$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft File: A0021383E40D55B69009CDEA313E654C3CE463B0.mft (raw, json) Hash identifier: mVp9E313EVoDG6wL2ey7NINrRsNClneAwvwkhHqgvTs= Subject key identifier: A4:69:99:08:6D:14:9A:EA:00:DD:8A:56:63:0B:13:DA:20:5C:AA:4C Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 Certificate issuer: /CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Certificate serial: 226CF1457837C84324612E89F57B212B00EBD91E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft Manifest number: 04A3 Signing time: Sun 01 Mar 2026 10:51:47 +0000 Manifest this update: Sun 01 Mar 2026 10:46:47 +0000 Manifest next update: Wed 04 Mar 2026 13:04:47 +0000 Files and hashes: 1: 3130332e3135382e3139322e302f32342d3234203d3e20313439373035.roa (hash: zzYEb/fwe0SxrS/0Hgs2jLEQVjX3qR9GD9AYVGEuUXM=) 2: 3130332e3135382e3139332e302f32342d3234203d3e20313439373035.roa (hash: DmjamGqZJwfby4ZsZWwAD877kDOxqIbRWEyViTJ9Klo=) 3: A0021383E40D55B69009CDEA313E654C3CE463B0.crl (hash: LHejusAiWHPdJHVWj+QboDwzJv4isAv9LCiEXIbFy+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:04:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:6c:f1:45:78:37:c8:43:24:61:2e:89:f5:7b:21:2b:00:eb:d9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0 Validity Not Before: Mar 1 10:46:47 2026 GMT Not After : Mar 4 13:04:47 2026 GMT Subject: CN=A46999086D149AEA00DD8A56630B13DA205CAA4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:45:b8:e8:fc:4e:2e:94:f2:67:f8:6e:73:7d: 9c:3a:24:9d:70:eb:82:bc:21:90:ef:c4:19:26:09: 46:f5:d2:f6:f9:10:59:d0:96:40:22:ec:5b:ef:66: 67:ae:47:a0:42:a5:a7:3c:19:24:f8:23:02:3f:d7: 91:3b:54:65:f0:8a:30:b5:48:82:7e:30:77:3c:67: 8a:82:17:ef:7b:93:d6:7c:90:76:d8:d0:80:7e:ba: a1:73:27:63:32:3d:04:b1:d4:71:bb:c0:88:4e:8b: a1:5c:25:28:eb:82:66:06:d0:ef:00:90:28:65:70: 49:1a:30:70:8f:6f:6e:8b:59:42:4b:6d:a8:e4:64: b5:c3:c1:4c:37:64:3d:60:51:ed:5d:cb:f2:fd:30: cd:b7:a2:44:b9:fb:9e:87:6c:76:ba:04:32:0a:3f: 13:7c:1b:ba:78:64:da:ea:52:82:5c:4b:77:f5:10: b4:f6:0e:08:05:fc:75:a9:66:68:b5:2f:4e:41:52: 63:2f:6c:09:a3:e9:91:b4:55:2c:50:a4:8d:3a:2d: 9a:af:a0:34:e0:7e:41:fe:76:a0:a2:ce:ae:02:5b: 4d:10:ba:d8:da:1b:95:d6:09:dd:b8:7a:8e:f2:d4: e8:b9:95:9d:cc:2e:83:f6:22:99:d0:f0:75:e3:99: 9b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:69:99:08:6D:14:9A:EA:00:DD:8A:56:63:0B:13:DA:20:5C:AA:4C X509v3 Authority Key Identifier: keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:df:84:1a:51:7b:bd:2b:8c:67:32:c1:4f:49:3f:74:6e:a1: 24:64:93:45:24:1c:ef:11:af:cc:4f:89:06:99:fd:38:d2:7f: 73:b1:40:85:13:9e:df:1a:86:ef:74:34:a9:3d:f6:34:54:72: 9a:ef:32:07:78:39:ca:fd:47:64:09:8b:49:21:6d:ec:ed:87: 79:ee:08:2a:8e:84:64:55:3c:4f:db:0f:87:55:d4:37:96:f6: 2e:31:19:ad:c3:a6:35:04:5e:8f:1c:cc:a8:f3:1e:5d:93:8b: e8:51:98:d0:2f:cf:5e:b4:e5:6e:d4:20:c7:d9:59:15:37:95: 31:c5:f0:d1:b4:3d:2e:7f:ef:86:67:0b:66:00:54:b6:22:4f: e6:83:57:58:eb:80:6f:99:2a:a4:15:f6:64:04:18:59:e0:70: 49:f2:da:76:d3:7d:b7:06:38:09:1a:1f:ba:de:c2:b3:c6:4e: 9b:9d:f8:0d:98:bd:4b:f7:a0:23:8f:f9:11:6d:5b:31:d8:0a: 6f:ff:6a:3e:8c:8e:33:a3:07:a5:03:b2:77:5b:31:ab:c4:27: 7d:62:8c:5c:ec:7f:37:05:8d:53:24:5f:8f:8e:95:20:7d:d2: 4d:39:41:40:4e:dd:59:9c:dd:10:c9:5d:a3:7f:98:9c:64:71: be:1b:39:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImzxRXg3yEMkYS6J9XshKwDr2R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz Q0U0NjNCMDAeFw0yNjAzMDExMDQ2NDdaFw0yNjAzMDQxMzA0NDdaMDMxMTAvBgNV BAMTKEE0Njk5OTA4NkQxNDlBRUEwMEREOEE1NjYzMEIxM0RBMjA1Q0FBNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyRbjo/E4ulPJn+G5zfZw6JJ1w 64K8IZDvxBkmCUb10vb5EFnQlkAi7FvvZmeuR6BCpac8GST4IwI/15E7VGXwijC1 SIJ+MHc8Z4qCF+97k9Z8kHbY0IB+uqFzJ2MyPQSx1HG7wIhOi6FcJSjrgmYG0O8A kChlcEkaMHCPb26LWUJLbajkZLXDwUw3ZD1gUe1dy/L9MM23okS5+56HbHa6BDIK PxN8G7p4ZNrqUoJcS3f1ELT2DggF/HWpZmi1L05BUmMvbAmj6ZG0VSxQpI06LZqv oDTgfkH+dqCizq4CW00QutjaG5XWCd24eo7y1Oi5lZ3MLoP2IpnQ8HXjmZvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpGmZCG0UmuoA3YpWYwsT2iBcqkwwHwYDVR0j BBgwFoAUoAITg+QNVbaQCc3qMT5lTDzkY7AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC9BMDAyMTM4M0U0 MEQ1NUI2OTAwOUNERUEzMTNFNjU0QzNDRTQ2M0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMzQ0U0 NjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1 NEMzQ0U0NjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG/fhBpRe70rjGcywU9JP3RuoSRkk0UkHO8R r8xPiQaZ/TjSf3OxQIUTnt8ahu90NKk99jRUcprvMgd4Ocr9R2QJi0khbezth3nu CCqOhGRVPE/bD4dV1DeW9i4xGa3DpjUEXo8czKjzHl2Ti+hRmNAvz1605W7UIMfZ WRU3lTHF8NG0PS5/74ZnC2YAVLYiT+aDV1jrgG+ZKqQV9mQEGFngcEny2nbTfbcG OAkaH7rewrPGTpud+A2YvUv3oCOP+RFtWzHYCm//aj6MjjOjB6UDsndbMavEJ31i jFzsfzcFjVMkX4+OlSB90k05QUBO3Vmc3RDJXaN/mJxkcb4bOTo= -----END CERTIFICATE-----Generated at Mon Mar 2 17:13:28 2026 by rpki-client