$ rpki-client -vvf repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft File: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft (raw, json) Hash identifier: +Kb9ixol8ljc1Ol45yyHf3nTnwZJq6WJY7DIi2M6feU= Subject key identifier: 78:BD:50:16:70:05:11:A4:15:32:E9:4B:4E:CC:0B:F0:D5:4E:28:A6 Authority key identifier: A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B Certificate issuer: /CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Certificate serial: 4A0E91D6BC0E3D49FDEE7AA3D856FD301C83ED09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft Manifest number: 027B Signing time: Sun 01 Mar 2026 03:40:56 +0000 Manifest this update: Sun 01 Mar 2026 03:35:56 +0000 Manifest next update: Wed 04 Mar 2026 13:37:56 +0000 Files and hashes: 1: 3130332e3137342e3132312e302f32342d3234203d3e20313437303937.roa (hash: 28RcdR62e/0q0exyVrMmIGMIyDeFlL8Q29Mx92Z7M14=) 2: 3130332e3137342e3132302e302f32332d3234203d3e20313437303937.roa (hash: bOWlKzk6RopDMtmA3RBA1BFwLCsnVG+rkva/NTG1vjQ=) 3: 3130332e3137342e3132302e302f32342d3234203d3e20313437303937.roa (hash: kR7f+QbSDQGljWadtB58fQP67/nBgODo/KtERDIkT4I=) 4: A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl (hash: 5yPomW/sQgjijH3HYW9qxWWzsj0JvTMlQlVlwm49SB8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:37:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:0e:91:d6:bc:0e:3d:49:fd:ee:7a:a3:d8:56:fd:30:1c:83:ed:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B Validity Not Before: Mar 1 03:35:56 2026 GMT Not After : Mar 4 13:37:56 2026 GMT Subject: CN=78BD5016700511A41532E94B4ECC0BF0D54E28A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:24:47:e4:ea:66:d0:d0:89:3a:a1:9f:2b: 5e:c4:29:21:7e:b4:d5:5c:8b:06:5b:d9:25:78:ac: 56:1d:22:4c:ed:ed:fc:41:70:17:36:36:43:57:0d: ec:c5:5f:ae:a8:ef:14:c8:9a:4b:b8:5d:27:b4:01: 66:3e:de:38:80:1e:a5:74:0b:83:d2:92:69:00:d4: c1:e1:c6:68:1a:51:17:61:48:ba:07:9a:6a:89:1b: 50:0b:70:01:7a:c6:4e:69:cd:72:3c:ab:dc:3e:0f: 13:91:53:bd:e8:d9:c2:fd:0b:64:fe:0b:80:05:03: 6f:78:f6:1f:36:92:4a:99:5e:ea:63:b2:7b:3c:5d: 9d:ee:57:c3:02:0a:be:c8:df:08:98:c0:93:c7:c6: ef:de:70:8d:e1:90:b5:5e:f0:25:17:1f:f9:89:ac: c0:02:82:9c:35:07:5d:95:b5:3b:6e:a7:6c:42:81: 2a:c5:8b:49:47:05:cd:ae:95:bc:ea:e6:bc:cb:51: 82:d2:ad:7f:90:21:22:cf:13:88:da:72:95:4c:c7: 14:56:77:91:4c:c2:a0:d0:a3:8c:f1:67:c7:d2:b8: a0:61:00:28:b9:69:a1:40:eb:a7:88:89:61:0f:ba: 9a:be:64:58:f4:fe:73:7b:b7:35:37:f0:05:42:89: d9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:BD:50:16:70:05:11:A4:15:32:E9:4B:4E:CC:0B:F0:D5:4E:28:A6 X509v3 Authority Key Identifier: keyid:A0:B5:1B:C5:AC:7C:95:73:7A:24:BD:6A:28:D8:24:9E:7A:80:CF:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86b20515-8d7c-445c-bff7-babd5265780f/0/A0B51BC5AC7C95737A24BD6A28D8249E7A80CF4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:1b:33:c8:8b:2d:dd:9a:a8:74:30:a9:50:8d:3a:22:bd:b9: c2:12:19:1f:88:9f:37:b3:97:33:4e:d1:7a:68:5d:6d:9b:69: 05:d3:d6:94:73:a3:e8:95:83:d7:89:64:b2:3c:e3:3a:e1:19: e9:bd:96:86:e6:3e:46:cd:3b:17:e4:2b:c5:1c:53:a1:ab:1d: 9a:a0:69:29:95:16:62:7d:c1:cd:a3:69:3a:68:38:b0:28:8a: 08:f6:21:60:ef:eb:8e:0b:fd:74:e3:de:82:15:5e:fa:37:41: 2b:03:03:81:f2:aa:67:c5:1b:8d:09:7f:05:d2:41:60:d9:2c: f3:10:92:ec:03:58:0a:6c:1e:c2:7f:90:71:62:7a:e6:73:28: 2e:d5:2d:0b:dc:74:55:a8:65:bf:df:c5:e9:e7:04:fc:1f:92: b4:20:64:83:17:6a:c2:3c:0c:1c:12:f5:8d:70:48:c9:2b:4f: e9:ed:e9:d4:d3:b3:6b:20:bb:16:e7:ad:ed:f8:9d:39:20:f6: 9c:a7:6b:18:66:ac:25:1e:23:85:5d:5d:5e:33:aa:38:b7:b2: 38:84:f6:d6:58:fd:6a:9f:c1:8e:84:85:54:f0:2a:02:e1:cc: 94:2a:bd:0f:3f:4a:b2:11:64:2d:56:03:7f:3d:a7:34:68:b4: 7c:81:2d:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSg6R1rwOPUn97nqj2Fb9MByD7QkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3 QTgwQ0Y0QjAeFw0yNjAzMDEwMzM1NTZaFw0yNjAzMDQxMzM3NTZaMDMxMTAvBgNV BAMTKDc4QkQ1MDE2NzAwNTExQTQxNTMyRTk0QjRFQ0MwQkYwRDU0RTI4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoyRH5Opm0NCJOqGfK17EKSF+ tNVciwZb2SV4rFYdIkzt7fxBcBc2NkNXDezFX66o7xTImku4XSe0AWY+3jiAHqV0 C4PSkmkA1MHhxmgaURdhSLoHmmqJG1ALcAF6xk5pzXI8q9w+DxORU73o2cL9C2T+ C4AFA2949h82kkqZXupjsns8XZ3uV8MCCr7I3wiYwJPHxu/ecI3hkLVe8CUXH/mJ rMACgpw1B12VtTtup2xCgSrFi0lHBc2ulbzq5rzLUYLSrX+QISLPE4jacpVMxxRW d5FMwqDQo4zxZ8fSuKBhACi5aaFA66eIiWEPupq+ZFj0/nN7tzU38AVCidnVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeL1QFnAFEaQVMulLTswL8NVOKKYwHwYDVR0j BBgwFoAUoLUbxax8lXN6JL1qKNgknnqAz0swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmIyMDUxNS04ZDdjLTQ0NWMtYmZmNy1iYWJkNTI2NTc4MGYvMC9BMEI1MUJDNUFD N0M5NTczN0EyNEJENkEyOEQ4MjQ5RTdBODBDRjRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0OUU3QTgw Q0Y0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiMjA1MTUtOGQ3Yy00NDVjLWJm ZjctYmFiZDUyNjU3ODBmLzAvQTBCNTFCQzVBQzdDOTU3MzdBMjRCRDZBMjhEODI0 OUU3QTgwQ0Y0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4bM8iLLd2aqHQwqVCNOiK9ucISGR+Inzez lzNO0XpoXW2baQXT1pRzo+iVg9eJZLI84zrhGem9lobmPkbNOxfkK8UcU6GrHZqg aSmVFmJ9wc2jaTpoOLAoigj2IWDv644L/XTj3oIVXvo3QSsDA4HyqmfFG40JfwXS QWDZLPMQkuwDWApsHsJ/kHFieuZzKC7VLQvcdFWoZb/fxennBPwfkrQgZIMXasI8 DBwS9Y1wSMkrT+nt6dTTs2sguxbnre34nTkg9pynaxhmrCUeI4VdXV4zqji3sjiE 9tZY/WqfwY6EhVTwKgLhzJQqvQ8/SrIRZC1WA389pzRotHyBLX4= -----END CERTIFICATE-----Generated at Mon Mar 2 19:30:06 2026 by rpki-client