$ rpki-client -vvf repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft File: 032056FFABA06741112BA404900B315C87E35361.mft (raw, json) Hash identifier: oGjGu/CcMfDp9XQG+muH88hxO6u2m1mcu70U5trHdLE= Subject key identifier: 79:59:D6:91:C3:D4:1D:CD:D7:BF:F8:22:1D:61:90:96:F2:D5:24:56 Authority key identifier: 03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 Certificate issuer: /CN=032056FFABA06741112BA404900B315C87E35361 Certificate serial: 5A6F9AA2D3DD7FEC491FE5FE6C7921D4A6D5D58B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft Manifest number: 04E0 Signing time: Sun 01 Mar 2026 23:11:56 +0000 Manifest this update: Sun 01 Mar 2026 23:06:56 +0000 Manifest next update: Thu 05 Mar 2026 04:55:56 +0000 Files and hashes: 1: 3130332e3136302e3137382e302f32342d3234203d3e20313431353932.roa (hash: 070ri83xExMdKtEdfjzfBz11cSdoZunm6w/qFgRzS8c=) 2: 3130332e3136302e3137382e302f32332d3233203d3e20313431353932.roa (hash: QK6CN8VP70JNYDKvwc0+OXdvb1mIgOWz+j/nYm9EjQI=) 3: 3130332e3136302e3137392e302f32342d3234203d3e20313431353932.roa (hash: XpUtFFHKDImDXUc3xuhie6Np6VSuqCdJLLAEZLptbEU=) 4: 032056FFABA06741112BA404900B315C87E35361.crl (hash: f4OjGnriV0gjQExlLBs0LwX89htnNp26yII0sYJJb60=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:55:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:6f:9a:a2:d3:dd:7f:ec:49:1f:e5:fe:6c:79:21:d4:a6:d5:d5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=032056FFABA06741112BA404900B315C87E35361 Validity Not Before: Mar 1 23:06:56 2026 GMT Not After : Mar 5 04:55:56 2026 GMT Subject: CN=7959D691C3D41DCDD7BFF8221D619096F2D52456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ad:2a:71:04:b0:be:82:8b:f9:35:04:67:19: ab:99:32:e6:e1:d6:74:bc:c9:bc:15:44:66:30:21: 92:6e:25:da:6a:25:6d:55:61:83:cb:b5:16:03:2d: e6:f2:85:17:79:a5:c0:67:af:b6:3d:cb:c1:71:1c: 35:21:c6:4e:eb:6d:29:20:19:91:90:54:b7:b1:f4: d4:80:00:60:9e:00:40:53:d9:01:5f:18:c8:6a:9e: f9:fc:06:39:db:bf:67:4a:30:8d:66:bf:9e:94:73: 9a:54:fe:55:e5:ab:f6:c7:d2:af:65:74:66:e8:6d: 3f:ee:05:87:7e:bd:48:3d:e6:30:bc:9a:28:c0:84: be:7c:fd:0b:34:ec:e5:7f:2e:84:74:52:84:4f:48: 07:2d:7b:a6:66:1a:cc:f1:2d:89:be:db:40:5e:75: 77:74:84:bc:1c:e1:21:e1:4e:8f:91:74:46:b2:a5: 6e:e1:72:c8:4b:76:1f:19:84:56:cf:3e:69:d6:bd: a6:43:c0:82:2e:06:42:6d:12:97:7e:42:50:a4:57: 00:8c:fc:5f:74:2f:31:54:60:cb:55:2e:d5:d1:be: ce:ce:e2:55:92:a3:9b:8b:eb:f0:bf:f3:ca:45:85: 23:3a:27:cf:10:a8:71:2f:be:ff:7b:ef:92:6b:b5: e8:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:59:D6:91:C3:D4:1D:CD:D7:BF:F8:22:1D:61:90:96:F2:D5:24:56 X509v3 Authority Key Identifier: keyid:03:20:56:FF:AB:A0:67:41:11:2B:A4:04:90:0B:31:5C:87:E3:53:61 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/032056FFABA06741112BA404900B315C87E35361.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20a820b4-82ef-4412-be2e-5d6914bd4844/0/032056FFABA06741112BA404900B315C87E35361.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:14:83:69:fc:5e:52:25:66:65:37:a0:65:dd:e5:98:ca:41: 52:2d:29:c2:27:1a:cb:1b:44:c6:34:01:ff:1e:96:cd:f5:29: 8f:5a:05:d3:5e:4f:16:1d:6d:02:b5:f9:0a:52:c5:f2:f4:d2: d3:25:38:ec:f8:f3:00:02:57:29:7b:26:0e:18:72:b7:29:7e: 21:fa:b4:b5:94:e1:f9:94:21:58:81:bf:e4:ea:01:34:66:6e: ab:5c:eb:d3:30:c9:89:f6:c4:63:ec:2c:6b:05:51:17:9e:ae: 52:82:8e:25:86:de:0e:01:4f:99:41:b3:d7:a5:a7:23:2c:7d: 51:d7:45:ba:e9:97:7d:a7:5a:a9:7f:e2:0a:32:d0:31:67:f7: 69:1e:03:e9:64:c6:89:91:03:b3:f1:eb:7a:57:2b:db:b8:7f: e4:fa:f0:53:48:45:eb:73:87:f1:fa:fc:f0:e0:a4:48:cd:75: 86:3b:55:50:de:3a:b0:6d:d1:7f:6d:80:f3:6f:56:bb:af:83: 83:cc:b5:47:50:57:c5:05:51:33:32:a7:c8:df:b0:fc:36:20: f2:cb:4c:ee:8c:68:21:e4:ec:f1:c5:4a:3d:0c:1e:ef:ec:a6: 6c:6a:23:38:9e:25:d9:97:ac:a9:41:77:cd:15:42:f5:27:c2: ed:0c:bc:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWm+aotPdf+xJH+X+bHkh1KbV1YswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4 N0UzNTM2MTAeFw0yNjAzMDEyMzA2NTZaFw0yNjAzMDUwNDU1NTZaMDMxMTAvBgNV BAMTKDc5NTlENjkxQzNENDFEQ0REN0JGRjgyMjFENjE5MDk2RjJENTI0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/rSpxBLC+gov5NQRnGauZMubh 1nS8ybwVRGYwIZJuJdpqJW1VYYPLtRYDLebyhRd5pcBnr7Y9y8FxHDUhxk7rbSkg GZGQVLex9NSAAGCeAEBT2QFfGMhqnvn8Bjnbv2dKMI1mv56Uc5pU/lXlq/bH0q9l dGbobT/uBYd+vUg95jC8mijAhL58/Qs07OV/LoR0UoRPSActe6ZmGszxLYm+20Be dXd0hLwc4SHhTo+RdEaypW7hcshLdh8ZhFbPPmnWvaZDwIIuBkJtEpd+QlCkVwCM /F90LzFUYMtVLtXRvs7O4lWSo5uL6/C/88pFhSM6J88QqHEvvv9775JrtehjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeVnWkcPUHc3Xv/giHWGQlvLVJFYwHwYDVR0j BBgwFoAUAyBW/6ugZ0ERK6QEkAsxXIfjU2EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGE4MjBiNC04MmVmLTQ0MTItYmUyZS01ZDY5MTRiZDQ4NDQvMC8wMzIwNTZGRkFC QTA2NzQxMTEyQkE0MDQ5MDBCMzE1Qzg3RTM1MzYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMxNUM4N0Uz NTM2MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBhODIwYjQtODJlZi00NDEyLWJl MmUtNWQ2OTE0YmQ0ODQ0LzAvMDMyMDU2RkZBQkEwNjc0MTExMkJBNDA0OTAwQjMx NUM4N0UzNTM2MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQUg2n8XlIlZmU3oGXd5ZjKQVItKcInGssb RMY0Af8els31KY9aBdNeTxYdbQK1+QpSxfL00tMlOOz48wACVyl7Jg4YcrcpfiH6 tLWU4fmUIViBv+TqATRmbqtc69MwyYn2xGPsLGsFUReerlKCjiWG3g4BT5lBs9el pyMsfVHXRbrpl32nWql/4goy0DFn92keA+lkxomRA7Px63pXK9u4f+T68FNIRetz h/H6/PDgpEjNdYY7VVDeOrBt0X9tgPNvVruvg4PMtUdQV8UFUTMyp8jfsPw2IPLL TO6MaCHk7PHFSj0MHu/spmxqIzieJdmXrKlBd80VQvUnwu0MvHk= -----END CERTIFICATE-----Generated at Mon Mar 2 18:31:08 2026 by rpki-client