$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft File: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft (raw, json) Hash identifier: kLmVi/h2uCbe5uGShbBZH7Kp8bDyuXhDmc73GDfXPbI= Subject key identifier: 08:E8:7D:90:B8:D7:3B:D2:90:27:75:62:07:BE:9B:10:D0:AB:26:55 Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C Certificate issuer: /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Certificate serial: 539F473C23654F3AEBB0FC48EC8DF0C6A666197D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft Manifest number: 052B Signing time: Sat 28 Feb 2026 23:31:51 +0000 Manifest this update: Sat 28 Feb 2026 23:26:51 +0000 Manifest next update: Wed 04 Mar 2026 11:00:51 +0000 Files and hashes: 1: 3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (hash: LCTalW2OdI1gYSKj0d9a5cN3x/BU4CR5jkgjJ4XsxFo=) 2: 3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (hash: 2xWbB4/mYqrmplHY/8MyqkPKEZcXvKjkESzZID4DGlk=) 3: A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl (hash: Wf/JKeMQ4mQfM4SwcKBy8MDTjLX4pbDQ5h9zzHb28/A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:00:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:9f:47:3c:23:65:4f:3a:eb:b0:fc:48:ec:8d:f0:c6:a6:66:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C Validity Not Before: Feb 28 23:26:51 2026 GMT Not After : Mar 4 11:00:51 2026 GMT Subject: CN=08E87D90B8D73BD29027756207BE9B10D0AB2655 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:ad:28:e3:55:3c:89:57:ee:30:dc:18:1d:2c: 2b:95:78:4e:0d:d1:9a:51:47:6c:6c:c4:1c:68:81: 61:9e:41:22:b0:41:4b:dd:a5:82:f8:b8:3f:3b:6c: b1:82:7f:13:50:9b:3e:73:27:dd:ef:b2:c0:26:46: 3d:61:b9:67:75:8b:6a:05:91:06:d5:65:d8:ba:cc: c1:ee:7f:4f:e8:45:00:30:95:4b:24:d4:af:32:6d: 07:4d:e8:0b:50:cf:f1:d2:f0:d1:1a:92:16:89:36: 6a:06:24:17:a5:a3:79:b6:33:a5:98:86:24:e8:70: 5e:72:c3:5e:30:40:92:f8:32:cf:d4:1a:7f:29:0f: 44:8e:39:76:08:6c:a0:2c:6f:31:48:eb:36:61:59: 4d:fd:26:9e:ea:84:c6:47:d1:b2:51:2e:88:49:1f: 0f:53:2e:23:18:00:f7:e6:53:c4:83:e0:ce:a6:8f: f1:7e:f0:e0:cb:af:9c:f3:0b:7f:8c:16:b4:ee:93: 1f:e0:83:a3:e8:d2:fd:ab:ba:28:48:b3:59:9d:3e: e9:1c:3d:cc:47:3f:bc:25:ca:64:d2:24:46:f6:d1: 64:b1:fb:22:5b:e6:b6:97:50:d7:33:26:f4:26:ea: d6:91:a8:29:23:38:7b:ea:ad:fd:f3:cf:e6:b0:73: 7e:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:E8:7D:90:B8:D7:3B:D2:90:27:75:62:07:BE:9B:10:D0:AB:26:55 X509v3 Authority Key Identifier: keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:54:8d:24:38:45:71:72:82:25:88:9b:f5:69:a9:05:f9:cf: c1:f5:57:4c:2f:23:a2:8d:88:37:ac:e2:97:bc:d7:e8:1a:72: 75:0a:65:7a:d0:f8:0e:48:ba:15:d9:80:e8:a6:ff:c3:ce:6d: 5d:d0:8c:cf:63:75:23:bb:89:47:1a:31:db:c8:14:7f:6c:6d: aa:0c:cd:43:00:ac:61:48:6a:e1:ab:14:b8:e8:28:f4:e9:ee: 89:b7:11:a1:dd:37:91:c7:77:54:06:90:eb:07:6b:f0:a3:05: 72:56:53:c0:8d:9d:69:71:80:f2:35:a9:ae:2b:04:32:46:89: bb:9d:9f:4f:87:f1:2a:a1:cb:08:82:8d:19:1e:cf:93:a9:14: 8f:58:09:34:52:0a:c1:56:2f:7d:25:8a:56:79:04:6d:b1:15: 67:ff:19:61:46:8e:48:b9:c4:d0:37:a5:dc:c9:40:9d:79:6a: 38:65:02:7e:f0:d2:9a:c3:6a:d9:98:1f:89:35:6d:d3:3a:65: 82:f1:02:23:6e:da:01:4d:38:69:f2:59:f0:43:ba:0f:4c:58: 0a:c5:89:62:d8:34:11:88:c7:1e:94:73:d5:dc:71:35:1f:fd: 30:aa:62:a5:3e:bd:9a:ac:65:8f:9a:53:bc:e4:c6:1b:45:2a: 51:94:5f:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU59HPCNlTzrrsPxI7I3wxqZmGX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJE RTBEMkYwQzAeFw0yNjAyMjgyMzI2NTFaFw0yNjAzMDQxMTAwNTFaMDMxMTAvBgNV BAMTKDA4RTg3RDkwQjhENzNCRDI5MDI3NzU2MjA3QkU5QjEwRDBBQjI2NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKrSjjVTyJV+4w3BgdLCuVeE4N 0ZpRR2xsxBxogWGeQSKwQUvdpYL4uD87bLGCfxNQmz5zJ93vssAmRj1huWd1i2oF kQbVZdi6zMHuf0/oRQAwlUsk1K8ybQdN6AtQz/HS8NEakhaJNmoGJBelo3m2M6WY hiTocF5yw14wQJL4Ms/UGn8pD0SOOXYIbKAsbzFI6zZhWU39Jp7qhMZH0bJRLohJ Hw9TLiMYAPfmU8SD4M6mj/F+8ODLr5zzC3+MFrTukx/gg6Po0v2ruihIs1mdPukc PcxHP7wlymTSJEb20WSx+yJb5raXUNczJvQm6taRqCkjOHvqrf3zz+awc37lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCOh9kLjXO9KQJ3ViB76bENCrJlUwHwYDVR0j BBgwFoAUpVHJyZkeIP+ZwqdIy3Zlst4NLwwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MGU4ODc3NC04NDRmLTQ2MTYtOGJkMC1kYzMxMzkyODczMGMvMC9BNTUxQzlDOTk5 MUUyMEZGOTlDMkE3NDhDQjc2NjVCMkRFMEQyRjBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1QjJERTBE MkYwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTBlODg3NzQtODQ0Zi00NjE2LThi ZDAtZGMzMTM5Mjg3MzBjLzAvQTU1MUM5Qzk5OTFFMjBGRjk5QzJBNzQ4Q0I3NjY1 QjJERTBEMkYwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNUjSQ4RXFygiWIm/VpqQX5z8H1V0wvI6KN iDes4pe81+gacnUKZXrQ+A5IuhXZgOim/8PObV3QjM9jdSO7iUcaMdvIFH9sbaoM zUMArGFIauGrFLjoKPTp7om3EaHdN5HHd1QGkOsHa/CjBXJWU8CNnWlxgPI1qa4r BDJGibudn0+H8SqhywiCjRkez5OpFI9YCTRSCsFWL30lilZ5BG2xFWf/GWFGjki5 xNA3pdzJQJ15ajhlAn7w0prDatmYH4k1bdM6ZYLxAiNu2gFNOGnyWfBDug9MWArF iWLYNBGIxx6Uc9XccTUf/TCqYqU+vZqsZY+aU7zkxhtFKlGUX8s= -----END CERTIFICATE-----Generated at Mon Mar 2 22:49:18 2026 by rpki-client