$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: HmTVs020JI8eC5tLtRt5H8r69I3qBEbWF0oHL7H+csQ= Subject key identifier: 91:D5:5C:8A:46:86:4D:F1:68:5A:55:21:6F:12:FA:2A:AB:40:30:B8 Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 529D91FF08835AAB0B19E004A2586573B41CD04B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 0216 Signing time: Wed 11 Mar 2026 22:31:17 +0000 Manifest this update: Wed 11 Mar 2026 22:26:17 +0000 Manifest next update: Sun 15 Mar 2026 09:04:17 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: detxAIVz7y0Xi6FCvsZ5nz/x84rPtHh4vUaaUiG9Q0E=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 15 Mar 2026 09:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:9d:91:ff:08:83:5a:ab:0b:19:e0:04:a2:58:65:73:b4:1c:d0:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Mar 11 22:26:17 2026 GMT Not After : Mar 15 09:04:17 2026 GMT Subject: CN=91D55C8A46864DF1685A55216F12FA2AAB4030B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9f:b8:df:1f:93:63:5d:d5:71:a7:f7:ba:dd: e5:9c:7c:d9:73:b2:f3:f1:98:9a:b4:ac:a0:56:28: 3e:ac:9b:71:5a:1b:9b:6d:0d:c8:6c:ac:9e:0d:14: d1:1e:83:27:1b:1c:a0:b9:ce:b3:22:87:1f:47:2c: 8b:50:59:ed:d4:c2:d9:57:0e:b3:59:aa:02:3a:5f: 9b:c1:81:3b:27:89:25:48:0f:00:51:c1:59:78:05: 75:c2:66:15:3f:ea:a8:43:82:a5:70:e6:e9:38:75: a6:72:95:32:46:0b:08:da:7e:04:f9:15:2e:e6:2e: c8:5f:a6:17:8c:a0:5b:20:43:4a:48:c9:29:97:eb: 30:59:50:82:ee:aa:ee:3e:e7:02:d8:a2:e9:b1:b5: ed:8f:ad:f4:86:28:41:0f:24:9e:b6:96:cd:c1:ad: fd:8f:d2:1b:13:71:66:be:fc:66:36:cd:6b:7e:6f: 00:5a:71:2f:16:0d:8e:6a:80:f3:97:47:ba:59:db: f4:dd:52:c1:bf:6e:df:1e:3e:4e:84:4f:e3:5d:fb: bb:80:16:24:2f:85:f4:1e:1f:db:72:3e:8b:f6:1e: 41:56:34:db:90:52:cb:da:b7:ee:e3:f4:f0:40:92: b8:e1:08:2e:17:c1:44:68:57:ff:aa:f0:3d:b7:50: 80:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:D5:5C:8A:46:86:4D:F1:68:5A:55:21:6F:12:FA:2A:AB:40:30:B8 X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:86:41:b9:b5:be:4f:15:aa:da:96:63:b2:90:2c:31:b5:7b: 00:2a:57:bc:22:e8:a7:6b:5a:7c:4f:67:99:f3:3e:af:cd:35: ba:7f:6c:53:f9:4e:1d:74:ec:da:d4:1c:76:d7:47:52:39:53: c6:e9:67:69:e1:5a:d3:92:e7:af:0c:11:46:2a:bc:ed:23:11: 2d:1f:9c:11:16:9f:69:ba:17:28:78:3f:7e:1c:2c:a1:cd:12: 4e:49:6d:f7:5b:a8:97:e4:aa:d7:5a:51:2d:77:14:b3:be:01: d6:92:e4:5a:0e:a4:d1:3d:0f:8c:71:28:30:a4:f1:44:67:ff: 19:30:79:db:f8:cf:b9:03:02:57:96:8b:fb:f3:88:e7:8d:1a: 16:7e:cb:c7:3d:2c:e8:0d:fd:75:4f:9c:55:dc:08:36:b7:c0: 13:35:dc:30:dc:27:77:47:ae:5e:8c:18:ec:59:9e:6f:12:27: 72:30:1f:a6:18:b2:4f:24:35:a0:04:b5:34:e4:f3:21:50:5f: b8:68:f7:62:30:4b:fb:9a:6e:bf:b1:d4:db:11:e8:30:04:fc: 70:1a:73:bc:e1:7f:6a:89:fa:17:19:74:e5:c8:4c:10:95:85: ae:75:93:22:cf:1d:a6:e9:eb:6d:e2:36:6b:f1:3f:bc:5f:51: 6a:31:77:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUp2R/wiDWqsLGeAEolhlc7Qc0EswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNjAzMTEyMjI2MTdaFw0yNjAzMTUwOTA0MTdaMDMxMTAvBgNV BAMTKDkxRDU1QzhBNDY4NjRERjE2ODVBNTUyMTZGMTJGQTJBQUI0MDMwQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEn7jfH5NjXdVxp/e63eWcfNlz svPxmJq0rKBWKD6sm3FaG5ttDchsrJ4NFNEegycbHKC5zrMihx9HLItQWe3UwtlX DrNZqgI6X5vBgTsniSVIDwBRwVl4BXXCZhU/6qhDgqVw5uk4daZylTJGCwjafgT5 FS7mLshfpheMoFsgQ0pIySmX6zBZUILuqu4+5wLYoumxte2PrfSGKEEPJJ62ls3B rf2P0hsTcWa+/GY2zWt+bwBacS8WDY5qgPOXR7pZ2/TdUsG/bt8ePk6ET+Nd+7uA FiQvhfQeH9tyPov2HkFWNNuQUsvat+7j9PBAkrjhCC4XwURoV/+q8D23UIBfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkdVcikaGTfFoWlUhbxL6KqtAMLgwHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFmGQbm1vk8VqtqWY7KQLDG1ewAqV7wi6Kdr WnxPZ5nzPq/NNbp/bFP5Th107NrUHHbXR1I5U8bpZ2nhWtOS568MEUYqvO0jES0f nBEWn2m6Fyh4P34cLKHNEk5JbfdbqJfkqtdaUS13FLO+AdaS5FoOpNE9D4xxKDCk 8URn/xkwedv4z7kDAleWi/vziOeNGhZ+y8c9LOgN/XVPnFXcCDa3wBM13DDcJ3dH rl6MGOxZnm8SJ3IwH6YYsk8kNaAEtTTk8yFQX7ho92IwS/uabr+x1NsR6DAE/HAa c7zhf2qJ+hcZdOXITBCVha51kyLPHabp623iNmvxP7xfUWoxdzE= -----END CERTIFICATE-----Generated at Sat Mar 14 00:45:04 2026 by rpki-client