$ rpki-client -vvf repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft File: A950C0F5B830659E499444729038D5D2047859FB.mft (raw, json) Hash identifier: xYkyShUHzhF1I26S2q/8YuNreZD3cUeZw85Nm05GwR8= Subject key identifier: 22:F5:9A:5F:B5:1A:BA:97:33:39:8D:95:E8:35:7E:0E:37:08:06:CA Authority key identifier: A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB Certificate issuer: /CN=A950C0F5B830659E499444729038D5D2047859FB Certificate serial: 29992DC61AE0AAB9639AAF9FF0EC24D41A4B9E4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft Manifest number: 0119 Signing time: Mon 02 Mar 2026 02:34:56 +0000 Manifest this update: Mon 02 Mar 2026 02:29:56 +0000 Manifest next update: Thu 05 Mar 2026 14:32:56 +0000 Files and hashes: 1: A950C0F5B830659E499444729038D5D2047859FB.crl (hash: x79JDFCp0U9vr1I70YEW9pRB2cAXVmPzA3PmpFYdb7Q=) 2: 3136302e32322e33362e302f32342d3234203d3e20313532373933.roa (hash: qpEenk6wx4J1PVfOlTpwDMHCKC14Zk2TeAHNO3MKSc4=) 3: 3136302e32322e33372e302f32342d3234203d3e20313532373933.roa (hash: p0Gix7kk0dJdR+0SrzqwZk1UXDcM7trhKt9LXa5iNvk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:99:2d:c6:1a:e0:aa:b9:63:9a:af:9f:f0:ec:24:d4:1a:4b:9e:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A950C0F5B830659E499444729038D5D2047859FB Validity Not Before: Mar 2 02:29:56 2026 GMT Not After : Mar 5 14:32:56 2026 GMT Subject: CN=22F59A5FB51ABA9733398D95E8357E0E370806CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:58:02:59:a3:f2:d3:fd:58:e3:ff:6a:5a:52: b6:ea:9d:86:0e:04:be:6e:eb:ae:c9:75:80:c0:09: 6d:7c:a8:01:d3:4d:04:f5:d8:78:94:d9:50:64:ea: 73:24:41:88:1b:0e:f4:bb:01:95:64:a9:7e:42:0d: 3d:6c:ce:49:4f:63:e6:27:d1:63:b9:21:dd:68:ac: 51:e1:08:33:32:8a:02:f1:5c:2e:b5:3b:1d:a4:6f: 7a:52:77:48:f0:4e:31:fe:e9:e6:05:e4:d0:21:05: 08:39:e4:bc:d2:83:d7:45:ea:80:cc:26:4b:18:08: 10:98:ff:2a:7b:4e:da:51:03:59:ac:09:fe:69:cc: 28:da:cb:f7:3f:22:4e:29:1c:ff:05:08:b9:4a:f8: c7:f2:96:a1:ca:37:5b:b9:aa:ed:a2:11:13:ee:a1: ce:34:75:1d:f8:bf:c3:71:9b:8a:67:dc:a4:f9:12: 4f:f0:b7:49:03:05:c2:3c:5e:52:b5:ce:af:1e:ea: ab:7c:f5:72:a9:6c:f9:2d:e7:95:77:e2:31:da:50: f8:05:4c:83:28:e8:c2:04:eb:2f:4c:85:ea:c0:52: 3c:71:dd:5b:c9:cf:7d:54:75:59:71:0d:6f:3d:ce: 16:1b:71:2a:51:ae:33:2a:2f:81:c1:9f:6f:eb:31: d9:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:F5:9A:5F:B5:1A:BA:97:33:39:8D:95:E8:35:7E:0E:37:08:06:CA X509v3 Authority Key Identifier: keyid:A9:50:C0:F5:B8:30:65:9E:49:94:44:72:90:38:D5:D2:04:78:59:FB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A950C0F5B830659E499444729038D5D2047859FB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f582f2b-8625-4f38-b26e-42fbd3c21cf0/0/A950C0F5B830659E499444729038D5D2047859FB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c2:b4:bc:03:df:09:75:5c:80:3b:a7:a5:94:6e:ef:96:f4:1d: 0f:74:fb:f2:92:9a:5d:69:e9:ab:c7:60:64:d0:27:dc:61:1b: 83:e8:4a:af:d2:6d:61:ce:85:a5:db:02:56:47:7a:af:49:cc: 5e:1e:27:0f:25:99:36:3e:cc:0c:79:ff:85:28:f6:eb:47:1a: 6f:e0:c9:65:68:cf:24:1d:c8:bd:1f:42:53:c4:e8:cf:dc:94: 31:92:c1:d9:2d:26:55:76:5b:01:34:8d:1e:c5:84:32:9c:4b: 12:91:f5:55:86:3f:b9:13:2a:43:c5:1e:ed:1b:72:11:1f:a2: cb:db:43:37:c8:07:a7:15:ab:a2:3a:83:b7:68:e9:fd:70:d8: d1:9b:76:36:a0:81:ce:eb:f4:51:76:13:80:2e:d0:65:fe:14: bd:8f:43:08:3d:b7:2a:ff:cd:de:e4:56:22:d9:e0:11:04:ac: b9:fc:c1:ba:b7:bc:9d:71:3f:86:07:4f:2b:af:34:96:64:c4: b3:fc:42:1a:32:53:70:e2:be:be:a8:1c:9d:f2:a5:d1:4b:c6: f1:23:b5:79:5f:7d:05:a8:53:a2:09:be:6f:b6:59:42:6f:b6: 42:b1:ae:22:ef:94:30:7e:e4:5b:ac:02:4c:44:6b:65:55:6f: 9e:dd:4e:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZktxhrgqrljmq+f8Owk1BpLnk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIw NDc4NTlGQjAeFw0yNjAzMDIwMjI5NTZaFw0yNjAzMDUxNDMyNTZaMDMxMTAvBgNV BAMTKDIyRjU5QTVGQjUxQUJBOTczMzM5OEQ5NUU4MzU3RTBFMzcwODA2Q0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNWAJZo/LT/Vjj/2paUrbqnYYO BL5u667JdYDACW18qAHTTQT12HiU2VBk6nMkQYgbDvS7AZVkqX5CDT1szklPY+Yn 0WO5Id1orFHhCDMyigLxXC61Ox2kb3pSd0jwTjH+6eYF5NAhBQg55LzSg9dF6oDM JksYCBCY/yp7TtpRA1msCf5pzCjay/c/Ik4pHP8FCLlK+MfylqHKN1u5qu2iERPu oc40dR34v8Nxm4pn3KT5Ek/wt0kDBcI8XlK1zq8e6qt89XKpbPkt55V34jHaUPgF TIMo6MIE6y9MherAUjxx3VvJz31UdVlxDW89zhYbcSpRrjMqL4HBn2/rMdnBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIvWaX7UaupczOY2V6DV+DjcIBsowHwYDVR0j BBgwFoAUqVDA9bgwZZ5JlERykDjV0gR4WfswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZjU4MmYyYi04NjI1LTRmMzgtYjI2ZS00MmZiZDNjMjFjZjAvMC9BOTUwQzBGNUI4 MzA2NTlFNDk5NDQ0NzI5MDM4RDVEMjA0Nzg1OUZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1RDIwNDc4 NTlGQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY1ODJmMmItODYyNS00ZjM4LWIy NmUtNDJmYmQzYzIxY2YwLzAvQTk1MEMwRjVCODMwNjU5RTQ5OTQ0NDcyOTAzOEQ1 RDIwNDc4NTlGQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMK0vAPfCXVcgDunpZRu75b0HQ90+/KSml1p 6avHYGTQJ9xhG4PoSq/SbWHOhaXbAlZHeq9JzF4eJw8lmTY+zAx5/4Uo9utHGm/g yWVozyQdyL0fQlPE6M/clDGSwdktJlV2WwE0jR7FhDKcSxKR9VWGP7kTKkPFHu0b chEfosvbQzfIB6cVq6I6g7do6f1w2NGbdjaggc7r9FF2E4Au0GX+FL2PQwg9tyr/ zd7kViLZ4BEErLn8wbq3vJ1xP4YHTyuvNJZkxLP8QhoyU3Divr6oHJ3ypdFLxvEj tXlffQWoU6IJvm+2WUJvtkKxriLvlDB+5FusAkxEa2VVb57dTv4= -----END CERTIFICATE-----Generated at Mon Mar 2 17:27:12 2026 by rpki-client