$ rpki-client -vvf repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft File: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft (raw, json) Hash identifier: 0KLXVVE8vdlP4FQnOhQAviv5bJLA48zUoIJqaT9OqDU= Subject key identifier: 59:47:48:A3:C4:9A:7E:B1:3D:FA:F7:91:97:6A:40:DB:6A:88:1D:97 Authority key identifier: A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 Certificate issuer: /CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Certificate serial: 7D711D40BEC3A275809B14CC92A01353E4C0B4A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft Manifest number: 0244 Signing time: Sat 28 Feb 2026 11:32:36 +0000 Manifest this update: Sat 28 Feb 2026 11:27:36 +0000 Manifest next update: Tue 03 Mar 2026 11:49:36 +0000 Files and hashes: 1: 3130332e3135392e3131322e302f32332d3233203d3e20313431363032.roa (hash: KkOi57cp3QYrSPg3L4piWw9fN5UZON52i91Hq3Yxv3k=) 2: 3130332e3135392e3131322e302f32342d3234203d3e20313431363032.roa (hash: TA90bkE55ZETm7aG8neqT5bIm1Ztp4RfdpQNAXifiyc=) 3: 3130332e3135392e3131332e302f32342d3234203d3e20313431363032.roa (hash: DTA7XaMvO6/yJH95Q2H4dcuyJyFkTQZvJ4qtwIMhRBo=) 4: A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl (hash: 2zwgfOdyiGKYFbbgAC54VnZGdDEH7ruBIfPQY2nWu2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 11:49:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:1d:40:be:c3:a2:75:80:9b:14:cc:92:a0:13:53:e4:c0:b4:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00E9E21EE9327F05930AF9DD5847A98BCE26C66 Validity Not Before: Feb 28 11:27:36 2026 GMT Not After : Mar 3 11:49:36 2026 GMT Subject: CN=594748A3C49A7EB13DFAF791976A40DB6A881D97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:52:f1:ce:da:73:0e:ec:a1:b1:ac:7d:52:5d: f3:05:ae:f0:f7:b9:2c:3c:60:d6:85:ca:93:75:02: 71:95:c4:03:b8:da:cf:cb:ab:c5:7c:66:90:96:c9: 7c:81:d8:e4:a5:d3:c0:bb:a8:3a:da:c5:61:48:a8: ad:26:37:9c:d7:cb:6a:ed:51:6d:b7:8c:27:6a:9c: 55:f2:01:a9:58:ba:7e:9b:62:ad:b1:03:83:e3:10: 57:66:c9:47:57:03:45:88:f9:cb:d4:67:45:b9:6c: 52:af:c1:58:1e:f0:07:8c:62:dc:72:d7:4f:6e:20: 3f:a6:29:66:e8:91:5f:82:c3:c9:07:ec:ee:20:63: e2:b8:1d:c2:15:69:1c:64:aa:57:6d:38:08:30:b5: 9d:ae:1f:04:cd:a1:36:d4:22:62:59:3f:25:58:75: 46:1b:96:83:c1:ee:97:55:13:bf:03:14:d3:13:ce: 71:61:75:50:36:50:d5:cb:48:a1:dc:f9:de:dd:87: ba:c5:65:39:fd:7f:c9:a2:16:89:a3:08:82:ee:0a: 3b:fd:3c:2e:ec:76:e1:e3:10:02:ec:d4:6d:6c:5c: 95:2d:89:30:04:c8:63:59:52:f1:e8:28:92:9c:3b: ad:ca:56:77:1d:71:20:88:06:ef:98:7f:6c:71:1e: ab:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:47:48:A3:C4:9A:7E:B1:3D:FA:F7:91:97:6A:40:DB:6A:88:1D:97 X509v3 Authority Key Identifier: keyid:A0:0E:9E:21:EE:93:27:F0:59:30:AF:9D:D5:84:7A:98:BC:E2:6C:66 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a198f7f8-e715-4b79-af32-2e51541a34ff/0/A00E9E21EE9327F05930AF9DD5847A98BCE26C66.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:a8:c2:ad:9d:e2:2d:7f:20:4a:35:82:89:48:32:f8:c1:01: 35:ad:b1:6d:1b:19:a3:74:87:11:56:75:e3:0a:57:c5:93:b3: 2c:db:cd:a7:74:80:f6:57:68:38:bb:bc:5c:53:cb:35:ed:8a: 16:15:2a:53:62:67:9f:4d:4c:b0:6e:d5:ca:01:69:ed:ac:11: 38:2e:4a:5b:ef:6c:7c:56:91:2c:b4:97:93:75:59:75:c8:e2: d8:c6:3c:6c:bb:a2:90:be:85:66:33:22:eb:f1:31:aa:34:b9: b2:52:53:93:87:6f:e8:11:78:f9:1f:73:52:d5:97:2e:b2:a7: d2:f5:11:e8:ec:48:d5:a4:ca:46:49:5e:22:41:10:b7:bc:47: 8e:04:09:2b:12:81:49:eb:c7:c5:d8:da:89:6c:f7:dd:c0:71: 4c:d6:b1:2b:d5:8c:07:c7:46:27:e1:81:a8:c8:2e:9e:0a:d0: 1d:96:39:61:42:d9:ba:fd:99:77:bb:f1:96:26:fb:ce:19:d6: 7d:dd:df:31:69:ba:f2:44:f5:fd:aa:86:01:1d:5f:99:a6:45: 4f:67:75:a2:53:fa:33:77:15:4d:98:1f:c7:e1:c2:37:a7:2e: ff:14:36:04:0b:d9:b8:cd:32:ef:40:dd:61:9b:bf:4c:c5:bc: f8:36:18:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXEdQL7DonWAmxTMkqATU+TAtKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThC Q0UyNkM2NjAeFw0yNjAyMjgxMTI3MzZaFw0yNjAzMDMxMTQ5MzZaMDMxMTAvBgNV BAMTKDU5NDc0OEEzQzQ5QTdFQjEzREZBRjc5MTk3NkE0MERCNkE4ODFEOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1UvHO2nMO7KGxrH1SXfMFrvD3 uSw8YNaFypN1AnGVxAO42s/Lq8V8ZpCWyXyB2OSl08C7qDraxWFIqK0mN5zXy2rt UW23jCdqnFXyAalYun6bYq2xA4PjEFdmyUdXA0WI+cvUZ0W5bFKvwVge8AeMYtxy 109uID+mKWbokV+Cw8kH7O4gY+K4HcIVaRxkqldtOAgwtZ2uHwTNoTbUImJZPyVY dUYbloPB7pdVE78DFNMTznFhdVA2UNXLSKHc+d7dh7rFZTn9f8miFomjCILuCjv9 PC7sduHjEALs1G1sXJUtiTAEyGNZUvHoKJKcO63KVncdcSCIBu+Yf2xxHqv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWUdIo8SafrE9+veRl2pA22qIHZcwHwYDVR0j BBgwFoAUoA6eIe6TJ/BZMK+d1YR6mLzibGYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTk4ZjdmOC1lNzE1LTRiNzktYWYzMi0yZTUxNTQxYTM0ZmYvMC9BMDBFOUUyMUVF OTMyN0YwNTkzMEFGOURENTg0N0E5OEJDRTI2QzY2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdBOThCQ0Uy NkM2Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTE5OGY3ZjgtZTcxNS00Yjc5LWFm MzItMmU1MTU0MWEzNGZmLzAvQTAwRTlFMjFFRTkzMjdGMDU5MzBBRjlERDU4NDdB OThCQ0UyNkM2Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAmowq2d4i1/IEo1golIMvjBATWtsW0bGaN0 hxFWdeMKV8WTsyzbzad0gPZXaDi7vFxTyzXtihYVKlNiZ59NTLBu1coBae2sETgu SlvvbHxWkSy0l5N1WXXI4tjGPGy7opC+hWYzIuvxMao0ubJSU5OHb+gRePkfc1LV ly6yp9L1EejsSNWkykZJXiJBELe8R44ECSsSgUnrx8XY2ols993AcUzWsSvVjAfH RifhgajILp4K0B2WOWFC2br9mXe78ZYm+84Z1n3d3zFpuvJE9f2qhgEdX5mmRU9n daJT+jN3FU2YH8fhwjenLv8UNgQL2bjNMu9A3WGbv0zFvPg2GB4= -----END CERTIFICATE-----Generated at Mon Mar 2 04:22:20 2026 by rpki-client