$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: Lu9I3fn54xLPr5tU3JJGihDZdZDGvIl/mF/gGoff+FQ= Subject key identifier: AC:D1:6A:FB:67:DA:DB:F0:6A:94:71:39:A1:9E:F5:15:CF:A0:76:91 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 22546D4CA10B9D6F3C905CD71D965E3043313A28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0266 Signing time: Sun 01 Mar 2026 02:42:37 +0000 Manifest this update: Sun 01 Mar 2026 02:37:37 +0000 Manifest next update: Wed 04 Mar 2026 12:19:37 +0000 Files and hashes: 1: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: M0AUI1pCCQGDUTBoH7C4DRRLknJoPGFTXz+BysiMZwA=) 2: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: STiBlg6i4SU3Dkl1BoFAqIZ9DGwmQSeKsFmH0q5AuFk=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: aSU+DaClXnYNCWm36r1XHtwIOO4xtOawwUDVGXGyiPs=) 4: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: UocS01XlJbKSBac7WbRNzZaivUhUbWcSE2n+KruMfoM=) 5: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: y4O5dSQRMeH84EShY7UTqOa6lldWSvXCyPUWEuCTnEQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:54:6d:4c:a1:0b:9d:6f:3c:90:5c:d7:1d:96:5e:30:43:31:3a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Mar 1 02:37:37 2026 GMT Not After : Mar 4 12:19:37 2026 GMT Subject: CN=ACD16AFB67DADBF06A947139A19EF515CFA07691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:03:dc:1b:42:57:54:55:a6:85:f8:46:20:e5: 76:30:b1:db:9c:9d:eb:a7:56:4b:81:41:5c:49:d2: 51:d2:ce:fe:3e:14:22:92:ba:b2:68:53:f5:82:97: 91:83:9b:f9:21:3a:ca:fb:56:1a:ed:e9:26:15:67: 4d:67:df:47:40:04:4a:76:a1:6c:3d:72:e8:b3:bd: 68:38:fa:17:b7:1e:9a:66:fc:dd:60:d8:10:87:a4: f0:e8:d3:02:8b:76:3f:25:cc:15:30:33:dc:75:8f: e3:5b:e9:6c:92:07:35:18:6d:53:64:da:4f:55:79: a1:6b:24:33:54:cf:1f:be:5b:5d:15:52:7d:c6:be: bb:11:81:1c:d6:22:7e:79:b4:af:78:86:fa:06:e8: 4a:a3:6b:71:7c:fb:db:f5:f0:1e:08:74:bc:54:71: 0e:4a:70:38:ab:a5:82:ed:3d:36:7c:18:61:5e:fd: aa:0e:d5:d3:34:a5:31:1c:a4:22:ad:9a:28:b5:a2: 97:c0:20:ec:c7:e1:5b:b7:ec:cf:79:1a:0e:61:d6: ac:43:e1:0b:41:73:5c:3a:ec:4a:47:db:cc:8e:51: 9c:c0:bc:b1:01:de:4c:34:35:e9:5e:6b:f7:5c:3b: d2:6a:58:d3:4a:a8:10:0d:29:57:44:4a:9a:8d:65: ee:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:D1:6A:FB:67:DA:DB:F0:6A:94:71:39:A1:9E:F5:15:CF:A0:76:91 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b9:f8:48:5a:2f:51:23:a8:30:32:82:8d:2f:9c:47:c5:ee: 93:1f:1e:3f:a9:b5:44:5e:2f:8c:c7:2d:55:f2:bb:54:85:f0: 40:70:78:cb:5e:b1:36:f2:0a:be:52:3b:d6:0a:7d:1e:63:d2: 03:b2:46:88:d1:82:20:fe:84:44:b1:93:2d:35:5a:7b:28:db: 93:f1:2c:7c:af:a0:b9:c1:b8:4d:8c:84:ce:be:0e:36:31:65: 99:31:75:6f:3b:45:50:9c:87:58:9e:0a:89:e9:af:74:85:98: 08:6a:c4:2c:0e:a1:28:72:a3:33:b0:33:6c:d2:5b:88:b1:c4: c3:bc:78:0f:07:99:10:da:42:ca:f9:b5:d5:71:ae:e0:77:16: 3a:a2:56:40:74:61:dc:ae:ab:d6:76:44:f3:bd:3f:41:21:bd: eb:3d:b4:64:0e:2a:67:73:5a:02:43:f9:cc:eb:8e:44:b8:ae: 8d:53:27:72:e1:5d:6c:66:2e:79:48:96:17:5b:ff:f8:9d:f0: e2:4f:24:1f:12:02:81:6f:81:d5:ac:ce:b5:a1:b7:53:86:4b: 6d:e3:82:be:fc:f5:15:d4:bd:6e:aa:90:ab:19:65:f1:72:e7: 5c:97:fc:dc:cc:11:b3:c6:c7:71:53:c6:69:62:c4:b3:12:6f: 25:3c:89:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIlRtTKELnW88kFzXHZZeMEMxOigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNjAzMDEwMjM3MzdaFw0yNjAzMDQxMjE5MzdaMDMxMTAvBgNV BAMTKEFDRDE2QUZCNjdEQURCRjA2QTk0NzEzOUExOUVGNTE1Q0ZBMDc2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWA9wbQldUVaaF+EYg5XYwsduc neunVkuBQVxJ0lHSzv4+FCKSurJoU/WCl5GDm/khOsr7Vhrt6SYVZ01n30dABEp2 oWw9cuizvWg4+he3Hppm/N1g2BCHpPDo0wKLdj8lzBUwM9x1j+Nb6WySBzUYbVNk 2k9VeaFrJDNUzx++W10VUn3GvrsRgRzWIn55tK94hvoG6Eqja3F8+9v18B4IdLxU cQ5KcDirpYLtPTZ8GGFe/aoO1dM0pTEcpCKtmii1opfAIOzH4Vu37M95Gg5h1qxD 4QtBc1w67EpH28yOUZzAvLEB3kw0Nelea/dcO9JqWNNKqBANKVdESpqNZe5dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrNFq+2fa2/BqlHE5oZ71Fc+gdpEwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa5+EhaL1EjqDAygo0vnEfF7pMfHj+ptURe L4zHLVXyu1SF8EBweMtesTbyCr5SO9YKfR5j0gOyRojRgiD+hESxky01Wnso25Px LHyvoLnBuE2MhM6+DjYxZZkxdW87RVCch1ieConpr3SFmAhqxCwOoShyozOwM2zS W4ixxMO8eA8HmRDaQsr5tdVxruB3FjqiVkB0Ydyuq9Z2RPO9P0Ehves9tGQOKmdz WgJD+czrjkS4ro1TJ3LhXWxmLnlIlhdb//id8OJPJB8SAoFvgdWszrWht1OGS23j gr789RXUvW6qkKsZZfFy51yX/NzMEbPGx3FTxmlixLMSbyU8if4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:38:38 2026 by rpki-client