$ rpki-client -vvf repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft File: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft (raw, json) Hash identifier: p+nhEp70nP70Js/GnxvanYY6n18IBjniVGwfKAea/28= Subject key identifier: 0F:63:A5:81:43:27:6F:AF:83:FE:9D:69:BE:5B:F2:04:97:29:27:50 Authority key identifier: A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 Certificate issuer: /CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Certificate serial: 350F79CDE04C40CE3DB50B5C23A33755AC93B91C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft Manifest number: 024A Signing time: Sun 01 Mar 2026 21:51:27 +0000 Manifest this update: Sun 01 Mar 2026 21:46:27 +0000 Manifest next update: Thu 05 Mar 2026 01:04:27 +0000 Files and hashes: 1: A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl (hash: ewAwV+QfDSCH7ieGLf3YkyCc5UJmJQfQfaul9UomvIg=) 2: 3130332e35342e3231362e302f32322d3234203d3e20313331313131.roa (hash: zE8cXMxW8vFIwxCNk8JxKaXrpgeYvceF9mZckUGnv8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:04:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0f:79:cd:e0:4c:40:ce:3d:b5:0b:5c:23:a3:37:55:ac:93:b9:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A53CE1A1762318BA9130A47CFA16027E8D1EBAC8 Validity Not Before: Mar 1 21:46:27 2026 GMT Not After : Mar 5 01:04:27 2026 GMT Subject: CN=0F63A58143276FAF83FE9D69BE5BF20497292750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b5:b9:43:78:63:8e:fc:5c:13:95:70:6b:b2: 98:7c:55:2e:ac:2e:90:62:2d:84:77:a2:64:a3:0f: 78:fe:d6:b6:09:bf:1c:0f:05:fa:96:55:15:3e:ab: 2a:35:c2:d2:67:ea:9f:66:86:89:7f:8d:fe:47:e2: 1f:2f:89:b6:0b:8b:43:c4:92:b8:76:5c:31:13:bb: c8:81:7c:39:01:e3:01:b2:b9:db:30:a3:15:92:92: 6a:18:77:69:1b:6e:ae:6c:5e:54:50:07:cc:68:6e: 2e:f5:5d:0a:f3:c4:50:77:62:78:ad:d3:59:83:b1: 70:ba:28:d1:24:ed:da:0a:8b:9c:33:83:1f:fe:a8: 58:e3:12:2b:42:19:7c:1b:91:b9:85:7c:1d:be:df: 34:d1:ff:46:64:d9:35:51:cd:3d:4c:65:f7:d3:e2: a3:7b:20:7f:61:49:f4:71:6e:c8:3f:7b:e4:d4:ec: e7:d1:37:8b:e9:03:2c:4e:cc:63:be:18:b4:72:c1: d5:96:c6:07:86:7d:9c:2f:ba:a7:4e:49:8d:eb:6e: 94:a2:d0:fe:dc:83:5e:b1:4d:66:f2:1e:ef:7f:91: 03:43:8c:57:7c:7d:7b:07:c2:36:3b:73:26:06:a6: f6:b1:37:66:17:43:2c:e1:96:a7:36:9a:d2:bb:27: c9:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:63:A5:81:43:27:6F:AF:83:FE:9D:69:BE:5B:F2:04:97:29:27:50 X509v3 Authority Key Identifier: keyid:A5:3C:E1:A1:76:23:18:BA:91:30:A4:7C:FA:16:02:7E:8D:1E:BA:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/239ead81-ac12-4479-b2fb-998e01854551/0/A53CE1A1762318BA9130A47CFA16027E8D1EBAC8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:43:41:76:a4:6c:bc:6a:81:c8:94:89:3b:40:43:83:32:da: b4:13:66:6f:1f:86:de:98:f3:5b:4a:3b:df:f4:ca:40:ab:1b: e8:1b:d2:e1:69:13:b9:63:6f:5a:fd:c2:04:f9:64:fd:36:19: 44:fe:84:7a:df:04:d2:ad:e5:d5:76:86:21:a7:b8:aa:25:cb: 31:35:84:22:4e:b5:12:a4:3e:26:5b:fa:db:2a:64:c8:03:98: 5b:8a:0b:18:53:49:20:01:dc:16:1d:37:1f:b8:f7:c1:cb:77: b3:3b:13:56:5c:97:81:a8:3a:8c:b7:33:96:b5:a2:c0:49:16: 72:b0:4d:b6:98:6c:00:8b:c0:89:b6:52:b5:89:3a:ae:df:42: c8:ec:7d:42:80:45:53:fd:1c:b6:ab:16:df:5e:c6:8a:33:08: 07:1c:85:36:6f:0d:c1:b0:39:08:c5:81:0e:68:1f:cd:c5:9b: f6:09:0e:4f:80:50:18:06:32:0b:de:d2:98:35:46:c4:c5:c6: 60:6c:c7:6d:20:24:e9:ce:29:fd:92:52:6e:a3:2a:71:fa:9b: f9:25:eb:21:15:12:b3:65:0c:3f:c5:69:90:ea:b1:0c:4c:1b: 40:7f:a9:44:12:db:4d:2b:41:a8:67:6e:d7:a4:b2:62:05:fd: 7c:cc:e9:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQ95zeBMQM49tQtcI6M3VayTuRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4 RDFFQkFDODAeFw0yNjAzMDEyMTQ2MjdaFw0yNjAzMDUwMTA0MjdaMDMxMTAvBgNV BAMTKDBGNjNBNTgxNDMyNzZGQUY4M0ZFOUQ2OUJFNUJGMjA0OTcyOTI3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFtblDeGOO/FwTlXBrsph8VS6s LpBiLYR3omSjD3j+1rYJvxwPBfqWVRU+qyo1wtJn6p9mhol/jf5H4h8vibYLi0PE krh2XDETu8iBfDkB4wGyudswoxWSkmoYd2kbbq5sXlRQB8xobi71XQrzxFB3Ynit 01mDsXC6KNEk7doKi5wzgx/+qFjjEitCGXwbkbmFfB2+3zTR/0Zk2TVRzT1MZffT 4qN7IH9hSfRxbsg/e+TU7OfRN4vpAyxOzGO+GLRywdWWxgeGfZwvuqdOSY3rbpSi 0P7cg16xTWbyHu9/kQNDjFd8fXsHwjY7cyYGpvaxN2YXQyzhlqc2mtK7J8lLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUD2OlgUMnb6+D/p1pvlvyBJcpJ1AwHwYDVR0j BBgwFoAUpTzhoXYjGLqRMKR8+hYCfo0eusgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MzllYWQ4MS1hYzEyLTQ0NzktYjJmYi05OThlMDE4NTQ1NTEvMC9BNTNDRTFBMTc2 MjMxOEJBOTEzMEE0N0NGQTE2MDI3RThEMUVCQUM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAyN0U4RDFF QkFDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjM5ZWFkODEtYWMxMi00NDc5LWIy ZmItOTk4ZTAxODU0NTUxLzAvQTUzQ0UxQTE3NjIzMThCQTkxMzBBNDdDRkExNjAy N0U4RDFFQkFDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlDQXakbLxqgciUiTtAQ4My2rQTZm8fht6Y 81tKO9/0ykCrG+gb0uFpE7ljb1r9wgT5ZP02GUT+hHrfBNKt5dV2hiGnuKolyzE1 hCJOtRKkPiZb+tsqZMgDmFuKCxhTSSAB3BYdNx+498HLd7M7E1Zcl4GoOoy3M5a1 osBJFnKwTbaYbACLwIm2UrWJOq7fQsjsfUKARVP9HLarFt9exoozCAcchTZvDcGw OQjFgQ5oH83Fm/YJDk+AUBgGMgve0pg1RsTFxmBsx20gJOnOKf2SUm6jKnH6m/kl 6yEVErNlDD/FaZDqsQxMG0B/qUQS200rQahnbteksmIF/XzM6bc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:11 2026 by rpki-client