$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: ruku/2pmhSp7WV9OhRAM6y71J2vjaixJObWIX3Q3QIg= Subject key identifier: C9:2D:9C:D7:59:E5:0E:27:00:27:CE:12:FF:BA:F0:67:8A:9B:E4:30 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 0E17BC47A696CF57701D6A73CD8CA278EFEE5F8E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0125 Signing time: Fri 06 Mar 2026 18:32:37 +0000 Manifest this update: Fri 06 Mar 2026 18:27:37 +0000 Manifest next update: Mon 09 Mar 2026 18:39:37 +0000 Files and hashes: 1: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: 8G/OvNV8G8K0z0Y3pcPl/AUtYdV+5nCIpoQRLCkerkg=) 2: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 3: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) 4: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:17:bc:47:a6:96:cf:57:70:1d:6a:73:cd:8c:a2:78:ef:ee:5f:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Mar 6 18:27:37 2026 GMT Not After : Mar 9 18:39:37 2026 GMT Subject: CN=C92D9CD759E50E270027CE12FFBAF0678A9BE430 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:52:06:c4:fa:c1:bd:93:dc:ea:bc:d6:a7: 5a:5f:78:9f:2f:94:a6:e4:b9:45:3e:4e:a2:39:d1: 85:93:24:15:cf:48:0d:c0:d7:b3:a4:a0:4e:90:7b: b4:93:12:e4:78:44:6a:33:82:fc:7e:77:41:b9:aa: b9:0b:73:0e:40:4b:75:76:51:21:41:c2:f6:5e:72: 3d:10:2a:93:53:a0:5a:64:a2:1e:f7:25:c3:81:3b: 45:31:50:e0:bb:c8:e3:a0:2d:3b:60:8a:d6:7f:96: 15:39:6a:9d:b9:f7:94:b6:bc:5d:1c:a0:ca:8e:59: 42:a3:c5:a1:7c:77:63:33:86:9c:0a:6d:25:bc:08: 5e:17:5c:9c:67:13:79:f8:61:36:e4:0e:8b:9f:67: 25:b7:b0:56:a5:f2:01:20:a8:f4:e5:a1:13:43:9b: 36:21:fd:af:34:6b:f6:01:35:4d:91:1a:f5:73:49: e2:fd:e9:aa:22:18:79:61:6c:4c:5a:df:80:06:8b: 6f:2c:bd:68:24:dd:6a:81:d8:e3:69:64:9e:05:cd: 68:f5:5b:d8:ba:df:5f:69:21:13:10:f4:aa:21:cf: 0e:5f:f9:a6:f0:f8:0a:f1:aa:39:7c:8d:90:1b:e7: 68:e1:00:b4:d7:00:95:94:e8:08:75:b1:c3:eb:fb: fc:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:2D:9C:D7:59:E5:0E:27:00:27:CE:12:FF:BA:F0:67:8A:9B:E4:30 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:3f:67:2b:0f:b3:c0:17:bc:96:8b:d0:86:ed:c5:52:35:52: 03:37:19:60:f3:10:98:13:7e:a7:92:77:0b:94:29:f4:46:ef: 5a:ed:06:df:bb:5e:47:e2:c1:6f:bd:25:c1:60:d3:b1:5d:6b: 46:98:b5:fa:03:c5:f7:e4:f3:87:fd:f3:ab:c6:25:c4:84:46: 32:bc:cb:aa:ff:98:47:ea:bd:02:a9:1a:6e:97:31:69:49:eb: 74:95:b7:09:0a:7c:7f:e1:c0:e7:90:f2:41:ab:10:fe:43:11: 88:ec:41:b9:39:ac:26:6a:86:e3:ea:3a:ba:26:32:c5:b1:05: b3:be:42:89:83:f2:86:69:8e:30:28:0f:be:86:8c:94:c8:4f: 5f:7a:a1:bd:86:37:06:62:4b:d8:21:0e:a8:42:db:8f:7b:58: 5f:b7:2f:e8:28:bd:3a:1e:ac:9f:d7:38:74:b1:98:db:87:d5: 5b:53:d7:d9:8a:b7:44:0b:c1:e9:b1:0d:e6:e9:22:12:60:da: 55:e9:68:4e:38:ca:87:67:0f:5d:97:5a:c9:e1:e0:8b:dc:c5: ad:15:ac:57:0c:87:ae:8b:d3:2e:bf:ac:07:6c:60:da:2b:2c: f1:85:6a:3f:02:8d:2f:d5:45:a5:1c:e9:44:ca:8f:20:22:e0: c0:40:9a:05 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDhe8R6aWz1dwHWpzzYyieO/uX44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjAzMDYxODI3MzdaFw0yNjAzMDkxODM5MzdaMDMxMTAvBgNV BAMTKEM5MkQ5Q0Q3NTlFNTBFMjcwMDI3Q0UxMkZGQkFGMDY3OEE5QkU0MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdylIGxPrBvZPc6rzWp1pfeJ8v lKbkuUU+TqI50YWTJBXPSA3A17OkoE6Qe7STEuR4RGozgvx+d0G5qrkLcw5AS3V2 USFBwvZecj0QKpNToFpkoh73JcOBO0UxUOC7yOOgLTtgitZ/lhU5ap2595S2vF0c oMqOWUKjxaF8d2MzhpwKbSW8CF4XXJxnE3n4YTbkDoufZyW3sFal8gEgqPTloRND mzYh/a80a/YBNU2RGvVzSeL96aoiGHlhbExa34AGi28svWgk3WqB2ONpZJ4FzWj1 W9i6319pIRMQ9Kohzw5f+abw+Arxqjl8jZAb52jhALTXAJWU6Ah1scPr+/w/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyS2c11nlDicAJ84S/7rwZ4qb5DAwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIY/ZysPs8AXvJaL0IbtxVI1UgM3GWDzEJgT fqeSdwuUKfRG71rtBt+7XkfiwW+9JcFg07Fda0aYtfoDxffk84f986vGJcSERjK8 y6r/mEfqvQKpGm6XMWlJ63SVtwkKfH/hwOeQ8kGrEP5DEYjsQbk5rCZqhuPqOrom MsWxBbO+QomD8oZpjjAoD76GjJTIT196ob2GNwZiS9ghDqhC2497WF+3L+govToe rJ/XOHSxmNuH1VtT19mKt0QLwemxDebpIhJg2lXpaE44yodnD12XWsnh4Ivcxa0V rFcMh66L0y6/rAdsYNorLPGFaj8CjS/VRaUc6UTKjyAi4MBAmgU= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:33 2026 by rpki-client