$ rpki-client -vvf repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft File: A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft (raw, json) Hash identifier: 9n3T5Uat9n6ojn9l/cLQXgZ7hm8rcYcGQCv/QOw7IfU= Subject key identifier: F3:1B:A7:5A:78:BF:6E:C3:BA:00:4E:7D:5F:05:2B:B8:32:96:B4:7D Authority key identifier: A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 Certificate issuer: /CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Certificate serial: 2E3F2D0ADF2A614AB5DEBF2F1039F6B55BAFEBCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject info access: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft Manifest number: 0550 Signing time: Sun 01 Mar 2026 21:01:25 +0000 Manifest this update: Sun 01 Mar 2026 20:56:25 +0000 Manifest next update: Thu 05 Mar 2026 06:17:25 +0000 Files and hashes: 1: A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl (hash: W9pi4VrN2/SB9XmW7Uojjrr2XlM6leaZqpJrdY82O4Y=) 2: 323430353a316534303a313a3a2f34382d3438203d3e203538343735.roa (hash: G9MCrus6eBmyFVS1F9L4fMkSgpj76wB3dQ1SkAm9VJE=) 3: 323430353a316534303a3a2f34382d3438203d3e203538343735.roa (hash: sWazp7VEpZS16c0Kq00tpKaEDXaVw9th6CqZ26eXpuE=) 4: 3130332e32332e3233332e302f32342d3234203d3e203538343735.roa (hash: 3NZfWHZFid4ea+GUoLaGMRlr2s5vOkiU2EzRl6OGUWo=) 5: 3130332e32332e3233322e302f32342d3234203d3e203538343735.roa (hash: 2twBdEx2IXa/WYH/SthAB9XB81XlR7uh3EYXCN3+9WA=) 6: 3130332e38312e3130312e302f32342d3234203d3e203538343735.roa (hash: ZE42NrE4BZoZMiuKZ7CvuWayd+yWbNQeTPdwIfJtb+U=) 7: 3130332e38312e3130302e302f32342d3234203d3e203538343735.roa (hash: mIENuohk3umzRQDncadC8qS6i8YFvlmS0VCKjyWedT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:3f:2d:0a:df:2a:61:4a:b5:de:bf:2f:10:39:f6:b5:5b:af:eb:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A51E37523B05B166B7DE977CF4AC6596FDD97B98 Validity Not Before: Mar 1 20:56:25 2026 GMT Not After : Mar 5 06:17:25 2026 GMT Subject: CN=F31BA75A78BF6EC3BA004E7D5F052BB83296B47D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:49:88:ea:0e:bf:ab:66:a1:70:1a:4d:9d:dc: f9:11:71:f1:16:40:dc:6d:7d:90:d6:dc:4e:6f:7d: 3b:dd:e3:48:4f:ee:56:a7:43:fc:e3:b4:1c:be:40: 60:44:cf:6c:c6:f7:61:b1:60:32:8c:f0:c2:ff:b9: f1:da:43:69:10:cc:1e:07:d2:0c:57:3e:29:66:ac: 52:79:3d:78:64:f5:77:24:bd:c3:17:3d:76:06:da: 9f:8a:05:da:c0:3c:9d:41:fd:e8:94:af:99:ba:12: 8c:f7:d5:ce:c3:6a:12:71:f6:2a:97:43:57:e9:10: 68:b7:f8:a5:12:57:c4:1c:bd:63:c1:b2:cd:10:a8: 8e:2c:9a:2e:8c:29:32:eb:41:0e:80:36:13:84:71: a1:c2:03:d8:07:59:26:54:e9:4b:22:96:a1:99:a8: 2f:12:c7:23:9c:e4:7c:0b:1b:86:05:96:d8:d5:50: fb:03:4d:ae:e7:62:fd:28:16:4b:04:02:80:f7:81: 29:36:e2:21:cd:81:74:13:2f:b3:e3:03:1c:58:25: 0c:63:e0:a4:55:db:04:5d:b1:58:e2:88:e3:3f:fe: 1a:a9:6e:81:7b:52:a9:3d:71:97:b5:73:5b:3d:8d: 0b:eb:ef:93:e7:20:4c:53:4b:22:c4:96:a7:ef:b2: 73:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1B:A7:5A:78:BF:6E:C3:BA:00:4E:7D:5F:05:2B:B8:32:96:B4:7D X509v3 Authority Key Identifier: keyid:A5:1E:37:52:3B:05:B1:66:B7:DE:97:7C:F4:AC:65:96:FD:D9:7B:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A51E37523B05B166B7DE977CF4AC6596FDD97B98.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/48f39bd4-cdac-41cf-8858-d7410f64d155/0/A51E37523B05B166B7DE977CF4AC6596FDD97B98.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:6d:60:11:80:d4:45:23:ea:67:4e:ae:70:6f:04:e6:0e:9b: d2:3f:58:58:05:d0:69:22:46:20:66:aa:8a:76:ac:fc:fb:d4: 12:89:19:e7:a7:83:70:81:49:ed:11:0e:14:27:b5:48:0e:3d: e2:1c:ca:fd:a8:c0:d5:ad:60:5d:09:26:84:02:df:d7:f8:3f: 2a:5a:6e:e9:25:d8:18:2f:48:79:ea:65:c2:b1:99:68:1a:8d: d3:59:48:2b:6e:5d:bb:47:36:06:cb:41:e0:bd:07:d1:8e:a3: 01:30:da:e2:e5:4e:a7:90:f0:fc:c3:e7:17:fd:07:8c:90:f9: ba:01:e1:96:e6:02:be:bd:2e:7b:52:d9:a3:94:76:72:73:90: df:fe:f3:83:19:6e:26:72:e0:65:80:fd:43:e1:a0:11:55:d2: 4e:53:f1:c0:70:ad:23:04:06:8e:3e:fc:04:3b:41:bc:1a:71: 1c:3d:d4:44:05:07:6c:a6:05:96:8e:ce:6e:b4:d3:a0:58:2c: 99:5c:d8:0a:47:b5:8a:c8:3b:a8:63:84:4b:8b:c5:07:d1:ed: a6:cb:b0:bf:d5:67:dc:2b:0b:ac:25:fc:7d:85:3c:7e:54:14: c2:3d:83:96:e7:5d:6b:cb:6e:d8:92:be:96:3c:97:a2:a7:e9: 59:25:4d:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULj8tCt8qYUq13r8vEDn2tVuv68owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZG REQ5N0I5ODAeFw0yNjAzMDEyMDU2MjVaFw0yNjAzMDUwNjE3MjVaMDMxMTAvBgNV BAMTKEYzMUJBNzVBNzhCRjZFQzNCQTAwNEU3RDVGMDUyQkI4MzI5NkI0N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDISYjqDr+rZqFwGk2d3PkRcfEW QNxtfZDW3E5vfTvd40hP7lanQ/zjtBy+QGBEz2zG92GxYDKM8ML/ufHaQ2kQzB4H 0gxXPilmrFJ5PXhk9XckvcMXPXYG2p+KBdrAPJ1B/eiUr5m6Eoz31c7DahJx9iqX Q1fpEGi3+KUSV8QcvWPBss0QqI4smi6MKTLrQQ6ANhOEcaHCA9gHWSZU6UsilqGZ qC8SxyOc5HwLG4YFltjVUPsDTa7nYv0oFksEAoD3gSk24iHNgXQTL7PjAxxYJQxj 4KRV2wRdsVjiiOM//hqpboF7Uqk9cZe1c1s9jQvr75PnIExTSyLElqfvsnOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8xunWni/bsO6AE59XwUruDKWtH0wHwYDVR0j BBgwFoAUpR43UjsFsWa33pd89Kxllv3Ze5gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OGYzOWJkNC1jZGFjLTQxY2YtODg1OC1kNzQxMGY2NGQxNTUvMC9BNTFFMzc1MjNC MDVCMTY2QjdERTk3N0NGNEFDNjU5NkZERDk3Qjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1OTZGREQ5 N0I5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDhmMzliZDQtY2RhYy00MWNmLTg4 NTgtZDc0MTBmNjRkMTU1LzAvQTUxRTM3NTIzQjA1QjE2NkI3REU5NzdDRjRBQzY1 OTZGREQ5N0I5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNtYBGA1EUj6mdOrnBvBOYOm9I/WFgF0Gki RiBmqop2rPz71BKJGeeng3CBSe0RDhQntUgOPeIcyv2owNWtYF0JJoQC39f4Pypa bukl2BgvSHnqZcKxmWgajdNZSCtuXbtHNgbLQeC9B9GOowEw2uLlTqeQ8PzD5xf9 B4yQ+boB4ZbmAr69LntS2aOUdnJzkN/+84MZbiZy4GWA/UPhoBFV0k5T8cBwrSME Bo4+/AQ7QbwacRw91EQFB2ymBZaOzm6006BYLJlc2ApHtYrIO6hjhEuLxQfR7abL sL/VZ9wrC6wl/H2FPH5UFMI9g5bnXWvLbtiSvpY8l6Kn6VklTeM= -----END CERTIFICATE-----Generated at Mon Mar 2 12:25:52 2026 by rpki-client