$ rpki-client -vvf repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft File: CA5B0322788B7A041373A944677E83F0D48FF4E7.mft (raw, json) Hash identifier: oqk7Vk9UvuwOcAhOeBeVZUmHHs6hD7aadlVav22vulE= Subject key identifier: 0A:B2:9C:F7:5C:7A:F2:1B:CF:32:68:D1:6F:37:2A:AF:1D:7D:2E:D8 Authority key identifier: CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 Certificate issuer: /CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Certificate serial: 526E57500027DD68D1194DB78C92099CBD4C6891 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft Manifest number: 0112 Signing time: Sat 07 Mar 2026 16:51:17 +0000 Manifest this update: Sat 07 Mar 2026 16:46:16 +0000 Manifest next update: Tue 10 Mar 2026 23:47:16 +0000 Files and hashes: 1: CA5B0322788B7A041373A944677E83F0D48FF4E7.crl (hash: zMa139NjYDKUYURV3qPAZQ5aat6YyIjQUKq6h6Mnod8=) 2: 3130332e37312e3136302e302f32322d3234203d3e20313339393831.roa (hash: lDykVwxJoW4GFsi2L2TOWuZVobAaZLaNG/GuK7uwVOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:6e:57:50:00:27:dd:68:d1:19:4d:b7:8c:92:09:9c:bd:4c:68:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA5B0322788B7A041373A944677E83F0D48FF4E7 Validity Not Before: Mar 7 16:46:16 2026 GMT Not After : Mar 10 23:47:16 2026 GMT Subject: CN=0AB29CF75C7AF21BCF3268D16F372AAF1D7D2ED8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:74:8e:aa:9f:d0:eb:f3:d1:34:40:fc:15:79: 7b:09:4a:07:9f:51:eb:f1:9a:ff:6d:2f:83:8c:bb: 3c:9a:29:06:67:6a:f1:51:d9:f9:bf:e5:4e:72:c9: 72:5b:06:17:96:83:b6:e0:a9:6b:3f:59:1f:6a:27: 3c:d9:d7:db:3c:cd:cc:f3:82:fb:b4:43:ca:83:89: 39:b1:9e:e5:7f:44:4a:70:72:72:c0:f3:1d:ea:d1: 51:0f:7e:0c:1a:5a:c3:08:be:59:9f:3e:de:01:fd: cf:a1:ed:a0:ba:b2:5e:d9:5f:cf:69:a4:1a:c8:8f: 79:5d:c1:e1:25:14:f5:56:ab:2c:f3:64:19:a5:c0: d1:26:88:39:c6:c1:6e:df:f5:b3:61:1a:6c:74:89: 80:9b:9b:fc:ac:21:54:62:87:19:de:a1:d8:ea:8e: 96:c3:c3:38:10:f3:8a:0d:6b:ad:45:dd:88:3b:e5: 8d:a2:8a:f2:35:22:11:8c:09:d6:21:7e:75:a1:36: fc:63:f1:46:d2:e2:9f:8b:28:26:63:21:ed:78:1a: 5b:75:78:4c:a3:70:59:1a:f5:7b:1a:bc:20:ea:8f: 35:53:ee:47:9d:71:1f:68:69:e4:b4:df:17:05:ff: 07:60:fd:73:8c:4c:a0:13:d9:21:9c:c0:7e:47:40: 7b:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:B2:9C:F7:5C:7A:F2:1B:CF:32:68:D1:6F:37:2A:AF:1D:7D:2E:D8 X509v3 Authority Key Identifier: keyid:CA:5B:03:22:78:8B:7A:04:13:73:A9:44:67:7E:83:F0:D4:8F:F4:E7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA5B0322788B7A041373A944677E83F0D48FF4E7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8eba867a-8f84-4663-b320-f435282b9ffe/0/CA5B0322788B7A041373A944677E83F0D48FF4E7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:ad:c7:26:e3:75:96:be:fb:9e:26:c0:92:69:80:16:62:04: 87:7a:84:ac:1a:bd:a2:01:af:55:92:ca:46:45:2f:c0:ce:b7: 40:56:24:70:46:c7:c2:ff:48:4f:d6:e4:5c:83:45:94:c5:fc: ef:67:a9:b8:42:d9:01:8e:68:50:27:21:89:d0:d4:54:51:7e: e9:26:79:14:49:63:31:07:77:46:02:b8:7f:8c:69:d5:be:75: c1:d7:28:20:1d:62:03:49:41:a8:6d:a7:6c:d5:9b:27:53:09: cc:c5:e3:60:5f:3d:e6:6e:ac:5c:37:9f:d9:46:5b:03:72:91: 1f:f9:21:00:4d:54:5e:cb:78:60:b0:da:ef:38:2b:6f:83:89: 6f:32:84:4d:85:95:98:9e:94:8c:f2:16:a1:dc:90:d9:e7:62: b2:83:67:61:b4:cb:31:17:9d:26:7f:21:ff:a8:d4:e7:c1:ab: 1f:a6:31:97:92:b5:88:df:54:eb:b1:d7:47:23:a1:09:1d:9f: 3c:fd:1a:65:4c:0d:45:b3:e6:a1:7c:78:96:98:a8:65:ad:a3: 4b:52:8c:bb:40:0a:7d:28:8a:09:eb:50:06:13:cd:33:29:8b: f8:98:c5:43:80:40:ec:43:d8:f4:e9:27:99:cc:db:39:cf:59: 67:72:a3:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUm5XUAAn3WjRGU23jJIJnL1MaJEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBE NDhGRjRFNzAeFw0yNjAzMDcxNjQ2MTZaFw0yNjAzMTAyMzQ3MTZaMDMxMTAvBgNV BAMTKDBBQjI5Q0Y3NUM3QUYyMUJDRjMyNjhEMTZGMzcyQUFGMUQ3RDJFRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdI6qn9Dr89E0QPwVeXsJSgef Uevxmv9tL4OMuzyaKQZnavFR2fm/5U5yyXJbBheWg7bgqWs/WR9qJzzZ19s8zczz gvu0Q8qDiTmxnuV/REpwcnLA8x3q0VEPfgwaWsMIvlmfPt4B/c+h7aC6sl7ZX89p pBrIj3ldweElFPVWqyzzZBmlwNEmiDnGwW7f9bNhGmx0iYCbm/ysIVRihxneodjq jpbDwzgQ84oNa61F3Yg75Y2iivI1IhGMCdYhfnWhNvxj8UbS4p+LKCZjIe14Glt1 eEyjcFka9XsavCDqjzVT7kedcR9oaeS03xcF/wdg/XOMTKAT2SGcwH5HQHu/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCrKc91x68hvPMmjRbzcqrx19LtgwHwYDVR0j BBgwFoAUylsDIniLegQTc6lEZ36D8NSP9OcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWJhODY3YS04Zjg0LTQ2NjMtYjMyMC1mNDM1MjgyYjlmZmUvMC9DQTVCMDMyMjc4 OEI3QTA0MTM3M0E5NDQ2NzdFODNGMEQ0OEZGNEU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgzRjBENDhG RjRFNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGViYTg2N2EtOGY4NC00NjYzLWIz MjAtZjQzNTI4MmI5ZmZlLzAvQ0E1QjAzMjI3ODhCN0EwNDEzNzNBOTQ0Njc3RTgz RjBENDhGRjRFNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA2txybjdZa++54mwJJpgBZiBId6hKwavaIB r1WSykZFL8DOt0BWJHBGx8L/SE/W5FyDRZTF/O9nqbhC2QGOaFAnIYnQ1FRRfukm eRRJYzEHd0YCuH+MadW+dcHXKCAdYgNJQahtp2zVmydTCczF42BfPeZurFw3n9lG WwNykR/5IQBNVF7LeGCw2u84K2+DiW8yhE2FlZielIzyFqHckNnnYrKDZ2G0yzEX nSZ/If+o1OfBqx+mMZeStYjfVOux10cjoQkdnzz9GmVMDUWz5qF8eJaYqGWto0tS jLtACn0oignrUAYTzTMpi/iYxUOAQOxD2PTpJ5nM2znPWWdyowU= -----END CERTIFICATE-----Generated at Sat Mar 7 21:19:45 2026 by rpki-client