$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft File: A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft (raw, json) Hash identifier: gLylpXYdyXyNih4P95zJcC6vbG/BOSFQPTBSipjqqoU= Subject key identifier: A3:33:EC:3C:D2:49:1A:E1:AB:11:FD:67:3E:7E:AB:18:57:31:4B:01 Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F Certificate issuer: /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Certificate serial: 5CD5340AEEA5D24B85919292F9D38DD102616C15 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft Manifest number: 0171 Signing time: Wed 18 Mar 2026 04:00:00 +0000 Manifest this update: Wed 18 Mar 2026 03:55:00 +0000 Manifest next update: Sat 21 Mar 2026 11:13:00 +0000 Files and hashes: 1: 3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (hash: 1GcHJ2lyZakepkFB/Af5Gk+X5kDqZQ6u/Ah/ekHwIik=) 2: A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl (hash: GC2EgzgxxIvSkaAQxUkJJlalfApgjQ2Hg/0fDDMCUWw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 11:13:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:d5:34:0a:ee:a5:d2:4b:85:91:92:92:f9:d3:8d:d1:02:61:6c:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F Validity Not Before: Mar 18 03:55:00 2026 GMT Not After : Mar 21 11:13:00 2026 GMT Subject: CN=A333EC3CD2491AE1AB11FD673E7EAB1857314B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:9b:48:0a:01:96:fb:04:b6:ed:9b:3e:09:00: d5:86:57:96:4f:66:d7:da:66:a4:bf:02:a2:18:35: ba:fd:88:01:a7:cd:d3:3f:8b:8e:b8:2b:9d:f0:dd: 19:84:13:99:4b:6a:4d:d0:d7:c4:6a:84:31:e1:a1: 5e:56:85:21:a2:c6:ee:22:e4:0e:d0:b0:6c:05:8c: 8b:34:62:d6:8b:7b:b0:7b:2a:f8:8a:af:98:6d:2c: a6:6d:af:e2:c3:e3:fc:45:84:ad:e5:ac:ad:f2:4e: 2a:57:52:a5:67:ac:62:c3:68:9a:07:36:5f:38:73: da:66:1e:b4:ab:9d:f4:7f:7a:1b:52:e8:ff:49:60: b2:3d:1c:03:bb:b4:8d:88:17:8d:cc:3f:7e:59:0c: 80:34:10:03:79:8c:85:00:69:db:67:f8:0e:9f:e2: 0d:1b:20:f8:34:f4:1a:1a:79:fe:f6:ec:7b:65:9d: ab:fb:b5:93:a1:ee:0e:0c:7e:4a:90:a3:ca:64:71: 24:3b:1d:95:4c:32:27:f6:c6:bf:76:a5:e3:da:3b: a5:7b:8e:fd:22:76:d1:34:cd:a5:c0:31:02:09:4c: 33:0b:55:35:d9:f1:f3:62:04:be:63:5a:a5:4f:2b: 02:1e:3c:9a:85:e5:79:a4:08:41:e4:a9:cd:ef:b6: 33:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:33:EC:3C:D2:49:1A:E1:AB:11:FD:67:3E:7E:AB:18:57:31:4B:01 X509v3 Authority Key Identifier: keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:dd:2b:93:2e:71:7a:a0:03:54:92:b1:29:92:40:d6:da:b7: 98:b9:da:2c:d3:04:4f:e3:ba:7e:22:3b:7a:e4:4a:1c:1c:50: 46:32:04:3d:a4:47:50:79:69:7d:1b:71:44:e9:cf:87:e3:e2: 88:46:1e:73:2c:00:86:67:28:33:94:ae:42:08:1f:7c:34:f8: 25:fb:6b:15:2b:0e:2f:b4:74:8f:fb:6c:bb:78:24:9c:df:43: 75:88:18:16:30:72:ee:82:6f:74:d8:67:58:ad:69:ec:20:bc: 88:2b:b4:f7:22:01:2e:31:1b:41:a8:6e:f5:15:99:7e:e0:e1: 0d:14:81:cc:8e:2d:96:e7:f5:7b:d3:7c:75:ae:80:a7:2f:cd: e0:c8:33:72:a2:60:c1:54:6d:2e:f3:25:ee:28:5f:14:11:43: 23:98:79:92:be:14:9f:95:bc:3f:f5:1d:d8:d2:83:24:80:f1: 4c:41:7c:b6:db:76:de:15:a1:61:15:16:ba:5c:9e:a1:39:db: 7d:55:0a:6c:c2:22:0b:31:1e:6c:ff:56:4a:cb:3b:8c:ec:35: 27:f0:62:89:9f:b6:58:39:65:89:53:71:ab:c6:12:9d:41:63: 04:8a:d7:a2:57:2b:11:21:58:e8:76:1b:b6:7e:c1:6d:c0:40: 27:03:f0:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXNU0Cu6l0kuFkZKS+dON0QJhbBUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJF MzI1MDcyRjAeFw0yNjAzMTgwMzU1MDBaFw0yNjAzMjExMTEzMDBaMDMxMTAvBgNV BAMTKEEzMzNFQzNDRDI0OTFBRTFBQjExRkQ2NzNFN0VBQjE4NTczMTRCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGm0gKAZb7BLbtmz4JANWGV5ZP ZtfaZqS/AqIYNbr9iAGnzdM/i464K53w3RmEE5lLak3Q18RqhDHhoV5WhSGixu4i 5A7QsGwFjIs0YtaLe7B7KviKr5htLKZtr+LD4/xFhK3lrK3yTipXUqVnrGLDaJoH Nl84c9pmHrSrnfR/ehtS6P9JYLI9HAO7tI2IF43MP35ZDIA0EAN5jIUAadtn+A6f 4g0bIPg09Boaef727Htlnav7tZOh7g4MfkqQo8pkcSQ7HZVMMif2xr92pePaO6V7 jv0idtE0zaXAMQIJTDMLVTXZ8fNiBL5jWqVPKwIePJqF5XmkCEHkqc3vtjMFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUozPsPNJJGuGrEf1nPn6rGFcxSwEwHwYDVR0j BBgwFoAUpb/bHyQ2Ne7R4lGRxozrsuMlBy8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NDM1NjM3NS04ZTI5LTQ0NzctYjAxMy1jNDQxNTBhMjVhMzEvMC9BNUJGREIxRjI0 MzYzNUVFRDFFMjUxOTFDNjhDRUJCMkUzMjUwNzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VCQjJFMzI1 MDcyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTQzNTYzNzUtOGUyOS00NDc3LWIw MTMtYzQ0MTUwYTI1YTMxLzAvQTVCRkRCMUYyNDM2MzVFRUQxRTI1MTkxQzY4Q0VC QjJFMzI1MDcyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAILdK5MucXqgA1SSsSmSQNbat5i52izTBE/j un4iO3rkShwcUEYyBD2kR1B5aX0bcUTpz4fj4ohGHnMsAIZnKDOUrkIIH3w0+CX7 axUrDi+0dI/7bLt4JJzfQ3WIGBYwcu6Cb3TYZ1itaewgvIgrtPciAS4xG0GobvUV mX7g4Q0UgcyOLZbn9XvTfHWugKcvzeDIM3KiYMFUbS7zJe4oXxQRQyOYeZK+FJ+V vD/1HdjSgySA8UxBfLbbdt4VoWEVFrpcnqE5231VCmzCIgsxHmz/VkrLO4zsNSfw Yomftlg5ZYlTcavGEp1BYwSK16JXKxEhWOh2G7Z+wW3AQCcD8NI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:42:33 2026 by rpki-client