$ rpki-client -vvf repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft File: A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft (raw, json) Hash identifier: 2FqRMlpSgucK1nOmn/ODLcTRN34uuGJtre6VmqYl3jI= Subject key identifier: E8:FE:5D:1D:05:12:62:F3:5A:1E:3C:46:DD:CA:A0:59:62:15:CB:57 Authority key identifier: A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 Certificate issuer: /CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Certificate serial: 49AC296F0AEB2E10FF53E53D3E8A5B1252B5403A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft Manifest number: 0161 Signing time: Sun 01 Mar 2026 12:51:32 +0000 Manifest this update: Sun 01 Mar 2026 12:46:32 +0000 Manifest next update: Wed 04 Mar 2026 18:24:32 +0000 Files and hashes: 1: 3130332e35362e38302e302f32332d3234203d3e20313532303030.roa (hash: DfqIL490+LsA+4agQ2y8Kna/SVON2TJhoIAx11noI9Y=) 2: A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl (hash: Pd7I0RgFG0Ar4whckoHin6E4z5X3v9iLtX58sAaYSmI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:24:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:ac:29:6f:0a:eb:2e:10:ff:53:e5:3d:3e:8a:5b:12:52:b5:40:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F0AF113182368555F5F0F92DC1A0EBD9895596 Validity Not Before: Mar 1 12:46:32 2026 GMT Not After : Mar 4 18:24:32 2026 GMT Subject: CN=E8FE5D1D051262F35A1E3C46DDCAA0596215CB57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:d8:8d:15:5b:c3:f8:5a:27:2b:de:11:0c:c5: 23:24:62:1d:19:bf:22:2c:32:48:3e:20:54:e8:5a: 33:c0:e0:21:16:b2:22:68:bb:55:e1:eb:f1:b8:ee: 0c:97:a1:4d:27:17:b9:f0:2a:d4:ed:f5:3b:98:ba: da:3a:45:aa:31:0f:a6:7c:6a:dc:1c:c0:d6:ef:f2: 55:87:9e:39:9e:d7:1c:78:a6:5c:6f:d2:a3:1d:95: da:64:51:9d:3f:d9:f1:81:69:32:34:8e:41:61:6d: f5:9d:9f:cf:b1:c0:88:e9:c3:78:23:f1:da:e1:7c: 07:04:b5:b4:43:41:f6:fe:fe:05:ba:d4:24:a0:01: 76:24:c4:11:82:1d:47:5a:05:62:18:9f:bb:b2:10: ac:34:87:9f:f0:e5:80:f8:96:1d:50:32:e5:b7:e8: b6:36:5d:0c:0c:63:cc:f7:b1:1e:6c:f7:ca:44:53: b9:a8:80:ee:7d:98:fb:20:5a:42:e1:03:c4:a0:55: 2f:6a:e2:51:7b:35:7f:c4:ee:e8:76:ad:c8:a7:66: b7:2c:73:81:96:ea:95:04:bd:53:18:56:4c:3d:a5: 27:be:62:87:16:d4:c6:76:e8:ec:3e:36:7d:b6:2e: f1:25:b3:02:6e:c7:82:ab:7c:49:ee:50:4e:18:51: 8f:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:FE:5D:1D:05:12:62:F3:5A:1E:3C:46:DD:CA:A0:59:62:15:CB:57 X509v3 Authority Key Identifier: keyid:A2:F0:AF:11:31:82:36:85:55:F5:F0:F9:2D:C1:A0:EB:D9:89:55:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F0AF113182368555F5F0F92DC1A0EBD9895596.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ed28de8-30a1-4932-b539-2238ba75930a/0/A2F0AF113182368555F5F0F92DC1A0EBD9895596.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:df:6e:cc:da:05:57:50:c9:ab:1d:eb:82:45:80:a5:3d:b2: 7f:a5:03:60:00:99:d2:da:d4:00:d1:7f:1a:41:b3:a0:f6:36: 33:9f:ed:5b:e3:a9:10:ff:99:78:4c:bf:87:6f:b5:53:71:c8: 51:25:44:22:7c:b5:17:a7:20:db:23:10:42:ad:c8:f8:1a:34: 64:32:fc:05:f1:f5:a9:01:83:99:f3:b1:0a:0e:c3:0d:91:b6: 9e:5e:c0:1e:0a:57:1d:d4:17:63:f9:a6:db:e0:b2:51:28:6e: 9a:d2:23:39:42:13:88:e4:c2:3f:9e:20:75:00:b6:1d:c2:e1: a1:ed:d7:4a:2c:aa:d8:e2:56:b5:ed:f4:68:4c:b3:d8:84:ea: 81:9b:5a:9c:37:bf:ff:99:e6:7b:14:cd:6d:a2:2b:79:f7:ed: 52:9c:fd:d8:d8:43:d8:70:0d:39:55:20:fc:42:dd:01:93:40: 7c:12:c4:fc:31:a7:dd:89:97:e4:b3:0b:55:ff:16:45:42:ca: 57:45:a1:16:05:62:6c:66:c1:8a:19:a8:22:99:e1:4a:87:67: ba:9c:0d:ee:f2:9a:bc:64:f5:c3:50:97:4c:24:11:a9:95:1e: e3:6d:07:b8:61:03:a1:8e:ef:0c:5a:68:1e:7b:76:75:c7:7d: 96:78:2d:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSawpbwrrLhD/U+U9PopbElK1QDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJE OTg5NTU5NjAeFw0yNjAzMDExMjQ2MzJaFw0yNjAzMDQxODI0MzJaMDMxMTAvBgNV BAMTKEU4RkU1RDFEMDUxMjYyRjM1QTFFM0M0NkREQ0FBMDU5NjIxNUNCNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ2I0VW8P4Wicr3hEMxSMkYh0Z vyIsMkg+IFToWjPA4CEWsiJou1Xh6/G47gyXoU0nF7nwKtTt9TuYuto6RaoxD6Z8 atwcwNbv8lWHnjme1xx4plxv0qMdldpkUZ0/2fGBaTI0jkFhbfWdn8+xwIjpw3gj 8drhfAcEtbRDQfb+/gW61CSgAXYkxBGCHUdaBWIYn7uyEKw0h5/w5YD4lh1QMuW3 6LY2XQwMY8z3sR5s98pEU7mogO59mPsgWkLhA8SgVS9q4lF7NX/E7uh2rcinZrcs c4GW6pUEvVMYVkw9pSe+YocW1MZ26Ow+Nn22LvElswJux4KrfEnuUE4YUY8VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6P5dHQUSYvNaHjxG3cqgWWIVy1cwHwYDVR0j BBgwFoAUovCvETGCNoVV9fD5LcGg69mJVZYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZWQyOGRlOC0zMGExLTQ5MzItYjUzOS0yMjM4YmE3NTkzMGEvMC9BMkYwQUYxMTMx ODIzNjg1NTVGNUYwRjkyREMxQTBFQkQ5ODk1NTk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEwRUJEOTg5 NTU5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGVkMjhkZTgtMzBhMS00OTMyLWI1 MzktMjIzOGJhNzU5MzBhLzAvQTJGMEFGMTEzMTgyMzY4NTU1RjVGMEY5MkRDMUEw RUJEOTg5NTU5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC3fbszaBVdQyasd64JFgKU9sn+lA2AAmdLa 1ADRfxpBs6D2NjOf7VvjqRD/mXhMv4dvtVNxyFElRCJ8tRenINsjEEKtyPgaNGQy /AXx9akBg5nzsQoOww2Rtp5ewB4KVx3UF2P5ptvgslEobprSIzlCE4jkwj+eIHUA th3C4aHt10osqtjiVrXt9GhMs9iE6oGbWpw3v/+Z5nsUzW2iK3n37VKc/djYQ9hw DTlVIPxC3QGTQHwSxPwxp92Jl+SzC1X/FkVCyldFoRYFYmxmwYoZqCKZ4UqHZ7qc De7ymrxk9cNQl0wkEamVHuNtB7hhA6GO7wxaaB57dnXHfZZ4LQ0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:17 2026 by rpki-client