9bSFy6TqzMuAX/tnvsG8e5CJ v9f2qqsL3QVpqobErgqR1/nlj17i6lqmNTdOT3vG+glc1zdLR6WMedscFPf5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX3C3qJhRARchk21aqI5bp3Rviq8wHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHJfSZmxO0DbRTAAyhs5IZny67eQ/zWazIsy CYXjdL90Br8nvpdJbdGHgHQrvemX1IiJuulJoac5KNPFn7ICZhl3+0KzOeEhnJzF BWVVG1rV9zrA3axbdTSuF+/+Z/zsEVEOQnEpWqDPzFZuD7h4ZxjjqwAf3MJ5Ov7G H/F9mPL0oapQwabCZWbxvjzbzt2V13AHlYw6UGAshnegrKi76k/KX9XN12LJ0tbb XctWT4RFY9G0VfCkFWEQ8YS7pOjT5FLy03Txm0Up+amizW+VJt3x6QjKiR+aOiK/ RWG3VL8gF/2gAl+1e08vR8/NypBR8YX2n2IxPEdQnsbZ2pgz+x8= -----END CERTIFICATE-----Generated at Fri Mar 20 22:00:11 2026 by rpki-client