$ rpki-client -vvf repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft File: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft (raw, json) Hash identifier: 9weL+0bXzyB6iNUQ1D9XIZKXunnURH0Mq1iNi/RxIsY= Subject key identifier: EC:78:07:C9:24:8E:77:37:19:49:43:36:CC:19:86:88:38:05:0E:9A Authority key identifier: 53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F Certificate issuer: /CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Certificate serial: 1BB2CDD621100EF3FD70A8B2946A01C59375F6AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft Manifest number: 01F7 Signing time: Sun 01 Mar 2026 14:21:16 +0000 Manifest this update: Sun 01 Mar 2026 14:16:16 +0000 Manifest next update: Wed 04 Mar 2026 22:18:16 +0000 Files and hashes: 1: 3130332e3132392e32342e302f32332d3234203d3e20313335343738.roa (hash: acHkQDc68Jj27op6u+60Ox/pAf3ZpE5ZeAF+XMaxR0M=) 2: 3130332e3132392e32362e302f32332d3234203d3e20313335343738.roa (hash: Sbm29pNNDtrirUa5TWrnPomraWgx9d4wS4uCAUKgspQ=) 3: 532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl (hash: W0HsVTCyNjDGqBI46GRUsw7z/NKOXIrYji5StcteL+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 22:18:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:b2:cd:d6:21:10:0e:f3:fd:70:a8:b2:94:6a:01:c5:93:75:f6:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F Validity Not Before: Mar 1 14:16:16 2026 GMT Not After : Mar 4 22:18:16 2026 GMT Subject: CN=EC7807C9248E773719494336CC19868838050E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:e1:74:aa:5e:36:23:03:d5:34:a4:e0:dd:b0: 25:e4:c8:dc:43:cc:29:ac:d1:f0:71:24:de:3d:be: c6:8d:f8:ba:fd:0c:b6:41:5c:ed:95:6e:79:4e:33: aa:8b:ef:8b:7b:70:da:36:d3:fd:8c:f1:ab:62:79: 1b:ad:1f:70:f9:0a:bd:52:b4:42:2b:f7:bd:f2:cb: cd:40:0b:e8:a4:86:78:08:7b:ec:e3:a1:17:e4:d4: 75:6f:0b:41:91:8f:dc:ca:2f:1a:95:72:15:df:ae: 03:85:de:7f:2d:7b:83:57:8d:f6:c3:55:a9:64:cd: 88:1f:28:77:cd:30:2e:13:8e:98:e4:f2:33:92:af: 57:86:4e:51:63:2c:65:da:8b:a0:40:2d:e8:a5:95: ea:21:35:4f:cc:d0:c0:91:d2:93:45:19:65:48:44: d2:1d:9c:41:4d:1b:00:a1:48:0c:56:84:88:fc:f6: f4:42:54:3f:df:19:3c:e5:18:d8:7f:71:d1:73:77: 01:25:ce:a9:1c:ea:fe:3a:65:20:6d:ab:55:ae:74: eb:f2:d9:26:4a:92:22:a5:48:2c:33:f0:b7:fe:b2: 1f:70:18:1b:74:db:42:7c:1e:2b:97:24:73:bc:22: 1e:d3:18:f0:02:b7:c7:4a:50:24:46:c9:15:fa:8a: 21:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:78:07:C9:24:8E:77:37:19:49:43:36:CC:19:86:88:38:05:0E:9A X509v3 Authority Key Identifier: keyid:53:2A:4A:6E:A2:52:E9:D1:CF:F5:74:81:A5:A8:6B:35:CE:0D:D2:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/47df2ad0-6e99-44a7-a068-500656ffb00f/0/532A4A6EA252E9D1CFF57481A5A86B35CE0DD21F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:dd:08:70:5f:cd:7a:5a:31:0b:63:13:9d:8b:c7:f8:94:bf: 9e:c2:03:6b:0d:09:82:1a:95:4a:02:ad:c5:cc:b5:6b:3b:4a: 99:af:16:95:76:e2:e0:04:53:78:d3:7a:ba:c2:f3:db:4e:d5: 82:e2:e5:54:db:69:37:9a:fa:52:95:43:8d:0f:50:d5:95:ba: bb:08:b3:3c:68:84:b9:65:7c:55:e0:e9:a1:35:8b:0a:e2:ba: 62:75:b1:a6:46:51:74:50:bc:3a:f8:fb:7e:f5:67:32:4f:98: 2d:4b:b5:f7:29:2e:9d:d3:4b:c6:86:66:8f:ed:16:4d:8e:d0: ef:ce:bf:26:8c:5a:c6:b8:f8:bb:b3:92:e5:8c:d1:fd:3a:1e: 92:67:4e:c2:8b:b8:52:c9:3e:d2:2f:91:7f:cf:1a:c6:90:e4: c8:1f:5b:50:83:75:9b:0f:1f:6a:9d:a4:23:1a:a6:2d:ca:3b: 47:cc:ae:d8:69:ca:65:5f:ea:0b:2a:61:15:dc:d3:0e:c6:ff: 4a:fb:9f:aa:55:f3:45:c3:7c:7e:4f:74:68:b8:a8:ad:e8:5d: 73:97:f5:79:a3:1d:23:a9:d6:f4:a5:5a:f7:0e:39:ab:81:ad: b7:b7:b9:99:e7:5b:66:c0:aa:b2:5f:bd:39:da:66:f5:9a:e5: 8c:80:a8:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG7LN1iEQDvP9cKiylGoBxZN19qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVD RTBERDIxRjAeFw0yNjAzMDExNDE2MTZaFw0yNjAzMDQyMjE4MTZaMDMxMTAvBgNV BAMTKEVDNzgwN0M5MjQ4RTc3MzcxOTQ5NDMzNkNDMTk4Njg4MzgwNTBFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq4XSqXjYjA9U0pODdsCXkyNxD zCms0fBxJN49vsaN+Lr9DLZBXO2VbnlOM6qL74t7cNo20/2M8atieRutH3D5Cr1S tEIr973yy81AC+ikhngIe+zjoRfk1HVvC0GRj9zKLxqVchXfrgOF3n8te4NXjfbD ValkzYgfKHfNMC4Tjpjk8jOSr1eGTlFjLGXai6BALeilleohNU/M0MCR0pNFGWVI RNIdnEFNGwChSAxWhIj89vRCVD/fGTzlGNh/cdFzdwElzqkc6v46ZSBtq1WudOvy 2SZKkiKlSCwz8Lf+sh9wGBt020J8HiuXJHO8Ih7TGPACt8dKUCRGyRX6iiFXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HgHySSOdzcZSUM2zBmGiDgFDpowHwYDVR0j BBgwFoAUUypKbqJS6dHP9XSBpahrNc4N0h8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 N2RmMmFkMC02ZTk5LTQ0YTctYTA2OC01MDA2NTZmZmIwMGYvMC81MzJBNEE2RUEy NTJFOUQxQ0ZGNTc0ODFBNUE4NkIzNUNFMEREMjFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZCMzVDRTBE RDIxRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDdkZjJhZDAtNmU5OS00NGE3LWEw NjgtNTAwNjU2ZmZiMDBmLzAvNTMyQTRBNkVBMjUyRTlEMUNGRjU3NDgxQTVBODZC MzVDRTBERDIxRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK/dCHBfzXpaMQtjE52Lx/iUv57CA2sNCYIa lUoCrcXMtWs7SpmvFpV24uAEU3jTerrC89tO1YLi5VTbaTea+lKVQ40PUNWVursI szxohLllfFXg6aE1iwriumJ1saZGUXRQvDr4+371ZzJPmC1LtfcpLp3TS8aGZo/t Fk2O0O/OvyaMWsa4+LuzkuWM0f06HpJnTsKLuFLJPtIvkX/PGsaQ5MgfW1CDdZsP H2qdpCMapi3KO0fMrthpymVf6gsqYRXc0w7G/0r7n6pV80XDfH5PdGi4qK3oXXOX 9XmjHSOp1vSlWvcOOauBrbe3uZnnW2bAqrJfvTnaZvWa5YyAqJk= -----END CERTIFICATE-----Generated at Mon Mar 2 11:45:32 2026 by rpki-client