$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: bkkPGnXVnsfFBX2RBAxsRyDZ1AX1YpqpDR6DkLztbNA= Subject key identifier: E3:D4:26:F7:CB:B3:86:71:59:D8:EB:83:2D:05:E9:87:85:55:8E:AA Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 4178824643F2C5EAD3FF3D3B8D5493AC41E7758E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 01DD Signing time: Sun 01 Mar 2026 08:52:26 +0000 Manifest this update: Sun 01 Mar 2026 08:47:26 +0000 Manifest next update: Wed 04 Mar 2026 19:32:26 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: DC1iMjaCfzaOITDQkNLpUn+5+uYY8tpluk0ZBSzhF24=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: yZ/MChZHB5tDzBnd1w3tnaq3ghVO7uYw0Z7Ua0KxMJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:32:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:78:82:46:43:f2:c5:ea:d3:ff:3d:3b:8d:54:93:ac:41:e7:75:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Mar 1 08:47:26 2026 GMT Not After : Mar 4 19:32:26 2026 GMT Subject: CN=E3D426F7CBB3867159D8EB832D05E98785558EAA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:5f:64:cf:19:c1:b0:85:6b:8c:3a:bc:ef:45: c9:b5:62:08:2d:b9:26:a8:a3:0b:ba:f0:1e:41:c3: 38:8c:3c:ac:ad:07:df:71:8d:f3:45:19:5e:8b:8c: 5e:d4:5a:5e:bc:68:67:0e:fb:d8:dc:ad:bc:90:2e: 05:e9:9a:f5:3d:60:07:97:e9:09:95:10:6a:4f:50: 9f:93:74:52:ad:eb:9b:62:39:0b:20:4f:56:bb:35: d2:0d:8d:f6:bd:63:47:61:35:70:55:4e:60:37:02: 1f:8d:a7:40:af:21:64:4d:d3:90:a8:b6:b6:32:ef: 8c:a3:72:68:23:08:8d:f3:9a:b5:cc:9c:b7:56:de: ae:2f:87:25:02:24:16:50:34:ae:39:12:ec:6f:16: b8:84:a4:44:c0:ef:07:9a:bb:67:f5:d3:dc:47:74: e1:d9:f0:17:c5:ea:31:89:0d:8c:c8:c0:5e:1d:3e: d4:f3:ed:f1:60:56:01:e0:7b:a3:7e:75:02:58:85: 99:38:f4:c3:e3:d3:78:c2:6b:67:9d:47:24:9b:aa: ef:87:98:ff:c7:7c:3d:1a:26:6a:be:cc:7e:49:36: 80:2d:53:34:e8:83:fd:d1:ec:41:46:a5:11:5c:f3: e4:00:a2:b7:1d:32:ea:e5:1c:47:26:d9:89:77:f7: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:D4:26:F7:CB:B3:86:71:59:D8:EB:83:2D:05:E9:87:85:55:8E:AA X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:15:03:e0:cf:39:b9:73:78:c0:94:38:75:37:9a:97:a3:e9: fa:10:d0:84:cc:e6:84:2e:ed:59:34:9b:7a:a0:74:59:53:6c: 23:a2:ee:d9:11:0a:12:f3:c0:17:88:ef:63:f1:04:83:22:89: dc:7b:86:40:6d:9b:e4:3a:d8:e1:4f:4e:03:ab:48:bc:a1:cd: 5b:ec:39:d0:aa:51:88:13:38:c5:bc:63:88:18:da:a5:2f:e8: 73:38:23:a7:29:e3:f6:35:ab:74:72:60:2d:26:20:d2:5a:59: 5d:c9:a8:9c:4f:f3:59:69:1e:bd:a0:3a:c9:10:18:12:b3:c9: f9:87:47:fa:86:54:a1:fc:f0:be:2b:05:72:88:c2:b1:75:98: 34:05:ea:bb:a9:d9:32:9d:cf:75:89:b5:3a:61:70:16:7c:2d: 26:f6:3e:a4:cc:4a:2b:02:9e:01:52:c7:7b:8f:52:a7:26:f1: 9a:49:43:88:9a:2b:d8:ff:00:f2:4e:e5:8d:37:35:13:51:68: 47:c3:4e:ae:03:c9:12:7c:79:97:53:c9:1c:da:18:b3:91:0d: 0c:45:f9:af:2b:12:2c:25:12:7c:39:a1:70:2f:d6:66:f3:b8: de:f1:d4:03:c2:5d:e9:8a:db:d1:f6:d7:16:e0:36:b0:c0:18: 0f:ef:a6:8c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXiCRkPyxerT/z07jVSTrEHndY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNjAzMDEwODQ3MjZaFw0yNjAzMDQxOTMyMjZaMDMxMTAvBgNV BAMTKEUzRDQyNkY3Q0JCMzg2NzE1OUQ4RUI4MzJEMDVFOTg3ODU1NThFQUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrX2TPGcGwhWuMOrzvRcm1Yggt uSaoowu68B5BwziMPKytB99xjfNFGV6LjF7UWl68aGcO+9jcrbyQLgXpmvU9YAeX 6QmVEGpPUJ+TdFKt65tiOQsgT1a7NdINjfa9Y0dhNXBVTmA3Ah+Np0CvIWRN05Co trYy74yjcmgjCI3zmrXMnLdW3q4vhyUCJBZQNK45EuxvFriEpETA7weau2f109xH dOHZ8BfF6jGJDYzIwF4dPtTz7fFgVgHge6N+dQJYhZk49MPj03jCa2edRySbqu+H mP/HfD0aJmq+zH5JNoAtUzTog/3R7EFGpRFc8+QAorcdMurlHEcm2Yl39zQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU49Qm98uzhnFZ2OuDLQXph4VVjqowHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0VA+DPOblzeMCUOHU3mpej6foQ0ITM5oQu 7Vk0m3qgdFlTbCOi7tkRChLzwBeI72PxBIMiidx7hkBtm+Q62OFPTgOrSLyhzVvs OdCqUYgTOMW8Y4gY2qUv6HM4I6cp4/Y1q3RyYC0mINJaWV3JqJxP81lpHr2gOskQ GBKzyfmHR/qGVKH88L4rBXKIwrF1mDQF6rup2TKdz3WJtTphcBZ8LSb2PqTMSisC ngFSx3uPUqcm8ZpJQ4iaK9j/APJO5Y03NRNRaEfDTq4DyRJ8eZdTyRzaGLORDQxF +a8rEiwlEnw5oXAv1mbzuN7x1APCXemK29H21xbgNrDAGA/vpow= -----END CERTIFICATE-----Generated at Mon Mar 2 04:12:57 2026 by rpki-client