$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: +5r+PAQU7trFvsXm3T3JzSxK258JlklfpAOZ9YmBXmA= Subject key identifier: B4:18:CE:81:B4:88:33:3E:E8:4C:49:32:46:43:7B:F2:4C:E0:11:4F Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 636D65B88E73D430B59A3A927EA697A36FD25201 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: FE Signing time: Fri 06 Mar 2026 08:01:05 +0000 Manifest this update: Fri 06 Mar 2026 07:56:05 +0000 Manifest next update: Mon 09 Mar 2026 16:43:05 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: D3p8tFWOCPusaOLYUy4MuYPqNPsPX4OQPfaiulRuQr4=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:6d:65:b8:8e:73:d4:30:b5:9a:3a:92:7e:a6:97:a3:6f:d2:52:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Mar 6 07:56:05 2026 GMT Not After : Mar 9 16:43:05 2026 GMT Subject: CN=B418CE81B488333EE84C493246437BF24CE0114F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:43:56:87:20:4c:82:d0:61:16:79:2c:fd:c7: 58:3b:ae:48:91:d2:a2:c9:bc:dc:ca:e2:18:a9:d8: d5:59:fa:6b:73:44:8b:72:e1:ad:57:af:3d:75:dc: 30:2f:c3:3a:03:e5:c7:95:92:08:3c:74:f0:22:72: cf:64:ad:b3:03:a2:80:cd:c8:5f:b5:b3:d2:be:29: 32:1d:e0:8d:e1:f7:95:7b:5b:de:fd:71:f5:68:2f: 17:11:09:dc:6e:21:4a:16:75:db:14:8d:dc:c3:db: 02:67:55:eb:83:b8:07:b7:c0:54:6d:6a:72:df:1f: 0d:c5:c5:9e:a7:7b:92:66:9f:46:21:36:dc:06:5b: 3c:fc:22:f2:bc:d8:94:52:83:87:3c:04:2c:6f:f3: 4d:ba:6d:7f:7d:4c:3c:cc:ff:8b:a7:76:69:b8:30: 92:60:ae:f8:63:59:c6:3a:8e:38:38:b5:6e:be:56: 03:2a:96:5e:39:ef:7c:c2:da:10:7a:e8:7f:12:31: e3:08:0e:f6:a1:63:23:f3:53:33:a5:52:d5:fc:65: 4f:bb:7f:45:b0:73:42:f3:a7:ec:b1:65:94:d9:a8: 88:c2:c3:68:c6:22:63:19:6f:37:05:1b:cf:63:c8: 91:20:17:ea:a2:49:a7:30:19:22:70:ad:3b:1e:00: 0d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:18:CE:81:B4:88:33:3E:E8:4C:49:32:46:43:7B:F2:4C:E0:11:4F X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:34:f5:61:42:9f:e0:63:0b:91:a0:ba:fd:ac:a2:03:6f:ef: ef:c8:e7:28:81:3c:b2:12:3a:6a:e9:0b:6f:f1:56:f1:7e:1d: ab:30:0f:6d:55:99:42:df:0b:3c:45:b7:3d:fb:4d:80:0b:74: 0b:4f:57:a1:1b:43:ca:4b:7f:5b:9f:dd:8a:35:25:d0:bb:e4: 5b:99:a4:e7:38:a1:79:b1:14:3c:3e:a5:0a:4f:1b:cb:70:19: d2:4d:dc:27:09:ec:fe:40:af:0c:77:16:1f:51:52:7a:f8:1b: 45:17:00:5c:8a:76:f2:13:2f:3d:52:cd:83:eb:20:10:dd:4d: 06:d3:3c:4c:9e:83:ad:d1:25:1c:8d:0d:d9:f3:3f:af:35:01: 8b:15:de:40:3c:bb:d8:06:56:0d:dd:e0:8f:56:c8:df:e3:17: 64:af:04:31:fa:9f:4a:e7:5d:17:04:f5:94:80:a0:0b:a1:99: 2f:f1:07:51:14:c9:f6:96:dc:03:4d:26:4c:61:c1:f5:59:5f: 39:49:89:9e:1a:98:f9:27:39:73:a9:45:e3:1e:a5:ec:e1:c3: aa:70:00:13:93:bd:d0:97:55:76:67:8b:0e:09:ee:a4:30:4d: 54:fb:73:7c:33:21:78:33:ae:a7:80:6d:99:a8:0c:e2:7c:b7: 9c:e0:c7:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY21luI5z1DC1mjqSfqaXo2/SUgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNjAzMDYwNzU2MDVaFw0yNjAzMDkxNjQzMDVaMDMxMTAvBgNV BAMTKEI0MThDRTgxQjQ4ODMzM0VFODRDNDkzMjQ2NDM3QkYyNENFMDExNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQ1aHIEyC0GEWeSz9x1g7rkiR 0qLJvNzK4hip2NVZ+mtzRIty4a1Xrz113DAvwzoD5ceVkgg8dPAics9krbMDooDN yF+1s9K+KTId4I3h95V7W979cfVoLxcRCdxuIUoWddsUjdzD2wJnVeuDuAe3wFRt anLfHw3FxZ6ne5Jmn0YhNtwGWzz8IvK82JRSg4c8BCxv8026bX99TDzM/4undmm4 MJJgrvhjWcY6jjg4tW6+VgMqll4573zC2hB66H8SMeMIDvahYyPzUzOlUtX8ZU+7 f0Wwc0Lzp+yxZZTZqIjCw2jGImMZbzcFG89jyJEgF+qiSacwGSJwrTseAA0RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtBjOgbSIMz7oTEkyRkN78kzgEU8wHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB809WFCn+BjC5Gguv2sogNv7+/I5yiBPLIS OmrpC2/xVvF+HaswD21VmULfCzxFtz37TYALdAtPV6EbQ8pLf1uf3Yo1JdC75FuZ pOc4oXmxFDw+pQpPG8twGdJN3CcJ7P5Arwx3Fh9RUnr4G0UXAFyKdvITLz1SzYPr IBDdTQbTPEyeg63RJRyNDdnzP681AYsV3kA8u9gGVg3d4I9WyN/jF2SvBDH6n0rn XRcE9ZSAoAuhmS/xB1EUyfaW3ANNJkxhwfVZXzlJiZ4amPknOXOpReMepezhw6pw ABOTvdCXVXZniw4J7qQwTVT7c3wzIXgzrqeAbZmoDOJ8t5zgxzc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:06 2026 by rpki-client