$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: FLRXSnjE67MvgVyhYZJ92jvE3ZzTzwmHT7h75FdXHZo= Subject key identifier: 8F:C8:E4:AA:AE:35:63:EA:84:25:B7:85:C8:06:ED:26:04:F3:7F:2E Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 63C879B07752AE808D5B305E72707EE16BCB06C1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 024E Signing time: Sun 01 Mar 2026 23:30:52 +0000 Manifest this update: Sun 01 Mar 2026 23:25:52 +0000 Manifest next update: Thu 05 Mar 2026 04:24:52 +0000 Files and hashes: 1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: ijTABKQ5tE9i3vXFnNdrrZfG6XJmJmSTPfbZqDt/L4w=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:24:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:c8:79:b0:77:52:ae:80:8d:5b:30:5e:72:70:7e:e1:6b:cb:06:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Mar 1 23:25:52 2026 GMT Not After : Mar 5 04:24:52 2026 GMT Subject: CN=8FC8E4AAAE3563EA8425B785C806ED2604F37F2E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:e6:ac:7f:17:4c:d4:86:22:fd:b3:e8:c6:39: a1:7f:d7:f4:2d:65:3b:3a:67:03:62:06:23:de:bd: 7c:5a:4a:22:25:5b:4d:69:d2:d5:f1:e3:17:e4:e0: 62:f5:34:e5:38:05:dc:46:23:8c:ce:b7:a6:f0:25: c0:10:48:48:be:7c:3f:97:3a:b7:3f:bd:7a:86:33: 90:68:24:8b:a3:c2:86:15:14:6a:e0:c3:fe:ab:a3: fc:bc:94:07:4a:a3:76:41:cf:c1:01:96:a4:45:5f: e2:2d:f6:d1:9c:55:e9:12:38:ee:c1:f6:fe:fa:18: 28:04:72:3f:b2:88:7f:74:b0:ca:ac:46:e3:9b:43: 0e:ea:3c:ed:0e:84:f9:2a:97:c0:29:1f:0b:a0:15: e7:ee:95:5a:cf:d9:0a:f3:59:3e:64:b4:20:11:9a: 89:e4:b0:a6:6a:4e:d6:2a:6f:99:03:ed:0c:09:e4: c6:32:6f:b8:d1:24:e8:ad:c7:80:a4:f5:65:b5:4e: 95:9d:07:47:e7:cb:28:00:93:0d:67:67:ec:d4:3a: 31:69:d6:e3:92:07:50:7e:36:51:8d:f6:ba:19:6c: 1a:e1:4b:62:fc:8d:0c:78:9d:7e:98:ab:dd:21:77: 24:a8:8d:6c:4d:c6:52:01:b7:18:6d:7d:76:ca:8b: ef:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:C8:E4:AA:AE:35:63:EA:84:25:B7:85:C8:06:ED:26:04:F3:7F:2E X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:0c:2c:7f:24:f4:6f:3a:44:e0:3f:c2:a9:87:67:10:df:6f: 83:8a:ae:c2:6d:d9:7e:14:95:68:ab:e4:2d:3a:76:0d:3e:13: a5:85:75:e0:3e:9d:0b:56:55:9c:75:f6:f1:e5:8c:e1:43:7b: 98:90:e4:53:0d:92:6d:d1:50:a6:60:7e:3a:15:d9:14:49:2b: f1:7e:a7:ad:a9:37:d0:44:a9:2f:49:64:65:07:52:df:f9:45: 2a:b4:92:36:85:5d:83:63:45:30:fa:35:c7:2a:52:fd:05:ff: 98:32:06:84:d3:9e:81:77:25:ba:c5:a0:05:cb:92:7e:02:35: ad:83:94:b3:40:ed:5b:81:a3:16:5e:d3:36:54:b2:b0:b5:6d: 11:7f:ea:e7:38:fb:64:2b:02:9f:ab:14:19:01:a6:ee:0c:b5: 59:d6:5e:2b:c4:79:e3:58:26:d8:54:38:cd:d2:45:a7:bc:5f: b9:98:8e:69:82:e3:f5:91:b1:72:d3:15:2d:de:be:57:f7:2f: 48:59:a7:02:4f:22:4d:a5:cb:c2:c7:7e:51:90:fa:20:21:8b: 52:33:c7:d0:06:1c:54:64:7b:cf:67:b2:4a:a8:89:74:c0:ad: 5a:d8:16:7d:b7:ec:45:9e:9a:cc:a2:23:92:67:33:cf:4c:9b: e9:82:23:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY8h5sHdSroCNWzBecnB+4WvLBsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNjAzMDEyMzI1NTJaFw0yNjAzMDUwNDI0NTJaMDMxMTAvBgNV BAMTKDhGQzhFNEFBQUUzNTYzRUE4NDI1Qjc4NUM4MDZFRDI2MDRGMzdGMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz5qx/F0zUhiL9s+jGOaF/1/Qt ZTs6ZwNiBiPevXxaSiIlW01p0tXx4xfk4GL1NOU4BdxGI4zOt6bwJcAQSEi+fD+X Orc/vXqGM5BoJIujwoYVFGrgw/6ro/y8lAdKo3ZBz8EBlqRFX+It9tGcVekSOO7B 9v76GCgEcj+yiH90sMqsRuObQw7qPO0OhPkql8ApHwugFefulVrP2QrzWT5ktCAR monksKZqTtYqb5kD7QwJ5MYyb7jRJOitx4Ck9WW1TpWdB0fnyygAkw1nZ+zUOjFp 1uOSB1B+NlGN9roZbBrhS2L8jQx4nX6Yq90hdySojWxNxlIBtxhtfXbKi+9dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj8jkqq41Y+qEJbeFyAbtJgTzfy4wHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMMMLH8k9G86ROA/wqmHZxDfb4OKrsJt2X4U lWir5C06dg0+E6WFdeA+nQtWVZx19vHljOFDe5iQ5FMNkm3RUKZgfjoV2RRJK/F+ p62pN9BEqS9JZGUHUt/5RSq0kjaFXYNjRTD6NccqUv0F/5gyBoTTnoF3JbrFoAXL kn4CNa2DlLNA7VuBoxZe0zZUsrC1bRF/6uc4+2QrAp+rFBkBpu4MtVnWXivEeeNY JthUOM3SRae8X7mYjmmC4/WRsXLTFS3evlf3L0hZpwJPIk2ly8LHflGQ+iAhi1Iz x9AGHFRke89nskqoiXTArVrYFn237EWemsyiI5JnM89Mm+mCI4E= -----END CERTIFICATE-----Generated at Mon Mar 2 12:19:10 2026 by rpki-client