$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: 3nUiidNiJe4jiPkVTMzhOnKSWF5tQRz1bwchol4s9ko= Subject key identifier: 6E:84:58:99:85:F5:E5:39:C6:C3:E0:39:3D:BA:75:EF:59:D0:DD:F3 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 6D1B53823340018EC16B956EC2922E6A0F3E62C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 0236 Signing time: Wed 18 Mar 2026 13:30:48 +0000 Manifest this update: Wed 18 Mar 2026 13:25:48 +0000 Manifest next update: Sat 21 Mar 2026 19:50:48 +0000 Files and hashes: 1: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: aVnpYjrLHKC5jPYuy/EmoewXeRvSRM3bwJfyAl6PCJQ=) 2: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 3: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) 4: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 5: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:50:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:1b:53:82:33:40:01:8e:c1:6b:95:6e:c2:92:2e:6a:0f:3e:62:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Mar 18 13:25:48 2026 GMT Not After : Mar 21 19:50:48 2026 GMT Subject: CN=6E84589985F5E539C6C3E0393DBA75EF59D0DDF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c1:87:eb:2c:bb:8a:79:62:32:1a:98:a0:78: 58:b7:ae:27:24:74:9a:5a:de:34:40:db:46:b3:f4: eb:5c:d9:91:11:88:e0:57:21:a3:1f:b5:f3:28:0b: 01:91:4d:cd:bd:c7:7d:eb:3c:04:34:27:3f:33:7e: a9:4d:97:80:34:c5:99:21:35:dd:5f:43:95:09:4d: 83:08:ba:11:a2:74:98:1b:e2:d3:02:80:fe:0e:4c: 6b:cb:9a:c9:c0:95:2f:ae:39:6b:39:f3:f8:b9:cd: e6:a6:c7:7a:75:f5:f2:b7:fd:97:39:dc:0a:b9:7d: 9e:5b:ff:3c:4a:8e:79:ac:fb:91:81:a3:0f:9a:ac: 66:3b:00:d9:1f:30:fe:26:0e:ce:e4:36:51:43:85: 8a:33:41:05:3c:7a:29:69:8b:d2:42:b7:6a:4e:88: a3:41:6f:32:a3:3a:5d:e7:1d:07:a1:c0:14:be:b6: cb:42:cb:fe:55:bb:11:28:31:df:c3:98:45:51:2f: 81:09:9f:e2:51:63:7d:5a:9d:c8:d1:27:c7:70:1e: f4:72:86:51:ee:e4:46:13:79:0d:ca:5f:b9:63:8b: cc:80:1f:13:0e:f9:c3:c9:9d:99:29:0b:c9:c3:4d: 9d:2d:cb:0a:1b:4d:3d:5a:ae:69:4d:36:e6:fb:ac: e9:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:84:58:99:85:F5:E5:39:C6:C3:E0:39:3D:BA:75:EF:59:D0:DD:F3 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:c3:ac:d0:43:52:41:4f:27:d3:a4:4a:29:01:02:b9:51:34: e5:d9:06:26:67:a8:1d:19:a2:50:1c:ed:6e:0e:76:9c:9c:92: e8:78:7c:cd:bf:c1:2a:5e:3a:e3:57:1b:ce:1a:c2:a0:61:b1: e3:86:2e:2d:39:37:99:1c:b0:98:35:44:9a:df:b5:17:19:83: 4c:be:b3:d7:38:09:9a:e6:c6:c9:e6:b8:e9:db:1f:a7:5b:28: d1:08:11:36:72:80:4e:d2:bc:f4:64:82:c4:81:18:4f:05:62: bf:3e:1b:90:5e:85:8a:b5:93:8e:b1:ba:9e:2e:55:8e:7d:d1: 30:bc:53:fe:3f:00:2f:6e:41:67:fd:96:f2:d6:76:c1:af:13: 87:fd:b9:85:2c:89:19:89:e6:f8:e1:a0:d8:55:36:8d:06:ec: 06:2f:ea:97:fc:95:2d:36:ee:1e:fb:41:3c:b8:82:ff:5e:94: 14:ad:9b:59:dc:79:d9:32:99:d9:38:2f:92:14:85:f4:62:55: 81:e7:b2:c8:c1:b9:46:b9:4d:d0:7a:99:10:6b:a9:94:ca:b2: eb:07:2a:a9:17:59:11:68:49:48:bb:5e:bd:e2:c2:62:9e:51: d9:51:72:2e:ba:b5:95:02:44:8f:02:a1:ed:5b:08:54:cf:5e: ed:ce:b4:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRtTgjNAAY7Ba5VuwpIuag8+YsYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNjAzMTgxMzI1NDhaFw0yNjAzMjExOTUwNDhaMDMxMTAvBgNV BAMTKDZFODQ1ODk5ODVGNUU1MzlDNkMzRTAzOTNEQkE3NUVGNTlEMERERjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwYfrLLuKeWIyGpigeFi3rick dJpa3jRA20az9Otc2ZERiOBXIaMftfMoCwGRTc29x33rPAQ0Jz8zfqlNl4A0xZkh Nd1fQ5UJTYMIuhGidJgb4tMCgP4OTGvLmsnAlS+uOWs58/i5zeamx3p19fK3/Zc5 3Aq5fZ5b/zxKjnms+5GBow+arGY7ANkfMP4mDs7kNlFDhYozQQU8eilpi9JCt2pO iKNBbzKjOl3nHQehwBS+tstCy/5VuxEoMd/DmEVRL4EJn+JRY31ancjRJ8dwHvRy hlHu5EYTeQ3KX7lji8yAHxMO+cPJnZkpC8nDTZ0tywobTT1armlNNub7rOn1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUboRYmYX15TnGw+A5Pbp171nQ3fMwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjDrNBDUkFPJ9OkSikBArlRNOXZBiZnqB0Z olAc7W4Odpyckuh4fM2/wSpeOuNXG84awqBhseOGLi05N5kcsJg1RJrftRcZg0y+ s9c4CZrmxsnmuOnbH6dbKNEIETZygE7SvPRkgsSBGE8FYr8+G5BehYq1k46xup4u VY590TC8U/4/AC9uQWf9lvLWdsGvE4f9uYUsiRmJ5vjhoNhVNo0G7AYv6pf8lS02 7h77QTy4gv9elBStm1ncedkymdk4L5IUhfRiVYHnssjBuUa5TdB6mRBrqZTKsusH KqkXWRFoSUi7Xr3iwmKeUdlRci66tZUCRI8Coe1bCFTPXu3OtFg= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client