$ rpki-client -vvf repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft File: 285218D0288125F1010B5469F03888B08A661969.mft (raw, json) Hash identifier: I8WgVDfLL5hDnwPk9Ar+rfK5ODeZ7u2hLYtIWKoinZ0= Subject key identifier: 68:DB:69:71:D2:16:B0:15:80:F6:5F:5E:6C:53:F7:3E:7C:43:66:FE Authority key identifier: 28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 Certificate issuer: /CN=285218D0288125F1010B5469F03888B08A661969 Certificate serial: 1643CB9CD2FBBDB3D5C81585B4C9741A447630B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft Manifest number: 0550 Signing time: Mon 02 Mar 2026 04:41:43 +0000 Manifest this update: Mon 02 Mar 2026 04:36:43 +0000 Manifest next update: Thu 05 Mar 2026 08:15:43 +0000 Files and hashes: 1: 285218D0288125F1010B5469F03888B08A661969.crl (hash: JLZ/RxnznCnQGp56Q9r0ctRTZx3oYCgvaVRMDDjA89Y=) 2: 3130332e3134352e36362e302f32332d3234203d3e20313339343430.roa (hash: 3WvRyWguaKJ79IiRQCYW4ffkb6kXppTp2QGnBBoTwmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:43:cb:9c:d2:fb:bd:b3:d5:c8:15:85:b4:c9:74:1a:44:76:30:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=285218D0288125F1010B5469F03888B08A661969 Validity Not Before: Mar 2 04:36:43 2026 GMT Not After : Mar 5 08:15:43 2026 GMT Subject: CN=68DB6971D216B01580F65F5E6C53F73E7C4366FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:67:de:3d:25:31:5f:c6:e5:cf:4e:59:18:d0: e4:1d:a1:61:21:09:9a:41:6c:af:29:66:8f:5f:fe: 8f:79:c7:53:7d:c0:6d:91:14:d9:44:32:7e:4a:db: 8b:77:56:0e:ef:0e:2b:a5:f2:19:a6:e8:4d:fe:b4: 82:77:92:cc:8d:f6:ab:60:4e:b5:8b:d1:dc:50:6c: a5:ac:f6:ec:de:39:f5:5f:f0:34:b5:6c:78:3f:44: 74:77:e7:cf:35:08:ca:28:46:82:c0:7b:04:94:c3: 24:11:33:a3:d8:ac:b9:62:a1:f3:0f:af:78:ef:00: 3a:2f:29:69:ed:e1:0a:cd:78:57:84:45:ba:24:3f: 8b:1f:c1:ef:0b:31:ba:ee:ff:be:9b:f1:51:f0:86: 13:14:89:e0:31:f9:20:c3:8d:c4:ec:af:4c:1b:95: f6:b4:55:58:61:bb:1d:ab:eb:9c:79:a6:ab:3d:31: 8c:ec:cc:bb:81:14:3c:54:84:68:b3:53:3a:fc:3c: 16:7f:c6:38:bb:8f:44:0f:ab:08:09:84:c2:d1:51: 97:5c:c0:4d:23:77:26:4b:28:ff:65:3f:62:5a:2a: a4:7d:c8:56:0b:46:ab:3f:e2:b8:c8:8d:da:ea:22: 24:a9:5e:af:17:74:01:04:3e:be:63:b9:b1:64:0f: d9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:DB:69:71:D2:16:B0:15:80:F6:5F:5E:6C:53:F7:3E:7C:43:66:FE X509v3 Authority Key Identifier: keyid:28:52:18:D0:28:81:25:F1:01:0B:54:69:F0:38:88:B0:8A:66:19:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285218D0288125F1010B5469F03888B08A661969.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae1911b9-1d2f-4bb4-9d75-9aa3c35100e8/0/285218D0288125F1010B5469F03888B08A661969.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9d:b1:73:dc:7c:08:f2:ab:17:d7:5a:24:34:c3:73:d3:33: c5:46:f9:db:fe:94:f4:dc:26:a5:ba:46:7a:5e:53:07:ad:c4: 13:c1:9f:61:d1:3a:7f:05:65:95:90:92:ed:91:cb:2f:d0:d0: 30:3b:96:b5:ca:79:89:a6:bd:ef:40:e3:d7:dd:4f:59:4c:1f: 8d:ff:e7:d0:9d:f4:1d:45:81:34:b0:06:4f:ad:e0:bc:2c:dd: 2b:a2:aa:01:0a:73:6f:29:1e:54:64:f2:ca:62:a7:93:e3:1a: c6:fd:76:b8:62:fd:54:11:cb:3c:a9:40:bc:c0:95:2f:67:a3: b5:c8:c0:84:c1:4f:d6:e4:fa:32:e8:21:3d:d6:a9:3d:c0:c1: d7:28:a8:29:98:27:a3:ff:89:c4:95:fb:9f:25:d2:39:50:70: 23:62:49:09:67:6a:22:e1:22:22:e8:44:3a:eb:91:9d:f5:f4: d0:a2:20:a2:da:33:1d:de:47:3d:de:21:0c:0d:57:48:bc:06: cb:ad:2b:10:a5:8e:51:c4:7b:55:5e:96:b2:d0:b1:0d:fe:e8: 3e:81:80:bd:12:f2:02:4c:31:e5:45:89:a1:da:ea:19:63:f9: d8:be:60:66:3d:b7:ff:f6:af:4d:52:6e:a1:64:af:3a:46:d2: 52:f4:ab:4c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkPLnNL7vbPVyBWFtMl0GkR2MLAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4 QTY2MTk2OTAeFw0yNjAzMDIwNDM2NDNaFw0yNjAzMDUwODE1NDNaMDMxMTAvBgNV BAMTKDY4REI2OTcxRDIxNkIwMTU4MEY2NUY1RTZDNTNGNzNFN0M0MzY2RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqZ949JTFfxuXPTlkY0OQdoWEh CZpBbK8pZo9f/o95x1N9wG2RFNlEMn5K24t3Vg7vDiul8hmm6E3+tIJ3ksyN9qtg TrWL0dxQbKWs9uzeOfVf8DS1bHg/RHR35881CMooRoLAewSUwyQRM6PYrLliofMP r3jvADovKWnt4QrNeFeERbokP4sfwe8LMbru/76b8VHwhhMUieAx+SDDjcTsr0wb lfa0VVhhux2r65x5pqs9MYzszLuBFDxUhGizUzr8PBZ/xji7j0QPqwgJhMLRUZdc wE0jdyZLKP9lP2JaKqR9yFYLRqs/4rjIjdrqIiSpXq8XdAEEPr5jubFkD9lTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaNtpcdIWsBWA9l9ebFP3PnxDZv4wHwYDVR0j BBgwFoAUKFIY0CiBJfEBC1Rp8DiIsIpmGWkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5MTFiOS0xZDJmLTRiYjQtOWQ3NS05YWEzYzM1MTAwZTgvMC8yODUyMThEMDI4 ODEyNUYxMDEwQjU0NjlGMDM4ODhCMDhBNjYxOTY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4QjA4QTY2 MTk2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTExYjktMWQyZi00YmI0LTlk NzUtOWFhM2MzNTEwMGU4LzAvMjg1MjE4RDAyODgxMjVGMTAxMEI1NDY5RjAzODg4 QjA4QTY2MTk2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmdsXPcfAjyqxfXWiQ0w3PTM8VG+dv+lPTc JqW6RnpeUwetxBPBn2HROn8FZZWQku2Ryy/Q0DA7lrXKeYmmve9A49fdT1lMH43/ 59Cd9B1FgTSwBk+t4Lws3SuiqgEKc28pHlRk8spip5PjGsb9drhi/VQRyzypQLzA lS9no7XIwITBT9bk+jLoIT3WqT3AwdcoqCmYJ6P/icSV+58l0jlQcCNiSQlnaiLh IiLoRDrrkZ319NCiIKLaMx3eRz3eIQwNV0i8BsutKxCljlHEe1VelrLQsQ3+6D6B gL0S8gJMMeVFiaHa6hlj+di+YGY9t//2r01SbqFkrzpG0lL0q0w= -----END CERTIFICATE-----Generated at Mon Mar 2 10:03:28 2026 by rpki-client