$ rpki-client -vvf repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft File: A51BB787CE84E18D5A972818D11BBD38618D7D30.mft (raw, json) Hash identifier: vK5+Yqw0j+hBE5vZW5nimMzSHfm2yxcFQwC1PqGJlSA= Subject key identifier: B0:F6:DC:28:A8:65:18:34:C8:AE:9C:6A:16:EC:4C:9D:7C:1F:C7:32 Authority key identifier: A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 Certificate issuer: /CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Certificate serial: 227F3D393616C0F2EFF7A81BE21FEDEB43593D82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft Manifest number: 03DE Signing time: Mon 23 Mar 2026 08:52:41 +0000 Manifest this update: Mon 23 Mar 2026 08:47:41 +0000 Manifest next update: Thu 26 Mar 2026 16:54:41 +0000 Files and hashes: 1: 3130332e3136342e31372e302f32342d3234203d3e203137393935.roa (hash: P29nyVRqMomiZ6dB6VWVkB4ydoNUSNTp5nt+iDG/MVk=) 2: A51BB787CE84E18D5A972818D11BBD38618D7D30.crl (hash: QeYgdtmz/Yn9bl/JszW8w9/0dVGTbFuFABWu+HV48+0=) 3: 3130332e3136342e31362e302f32342d3234203d3e203137393935.roa (hash: 0wjXGMdfWxWlEtZXKPMs4Y5JhsAxTongqsn4pdyydKA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 26 Mar 2026 09:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:7f:3d:39:36:16:c0:f2:ef:f7:a8:1b:e2:1f:ed:eb:43:59:3d:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51BB787CE84E18D5A972818D11BBD38618D7D30 Validity Not Before: Mar 23 08:47:41 2026 GMT Not After : Mar 26 16:54:41 2026 GMT Subject: CN=B0F6DC28A8651834C8AE9C6A16EC4C9D7C1FC732 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:76:42:90:0e:21:48:c1:20:89:86:bb:cf:03: 66:f7:95:99:01:00:a0:ae:a5:4f:5d:c0:e5:20:67: 98:0a:50:78:8d:54:c9:7f:11:98:b0:38:32:75:9c: a9:d7:99:21:e4:89:95:3b:a5:01:1d:98:8e:4a:2b: 32:de:37:87:e6:ad:64:c1:da:93:92:a0:60:c7:07: f6:8c:ce:c6:a6:84:24:20:12:6c:1a:c3:2b:b1:a3: 8b:88:61:80:42:48:99:5a:cc:b8:5f:5c:0e:c5:a1: 23:19:39:34:cc:c2:c7:24:3a:f1:78:4f:b8:be:eb: a3:43:6b:a0:6d:2f:81:fa:80:c1:02:4c:8e:48:ba: 2d:6d:a1:40:92:5e:db:48:99:56:f7:49:10:51:67: fb:de:90:64:ef:40:dd:f8:4a:1c:50:a2:18:93:70: 4f:cd:e2:e3:08:82:a7:e7:28:3a:59:90:98:5b:47: 9a:2d:fc:48:69:a5:f0:4b:0d:7b:f8:65:e7:2d:66: 3d:b0:32:5d:15:38:d7:4e:2f:58:e0:91:af:14:df: 02:59:17:ce:24:d9:8f:01:97:f5:61:c8:a8:f0:27: 7b:9f:fb:eb:1c:88:0b:76:24:56:33:61:cd:19:58: 24:3e:7d:65:5a:a5:ab:02:9b:aa:d2:59:01:d9:29: 63:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:F6:DC:28:A8:65:18:34:C8:AE:9C:6A:16:EC:4C:9D:7C:1F:C7:32 X509v3 Authority Key Identifier: keyid:A5:1B:B7:87:CE:84:E1:8D:5A:97:28:18:D1:1B:BD:38:61:8D:7D:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51BB787CE84E18D5A972818D11BBD38618D7D30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2677b00c-dc2c-419c-a100-50b2fc7b1bc1/0/A51BB787CE84E18D5A972818D11BBD38618D7D30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:c3:15:a6:de:1d:92:93:4d:a0:84:ad:67:d0:78:7c:32:d9: 04:2f:bc:64:36:b0:17:32:39:e2:a8:07:7a:42:c7:af:5c:28: 96:6b:5a:10:5a:46:d0:a2:c3:21:e1:f6:59:3c:16:cd:35:7c: 2d:fe:48:1f:59:e6:93:b4:49:8b:e1:3c:be:f3:97:22:f5:db: a5:ed:a2:d6:31:ee:35:1a:43:22:9d:ac:b2:c2:00:56:a9:b2: 06:b8:f8:c8:50:41:1e:6a:79:bc:23:66:ff:60:f0:94:63:17: 18:67:1b:26:08:ed:66:e6:22:22:33:13:f3:76:07:ed:f8:ef: dc:98:06:1d:52:cd:6f:66:55:b0:74:9c:a6:00:4b:00:f1:fc: 79:dd:ca:b2:84:8c:af:92:11:11:65:ac:fd:0e:09:27:45:46: 2d:09:16:a8:f8:e3:42:8f:9a:c2:71:53:9c:f5:a4:f4:44:08: ed:e7:6a:a1:69:51:7a:79:d7:d8:f2:0f:78:fc:66:c7:96:b7: d5:f8:ff:02:db:bc:2a:c5:6f:28:0b:24:7f:bf:55:ca:c6:ff: 15:95:4a:33:b6:c7:d6:35:5a:d9:d9:c8:93:31:b0:00:30:d8: 0e:db:ab:46:3c:cc:25:b6:5b:ff:71:72:eb:e2:8e:ea:c9:d3: 5e:1c:97:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIn89OTYWwPLv96gb4h/t60NZPYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2 MThEN0QzMDAeFw0yNjAzMjMwODQ3NDFaFw0yNjAzMjYxNjU0NDFaMDMxMTAvBgNV BAMTKEIwRjZEQzI4QTg2NTE4MzRDOEFFOUM2QTE2RUM0QzlEN0MxRkM3MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTdkKQDiFIwSCJhrvPA2b3lZkB AKCupU9dwOUgZ5gKUHiNVMl/EZiwODJ1nKnXmSHkiZU7pQEdmI5KKzLeN4fmrWTB 2pOSoGDHB/aMzsamhCQgEmwawyuxo4uIYYBCSJlazLhfXA7FoSMZOTTMwsckOvF4 T7i+66NDa6BtL4H6gMECTI5Iui1toUCSXttImVb3SRBRZ/vekGTvQN34ShxQohiT cE/N4uMIgqfnKDpZkJhbR5ot/EhppfBLDXv4ZectZj2wMl0VONdOL1jgka8U3wJZ F84k2Y8Bl/VhyKjwJ3uf++sciAt2JFYzYc0ZWCQ+fWVapasCm6rSWQHZKWPLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsPbcKKhlGDTIrpxqFuxMnXwfxzIwHwYDVR0j BBgwFoAUpRu3h86E4Y1alygY0Ru9OGGNfTAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Njc3YjAwYy1kYzJjLTQxOWMtYTEwMC01MGIyZmM3YjFiYzEvMC9BNTFCQjc4N0NF ODRFMThENUE5NzI4MThEMTFCQkQzODYxOEQ3RDMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJEMzg2MThE N0QzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY3N2IwMGMtZGMyYy00MTljLWEx MDAtNTBiMmZjN2IxYmMxLzAvQTUxQkI3ODdDRTg0RTE4RDVBOTcyODE4RDExQkJE Mzg2MThEN0QzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjDFabeHZKTTaCErWfQeHwy2QQvvGQ2sBcy OeKoB3pCx69cKJZrWhBaRtCiwyHh9lk8Fs01fC3+SB9Z5pO0SYvhPL7zlyL126Xt otYx7jUaQyKdrLLCAFapsga4+MhQQR5qebwjZv9g8JRjFxhnGyYI7WbmIiIzE/N2 B+3479yYBh1SzW9mVbB0nKYASwDx/HndyrKEjK+SERFlrP0OCSdFRi0JFqj440KP msJxU5z1pPRECO3naqFpUXp519jyD3j8ZseWt9X4/wLbvCrFbygLJH+/VcrG/xWV SjO2x9Y1WtnZyJMxsAAw2A7bq0Y8zCW2W/9xcuvijurJ014cl1M= -----END CERTIFICATE-----Generated at Tue Mar 24 01:52:43 2026 by rpki-client