$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: WpHH/sJ8AYBoz6AkoTZheR5Npn1XV1L18J//LqMJH24= Subject key identifier: 94:B1:5C:21:C0:EE:20:65:9A:8E:A8:40:00:60:D6:4F:0E:21:37:91 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 415FF65B0AB661CAD6BC15845FB3B0535810BD63 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0177 Signing time: Wed 04 Mar 2026 01:01:33 +0000 Manifest this update: Wed 04 Mar 2026 00:56:33 +0000 Manifest next update: Sat 07 Mar 2026 05:08:33 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 2: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 3: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=) 4: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=) 5: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 6: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=) 7: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: Y1x1uzmz6CLO15krdGlhZFfwELSWq1J17BrvquwCoVo=) 8: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Mar 2026 05:08:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:5f:f6:5b:0a:b6:61:ca:d6:bc:15:84:5f:b3:b0:53:58:10:bd:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Mar 4 00:56:33 2026 GMT Not After : Mar 7 05:08:33 2026 GMT Subject: CN=94B15C21C0EE20659A8EA8400060D64F0E213791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:fd:ea:10:97:22:e5:f8:7b:62:33:18:bc:80: 69:eb:5e:3f:ad:c3:9a:08:75:98:52:e4:3a:7a:1b: 32:71:d0:52:b2:f3:0f:2c:17:2d:d0:b7:8e:15:e6: 6c:bc:f9:2a:e1:42:98:c3:71:12:67:1a:20:1a:5b: 65:f3:65:c1:0c:5b:16:55:c4:77:74:60:52:a7:94: 1e:4c:a9:39:c2:06:76:42:79:c8:b7:14:87:5e:cf: bb:2c:03:53:e6:92:ca:31:ae:67:38:a0:11:08:d0: 9d:d3:91:3a:6e:66:2c:99:04:34:b2:92:47:27:ca: 89:86:8e:9a:f9:0a:10:de:2e:c0:19:09:49:ad:80: cc:a5:2a:55:cb:23:66:84:17:5e:da:c4:d3:38:49: db:14:5b:e1:a0:b4:1c:9c:36:f9:c7:08:e7:90:c1: 19:61:37:32:97:cf:c7:cd:ce:5e:40:6f:fb:b1:3f: a8:91:7c:c1:e5:77:9b:d6:eb:04:2e:80:32:84:04: ca:1e:6f:db:e5:77:62:57:d1:d6:e4:e0:5f:16:8f: e4:b8:0c:95:da:41:1a:94:05:2d:8a:0e:e4:ca:e1: 66:9e:be:cb:89:2a:f5:61:f4:84:7f:85:d5:62:2d: 1c:f9:7a:47:f2:a0:12:09:51:7f:9a:24:1e:13:4e: fc:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:B1:5C:21:C0:EE:20:65:9A:8E:A8:40:00:60:D6:4F:0E:21:37:91 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:90:bb:d0:51:38:9a:6f:15:b7:09:8d:ff:ef:f4:30:5b:ca: 34:bc:1e:65:c2:f1:b7:66:b3:57:69:3a:c6:34:e0:98:dd:32: 53:6e:7d:ff:9c:ab:90:9b:80:9a:58:7d:a5:e3:de:6f:6f:7f: 2e:04:0f:b4:90:56:cf:78:cf:54:7b:f6:84:1e:d6:a6:c2:84: 46:7f:6c:0d:e8:26:07:ec:8f:45:1c:03:bf:48:14:71:1f:e5: 23:f9:ba:27:a1:02:b6:ba:d6:87:d1:f2:7b:af:50:e3:c6:fa: fc:14:36:73:fb:25:18:6e:e9:2f:eb:3c:02:97:94:c5:24:3f: 7b:79:60:16:70:68:e0:d4:0d:b0:d6:0a:78:c6:23:a6:db:89: 0d:98:cd:9f:c4:1b:70:b6:4e:40:d3:f9:8b:e4:c1:45:5e:6c: 38:9a:f2:9c:f8:05:17:ce:62:74:c6:3d:ff:c8:8b:19:ba:01: 8f:fa:11:e2:77:bd:ff:11:71:15:6c:65:0b:68:e8:8b:f5:3f: db:37:3d:8b:82:77:99:b4:97:ea:04:ca:64:dc:26:eb:16:a7: b4:42:52:aa:c3:49:69:91:8a:22:3b:b9:a0:cd:dc:8a:91:bc: c0:89:ba:ce:c5:a2:22:d4:88:aa:db:a0:39:73:91:22:fd:03: 52:bd:71:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQV/2Wwq2YcrWvBWEX7OwU1gQvWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNjAzMDQwMDU2MzNaFw0yNjAzMDcwNTA4MzNaMDMxMTAvBgNV BAMTKDk0QjE1QzIxQzBFRTIwNjU5QThFQTg0MDAwNjBENjRGMEUyMTM3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP/eoQlyLl+HtiMxi8gGnrXj+t w5oIdZhS5Dp6GzJx0FKy8w8sFy3Qt44V5my8+SrhQpjDcRJnGiAaW2XzZcEMWxZV xHd0YFKnlB5MqTnCBnZCeci3FIdez7ssA1Pmksoxrmc4oBEI0J3TkTpuZiyZBDSy kkcnyomGjpr5ChDeLsAZCUmtgMylKlXLI2aEF17axNM4SdsUW+GgtBycNvnHCOeQ wRlhNzKXz8fNzl5Ab/uxP6iRfMHld5vW6wQugDKEBMoeb9vld2JX0dbk4F8Wj+S4 DJXaQRqUBS2KDuTK4WaevsuJKvVh9IR/hdViLRz5ekfyoBIJUX+aJB4TTvydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlLFcIcDuIGWajqhAAGDWTw4hN5EwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFCQu9BROJpvFbcJjf/v9DBbyjS8HmXC8bdm s1dpOsY04JjdMlNuff+cq5CbgJpYfaXj3m9vfy4ED7SQVs94z1R79oQe1qbChEZ/ bA3oJgfsj0UcA79IFHEf5SP5uiehAra61ofR8nuvUOPG+vwUNnP7JRhu6S/rPAKX lMUkP3t5YBZwaODUDbDWCnjGI6bbiQ2YzZ/EG3C2TkDT+YvkwUVebDia8pz4BRfO YnTGPf/Iixm6AY/6EeJ3vf8RcRVsZQto6Iv1P9s3PYuCd5m0l+oEymTcJusWp7RC UqrDSWmRiiI7uaDN3IqRvMCJus7FoiLUiKrboDlzkSL9A1K9cYI= -----END CERTIFICATE-----Generated at Thu Mar 5 22:20:39 2026 by rpki-client