$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft File: A230D664FEDFC0266349811ED3999BE5220F1DEA.mft (raw, json) Hash identifier: oLKttgbGQvi2pfCqTw9LUkMLQSNlJaNHRCfvV/FLVRM= Subject key identifier: C2:34:BC:AE:48:44:2B:41:FE:07:4C:CB:68:83:9D:30:F1:89:69:AD Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA Certificate issuer: /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Certificate serial: 1341E82C96D4568CF85D50ECA65FD7F036CF93C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft Manifest number: 04AD Signing time: Sun 01 Mar 2026 12:10:00 +0000 Manifest this update: Sun 01 Mar 2026 12:05:00 +0000 Manifest next update: Wed 04 Mar 2026 23:42:00 +0000 Files and hashes: 1: A230D664FEDFC0266349811ED3999BE5220F1DEA.crl (hash: 5MzRvMOvef6LQ5uWLaEga+g40P4YapE+oQct1MQn+Rk=) 2: 3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (hash: rUfipM6ac+ffGR3+qAba7wAEyR1CjmGAoVaQPfsb4C4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:42:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:41:e8:2c:96:d4:56:8c:f8:5d:50:ec:a6:5f:d7:f0:36:cf:93:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA Validity Not Before: Mar 1 12:05:00 2026 GMT Not After : Mar 4 23:42:00 2026 GMT Subject: CN=C234BCAE48442B41FE074CCB68839D30F18969AD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:28:f3:b0:8c:01:52:87:a2:6e:92:fc:94:6a: 1f:22:ab:04:b7:95:21:9b:f5:09:b7:57:2c:8c:66: 04:5b:77:ec:7e:7e:06:a2:20:21:f6:96:6a:4c:b2: 73:fa:e4:41:9d:0e:15:10:89:79:30:24:e1:06:dd: 5e:51:b1:d4:c8:e0:db:50:1c:76:b3:2b:4a:80:d4: f5:a9:79:70:95:8f:12:41:f0:6d:d9:de:82:86:db: 38:cc:9e:fc:12:3e:37:1e:9d:3d:c4:f4:80:bc:53: 0e:97:67:0b:c1:a0:fe:f6:3b:2f:40:41:59:3d:3d: fc:b2:16:b9:17:2e:26:13:b2:d2:c3:da:92:83:48: 0a:c9:c3:e4:53:80:ed:b0:88:f8:39:d6:68:02:10: bd:ec:33:ee:0d:7e:79:8b:05:c9:f4:3c:d9:64:1b: c2:49:a0:ca:1c:7d:55:56:c3:70:6d:ec:1d:e5:ae: 68:f3:e6:fa:1a:b6:ad:57:07:0d:92:f3:dc:1b:a2: 34:ec:5a:2f:20:d3:bd:71:7b:97:9d:e2:f0:9d:60: 81:28:59:b6:bc:f0:25:11:6f:59:a5:c3:24:d1:61: 3d:40:9d:ea:0e:0b:34:56:16:9d:d3:99:2e:9c:13: fd:10:8d:b5:e9:37:1b:9b:35:42:88:fb:59:17:b1: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:34:BC:AE:48:44:2B:41:FE:07:4C:CB:68:83:9D:30:F1:89:69:AD X509v3 Authority Key Identifier: keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:2a:c7:8f:e5:73:03:41:21:d0:c7:42:09:8c:ac:8e:6b:df: 1e:e9:68:5f:ad:86:a5:2e:c4:b1:b5:cd:e2:c0:bf:b9:7d:cd: f0:9f:b4:76:3a:ca:c0:2f:08:9d:18:58:d8:fd:64:a7:21:67: 29:4d:16:9f:23:84:01:c9:1e:f3:10:b6:5c:ef:d6:da:17:7e: dd:53:1e:7e:0b:0c:95:4d:76:0b:55:2a:bd:bb:27:5c:8c:63: ba:3f:70:f2:32:86:b5:67:b6:d7:e8:71:f5:18:0f:23:08:0f: 03:44:e9:7a:49:45:ee:db:08:46:f4:4a:ad:e2:af:ff:7e:3d: 17:da:8a:eb:b8:88:e0:88:db:15:1c:56:ad:a4:63:f2:25:af: 43:99:ce:c4:3f:1a:75:b0:b0:38:6f:75:47:c1:61:08:d6:a5: a5:e6:e9:a1:cd:40:f4:a5:5c:8c:18:8e:3c:c8:d0:27:26:4d: 02:a6:a2:5b:d6:cd:c0:d0:e7:03:64:f5:86:3b:b5:92:7f:71: 6e:2c:b7:ab:37:19:7f:c6:66:7d:24:00:cf:c2:b0:38:00:0a: 5a:dc:a5:3a:74:f2:c1:cc:a8:d6:cf:44:9d:60:34:06:6a:93: d4:38:ee:ef:69:fd:c4:5a:52:8e:66:9f:ee:ec:00:26:64:a7: 50:77:a7:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0HoLJbUVoz4XVDspl/X8DbPk8gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy MjBGMURFQTAeFw0yNjAzMDExMjA1MDBaFw0yNjAzMDQyMzQyMDBaMDMxMTAvBgNV BAMTKEMyMzRCQ0FFNDg0NDJCNDFGRTA3NENDQjY4ODM5RDMwRjE4OTY5QUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5KPOwjAFSh6JukvyUah8iqwS3 lSGb9Qm3VyyMZgRbd+x+fgaiICH2lmpMsnP65EGdDhUQiXkwJOEG3V5RsdTI4NtQ HHazK0qA1PWpeXCVjxJB8G3Z3oKG2zjMnvwSPjcenT3E9IC8Uw6XZwvBoP72Oy9A QVk9PfyyFrkXLiYTstLD2pKDSArJw+RTgO2wiPg51mgCEL3sM+4NfnmLBcn0PNlk G8JJoMocfVVWw3Bt7B3lrmjz5voatq1XBw2S89wbojTsWi8g071xe5ed4vCdYIEo Wba88CURb1mlwyTRYT1AneoOCzRWFp3TmS6cE/0QjbXpNxubNUKI+1kXsS8NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwjS8rkhEK0H+B0zLaIOdMPGJaa0wHwYDVR0j BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG MURFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTQyNDIzNTUtYTdlMi00Y2I5LThj ZmYtOWUxN2M3NDJjMmVmLzAvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlC RTUyMjBGMURFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0qx4/lcwNBIdDHQgmMrI5r3x7paF+thqUu xLG1zeLAv7l9zfCftHY6ysAvCJ0YWNj9ZKchZylNFp8jhAHJHvMQtlzv1toXft1T Hn4LDJVNdgtVKr27J1yMY7o/cPIyhrVnttfocfUYDyMIDwNE6XpJRe7bCEb0Sq3i r/9+PRfaiuu4iOCI2xUcVq2kY/Ilr0OZzsQ/GnWwsDhvdUfBYQjWpaXm6aHNQPSl XIwYjjzI0CcmTQKmolvWzcDQ5wNk9YY7tZJ/cW4st6s3GX/GZn0kAM/CsDgAClrc pTp08sHMqNbPRJ1gNAZqk9Q47u9p/cRaUo5mn+7sACZkp1B3p8s= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:42 2026 by rpki-client