$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: hopOPTzPkuJHN1FWYsxnQOwZHnpTT0WgbeKM5cUSXIk= Subject key identifier: 1D:11:37:45:8F:C4:54:09:B3:63:2A:32:DE:94:50:A0:E2:94:21:0A Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 24FDA2D69B3FF79CD6EBD61C2BB61BEB25A46346 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 0255 Signing time: Tue 17 Mar 2026 12:10:57 +0000 Manifest this update: Tue 17 Mar 2026 12:05:57 +0000 Manifest next update: Fri 20 Mar 2026 21:56:57 +0000 Files and hashes: 1: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) 2: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: 4jNnNhoWhj2KHGk3CKojKmn3l+YkQhpXNf2keJHPJIw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 21:56:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:fd:a2:d6:9b:3f:f7:9c:d6:eb:d6:1c:2b:b6:1b:eb:25:a4:63:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Mar 17 12:05:57 2026 GMT Not After : Mar 20 21:56:57 2026 GMT Subject: CN=1D1137458FC45409B3632A32DE9450A0E294210A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7a:fa:b9:d0:8e:5d:39:7e:c4:35:10:68:22: b6:2d:19:c8:8f:f0:24:bd:8c:52:f5:3a:c4:0f:ce: eb:f4:dc:0d:6f:2c:31:9c:70:89:11:47:d9:57:fc: fd:59:2a:d9:20:6c:9c:35:a4:34:47:cc:01:12:ce: ae:f1:20:55:4b:36:cd:26:a6:6c:6b:4a:fc:71:7d: e3:4a:4f:b6:73:d9:16:3c:19:09:cb:02:a0:aa:49: 55:e0:46:9f:10:f9:1b:3c:e6:d8:2d:ec:0a:43:40: 7a:cf:55:e4:1d:a1:4c:8a:2a:a4:38:bf:60:dd:6f: 8d:51:80:90:62:c9:d1:a3:2f:c7:3f:f8:1b:fc:63: 5e:a8:9f:70:d6:cf:4a:f8:fb:a4:73:ab:87:48:9d: f7:24:d8:aa:b3:63:41:f2:9d:04:d8:9f:0f:e8:38: 33:43:cb:b5:86:13:2f:ae:64:46:05:55:ce:11:34: d3:59:c9:03:73:65:74:a4:88:97:e9:bb:af:9a:b9: 54:67:5e:80:3a:bd:1c:5c:b1:ba:e4:f2:78:78:9a: d2:56:00:5a:e0:a2:6f:d6:09:4b:1b:11:65:12:c0: 40:20:54:69:a9:54:4e:35:0f:08:72:2d:d0:72:cf: 41:64:a9:e6:40:f7:d9:cc:fd:28:80:25:c9:0b:26: d3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:11:37:45:8F:C4:54:09:B3:63:2A:32:DE:94:50:A0:E2:94:21:0A X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:56:65:61:7d:db:d6:00:ef:02:32:30:f6:af:d0:0a:27:7b: 0e:1e:13:6a:c9:80:c5:0d:88:7d:4e:5d:2e:e1:70:a1:bb:08: bb:ee:3e:c0:2e:12:6d:d5:1f:cd:46:c9:08:31:cd:39:30:75: 53:71:d9:47:ca:1f:41:de:5b:0e:f6:c3:e0:e5:d6:86:95:2f: f1:04:fe:4d:33:8e:45:09:cf:d6:64:ac:13:89:e4:f2:64:52: 43:60:e4:0d:c2:e6:3c:6e:de:bc:a6:9e:cd:e9:29:20:82:7d: 9c:4f:9d:72:5c:40:ba:bd:26:b8:d0:fd:52:56:2c:c1:cd:14: 21:08:d2:bf:20:5a:6e:e2:a9:f8:60:db:5e:25:5b:74:b5:43: 77:ec:63:9d:30:cc:01:9c:bc:a9:0d:95:bd:a1:b7:d7:a1:99: 78:7a:9d:20:33:f4:62:75:88:7b:1c:d1:6c:c0:86:7b:c8:48: 6e:51:87:b2:c4:25:de:d1:a8:5f:5c:60:34:0b:9b:6d:02:92: c2:2f:f2:c6:88:06:2b:42:58:ee:f2:df:e5:0f:36:94:5f:dc: 7e:76:1b:3b:07:c2:b7:39:12:97:62:65:73:e7:64:ca:b4:07: 37:24:9b:b1:68:99:6d:44:60:3e:25:f2:b6:4b:da:8f:aa:40: 3e:57:bd:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJP2i1ps/95zW69YcK7Yb6yWkY0YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNjAzMTcxMjA1NTdaFw0yNjAzMjAyMTU2NTdaMDMxMTAvBgNV BAMTKDFEMTEzNzQ1OEZDNDU0MDlCMzYzMkEzMkRFOTQ1MEEwRTI5NDIxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzevq50I5dOX7ENRBoIrYtGciP 8CS9jFL1OsQPzuv03A1vLDGccIkRR9lX/P1ZKtkgbJw1pDRHzAESzq7xIFVLNs0m pmxrSvxxfeNKT7Zz2RY8GQnLAqCqSVXgRp8Q+Rs85tgt7ApDQHrPVeQdoUyKKqQ4 v2Ddb41RgJBiydGjL8c/+Bv8Y16on3DWz0r4+6Rzq4dInfck2KqzY0HynQTYnw/o ODNDy7WGEy+uZEYFVc4RNNNZyQNzZXSkiJfpu6+auVRnXoA6vRxcsbrk8nh4mtJW AFrgom/WCUsbEWUSwEAgVGmpVE41DwhyLdByz0FkqeZA99nM/SiAJckLJtPRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRE3RY/EVAmzYyoy3pRQoOKUIQowHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFWZWF929YA7wIyMPav0Aonew4eE2rJgMUN iH1OXS7hcKG7CLvuPsAuEm3VH81GyQgxzTkwdVNx2UfKH0HeWw72w+Dl1oaVL/EE /k0zjkUJz9ZkrBOJ5PJkUkNg5A3C5jxu3rymns3pKSCCfZxPnXJcQLq9JrjQ/VJW LMHNFCEI0r8gWm7iqfhg214lW3S1Q3fsY50wzAGcvKkNlb2ht9ehmXh6nSAz9GJ1 iHsc0WzAhnvISG5Rh7LEJd7RqF9cYDQLm20CksIv8saIBitCWO7y3+UPNpRf3H52 GzsHwrc5EpdiZXPnZMq0Bzckm7FomW1EYD4l8rZL2o+qQD5XvQ4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client