$ rpki-client -vvf repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft File: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft (raw, json) Hash identifier: zI3bfapKxDyDrqBuc/fiftSiZYFaaRj3q70UMi5A+Wo= Subject key identifier: 74:90:59:D6:35:F4:80:9A:61:52:C4:88:8E:10:AF:AD:1F:0D:40:C5 Authority key identifier: A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 Certificate issuer: /CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Certificate serial: 65FA1B4480E6E80C1C73B9A6AF1389B745D0477A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft Manifest number: 0333 Signing time: Sun 01 Mar 2026 16:30:59 +0000 Manifest this update: Sun 01 Mar 2026 16:25:59 +0000 Manifest next update: Wed 04 Mar 2026 19:35:59 +0000 Files and hashes: 1: 323030313a6466303a313730303a3a2f34382d3438203d3e20313336303730.roa (hash: DZhIHh+Q1/lFglHPCtQYtJARiOU+Khz/cuUC8LvdiAk=) 2: A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl (hash: kR75+fjYaFaMFGxgaznxVYfQ1t7E4zSwBolTENs4HLo=) 3: 3130332e38342e3131362e302f32342d3234203d3e20313336303730.roa (hash: uFvJDDnE+LzWscDNPWULjpdUKOX2mvB/YxTyjJbL490=) 4: 3130332e3135372e35352e302f32342d3234203d3e20313336303730.roa (hash: SaglbTs2Sm97iqGUTpHLhK4uFUxx2JxCBReDItgEQOA=) 5: 3130332e3135372e35352e302f32342d3234203d3e20333936393832.roa (hash: ta8cyJGAuX8M5px06fD7ixeqP65bXdztJIzRgtjjUTw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:35:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:fa:1b:44:80:e6:e8:0c:1c:73:b9:a6:af:13:89:b7:45:d0:47:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3 Validity Not Before: Mar 1 16:25:59 2026 GMT Not After : Mar 4 19:35:59 2026 GMT Subject: CN=749059D635F4809A6152C4888E10AFAD1F0D40C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:cc:b7:ed:b4:02:9f:a3:8f:21:26:09:37:4b: cb:4a:15:14:f6:18:ea:f6:47:6e:2a:1e:58:85:98: 12:e9:a9:c3:7e:b1:f6:2e:01:d0:15:0d:45:3b:09: d4:9a:93:37:ce:e4:06:7e:39:33:52:31:08:0d:04: 73:4f:10:9d:7d:83:07:f0:28:69:18:8d:94:9d:f5: 3c:da:94:68:7f:a0:1e:c5:34:d7:2a:5d:0d:67:c6: a4:0c:d1:5b:f9:7a:47:0a:c2:96:ce:73:6d:b6:22: ed:96:a9:3b:e7:cd:d8:57:d5:80:da:1b:e5:14:37: 19:40:7b:3a:2c:65:2f:38:cd:72:08:1a:e5:17:08: e4:12:de:4b:bf:5f:be:42:52:df:af:fb:e7:dd:a4: 7d:d1:08:c9:81:e9:16:f4:3c:11:ca:5b:8b:12:04: 20:15:3f:82:46:06:0b:d8:f5:46:d8:08:f2:d2:2b: 7a:b0:22:76:2e:7b:88:47:b0:84:b7:dd:d9:77:58: 5a:49:92:82:af:dd:43:df:14:f9:56:bd:33:d4:72: b9:f6:7c:c3:95:d5:40:60:10:c5:da:21:02:ea:e7: 48:4c:b0:95:59:e8:76:53:ee:5c:d9:ad:20:89:5f: 9a:a3:de:4e:3b:69:74:33:98:e5:55:32:2a:60:f3: 31:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:90:59:D6:35:F4:80:9A:61:52:C4:88:8E:10:AF:AD:1F:0D:40:C5 X509v3 Authority Key Identifier: keyid:A0:A2:A5:CA:8C:20:A7:CF:6D:A1:32:5C:9B:D5:C3:37:6F:3F:E0:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f377711-1e3d-4e5a-a4ac-05a1c502ad28/0/A0A2A5CA8C20A7CF6DA1325C9BD5C3376F3FE0B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:90:7a:ac:fc:44:9c:8a:09:6b:54:38:0f:3f:c5:3c:4f:bc: 45:83:c0:a7:2e:d8:66:d8:9d:35:7a:b2:68:ea:7b:90:f3:e4: d5:87:8d:37:a0:d8:74:a0:c5:32:9e:ab:25:9f:dd:e7:f2:d4: 57:5b:ea:af:4b:f0:a1:83:b1:18:7d:9b:3a:c8:05:3d:8c:e9: c8:f5:f3:6c:2f:58:21:17:4d:fd:33:89:8f:b1:36:69:12:c0: c8:5e:43:8b:73:f1:12:0a:11:e6:af:ae:c1:95:95:85:a2:61: 0d:9a:3b:dc:3c:be:f1:0f:bb:a1:a0:72:b5:b1:bb:15:5b:51: 0c:54:b4:e8:64:df:db:05:ad:af:87:59:76:1f:ac:19:6d:1f: 9c:92:a4:5d:62:0f:1d:e1:b2:7a:8b:f2:b1:e0:c9:59:e8:1a: 18:54:82:c7:a9:ac:16:ab:de:d9:9c:89:b9:b6:0d:13:97:df: f1:f0:d3:5a:52:96:11:c3:95:61:a3:0d:45:b5:53:2b:1c:5e: 50:7f:73:e7:48:96:ca:0c:6c:77:7a:af:0f:40:d9:1f:ba:b6: 2c:71:5b:4d:e2:18:b5:08:1c:86:41:fb:b1:c7:95:93:5b:e9: 93:5c:09:e5:88:84:47:39:a1:03:54:cd:61:e9:e5:e6:f8:d1: b9:a7:57:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZfobRIDm6Awcc7mmrxOJt0XQR3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2 RjNGRTBCMzAeFw0yNjAzMDExNjI1NTlaFw0yNjAzMDQxOTM1NTlaMDMxMTAvBgNV BAMTKDc0OTA1OUQ2MzVGNDgwOUE2MTUyQzQ4ODhFMTBBRkFEMUYwRDQwQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCszLfttAKfo48hJgk3S8tKFRT2 GOr2R24qHliFmBLpqcN+sfYuAdAVDUU7CdSakzfO5AZ+OTNSMQgNBHNPEJ19gwfw KGkYjZSd9TzalGh/oB7FNNcqXQ1nxqQM0Vv5ekcKwpbOc222Iu2WqTvnzdhX1YDa G+UUNxlAezosZS84zXIIGuUXCOQS3ku/X75CUt+v++fdpH3RCMmB6Rb0PBHKW4sS BCAVP4JGBgvY9UbYCPLSK3qwInYue4hHsIS33dl3WFpJkoKv3UPfFPlWvTPUcrn2 fMOV1UBgEMXaIQLq50hMsJVZ6HZT7lzZrSCJX5qj3k47aXQzmOVVMipg8zHPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdJBZ1jX0gJphUsSIjhCvrR8NQMUwHwYDVR0j BBgwFoAUoKKlyowgp89toTJcm9XDN28/4LMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZjM3NzcxMS0xZTNkLTRlNWEtYTRhYy0wNWExYzUwMmFkMjgvMC9BMEEyQTVDQThD MjBBN0NGNkRBMTMyNUM5QkQ1QzMzNzZGM0ZFMEIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMzMzc2RjNG RTBCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGYzNzc3MTEtMWUzZC00ZTVhLWE0 YWMtMDVhMWM1MDJhZDI4LzAvQTBBMkE1Q0E4QzIwQTdDRjZEQTEzMjVDOUJENUMz Mzc2RjNGRTBCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGyQeqz8RJyKCWtUOA8/xTxPvEWDwKcu2GbY nTV6smjqe5Dz5NWHjTeg2HSgxTKeqyWf3efy1Fdb6q9L8KGDsRh9mzrIBT2M6cj1 82wvWCEXTf0ziY+xNmkSwMheQ4tz8RIKEeavrsGVlYWiYQ2aO9w8vvEPu6GgcrWx uxVbUQxUtOhk39sFra+HWXYfrBltH5ySpF1iDx3hsnqL8rHgyVnoGhhUgseprBar 3tmcibm2DROX3/Hw01pSlhHDlWGjDUW1UyscXlB/c+dIlsoMbHd6rw9A2R+6tixx W03iGLUIHIZB+7HHlZNb6ZNcCeWIhEc5oQNUzWHp5eb40bmnV40= -----END CERTIFICATE-----Generated at Mon Mar 2 16:12:29 2026 by rpki-client