$ rpki-client -vvf repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft File: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft (raw, json) Hash identifier: FShYV0MZdcl6FXk9uNr7RHD+rpt9Ei9Ge8J5P3UZsqk= Subject key identifier: F2:39:E8:DC:4D:D3:03:98:B5:08:00:1B:00:F5:77:12:61:B3:EB:BD Authority key identifier: A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 Certificate issuer: /CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Certificate serial: 38C869D3EEFA55E49C767D7B4DB9AE84521DA69E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject info access: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft Manifest number: 01E2 Signing time: Sat 28 Feb 2026 05:51:11 +0000 Manifest this update: Sat 28 Feb 2026 05:46:11 +0000 Manifest next update: Tue 03 Mar 2026 12:01:11 +0000 Files and hashes: 1: A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl (hash: O9haQF7z6ULfwgSB0OBoGhJ5RGQCR4zSrZwZQLyGRfk=) 2: 3130332e3130352e39322e302f32332d3234203d3e20313530393435.roa (hash: FOuRTprVW2mpZNqt583SZ3InArSMarqECWOK414L2cg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:01:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:c8:69:d3:ee:fa:55:e4:9c:76:7d:7b:4d:b9:ae:84:52:1d:a6:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A205D7D4B50161EC6E6D73C4A1D052929C7FFC42 Validity Not Before: Feb 28 05:46:11 2026 GMT Not After : Mar 3 12:01:11 2026 GMT Subject: CN=F239E8DC4DD30398B508001B00F5771261B3EBBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:91:05:47:c9:b4:36:fb:73:cc:f7:89:3d:2d: cb:6a:fc:f0:e9:43:44:57:50:60:fc:f6:61:95:ee: 47:c6:07:ce:ab:7f:65:46:a1:c8:da:1a:44:cb:01: 77:5f:95:8d:44:ed:c9:17:24:ab:b8:f7:75:2a:ac: 0b:84:e6:4d:f8:0b:23:8d:1e:01:06:58:37:1b:c6: 0a:1b:84:25:6e:09:e6:19:62:e8:fc:a1:33:d1:38: 7d:30:38:92:fa:14:e1:4a:16:2b:76:77:2b:a7:87: de:15:da:a4:d2:ab:0e:23:cb:72:8c:8f:b9:65:19: 6d:fd:dc:58:1b:6b:87:33:89:7e:9d:dc:c6:30:51: f8:03:6d:c2:79:de:38:b7:ec:fa:fa:ba:2b:0c:d4: 3a:34:88:f3:b7:2d:ab:85:7e:f1:7d:c5:c1:51:aa: bc:00:1d:55:40:8e:77:03:df:b8:39:3a:c9:f8:0d: 88:2a:d3:eb:39:ca:5c:fa:72:90:54:02:48:7a:f2: a6:05:37:ae:ad:fa:cb:01:93:13:cc:40:bc:fa:f3: 4f:14:c9:1a:b8:8d:59:22:54:d7:ac:27:45:81:5c: f8:4f:0a:a4:1d:19:f3:f3:9f:ee:f4:eb:3f:a7:e1: d2:6a:1e:e9:3e:34:7c:84:70:1f:c2:53:29:e0:58: 33:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:39:E8:DC:4D:D3:03:98:B5:08:00:1B:00:F5:77:12:61:B3:EB:BD X509v3 Authority Key Identifier: keyid:A2:05:D7:D4:B5:01:61:EC:6E:6D:73:C4:A1:D0:52:92:9C:7F:FC:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/372b8d28-ff7c-4692-9018-9755ba509168/0/A205D7D4B50161EC6E6D73C4A1D052929C7FFC42.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:30:76:f9:00:33:fe:10:6e:11:83:ed:8c:18:ac:58:31:69: c3:fd:ec:cb:9c:81:52:e0:65:74:54:d7:e7:d5:03:67:6f:cf: dd:5e:c2:f0:4e:31:c8:35:da:36:f3:d9:eb:a6:c7:5a:d0:de: ca:77:da:ac:65:bd:21:a9:33:c1:c7:61:f9:97:5c:72:d2:2f: ea:5b:cf:11:9c:e0:76:ed:91:3b:df:26:96:d4:e0:db:04:cb: d5:cb:cc:55:bd:a4:5a:84:71:a6:55:72:39:a0:65:95:87:e7: 54:ca:33:68:73:ac:bf:e9:e9:9f:0e:d2:5b:22:61:d9:c7:b5: aa:ed:56:3e:ac:93:cf:01:24:bb:90:c5:4d:dc:18:5a:8f:01: 4d:12:48:c1:af:f2:e0:39:71:ac:43:9c:52:2e:ad:24:e1:ba: 3d:da:3f:09:e2:90:44:5b:d6:51:aa:ee:e8:36:bb:3a:bb:97: e8:a5:49:a8:99:7d:c0:67:23:ba:ab:a3:65:ed:75:33:ab:cf: f9:25:cf:be:85:80:47:dd:cd:ec:a1:05:97:13:82:52:23:fe: 54:f3:3a:ef:8f:c4:79:a9:45:96:d0:0f:db:72:82:8d:12:41: 29:ef:14:07:ad:41:e1:fc:a8:2b:21:1c:52:0c:28:cd:2b:33: b1:a1:01:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMhp0+76VeScdn17TbmuhFIdpp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5 QzdGRkM0MjAeFw0yNjAyMjgwNTQ2MTFaFw0yNjAzMDMxMjAxMTFaMDMxMTAvBgNV BAMTKEYyMzlFOERDNEREMzAzOThCNTA4MDAxQjAwRjU3NzEyNjFCM0VCQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9kQVHybQ2+3PM94k9Lctq/PDp Q0RXUGD89mGV7kfGB86rf2VGocjaGkTLAXdflY1E7ckXJKu493UqrAuE5k34CyON HgEGWDcbxgobhCVuCeYZYuj8oTPROH0wOJL6FOFKFit2dyunh94V2qTSqw4jy3KM j7llGW393Fgba4cziX6d3MYwUfgDbcJ53ji37Pr6uisM1Do0iPO3LauFfvF9xcFR qrwAHVVAjncD37g5Osn4DYgq0+s5ylz6cpBUAkh68qYFN66t+ssBkxPMQLz6808U yRq4jVkiVNesJ0WBXPhPCqQdGfPzn+706z+n4dJqHuk+NHyEcB/CUyngWDNvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8jno3E3TA5i1CAAbAPV3EmGz670wHwYDVR0j BBgwFoAUogXX1LUBYexubXPEodBSkpx//EIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z NzJiOGQyOC1mZjdjLTQ2OTItOTAxOC05NzU1YmE1MDkxNjgvMC9BMjA1RDdENEI1 MDE2MUVDNkU2RDczQzRBMUQwNTI5MjlDN0ZGQzQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUyOTI5QzdG RkM0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzcyYjhkMjgtZmY3Yy00NjkyLTkw MTgtOTc1NWJhNTA5MTY4LzAvQTIwNUQ3RDRCNTAxNjFFQzZFNkQ3M0M0QTFEMDUy OTI5QzdGRkM0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAowdvkAM/4QbhGD7YwYrFgxacP97MucgVLg ZXRU1+fVA2dvz91ewvBOMcg12jbz2eumx1rQ3sp32qxlvSGpM8HHYfmXXHLSL+pb zxGc4HbtkTvfJpbU4NsEy9XLzFW9pFqEcaZVcjmgZZWH51TKM2hzrL/p6Z8O0lsi YdnHtartVj6sk88BJLuQxU3cGFqPAU0SSMGv8uA5caxDnFIurSThuj3aPwnikERb 1lGq7ug2uzq7l+ilSaiZfcBnI7qro2XtdTOrz/klz76FgEfdzeyhBZcTglIj/lTz Ou+PxHmpRZbQD9tygo0SQSnvFAetQeH8qCshHFIMKM0rM7GhAYw= -----END CERTIFICATE-----Generated at Mon Mar 2 09:30:20 2026 by rpki-client