$ rpki-client -vvf repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft File: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft (raw, json) Hash identifier: ie3ZOQ2jM+Y79EDe0QGibIOVdM80ScyZKHjy/Di/0Jw= Subject key identifier: AC:3F:70:B5:DE:E2:B3:32:F9:6A:8D:86:B5:71:E2:AD:8B:56:7D:96 Authority key identifier: A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 Certificate issuer: /CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Certificate serial: 44F6462ABD1DBC6C86E0FC35B8415FE4DC750C97 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft Manifest number: 055B Signing time: Mon 02 Mar 2026 12:11:22 +0000 Manifest this update: Mon 02 Mar 2026 12:06:22 +0000 Manifest next update: Thu 05 Mar 2026 18:57:22 +0000 Files and hashes: 1: 3130332e3130322e3131322e302f32322d3232203d3e20313336383536.roa (hash: 1CN+jedfVpNb+gZQPhjGcg8dCw8FunfSINnOV1cGtHI=) 2: 3130332e3130322e3131342e302f32342d3234203d3e20313336383536.roa (hash: SyaesZ8nYMgrpLoLtfvyAhCoVIqjKlqg+giBaGYZdJ8=) 3: 3130332e3130322e3131342e302f32332d3233203d3e20313336383536.roa (hash: vvBVAn5yEWZctbDHQUW8z9jMeSul4l1acqZ62AKnx68=) 4: 3130332e3130322e3131352e302f32342d3234203d3e20313336383536.roa (hash: Bt0nH3UAT/CLMsfvb2IBDFeUJ9UZn6YmMXytc9svV6w=) 5: 3130332e3130322e3131332e302f32342d3234203d3e20313336383536.roa (hash: a/46ZLHY1uskWKK+dRVVv6QzmBB26BwgZ5pBVCqnJic=) 6: 3130332e3130322e3131322e302f32342d3234203d3e20313336383536.roa (hash: m2IdeGJ3OKb2fcuJa67Ilt4MBVhM4mrbLE394lS8fh4=) 7: A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl (hash: rmu4RAvsmPgrXrRkEGZijWlFaKKeQqIrgmPDAKH+Ipg=) 8: 3130332e3130322e3131322e302f32332d3233203d3e20313336383536.roa (hash: cImcrO3baPtOL+e/L4Vtls4t8QA2B+RJ0Y24oBF6eXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:f6:46:2a:bd:1d:bc:6c:86:e0:fc:35:b8:41:5f:e4:dc:75:0c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63 Validity Not Before: Mar 2 12:06:22 2026 GMT Not After : Mar 5 18:57:22 2026 GMT Subject: CN=AC3F70B5DEE2B332F96A8D86B571E2AD8B567D96 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:87:e7:f3:1b:0c:c6:1b:8b:6b:ba:81:e1:60: c4:50:1d:39:98:b8:20:ff:4d:3d:c5:74:b2:a8:48: 2b:6e:27:87:8c:69:c6:a7:8b:bc:5c:9f:17:27:83: 45:82:2c:75:49:66:62:93:14:9e:35:e3:b9:df:48: f7:66:eb:18:81:ad:e9:09:7a:5e:7a:93:41:47:99: a7:3d:58:79:ba:86:a4:71:ba:da:a8:7a:ea:48:5f: 9f:7c:0d:da:f1:67:d8:86:0a:a6:52:eb:6b:87:e9: 91:7c:e1:bc:ab:36:39:01:10:f8:40:d7:53:00:c7: 3a:72:c5:c3:82:41:24:c9:66:6b:7e:0b:45:c2:28: 14:f7:61:a5:92:81:39:ac:ca:a2:e1:ac:d7:f7:30: 23:62:a5:8a:22:9c:7b:7d:5d:09:ba:7a:e5:49:4e: 40:82:36:b1:f5:4b:ca:e5:78:21:66:08:49:94:c2: 26:a5:15:36:4c:0a:9a:d5:aa:b0:64:b2:59:dd:24: d6:64:64:d3:0a:58:b2:3a:07:fa:f6:7e:9a:5f:3b: 20:49:a2:ef:9b:88:fb:c9:ce:50:e9:45:6a:e5:bd: b7:e6:da:a2:ad:d6:84:e9:ed:51:68:12:41:16:0f: cd:9e:5a:af:23:67:0b:2a:d2:ed:7a:89:68:47:98: 38:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:3F:70:B5:DE:E2:B3:32:F9:6A:8D:86:B5:71:E2:AD:8B:56:7D:96 X509v3 Authority Key Identifier: keyid:A0:0D:BC:78:CB:2F:CD:6D:A9:4D:C1:E0:7D:FA:66:68:02:7D:1B:63 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a5c7a404-eb3f-4cf1-99f9-827961661f31/0/A00DBC78CB2FCD6DA94DC1E07DFA6668027D1B63.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:af:98:cc:76:5a:dd:56:a7:a5:6b:b6:a1:1e:c1:42:e3:99: 79:90:f7:ca:79:fa:6e:ac:c5:71:c0:ee:4a:6d:5c:8f:aa:dc: 8a:b1:f3:c3:c8:64:9f:d2:74:37:35:52:cc:95:74:17:8c:ee: 9c:c9:0a:1b:e2:8a:f8:b7:ed:d0:5d:97:a5:c6:f4:c8:e0:91: 01:3c:ef:ed:d3:5d:fc:ac:71:86:9f:a3:78:bb:33:63:8f:82: bd:73:5f:6c:19:bd:8f:62:a9:7b:f3:04:a2:db:02:4d:3c:69: df:a8:e3:13:4e:11:7d:87:5e:86:64:7e:5b:07:ea:89:92:4c: a6:95:84:f1:cd:a3:75:87:5d:91:0b:8c:a5:21:4c:bd:db:a9: 5f:20:24:94:7a:4a:c9:fe:b2:5b:ab:80:96:00:9d:73:db:ce: 62:71:0e:15:3a:a2:7d:19:b1:6d:fc:35:2c:54:21:6d:33:7e: d3:10:34:16:ff:3e:91:e1:38:aa:7f:12:53:93:8e:af:5b:d6: d8:23:c3:2d:12:8c:31:fc:ce:4a:00:c5:3c:85:d5:c3:b1:19: d4:17:d6:01:aa:df:6c:1c:d2:bd:0f:6b:ee:67:d6:bd:db:b3: 90:a8:6b:3e:27:45:53:00:91:ef:17:5f:a0:e6:98:40:12:32: 11:42:3d:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURPZGKr0dvGyG4Pw1uEFf5Nx1DJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2Njgw MjdEMUI2MzAeFw0yNjAzMDIxMjA2MjJaFw0yNjAzMDUxODU3MjJaMDMxMTAvBgNV BAMTKEFDM0Y3MEI1REVFMkIzMzJGOTZBOEQ4NkI1NzFFMkFEOEI1NjdEOTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsh+fzGwzGG4truoHhYMRQHTmY uCD/TT3FdLKoSCtuJ4eMacani7xcnxcng0WCLHVJZmKTFJ4147nfSPdm6xiBrekJ el56k0FHmac9WHm6hqRxutqoeupIX598DdrxZ9iGCqZS62uH6ZF84byrNjkBEPhA 11MAxzpyxcOCQSTJZmt+C0XCKBT3YaWSgTmsyqLhrNf3MCNipYoinHt9XQm6euVJ TkCCNrH1S8rleCFmCEmUwialFTZMCprVqrBkslndJNZkZNMKWLI6B/r2fppfOyBJ ou+biPvJzlDpRWrlvbfm2qKt1oTp7VFoEkEWD82eWq8jZwsq0u16iWhHmDgdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrD9wtd7iszL5ao2GtXHirYtWfZYwHwYDVR0j BBgwFoAUoA28eMsvzW2pTcHgffpmaAJ9G2MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NWM3YTQwNC1lYjNmLTRjZjEtOTlmOS04Mjc5NjE2NjFmMzEvMC9BMDBEQkM3OENC MkZDRDZEQTk0REMxRTA3REZBNjY2ODAyN0QxQjYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2NjgwMjdE MUI2My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTVjN2E0MDQtZWIzZi00Y2YxLTk5 ZjktODI3OTYxNjYxZjMxLzAvQTAwREJDNzhDQjJGQ0Q2REE5NERDMUUwN0RGQTY2 NjgwMjdEMUI2My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKCvmMx2Wt1Wp6VrtqEewULjmXmQ98p5+m6s xXHA7kptXI+q3Iqx88PIZJ/SdDc1UsyVdBeM7pzJChviivi37dBdl6XG9MjgkQE8 7+3TXfyscYafo3i7M2OPgr1zX2wZvY9iqXvzBKLbAk08ad+o4xNOEX2HXoZkflsH 6omSTKaVhPHNo3WHXZELjKUhTL3bqV8gJJR6Ssn+slurgJYAnXPbzmJxDhU6on0Z sW38NSxUIW0zftMQNBb/PpHhOKp/ElOTjq9b1tgjwy0SjDH8zkoAxTyF1cOxGdQX 1gGq32wc0r0Pa+5n1r3bs5Coaz4nRVMAke8XX6DmmEASMhFCPdg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:11 2026 by rpki-client