$ rpki-client -vvf repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft File: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft (raw, json) Hash identifier: fZ8Wnn2M6gPc1i7YewDimApUZ4ktnwrI+ZetqtCy8Mc= Subject key identifier: 24:E1:A8:A7:5E:4F:AB:7A:26:FD:B9:26:70:8D:02:61:00:BB:8D:A2 Authority key identifier: A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 Certificate issuer: /CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Certificate serial: 3BCBEFC05963ED842A96DD1FA0E569458C6B7EB0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft Manifest number: 0269 Signing time: Mon 02 Mar 2026 08:41:53 +0000 Manifest this update: Mon 02 Mar 2026 08:36:53 +0000 Manifest next update: Thu 05 Mar 2026 11:58:53 +0000 Files and hashes: 1: A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl (hash: fVSCHN5ru3cJkZj4n+sliagxP9+rvA7k/vr98QrpYd8=) 2: 3130332e3138342e3136372e302f32342d3234203d3e20313439363631.roa (hash: 29EwyU92wMo2KWDvgyD1kquOJ0/UWDMTbcLOQRMaasg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:cb:ef:c0:59:63:ed:84:2a:96:dd:1f:a0:e5:69:45:8c:6b:7e:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A496844B5B43BD38E2F4FD6EBD252D2832E9AE81 Validity Not Before: Mar 2 08:36:53 2026 GMT Not After : Mar 5 11:58:53 2026 GMT Subject: CN=24E1A8A75E4FAB7A26FDB926708D026100BB8DA2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:70:a9:ea:44:fe:b6:7a:5d:5d:c0:b8:ac:ad: 9e:84:1f:41:3f:28:1e:9a:65:f6:63:9a:be:17:45: b3:70:92:cf:49:3a:0e:96:e7:12:54:1e:9a:fc:b2: 38:f3:0f:7e:c9:20:33:6c:2c:67:fb:db:3d:cb:a7: 28:ec:9a:3a:d6:5a:db:63:b1:8d:dc:52:40:82:53: 87:14:8a:eb:48:26:03:dc:e1:92:ec:0d:14:c5:57: c8:21:b2:98:4f:22:31:a2:be:12:c3:87:ca:07:af: 98:1d:fe:41:f7:95:27:e5:2f:67:a9:29:da:ca:c4: c6:7f:19:01:26:73:9a:c8:42:76:33:8c:13:5a:13: 06:04:7a:b5:31:01:23:9c:1b:e0:a9:c5:03:98:ba: 6d:19:a6:20:a0:b1:78:45:64:cb:55:94:03:3f:db: 34:b8:b8:ac:e2:33:3a:c0:c8:75:ea:4b:a3:b3:0e: 5d:42:a7:4f:18:d6:d5:ca:54:a1:c0:da:81:0d:d3: f1:02:e8:3d:81:bc:2c:3b:31:38:4c:64:ac:e4:7a: e1:5a:b1:c3:70:93:90:8d:f5:49:d0:d9:0a:1f:c1: 55:43:55:11:e8:5d:c4:5c:66:f6:2c:62:1b:3b:cf: 2a:fe:03:0d:4a:29:18:39:f5:e4:dc:5d:9f:5b:18: 79:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:E1:A8:A7:5E:4F:AB:7A:26:FD:B9:26:70:8D:02:61:00:BB:8D:A2 X509v3 Authority Key Identifier: keyid:A4:96:84:4B:5B:43:BD:38:E2:F4:FD:6E:BD:25:2D:28:32:E9:AE:81 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60649c47-dfc3-4a20-b5b4-879675e5db92/0/A496844B5B43BD38E2F4FD6EBD252D2832E9AE81.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:3d:c6:f3:ab:46:9a:66:61:81:bd:31:3a:63:20:50:21:d9: 77:b4:ad:b8:a0:0e:cf:72:d0:39:8c:4c:a0:65:9d:4e:38:2d: 1e:ba:fe:02:75:cb:1f:f7:b6:23:6c:10:39:70:e3:97:77:bf: 9a:e8:6b:56:bc:e3:41:2e:69:1f:82:2f:ff:59:36:54:d1:ee: 0c:e9:b3:4b:18:73:02:bf:d7:a6:19:5b:46:2e:c8:e3:30:a7: d0:3b:25:5c:32:d9:c6:6c:76:f2:4a:18:d7:ac:e0:6e:28:c8: 28:81:e1:ca:dd:77:1e:a6:ed:71:d9:bb:de:5a:7c:d5:80:a5: 91:7f:13:ec:1c:6e:d6:4c:4b:6a:01:c2:0e:a2:8f:ca:72:2f: ec:ab:2b:58:ab:ef:aa:ce:83:48:8a:f9:91:b2:82:1c:ec:90: ad:46:0e:44:4c:ea:a5:b4:57:ac:23:bf:5c:fa:d7:25:eb:d2: e8:fb:d1:6f:e5:15:aa:5a:bd:1f:79:c6:97:8f:e6:f6:59:0c: 71:58:83:a0:ff:e8:e0:8a:d3:58:86:5c:51:72:79:d3:40:e7: 5b:28:9e:14:0b:f8:68:3a:6d:12:05:1b:5d:ea:e4:38:5f:1b: 26:1f:45:08:1e:e8:c4:51:e9:8d:ea:78:0f:95:16:25:d5:96: 65:05:fe:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO8vvwFlj7YQqlt0foOVpRYxrfrAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgz MkU5QUU4MTAeFw0yNjAzMDIwODM2NTNaFw0yNjAzMDUxMTU4NTNaMDMxMTAvBgNV BAMTKDI0RTFBOEE3NUU0RkFCN0EyNkZEQjkyNjcwOEQwMjYxMDBCQjhEQTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWcKnqRP62el1dwLisrZ6EH0E/ KB6aZfZjmr4XRbNwks9JOg6W5xJUHpr8sjjzD37JIDNsLGf72z3LpyjsmjrWWttj sY3cUkCCU4cUiutIJgPc4ZLsDRTFV8ghsphPIjGivhLDh8oHr5gd/kH3lSflL2ep KdrKxMZ/GQEmc5rIQnYzjBNaEwYEerUxASOcG+CpxQOYum0ZpiCgsXhFZMtVlAM/ 2zS4uKziMzrAyHXqS6OzDl1Cp08Y1tXKVKHA2oEN0/EC6D2BvCw7MThMZKzkeuFa scNwk5CN9UnQ2QofwVVDVRHoXcRcZvYsYhs7zyr+Aw1KKRg59eTcXZ9bGHnjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJOGop15Pq3om/bkmcI0CYQC7jaIwHwYDVR0j BBgwFoAUpJaES1tDvTji9P1uvSUtKDLproEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MDY0OWM0Ny1kZmMzLTRhMjAtYjViNC04Nzk2NzVlNWRiOTIvMC9BNDk2ODQ0QjVC NDNCRDM4RTJGNEZENkVCRDI1MkQyODMyRTlBRTgxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJEMjgzMkU5 QUU4MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjA2NDljNDctZGZjMy00YTIwLWI1 YjQtODc5Njc1ZTVkYjkyLzAvQTQ5Njg0NEI1QjQzQkQzOEUyRjRGRDZFQkQyNTJE MjgzMkU5QUU4MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACI9xvOrRppmYYG9MTpjIFAh2Xe0rbigDs9y 0DmMTKBlnU44LR66/gJ1yx/3tiNsEDlw45d3v5roa1a840EuaR+CL/9ZNlTR7gzp s0sYcwK/16YZW0YuyOMwp9A7JVwy2cZsdvJKGNes4G4oyCiB4crddx6m7XHZu95a fNWApZF/E+wcbtZMS2oBwg6ij8pyL+yrK1ir76rOg0iK+ZGyghzskK1GDkRM6qW0 V6wjv1z61yXr0uj70W/lFapavR95xpeP5vZZDHFYg6D/6OCK01iGXFFyedNA51so nhQL+Gg6bRIFG13q5DhfGyYfRQge6MRR6Y3qeA+VFiXVlmUF/ns= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:02 2026 by rpki-client