$ rpki-client -vvf repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft File: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft (raw, json) Hash identifier: kbEbNaG/xyZ6ayNITo0NHQSUjHnjcZm6hT7hbk+V9Ks= Subject key identifier: 2A:AC:E0:CC:97:1D:C6:36:B9:BA:A0:5F:86:19:B2:79:64:32:22:DE Authority key identifier: A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 Certificate issuer: /CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Certificate serial: 4981E7E22FCD558ED944A92A82056E80E6D16239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft Manifest number: 01E4 Signing time: Mon 02 Mar 2026 07:40:52 +0000 Manifest this update: Mon 02 Mar 2026 07:35:52 +0000 Manifest next update: Thu 05 Mar 2026 19:24:52 +0000 Files and hashes: 1: A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl (hash: 6+jYd2JCeSGMvu3S2mNY4DOIcNrNjSvRJsXwS83LyG0=) 2: 3130332e39392e32322e302f32342d3234203d3e20313530343636.roa (hash: fp/oWSUeXGTrPiTprsbkQ9UXZFAnoLEYMcQ89AiXon8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:81:e7:e2:2f:cd:55:8e:d9:44:a9:2a:82:05:6e:80:e6:d1:62:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27 Validity Not Before: Mar 2 07:35:52 2026 GMT Not After : Mar 5 19:24:52 2026 GMT Subject: CN=2AACE0CC971DC636B9BAA05F8619B279643222DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:54:b9:44:a1:03:39:79:ad:49:81:47:1b:56: ac:5b:66:2c:c2:69:34:2f:46:89:49:eb:19:68:06: 5c:4d:01:3f:bd:bb:d4:7a:3e:27:ca:6a:96:9a:b8: 21:67:b2:cf:19:ef:ef:28:51:5f:97:7b:e2:38:37: e9:49:31:11:27:9e:b2:99:e2:3e:b4:45:a3:f2:d7: 27:60:23:d1:f8:73:72:1d:bb:ba:21:49:97:3a:ef: 9a:e0:52:97:cd:d5:c5:da:c8:ac:fc:bc:e3:8c:45: 43:c1:6e:d7:f7:16:fa:7f:bb:bd:e9:6b:7f:11:69: b4:b3:30:c3:b1:28:0b:a1:54:12:4b:9a:32:fc:27: b4:e2:d7:0b:e0:ec:a8:1f:91:8a:16:6c:88:3f:b7: 8f:a0:fd:93:fc:d9:7c:6b:d3:41:e4:30:3e:dc:15: 5b:2e:e0:36:3f:83:1f:3e:b0:70:52:b4:5c:b1:0f: bc:d1:a1:3c:6c:74:db:62:54:47:26:74:a3:a3:ca: 55:4b:68:ba:7b:78:ad:f4:b5:ca:a5:8b:2c:4f:b9: ad:91:a4:18:be:6e:17:75:a2:00:12:44:a6:60:0a: 97:f3:ab:60:27:6a:e3:28:26:3f:be:71:a2:44:ae: 8c:0a:39:f4:f2:8e:8a:a5:f2:cd:3c:da:0d:00:a9: 59:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:AC:E0:CC:97:1D:C6:36:B9:BA:A0:5F:86:19:B2:79:64:32:22:DE X509v3 Authority Key Identifier: keyid:A1:DC:AA:B5:B3:20:7C:2D:75:69:28:38:A3:8D:1D:CD:4C:65:AA:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31f25634-f583-46bc-9e8c-32db4cca35b6/0/A1DCAAB5B3207C2D75692838A38D1DCD4C65AA27.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:25:64:67:ba:60:0c:ae:b7:d0:f4:6c:18:bf:73:a9:de:c2: ac:5b:f4:04:67:1d:21:6f:36:8d:56:ed:db:d6:f1:98:fa:52: 28:ea:f3:79:53:07:bd:ac:0f:17:c9:c4:ef:14:3b:27:97:f3: db:0c:55:db:42:4f:4a:6d:30:80:b6:1e:c0:de:a8:7c:23:a2: 49:39:f9:e7:10:82:a5:11:52:6b:07:fb:f6:1a:12:b0:2f:50: 9e:fa:37:0b:11:14:94:bb:9d:e1:5f:ee:a3:ca:8a:db:31:3f: 13:b3:d9:c0:6e:de:1e:b5:14:00:4b:1a:7b:9c:5f:d9:a0:a2: 1f:c6:3f:bf:4f:d2:aa:bc:a0:55:8f:d6:83:2e:fc:68:69:3c: 34:98:02:a5:d2:b0:d5:3c:0e:5a:46:bb:58:5d:e8:22:cb:d5: 63:de:ed:ad:d5:9c:d1:91:bf:60:43:64:7f:ca:be:a5:ce:cb: 25:29:20:66:2c:cb:f1:04:29:bf:51:b5:f7:68:b5:8f:6f:a9: d2:61:76:25:43:51:8b:ac:37:34:b8:8f:7e:bb:4b:6f:cf:5b: 31:74:ff:dc:f8:c1:9f:4c:e6:62:46:9c:0c:25:38:7c:03:34: 1d:07:34:df:16:91:ae:33:d3:db:b2:0f:47:ed:c3:18:9c:cf: 89:9d:a5:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSYHn4i/NVY7ZRKkqggVugObRYjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0 QzY1QUEyNzAeFw0yNjAzMDIwNzM1NTJaFw0yNjAzMDUxOTI0NTJaMDMxMTAvBgNV BAMTKDJBQUNFMENDOTcxREM2MzZCOUJBQTA1Rjg2MTlCMjc5NjQzMjIyREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbVLlEoQM5ea1JgUcbVqxbZizC aTQvRolJ6xloBlxNAT+9u9R6PifKapaauCFnss8Z7+8oUV+Xe+I4N+lJMREnnrKZ 4j60RaPy1ydgI9H4c3Idu7ohSZc675rgUpfN1cXayKz8vOOMRUPBbtf3Fvp/u73p a38RabSzMMOxKAuhVBJLmjL8J7Ti1wvg7KgfkYoWbIg/t4+g/ZP82Xxr00HkMD7c FVsu4DY/gx8+sHBStFyxD7zRoTxsdNtiVEcmdKOjylVLaLp7eK30tcqliyxPua2R pBi+bhd1ogASRKZgCpfzq2AnauMoJj++caJErowKOfTyjoql8s082g0AqVnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKqzgzJcdxja5uqBfhhmyeWQyIt4wHwYDVR0j BBgwFoAUodyqtbMgfC11aSg4o40dzUxlqicwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWYyNTYzNC1mNTgzLTQ2YmMtOWU4Yy0zMmRiNGNjYTM1YjYvMC9BMURDQUFCNUIz MjA3QzJENzU2OTI4MzhBMzhEMURDRDRDNjVBQTI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFEQ0Q0QzY1 QUEyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFmMjU2MzQtZjU4My00NmJjLTll OGMtMzJkYjRjY2EzNWI2LzAvQTFEQ0FBQjVCMzIwN0MyRDc1NjkyODM4QTM4RDFE Q0Q0QzY1QUEyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAN8lZGe6YAyut9D0bBi/c6newqxb9ARnHSFv No1W7dvW8Zj6Uijq83lTB72sDxfJxO8UOyeX89sMVdtCT0ptMIC2HsDeqHwjokk5 +ecQgqURUmsH+/YaErAvUJ76NwsRFJS7neFf7qPKitsxPxOz2cBu3h61FABLGnuc X9mgoh/GP79P0qq8oFWP1oMu/GhpPDSYAqXSsNU8DlpGu1hd6CLL1WPe7a3VnNGR v2BDZH/KvqXOyyUpIGYsy/EEKb9RtfdotY9vqdJhdiVDUYusNzS4j367S2/PWzF0 /9z4wZ9M5mJGnAwlOHwDNB0HNN8Wka4z09uyD0ftwxicz4mdpXo= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:08 2026 by rpki-client