$ rpki-client -vvf repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft File: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft (raw, json) Hash identifier: RrQhaOBjkIzNkr0Gqd8/5de6rXGSEfRc4vROay3pJKk= Subject key identifier: DF:5E:C8:ED:E4:43:F7:41:6C:35:40:D7:B0:48:1D:76:59:20:C4:3D Authority key identifier: A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB Certificate issuer: /CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Certificate serial: 155114EE8F49AD7B61E800A959C244A843F9BAE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft Manifest number: FC Signing time: Sun 01 Mar 2026 17:41:05 +0000 Manifest this update: Sun 01 Mar 2026 17:36:05 +0000 Manifest next update: Wed 04 Mar 2026 20:54:05 +0000 Files and hashes: 1: A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl (hash: bKwEi84i8Hlu4dN/z5qHIiuIfZQqM9t5vd7zaniZl5Y=) 2: 3136302e32302e33362e302f32332d3234203d3e20313532373631.roa (hash: e3Ye+8KBt0e+GgLTg5uGXR8hoI4RqWYobVVv7ZziGMY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:51:14:ee:8f:49:ad:7b:61:e8:00:a9:59:c2:44:a8:43:f9:ba:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB Validity Not Before: Mar 1 17:36:05 2026 GMT Not After : Mar 4 20:54:05 2026 GMT Subject: CN=DF5EC8EDE443F7416C3540D7B0481D765920C43D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:eb:3f:dc:20:5b:5e:86:78:08:2e:fd:11:88: d9:8c:54:63:c3:20:75:af:20:5d:07:a8:50:ef:ec: 86:32:f3:c0:62:7a:13:d8:e9:9b:10:c0:8e:03:cc: d9:0c:9e:83:3f:53:f8:9a:f8:3f:06:90:a0:a0:a2: 0e:12:3d:12:b1:8c:7b:3b:40:49:74:8d:54:1d:c8: 3a:8a:9f:5a:6f:f0:3a:bb:4e:cb:96:31:97:80:61: 0d:b1:69:00:3c:64:ad:64:08:43:b6:4e:a5:a2:af: 27:3a:28:ec:44:54:43:ff:64:c7:15:58:88:4e:84: 41:d2:5d:f7:cf:51:6d:c5:1e:4f:f0:ce:f8:3e:b6: f6:3c:29:f3:29:30:aa:a5:df:3a:9d:1d:43:8f:d2: 3e:fe:f3:c3:e8:54:9c:ea:61:cb:a8:d4:69:5c:4c: d3:33:b0:2b:5e:54:49:f3:e9:67:bd:c4:c8:fc:7a: e8:52:09:3f:8b:fe:ee:36:78:96:69:9f:b7:5b:35: 2c:1d:a6:d5:01:da:f4:1c:ae:89:b2:f4:15:99:e9: 73:27:c1:79:02:5f:36:af:48:35:86:2c:1a:b6:ff: e6:ab:38:48:f8:ee:c2:06:43:36:1f:f9:f5:6f:77: 96:b5:08:73:34:89:3b:30:94:79:3f:5f:da:40:30: 45:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:5E:C8:ED:E4:43:F7:41:6C:35:40:D7:B0:48:1D:76:59:20:C4:3D X509v3 Authority Key Identifier: keyid:A7:1B:AA:66:62:38:47:B7:BD:9E:A7:C4:0B:CB:CA:85:5E:52:E8:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/281ef440-5a5f-4a4f-b509-b103245c5cf1/0/A71BAA66623847B7BD9EA7C40BCBCA855E52E8EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:b6:1d:1e:52:50:e9:6e:c7:31:fa:19:bd:33:f0:3b:3a:e6: 81:9b:88:c1:18:db:df:10:51:83:8e:c3:1e:5e:6f:d0:9f:00: bf:cb:68:08:96:77:ba:d0:76:31:ba:d6:3b:a6:85:c6:37:f6: 2d:3a:06:0a:94:ef:7f:ee:c0:27:17:16:a7:66:79:7d:c4:3f: 28:ec:90:ff:53:64:dc:a7:58:76:1a:fe:b7:3e:2d:fc:59:a5: 05:0b:ae:05:24:66:48:47:8b:42:e8:e0:06:b5:48:85:c4:6f: be:81:56:03:e4:17:c4:1e:53:67:18:2f:1a:9a:bb:40:5e:f2: 86:7e:19:f4:16:ba:4b:dd:89:bf:26:eb:79:7e:08:9a:cc:6c: 25:31:4d:ea:16:f5:0f:86:0f:da:54:7d:3d:43:33:8b:f4:8f: a1:1b:7e:67:cc:80:11:29:44:15:b1:da:75:37:61:ee:38:91: da:0c:e8:46:4b:87:1e:7c:ed:e4:02:ac:06:4a:02:3a:6e:de: 29:a8:b8:f1:41:94:e1:cf:16:35:7e:aa:38:2d:38:9c:6b:a1: 79:10:8c:b5:aa:35:d7:24:8e:95:32:47:0c:6a:f0:24:26:dc: 80:73:4c:0b:19:c9:36:0c:e8:7a:51:a1:3c:a3:2e:f3:02:11: 89:9f:c6:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFVEU7o9JrXth6ACpWcJEqEP5uuIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1 RTUyRThFQjAeFw0yNjAzMDExNzM2MDVaFw0yNjAzMDQyMDU0MDVaMDMxMTAvBgNV BAMTKERGNUVDOEVERTQ0M0Y3NDE2QzM1NDBEN0IwNDgxRDc2NTkyMEM0M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT6z/cIFtehngILv0RiNmMVGPD IHWvIF0HqFDv7IYy88BiehPY6ZsQwI4DzNkMnoM/U/ia+D8GkKCgog4SPRKxjHs7 QEl0jVQdyDqKn1pv8Dq7TsuWMZeAYQ2xaQA8ZK1kCEO2TqWiryc6KOxEVEP/ZMcV WIhOhEHSXffPUW3FHk/wzvg+tvY8KfMpMKql3zqdHUOP0j7+88PoVJzqYcuo1Glc TNMzsCteVEnz6We9xMj8euhSCT+L/u42eJZpn7dbNSwdptUB2vQcromy9BWZ6XMn wXkCXzavSDWGLBq2/+arOEj47sIGQzYf+fVvd5a1CHM0iTswlHk/X9pAMEUvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU317I7eRD90FsNUDXsEgddlkgxD0wHwYDVR0j BBgwFoAUpxuqZmI4R7e9nqfEC8vKhV5S6OswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODFlZjQ0MC01YTVmLTRhNGYtYjUwOS1iMTAzMjQ1YzVjZjEvMC9BNzFCQUE2NjYy Mzg0N0I3QkQ5RUE3QzQwQkNCQ0E4NTVFNTJFOEVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNBODU1RTUy RThFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjgxZWY0NDAtNWE1Zi00YTRmLWI1 MDktYjEwMzI0NWM1Y2YxLzAvQTcxQkFBNjY2MjM4NDdCN0JEOUVBN0M0MEJDQkNB ODU1RTUyRThFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFK2HR5SUOluxzH6Gb0z8Ds65oGbiMEY298Q UYOOwx5eb9CfAL/LaAiWd7rQdjG61jumhcY39i06BgqU73/uwCcXFqdmeX3EPyjs kP9TZNynWHYa/rc+LfxZpQULrgUkZkhHi0Lo4Aa1SIXEb76BVgPkF8QeU2cYLxqa u0Be8oZ+GfQWukvdib8m63l+CJrMbCUxTeoW9Q+GD9pUfT1DM4v0j6EbfmfMgBEp RBWx2nU3Ye44kdoM6EZLhx587eQCrAZKAjpu3imouPFBlOHPFjV+qjgtOJxroXkQ jLWqNdckjpUyRwxq8CQm3IBzTAsZyTYM6HpRoTyjLvMCEYmfxkU= -----END CERTIFICATE-----Generated at Mon Mar 2 16:50:29 2026 by rpki-client