$ rpki-client -vvf repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft File: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft (raw, json) Hash identifier: oACETohpPdz0JDacE0DWX3Y5AuGCEBWpvomseyjIkRE= Subject key identifier: 0B:5C:26:0B:97:2F:C3:E8:6D:80:CA:4B:71:44:C7:7E:8B:12:60:C0 Authority key identifier: A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 Certificate issuer: /CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Certificate serial: 0ED2C9E3B2356F42680E80176EC26794F1862F89 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft Manifest number: 0123 Signing time: Mon 02 Mar 2026 07:32:33 +0000 Manifest this update: Mon 02 Mar 2026 07:27:33 +0000 Manifest next update: Thu 05 Mar 2026 15:24:33 +0000 Files and hashes: 1: 3136302e32302e3132342e302f32332d3233203d3e20313532373830.roa (hash: 5RUEcjZWV4Zm8Cu7Ldj94h1BNUsKLWrbbvXJVqSNnAU=) 2: 3136302e32302e3132342e302f32342d3234203d3e20313532373830.roa (hash: K/IR3tQ/B2ym6+3pMgc6lpdo/zlib36G9pC4/9bpSkY=) 3: A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl (hash: lJaIZ0QoZzkFeg9CB/0q7RVVUNF+3kNk9921tUsJ2/w=) 4: 3136302e32302e3132352e302f32342d3234203d3e20313532373830.roa (hash: aD8d9MEtPA6KCQQfGq4r1uZ3wsc7mkQ1NJevQSM4M3Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:d2:c9:e3:b2:35:6f:42:68:0e:80:17:6e:c2:67:94:f1:86:2f:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3D74765C1F178F72C3CD0DE0B6287F4B082D819 Validity Not Before: Mar 2 07:27:33 2026 GMT Not After : Mar 5 15:24:33 2026 GMT Subject: CN=0B5C260B972FC3E86D80CA4B7144C77E8B1260C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:9b:b0:4c:18:d5:af:46:38:20:aa:e0:87:99: 75:9d:07:4d:2f:f7:f5:db:57:fe:ac:f5:de:d1:43: 2b:10:3c:1a:96:f8:6e:e9:aa:64:2b:02:8c:97:b2: 27:de:1d:70:62:4d:76:e9:a6:25:a0:80:4b:7b:76: 3f:bd:6b:07:83:73:4c:c1:5a:4d:15:91:38:10:6d: 55:13:c0:66:7a:35:16:8a:6b:7f:e7:82:76:7e:8f: 69:5c:03:42:63:05:d9:b2:62:b9:10:3e:a8:93:1f: 24:60:2c:a5:f0:01:10:1b:d2:80:6f:81:19:61:67: ad:0b:05:c3:eb:cc:eb:d4:c1:12:9a:ae:c3:92:ed: f6:63:e5:e7:ed:f4:1a:dd:6c:e9:53:5d:9e:cd:38: d2:fe:99:1a:6f:4a:7e:43:6c:fe:fd:85:e6:c5:b1: f4:9e:88:9f:01:6d:3d:1f:04:1f:ff:af:db:37:45: 31:9f:03:b0:7c:25:2e:92:8e:a8:d6:57:3f:1c:36: 1a:48:01:32:73:ac:89:aa:57:93:1a:7a:4b:e8:c4: e9:f0:7d:71:b0:80:45:fe:37:bf:6f:71:b5:88:56: c6:80:de:fa:08:05:f2:a7:27:20:02:21:21:7b:eb: 08:39:89:40:67:8b:28:2d:01:88:79:05:20:89:dc: 1d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:5C:26:0B:97:2F:C3:E8:6D:80:CA:4B:71:44:C7:7E:8B:12:60:C0 X509v3 Authority Key Identifier: keyid:A3:D7:47:65:C1:F1:78:F7:2C:3C:D0:DE:0B:62:87:F4:B0:82:D8:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9357921d-ee18-435c-8b6e-eba2241b83ab/0/A3D74765C1F178F72C3CD0DE0B6287F4B082D819.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b2:2b:19:1c:e3:86:29:52:fe:84:43:7e:bd:1f:b6:68:b5: 5b:55:f7:a9:ad:03:a9:27:a5:6b:0b:ca:f9:1a:dd:f7:a0:1a: 4d:92:ec:95:d6:ce:81:f6:06:a5:58:20:d4:80:a9:82:4b:77: aa:17:74:1a:16:e8:5e:05:f9:de:dd:08:03:2c:9e:09:9b:71: a4:58:4b:5f:3d:a8:f1:2d:1f:ec:07:9d:3d:f3:63:69:c7:a0: d8:31:1c:e8:75:22:70:36:94:aa:39:a7:44:db:36:62:28:22: 21:44:93:fb:c8:43:e5:ba:c6:f6:71:09:7f:82:7e:83:a5:01: 13:30:3d:09:83:88:18:c6:27:c4:05:ff:17:89:c7:14:3e:08: af:ff:4a:79:33:12:94:3d:dc:d6:bc:0d:b6:e0:07:47:50:d5: 05:05:34:85:d8:5f:da:67:ea:74:7b:88:19:b8:c1:fc:95:25: 0b:e0:3e:f2:5b:78:d0:92:72:70:cf:e1:81:82:10:3f:eb:10: 51:dc:87:57:b8:7a:96:76:54:d4:6d:38:a5:99:70:2c:11:dc: 56:da:43:21:a6:fe:e3:d7:50:f2:17:44:27:61:64:31:56:b6: df:47:7f:e9:8d:40:0a:f6:10:a6:08:a0:ee:d7:3d:6e:a8:a0: 51:ee:5b:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDtLJ47I1b0JoDoAXbsJnlPGGL4kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRC MDgyRDgxOTAeFw0yNjAzMDIwNzI3MzNaFw0yNjAzMDUxNTI0MzNaMDMxMTAvBgNV BAMTKDBCNUMyNjBCOTcyRkMzRTg2RDgwQ0E0QjcxNDRDNzdFOEIxMjYwQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIm7BMGNWvRjggquCHmXWdB00v 9/XbV/6s9d7RQysQPBqW+G7pqmQrAoyXsifeHXBiTXbppiWggEt7dj+9aweDc0zB Wk0VkTgQbVUTwGZ6NRaKa3/ngnZ+j2lcA0JjBdmyYrkQPqiTHyRgLKXwARAb0oBv gRlhZ60LBcPrzOvUwRKarsOS7fZj5eft9BrdbOlTXZ7NONL+mRpvSn5DbP79hebF sfSeiJ8BbT0fBB//r9s3RTGfA7B8JS6SjqjWVz8cNhpIATJzrImqV5MaekvoxOnw fXGwgEX+N79vcbWIVsaA3voIBfKnJyACISF76wg5iUBniygtAYh5BSCJ3B3pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC1wmC5cvw+htgMpLcUTHfosSYMAwHwYDVR0j BBgwFoAUo9dHZcHxePcsPNDeC2KH9LCC2BkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MzU3OTIxZC1lZTE4LTQzNWMtOGI2ZS1lYmEyMjQxYjgzYWIvMC9BM0Q3NDc2NUMx RjE3OEY3MkMzQ0QwREUwQjYyODdGNEIwODJEODE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3RjRCMDgy RDgxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTM1NzkyMWQtZWUxOC00MzVjLThi NmUtZWJhMjI0MWI4M2FiLzAvQTNENzQ3NjVDMUYxNzhGNzJDM0NEMERFMEI2Mjg3 RjRCMDgyRDgxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAuyKxkc44YpUv6EQ369H7ZotVtV96mtA6kn pWsLyvka3fegGk2S7JXWzoH2BqVYINSAqYJLd6oXdBoW6F4F+d7dCAMsngmbcaRY S189qPEtH+wHnT3zY2nHoNgxHOh1InA2lKo5p0TbNmIoIiFEk/vIQ+W6xvZxCX+C foOlARMwPQmDiBjGJ8QF/xeJxxQ+CK//SnkzEpQ93Na8DbbgB0dQ1QUFNIXYX9pn 6nR7iBm4wfyVJQvgPvJbeNCScnDP4YGCED/rEFHch1e4epZ2VNRtOKWZcCwR3Fba QyGm/uPXUPIXRCdhZDFWtt9Hf+mNQAr2EKYIoO7XPW6ooFHuWw0= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:45 2026 by rpki-client