$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft File: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft (raw, json) Hash identifier: AsWVBei+ju3Y08tLAxtd9tvpeibTK9/1svXf0JgepB0= Subject key identifier: F1:E2:44:EF:3D:92:46:E8:19:02:BE:9E:20:AC:AC:63:78:4B:83:E0 Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE Certificate issuer: /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Certificate serial: 68686FB6880C51A2D9C6C45C97155FEB676B6178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft Manifest number: 0337 Signing time: Fri 20 Mar 2026 16:21:15 +0000 Manifest this update: Fri 20 Mar 2026 16:16:15 +0000 Manifest next update: Tue 24 Mar 2026 02:00:15 +0000 Files and hashes: 1: ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl (hash: sTAcsfsgiCnjRZBb8l57+xoqwafbTOat5vO/3rDLaQg=) 2: 3130332e3137352e3135342e302f32332d3234203d3e20313331313131.roa (hash: tDZ0wFbDMKMfPTFB8lcMKBnzPbeN46mN61LlccX+yiY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 02:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:68:6f:b6:88:0c:51:a2:d9:c6:c4:5c:97:15:5f:eb:67:6b:61:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE Validity Not Before: Mar 20 16:16:15 2026 GMT Not After : Mar 24 02:00:15 2026 GMT Subject: CN=F1E244EF3D9246E81902BE9E20ACAC63784B83E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a5:10:17:84:bd:0b:74:80:38:f4:b8:33:c7: 76:e5:2e:b3:8e:15:1e:11:35:d0:d6:b9:39:ca:dd: ff:b7:0b:2d:92:0a:74:1c:db:e6:6b:6c:31:69:73: cb:e4:d9:bb:c8:97:b7:e4:b8:cb:e1:21:fa:43:e6: 0e:12:51:bb:5b:34:5a:c4:15:1a:21:2d:68:d0:aa: f9:16:f3:c4:07:e2:70:5c:a8:85:7b:56:80:85:74: db:8a:bb:53:5b:83:be:10:01:7e:7f:96:4e:b0:fa: 20:8e:99:c7:d6:3e:88:ce:da:50:00:d0:ff:5c:ec: 08:23:15:8c:df:17:08:59:b1:87:c1:5f:ae:82:18: a8:c3:ee:1a:d8:f4:37:03:f4:35:e1:81:b8:29:a6: 25:dd:a4:49:a3:44:7d:29:5b:04:d8:d6:00:23:a9: df:11:ce:d9:c3:b6:e5:92:48:b4:02:15:c9:f6:99: 12:5c:f0:a7:00:5b:c0:a4:29:12:e8:b6:b9:bc:65: c6:84:1c:62:6f:ca:bd:46:0f:da:6c:8e:e0:32:e1: 5d:e8:fd:55:b5:87:e9:bf:b6:f0:b2:ce:80:f7:8e: 79:e7:f9:4b:5f:af:49:37:53:ea:46:7c:e7:f0:27: 57:e3:f8:b0:9a:10:2a:2a:02:24:ea:5a:15:71:57: 57:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:E2:44:EF:3D:92:46:E8:19:02:BE:9E:20:AC:AC:63:78:4B:83:E0 X509v3 Authority Key Identifier: keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:8d:77:53:d9:1a:96:85:52:43:3a:34:0a:78:63:4b:c1:83: 8c:dd:1d:af:43:5c:e9:7d:6b:18:da:8d:18:ce:c3:5c:46:49: f3:22:29:54:4c:02:8e:4c:d1:9b:ef:9a:02:e0:d6:3d:70:d1: 39:56:97:9e:0d:04:ae:5e:8a:1b:3d:c0:e1:e8:9a:e2:4d:c6: f3:4a:2a:73:44:5f:45:b3:3b:f5:b4:8b:bf:33:0a:ba:34:75: a9:b2:0a:c4:d9:86:11:c0:6c:2c:11:5c:db:4e:96:8e:f7:d0: 3c:17:b0:5b:d8:4f:f5:12:b5:80:9a:a2:ff:14:d6:93:da:26: f4:52:0e:4a:86:4a:ad:66:4b:6a:ea:58:95:91:1b:bf:05:e9: 01:07:be:6c:67:42:a2:b9:9c:6a:d8:10:31:bb:fc:78:e7:38: e1:6d:cf:1a:45:24:ad:2f:ef:90:fb:21:e3:85:70:e8:c1:8c: 60:e2:98:96:05:41:85:fd:0a:fd:eb:59:d7:2d:86:f8:3c:d2: 65:99:2c:3f:ad:6a:54:26:fd:47:90:e6:05:65:2b:6f:49:23: 38:4e:e1:37:b5:5c:9d:7a:a8:36:ce:6e:51:39:e5:69:77:07: 0f:b5:20:b2:55:1b:fa:c7:e0:c1:77:a2:a2:3e:8b:23:f1:18: 67:08:0b:14 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaGhvtogMUaLZxsRclxVf62drYXgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3 RTEzM0NBRTAeFw0yNjAzMjAxNjE2MTVaFw0yNjAzMjQwMjAwMTVaMDMxMTAvBgNV BAMTKEYxRTI0NEVGM0Q5MjQ2RTgxOTAyQkU5RTIwQUNBQzYzNzg0QjgzRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpRAXhL0LdIA49Lgzx3blLrOO FR4RNdDWuTnK3f+3Cy2SCnQc2+ZrbDFpc8vk2bvIl7fkuMvhIfpD5g4SUbtbNFrE FRohLWjQqvkW88QH4nBcqIV7VoCFdNuKu1Nbg74QAX5/lk6w+iCOmcfWPojO2lAA 0P9c7AgjFYzfFwhZsYfBX66CGKjD7hrY9DcD9DXhgbgppiXdpEmjRH0pWwTY1gAj qd8RztnDtuWSSLQCFcn2mRJc8KcAW8CkKRLotrm8ZcaEHGJvyr1GD9psjuAy4V3o /VW1h+m/tvCyzoD3jnnn+Utfr0k3U+pGfOfwJ1fj+LCaECoqAiTqWhVxV1dzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8eJE7z2SRugZAr6eIKysY3hLg+AwHwYDVR0j BBgwFoAUrf/LSo0prlulU/kjV29+G34TPK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJlMmRmOC0yYzM2LTQ2NTItYTUwYy1mNjQyMGQyY2Q5ZDMvMC9BREZGQ0I0QThE MjlBRTVCQTU1M0Y5MjM1NzZGN0UxQjdFMTMzQ0FFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdFMUI3RTEz M0NBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiZTJkZjgtMmMzNi00NjUyLWE1 MGMtZjY0MjBkMmNkOWQzLzAvQURGRkNCNEE4RDI5QUU1QkE1NTNGOTIzNTc2RjdF MUI3RTEzM0NBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKNd1PZGpaFUkM6NAp4Y0vBg4zdHa9DXOl9 axjajRjOw1xGSfMiKVRMAo5M0ZvvmgLg1j1w0TlWl54NBK5eihs9wOHomuJNxvNK KnNEX0WzO/W0i78zCro0damyCsTZhhHAbCwRXNtOlo730DwXsFvYT/UStYCaov8U 1pPaJvRSDkqGSq1mS2rqWJWRG78F6QEHvmxnQqK5nGrYEDG7/HjnOOFtzxpFJK0v 75D7IeOFcOjBjGDimJYFQYX9Cv3rWdcthvg80mWZLD+talQm/UeQ5gVlK29JIzhO 4Te1XJ16qDbOblE55Wl3Bw+1ILJVG/rH4MF3oqI+iyPxGGcICxQ= -----END CERTIFICATE-----Generated at Fri Mar 20 21:57:30 2026 by rpki-client