$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: fJikbD9kdM2X08uQbi5a5p1faqlN0ZSFZa6vtvHwzGU= Subject key identifier: 5E:F1:1E:BB:C3:33:58:E8:AF:F3:51:EB:03:76:9D:D2:D7:BD:A1:59 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 7B7BA0EA659B1B2C462F452221CAC0590B6CBE8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04F7 Signing time: Tue 17 Mar 2026 07:11:11 +0000 Manifest this update: Tue 17 Mar 2026 07:06:11 +0000 Manifest next update: Fri 20 Mar 2026 13:57:11 +0000 Files and hashes: 1: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 2: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M=) 4: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: LVixEmbUJZ+eP5AjZ2VgOdo5qns11jQgSZJqaflGydU=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 13:57:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7b:a0:ea:65:9b:1b:2c:46:2f:45:22:21:ca:c0:59:0b:6c:be:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Mar 17 07:06:11 2026 GMT Not After : Mar 20 13:57:11 2026 GMT Subject: CN=5EF11EBBC33358E8AFF351EB03769DD2D7BDA159 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1f:76:25:f5:f0:67:43:0a:3d:8f:69:cc:1a: 09:d8:fd:95:4c:b5:9a:3e:a3:ab:99:d5:81:3e:bb: e8:4c:ea:b0:ea:81:3e:d4:b4:6e:51:79:f7:f7:61: a1:f8:2c:b9:ea:1a:10:b0:2a:59:18:87:48:3d:ef: c3:b9:fc:05:42:f2:94:54:34:9f:09:35:74:1a:2d: ed:d1:60:71:9a:28:c2:e7:5b:5b:29:2e:0c:ba:38: cd:28:f5:fe:cc:b7:b0:28:67:e8:2d:fb:ef:f0:6b: 73:c3:5e:c2:85:8a:d3:94:2a:1a:78:6b:f4:42:f1: 75:db:16:4a:83:ea:56:51:1f:04:9f:95:64:50:53: 82:1b:0d:e4:f1:4f:54:10:61:9b:23:77:74:a1:53: ef:6c:0b:f0:49:3d:3c:57:37:fc:c8:77:15:e4:94: ae:33:5b:1e:3d:8a:e3:77:89:2c:f7:60:ae:4a:c4: 52:d0:f6:8b:6c:a6:4d:da:c8:0e:71:69:a2:ba:41: 31:78:62:d5:6c:9a:6c:42:a6:73:ec:bd:21:c9:57: 80:97:e3:52:32:59:5e:84:66:2d:fd:c4:b3:f4:57: 43:4d:bd:55:97:97:4b:3a:f0:55:ee:ea:fd:87:03: c1:61:c6:85:50:37:4d:f6:36:ff:5d:15:fc:20:c3: 46:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:F1:1E:BB:C3:33:58:E8:AF:F3:51:EB:03:76:9D:D2:D7:BD:A1:59 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ed:54:82:bd:b3:79:38:49:11:3e:f0:59:d6:37:47:1e:69:13: 86:8c:e0:39:ae:94:9e:de:0a:a5:db:5c:94:9b:cf:62:ba:d1: b4:10:48:31:94:99:5d:83:5e:2b:f1:30:f0:61:b3:3e:a6:33: c1:27:ef:b1:10:17:96:2d:ca:ea:23:21:fd:ab:5b:5e:e5:d4: af:c6:11:e4:31:5c:56:69:3a:de:92:52:df:53:d2:b9:ad:34: e5:2f:f9:ea:c8:31:c3:a1:2b:93:72:fb:95:fe:dd:ff:cb:03: 92:38:9c:3c:87:5b:b0:c7:77:22:26:4f:34:16:82:e5:aa:15: 1f:ea:02:40:67:7b:c0:d4:8e:a2:64:b7:bb:31:c4:c6:9f:7a: 02:f6:73:41:5e:03:e4:80:47:72:c1:09:8a:76:61:1c:b3:a6: 6b:a7:66:70:e9:f3:e5:56:32:79:6d:69:c6:69:9a:c2:e0:b5: 23:e3:32:35:49:22:a4:85:07:28:44:d9:22:2b:5b:92:ae:b9: 6b:d4:df:6f:f9:5c:a9:f1:b1:71:64:bb:57:43:97:46:1b:49: f0:05:95:8f:5b:85:ed:71:1b:0f:87:c8:48:d0:6b:27:76:f6: cb:c7:ff:b7:90:04:38:0e:82:66:43:8a:b1:1a:6e:a7:9b:60: ca:b8:c0:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3ug6mWbGyxGL0UiIcrAWQtsvowwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNjAzMTcwNzA2MTFaFw0yNjAzMjAxMzU3MTFaMDMxMTAvBgNV BAMTKDVFRjExRUJCQzMzMzU4RThBRkYzNTFFQjAzNzY5REQyRDdCREExNTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3H3Yl9fBnQwo9j2nMGgnY/ZVM tZo+o6uZ1YE+u+hM6rDqgT7UtG5Reff3YaH4LLnqGhCwKlkYh0g978O5/AVC8pRU NJ8JNXQaLe3RYHGaKMLnW1spLgy6OM0o9f7Mt7AoZ+gt++/wa3PDXsKFitOUKhp4 a/RC8XXbFkqD6lZRHwSflWRQU4IbDeTxT1QQYZsjd3ShU+9sC/BJPTxXN/zIdxXk lK4zWx49iuN3iSz3YK5KxFLQ9otspk3ayA5xaaK6QTF4YtVsmmxCpnPsvSHJV4CX 41IyWV6EZi39xLP0V0NNvVWXl0s68FXu6v2HA8FhxoVQN032Nv9dFfwgw0Y3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXvEeu8MzWOiv81HrA3ad0te9oVkwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAO1Ugr2zeThJET7wWdY3Rx5pE4aM4DmulJ7e CqXbXJSbz2K60bQQSDGUmV2DXivxMPBhsz6mM8En77EQF5YtyuojIf2rW17l1K/G EeQxXFZpOt6SUt9T0rmtNOUv+erIMcOhK5Ny+5X+3f/LA5I4nDyHW7DHdyImTzQW guWqFR/qAkBne8DUjqJkt7sxxMafegL2c0FeA+SAR3LBCYp2YRyzpmunZnDp8+VW MnltacZpmsLgtSPjMjVJIqSFByhE2SIrW5KuuWvU32/5XKnxsXFku1dDl0YbSfAF lY9bhe1xGw+HyEjQayd29svH/7eQBDgOgmZDirEabqebYMq4wPI= -----END CERTIFICATE-----Generated at Thu Mar 19 09:40:25 2026 by rpki-client