$ rpki-client -vvf repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft File: A61585874729C58BB62740692BA8FA6ED286FDC9.mft (raw, json) Hash identifier: IZ3n2vAZE1ikmyUuS7FxdUeR9rv85zKx2H6x4/dJXPU= Subject key identifier: 4F:7A:49:53:79:1C:86:0D:E3:FA:55:79:67:AD:C7:A5:D0:9D:53:B8 Authority key identifier: A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 Certificate issuer: /CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Certificate serial: 65E16343B794A8AE66B449D3172B2D50D80201C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft Manifest number: 0235 Signing time: Sun 01 Mar 2026 02:42:17 +0000 Manifest this update: Sun 01 Mar 2026 02:37:17 +0000 Manifest next update: Wed 04 Mar 2026 07:22:17 +0000 Files and hashes: 1: 3130332e3234352e3137382e302f32342d3234203d3e2039333431.roa (hash: OVp41P8XiusORgDYjhyG3tIoN5ypPHdHjH6RGxbqADk=) 2: 3130332e3234352e3137392e302f32342d3234203d3e2039333431.roa (hash: e1O7IFU9uCaYA+jMLBiE2GdFukypRRniAf+RRVQm+So=) 3: 3130332e3234352e3137382e302f32332d3233203d3e2039333431.roa (hash: 3t8POxW2mcQ/nvjJPU9gXim41a5qa0GKDf3HQqW/V6Y=) 4: A61585874729C58BB62740692BA8FA6ED286FDC9.crl (hash: 6NInrCPlOY26zqp0o30xm8OYZeSG+/BDsEWJvgTl53o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:22:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:e1:63:43:b7:94:a8:ae:66:b4:49:d3:17:2b:2d:50:d8:02:01:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A61585874729C58BB62740692BA8FA6ED286FDC9 Validity Not Before: Mar 1 02:37:17 2026 GMT Not After : Mar 4 07:22:17 2026 GMT Subject: CN=4F7A4953791C860DE3FA557967ADC7A5D09D53B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:06:e5:ad:a5:0f:c2:c0:58:b7:64:19:57:16: 6c:ac:00:ae:0a:3c:3b:c3:38:9a:3b:35:20:23:48: 57:9b:66:d0:29:df:d3:ca:26:3d:e8:26:89:34:13: 54:61:67:7f:50:45:f1:68:00:46:8d:5a:2e:b6:9c: fd:7e:3a:b9:7d:3a:44:7c:bc:08:2c:22:42:65:06: fa:d9:14:d2:1a:07:30:68:b9:93:fb:8a:89:c0:0b: b5:59:3c:6b:64:29:59:86:fc:20:d9:e7:b6:7f:2c: 9b:34:bb:6f:bd:90:3b:e5:79:d4:b7:5b:2e:64:e2: 17:39:4c:e7:34:75:2d:0a:8c:c3:16:38:f9:b9:dd: a6:a4:4b:32:49:6a:86:18:a6:96:83:6e:a5:de:c0: 08:81:b1:ff:7c:26:4a:bd:4d:95:a7:aa:3a:a9:d6: 49:1b:e4:e1:ad:63:4e:0e:6f:28:cb:41:f2:77:59: 4e:38:87:a9:a0:3a:f8:76:9a:15:47:31:50:aa:7d: ee:fa:b1:be:d3:0b:3e:ce:d1:06:35:46:19:58:fe: 69:87:bb:ec:75:67:71:f2:2c:ea:82:a5:8d:54:53: d6:6d:54:28:d6:ff:d9:a5:9f:8f:7b:93:33:7b:11: 33:d6:e1:19:b9:54:15:8c:e2:d1:18:e4:a8:22:f7: 3a:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:7A:49:53:79:1C:86:0D:E3:FA:55:79:67:AD:C7:A5:D0:9D:53:B8 X509v3 Authority Key Identifier: keyid:A6:15:85:87:47:29:C5:8B:B6:27:40:69:2B:A8:FA:6E:D2:86:FD:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A61585874729C58BB62740692BA8FA6ED286FDC9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/370c4759-43b8-4e80-be8c-83cbe9f8231b/0/A61585874729C58BB62740692BA8FA6ED286FDC9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:5b:15:cc:48:4d:c2:88:60:48:46:d4:db:56:3d:86:49:d4: 8b:50:e0:3a:17:4d:73:ad:2c:50:76:44:05:27:05:1f:96:8b: 57:3f:8c:4b:53:9a:64:96:4b:c0:b8:e6:8d:77:d4:44:1f:e4: db:d7:25:96:3b:40:19:a8:3d:ec:18:ed:c8:ff:40:c5:09:c4: 4a:f0:36:2e:45:1e:a6:6d:f4:61:b2:c7:bc:10:04:d2:69:52: 7e:40:99:32:61:48:47:a4:d6:8e:ef:af:7d:64:f5:60:87:59: 22:1a:22:78:c2:97:ac:ba:be:56:51:06:0f:5f:86:63:9a:e3: b7:39:46:31:ab:0b:92:14:c8:16:28:ec:b0:cd:ec:74:e8:88: c6:67:75:69:44:d4:3b:1d:fb:37:00:ec:29:01:7d:00:de:dd: ea:1e:d7:5b:bb:14:77:4c:d1:7b:e4:d6:c1:2e:f1:04:58:b1: 1c:d8:05:bf:ec:74:25:e1:76:2d:8b:be:d7:79:71:18:22:89: d7:83:cb:ce:75:66:51:c0:2d:95:43:3c:65:71:9b:a2:56:f3: 3c:a2:77:d4:80:2d:e9:d4:28:77:44:06:bb:8e:d9:8c:fd:27: c2:7e:98:3e:7e:b5:ad:13:66:f0:7b:3f:4f:da:b1:20:af:97: b4:cd:40:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZeFjQ7eUqK5mtEnTFystUNgCAcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVE Mjg2RkRDOTAeFw0yNjAzMDEwMjM3MTdaFw0yNjAzMDQwNzIyMTdaMDMxMTAvBgNV BAMTKDRGN0E0OTUzNzkxQzg2MERFM0ZBNTU3OTY3QURDN0E1RDA5RDUzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWBuWtpQ/CwFi3ZBlXFmysAK4K PDvDOJo7NSAjSFebZtAp39PKJj3oJok0E1RhZ39QRfFoAEaNWi62nP1+Orl9OkR8 vAgsIkJlBvrZFNIaBzBouZP7ionAC7VZPGtkKVmG/CDZ57Z/LJs0u2+9kDvledS3 Wy5k4hc5TOc0dS0KjMMWOPm53aakSzJJaoYYppaDbqXewAiBsf98Jkq9TZWnqjqp 1kkb5OGtY04ObyjLQfJ3WU44h6mgOvh2mhVHMVCqfe76sb7TCz7O0QY1RhlY/mmH u+x1Z3HyLOqCpY1UU9ZtVCjW/9mln497kzN7ETPW4Rm5VBWM4tEY5Kgi9zoZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT3pJU3kchg3j+lV5Z63HpdCdU7gwHwYDVR0j BBgwFoAUphWFh0cpxYu2J0BpK6j6btKG/ckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzBjNDc1OS00M2I4LTRlODAtYmU4Yy04M2NiZTlmODIzMWIvMC9BNjE1ODU4NzQ3 MjlDNThCQjYyNzQwNjkyQkE4RkE2RUQyODZGREM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZBNkVEMjg2 RkRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcwYzQ3NTktNDNiOC00ZTgwLWJl OGMtODNjYmU5ZjgyMzFiLzAvQTYxNTg1ODc0NzI5QzU4QkI2Mjc0MDY5MkJBOEZB NkVEMjg2RkRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC9bFcxITcKIYEhG1NtWPYZJ1ItQ4DoXTXOt LFB2RAUnBR+Wi1c/jEtTmmSWS8C45o131EQf5NvXJZY7QBmoPewY7cj/QMUJxErw Ni5FHqZt9GGyx7wQBNJpUn5AmTJhSEek1o7vr31k9WCHWSIaInjCl6y6vlZRBg9f hmOa47c5RjGrC5IUyBYo7LDN7HToiMZndWlE1Dsd+zcA7CkBfQDe3eoe11u7FHdM 0Xvk1sEu8QRYsRzYBb/sdCXhdi2Lvtd5cRgiideDy851ZlHALZVDPGVxm6JW8zyi d9SALenUKHdEBruO2Yz9J8J+mD5+ta0TZvB7P0/asSCvl7TNQDU= -----END CERTIFICATE-----Generated at Mon Mar 2 15:28:01 2026 by rpki-client