$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft File: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft (raw, json) Hash identifier: UxGOpC1uBlH25Ar7WWmhaSyyVnqa5kx76fCmknOMVIo= Subject key identifier: 8B:9A:A1:A0:88:74:C7:A4:DF:4E:43:D6:9A:F8:55:C3:95:81:CD:3B Authority key identifier: A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 Certificate issuer: /CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Certificate serial: 1F72FEE921661B3396B8A039AFF261CFB6C1786E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft Manifest number: 0115 Signing time: Mon 02 Mar 2026 02:42:38 +0000 Manifest this update: Mon 02 Mar 2026 02:37:38 +0000 Manifest next update: Thu 05 Mar 2026 02:54:38 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32342d3234203d3e20313532373838.roa (hash: zcdVZSiLzuXwzNXJqyWuf4sDbiVxTodHTiD95Tvz7k8=) 2: 3136302e31392e3134352e302f32342d3234203d3e203435333035.roa (hash: b0d54b5VfP0y4Y/gj0JeZ9te1p1dA7COr+bHtkAFBE4=) 3: A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl (hash: hzzHgHDkNMqakRsu7gsmL4LO6zNUzdXPQ3nY4EtiBvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:72:fe:e9:21:66:1b:33:96:b8:a0:39:af:f2:61:cf:b6:c1:78:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A8CDD576A9B5E448A869BEA4D516BAFC5A879503 Validity Not Before: Mar 2 02:37:38 2026 GMT Not After : Mar 5 02:54:38 2026 GMT Subject: CN=8B9AA1A08874C7A4DF4E43D69AF855C39581CD3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:17:9c:ad:a0:8d:56:e6:77:9c:68:34:25:ce: 0d:58:26:d9:59:13:38:c2:6f:31:ff:7d:a4:54:a8: ad:37:8e:51:b8:ab:f1:6c:f1:65:81:46:55:64:c3: 06:e5:a7:13:9d:bf:2d:3b:4d:dc:72:1a:68:aa:23: fb:41:ec:9f:1f:83:75:1e:c7:15:05:a0:42:f5:8f: 69:74:9b:1b:38:69:38:c6:fc:42:93:db:ff:5f:e9: 73:a3:94:e6:61:36:9c:6a:a8:a1:4b:99:8e:eb:3c: fc:77:73:25:10:8d:ba:6e:6c:e2:ba:67:79:04:3c: 6f:cf:cb:fc:a9:44:23:4e:35:e0:8d:ee:22:2d:4f: c3:dd:a3:1a:f7:c9:6b:c9:f7:7d:09:d6:c7:b0:df: 28:60:e3:79:d0:5f:4e:a8:62:43:74:60:b9:f2:8b: ee:f5:ed:a6:a9:a8:8a:26:3d:8c:2c:d8:c6:b6:52: 4d:cf:38:14:49:08:a1:1e:62:16:56:55:a6:d6:bd: c1:14:c6:f6:0a:d8:a3:63:42:23:89:a5:b1:71:3e: 45:db:5a:54:fb:79:b0:2e:a6:99:88:8e:97:68:00: 2f:39:60:86:2f:f3:f8:63:6d:8a:7e:0f:6e:fd:f8: 16:a1:50:4f:dc:6f:a1:cb:f2:0b:26:c6:b2:55:1c: 49:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:9A:A1:A0:88:74:C7:A4:DF:4E:43:D6:9A:F8:55:C3:95:81:CD:3B X509v3 Authority Key Identifier: keyid:A8:CD:D5:76:A9:B5:E4:48:A8:69:BE:A4:D5:16:BA:FC:5A:87:95:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e5ff81-b082-4334-ad29-55dc8d1e53b9/0/A8CDD576A9B5E448A869BEA4D516BAFC5A879503.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ae:78:f0:4d:89:c0:79:39:db:fe:f3:8f:1f:72:66:31:ff: 62:62:fd:75:f9:8e:bf:b3:97:7f:20:ef:55:7f:cf:ca:3b:35: aa:b8:a1:d2:69:2e:02:56:ee:b0:96:07:cf:26:98:8f:d5:c8: 13:a8:23:00:93:ba:5b:1d:70:81:af:2c:30:75:b4:ec:f0:0e: ec:3b:ef:09:26:b6:ba:8a:cc:ae:1c:3a:bb:75:75:4e:f9:63: f0:18:70:a8:b4:c0:1d:79:cf:e1:0e:5a:39:4c:23:ec:d6:23: 74:5e:0f:f2:83:ed:91:3f:f5:de:18:ac:10:f9:cc:05:1c:7d: 64:06:a3:74:44:5c:83:ce:b7:fb:38:c9:5a:05:c9:76:8e:fd: 58:f4:d3:16:f8:28:63:49:97:e3:36:5c:62:fe:cd:6c:24:04: aa:50:e6:d1:7c:e8:2a:3c:33:5f:a8:23:17:eb:1b:73:e3:1a: ef:b0:1c:85:6d:ad:38:ab:35:ae:55:fe:e0:61:7f:01:70:5f: 26:57:06:f5:f3:5b:65:6d:19:1a:2f:aa:4f:f5:fe:c4:68:b0: fd:c2:83:8e:db:d8:9d:fa:6d:52:03:c2:a5:ce:e2:e4:d8:cb: 7e:98:56:c1:28:9e:d9:8b:72:0f:98:b4:ab:3e:55:22:5d:e5: c7:ad:67:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH3L+6SFmGzOWuKA5r/Jhz7bBeG4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1 QTg3OTUwMzAeFw0yNjAzMDIwMjM3MzhaFw0yNjAzMDUwMjU0MzhaMDMxMTAvBgNV BAMTKDhCOUFBMUEwODg3NEM3QTRERjRFNDNENjlBRjg1NUMzOTU4MUNEM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzF5ytoI1W5necaDQlzg1YJtlZ EzjCbzH/faRUqK03jlG4q/Fs8WWBRlVkwwblpxOdvy07TdxyGmiqI/tB7J8fg3Ue xxUFoEL1j2l0mxs4aTjG/EKT2/9f6XOjlOZhNpxqqKFLmY7rPPx3cyUQjbpubOK6 Z3kEPG/Py/ypRCNONeCN7iItT8Pdoxr3yWvJ930J1sew3yhg43nQX06oYkN0YLny i+717aapqIomPYws2Ma2Uk3POBRJCKEeYhZWVabWvcEUxvYK2KNjQiOJpbFxPkXb WlT7ebAuppmIjpdoAC85YIYv8/hjbYp+D279+BahUE/cb6HL8gsmxrJVHEnRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi5qhoIh0x6TfTkPWmvhVw5WBzTswHwYDVR0j BBgwFoAUqM3Vdqm15Eioab6k1Ra6/FqHlQMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmU1ZmY4MS1iMDgyLTQzMzQtYWQyOS01NWRjOGQxZTUzYjkvMC9BOENERDU3NkE5 QjVFNDQ4QTg2OUJFQTRENTE2QkFGQzVBODc5NTAzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJBRkM1QTg3 OTUwMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlNWZmODEtYjA4Mi00MzM0LWFk MjktNTVkYzhkMWU1M2I5LzAvQThDREQ1NzZBOUI1RTQ0OEE4NjlCRUE0RDUxNkJB RkM1QTg3OTUwMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKuePBNicB5Odv+848fcmYx/2Ji/XX5jr+z l38g71V/z8o7Naq4odJpLgJW7rCWB88mmI/VyBOoIwCTulsdcIGvLDB1tOzwDuw7 7wkmtrqKzK4cOrt1dU75Y/AYcKi0wB15z+EOWjlMI+zWI3ReD/KD7ZE/9d4YrBD5 zAUcfWQGo3REXIPOt/s4yVoFyXaO/Vj00xb4KGNJl+M2XGL+zWwkBKpQ5tF86Co8 M1+oIxfrG3PjGu+wHIVtrTirNa5V/uBhfwFwXyZXBvXzW2VtGRovqk/1/sRosP3C g47b2J36bVIDwqXO4uTYy36YVsEontmLcg+YtKs+VSJd5cetZ3k= -----END CERTIFICATE-----Generated at Mon Mar 2 06:32:23 2026 by rpki-client