$ rpki-client -vvf repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft File: A2F125E1CDB95BA2AF5636AF284A399496555F38.mft (raw, json) Hash identifier: kpfpnFBUyy7BSimno+dMLVnp4d6n4qLAfRwcNq0HEO8= Subject key identifier: 54:C0:C9:7B:34:16:0B:2B:8D:1F:29:3F:2A:31:98:25:0C:0B:11:5A Authority key identifier: A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 Certificate issuer: /CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Certificate serial: 72CA88020CB326247F941182817B5A88C78F1BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft Manifest number: 0242 Signing time: Sun 01 Mar 2026 09:42:09 +0000 Manifest this update: Sun 01 Mar 2026 09:37:09 +0000 Manifest next update: Wed 04 Mar 2026 16:46:09 +0000 Files and hashes: 1: A2F125E1CDB95BA2AF5636AF284A399496555F38.crl (hash: Her6acGCRGPBdgRKplilBo6NdPN87N15hFjwaHvPoqo=) 2: 3130332e3139312e3231382e302f32332d3234203d3e20313439393330.roa (hash: eU4CsIBkCNHWwkLGYk1dQXK+PlYTeSPnN5JLGBDdwoE=) 3: 3130332e3139312e3231382e302f32342d3234203d3e20313439393330.roa (hash: GYOdgB5E6zAfN6csGwKvCQu8t1dBnuZsHYI8ZcYsOXc=) 4: 3130332e3139312e3231392e302f32342d3234203d3e20313439393330.roa (hash: wMwayzIPwqMBIP88IOsXTpqmzpX3PVf3WfVEJ/JlX8M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:46:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:ca:88:02:0c:b3:26:24:7f:94:11:82:81:7b:5a:88:c7:8f:1b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2F125E1CDB95BA2AF5636AF284A399496555F38 Validity Not Before: Mar 1 09:37:09 2026 GMT Not After : Mar 4 16:46:09 2026 GMT Subject: CN=54C0C97B34160B2B8D1F293F2A3198250C0B115A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:cd:4d:71:6a:f4:c3:bf:44:e2:a4:91:d5:c6: 6b:5a:d4:6e:9f:14:cc:92:4a:ba:96:d0:90:97:77: e2:2c:87:9b:69:0a:92:94:67:24:ab:99:54:56:4a: 4f:a4:51:64:4a:fa:bd:c9:c5:03:33:40:28:a1:92: 74:4c:67:e2:8b:86:80:ed:be:b0:7a:51:ea:8f:e2: 67:21:d9:00:13:bd:4d:4c:5c:87:9d:7c:92:31:77: af:fa:cc:86:2b:a8:90:a1:d4:f2:92:1a:44:93:9e: de:da:90:91:17:66:bf:44:09:e9:10:b1:6c:f0:27: 3a:eb:ed:52:c7:7e:8c:6c:b4:c8:7e:92:2f:1b:1f: 2c:96:cd:0a:9d:57:78:a9:f2:ad:a1:3e:40:9a:2c: 59:84:75:2c:af:0e:73:4f:26:d4:5b:23:09:df:d5: 17:93:91:50:b5:41:37:6a:46:1c:d0:2a:a1:c2:23: ff:f0:f2:4c:41:05:ac:56:5c:ab:b2:c0:11:83:a1: 8c:f3:c1:de:01:ae:ce:0a:23:16:59:fd:58:be:e1: ed:43:ad:47:e4:cc:0b:78:17:2c:89:48:74:25:5c: 6a:2a:c3:a2:c4:af:33:bf:6a:be:2e:3b:0e:f9:ad: 91:ce:c3:37:fa:57:04:00:b1:77:b7:be:82:9a:2c: b0:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:C0:C9:7B:34:16:0B:2B:8D:1F:29:3F:2A:31:98:25:0C:0B:11:5A X509v3 Authority Key Identifier: keyid:A2:F1:25:E1:CD:B9:5B:A2:AF:56:36:AF:28:4A:39:94:96:55:5F:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2F125E1CDB95BA2AF5636AF284A399496555F38.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3370d24-a656-4336-842b-9bd5dca2b40a/0/A2F125E1CDB95BA2AF5636AF284A399496555F38.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:33:13:e0:fa:55:36:8f:1f:17:b9:51:78:38:d1:bd:f5:51: 7f:09:12:b7:47:f3:c3:49:73:d9:2b:8c:0f:1e:b9:64:0d:60: 33:32:62:e0:40:97:e0:6b:9e:79:2f:ea:cb:59:c0:8a:19:d9: 0b:59:ab:12:b8:46:09:b8:44:95:f1:13:ad:ed:cc:47:8f:0a: 73:3c:a6:0c:61:c8:06:bf:96:1c:c6:83:03:40:30:c1:98:50: cc:cb:cb:b8:6c:87:1e:ea:1f:71:c6:99:21:29:d2:20:8d:d5: d2:f1:2e:d1:cd:37:c3:ff:5b:fc:9d:3c:f5:e2:16:53:76:f9: 87:ac:6c:2b:3c:e7:25:a8:0c:f9:87:3d:5b:37:f1:6a:51:4b: 08:2e:bb:9f:f5:e8:d8:dc:ab:9f:2f:ef:fd:7f:27:6e:e8:0f: bb:85:99:fb:a5:e1:be:19:22:5b:8a:44:9b:c3:13:2c:62:7d: d1:d7:4f:73:97:e7:92:1d:ed:55:2c:95:45:f5:d7:1e:cf:9f: 18:b3:08:73:64:b5:69:42:b8:25:fa:91:f5:6c:2d:0e:1e:1c: 28:c0:7b:36:e4:9a:bc:93:6e:07:c9:50:41:a1:0a:c1:26:4d: fb:2f:a8:84:2c:02:0c:e2:d7:c0:43:f3:15:5b:84:0a:c6:93: 31:9f:a8:f2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcsqIAgyzJiR/lBGCgXtaiMePG6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5 NjU1NUYzODAeFw0yNjAzMDEwOTM3MDlaFw0yNjAzMDQxNjQ2MDlaMDMxMTAvBgNV BAMTKDU0QzBDOTdCMzQxNjBCMkI4RDFGMjkzRjJBMzE5ODI1MEMwQjExNUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCizU1xavTDv0TipJHVxmta1G6f FMySSrqW0JCXd+Ish5tpCpKUZySrmVRWSk+kUWRK+r3JxQMzQCihknRMZ+KLhoDt vrB6UeqP4mch2QATvU1MXIedfJIxd6/6zIYrqJCh1PKSGkSTnt7akJEXZr9ECekQ sWzwJzrr7VLHfoxstMh+ki8bHyyWzQqdV3ip8q2hPkCaLFmEdSyvDnNPJtRbIwnf 1ReTkVC1QTdqRhzQKqHCI//w8kxBBaxWXKuywBGDoYzzwd4Brs4KIxZZ/Vi+4e1D rUfkzAt4FyyJSHQlXGoqw6LErzO/ar4uOw75rZHOwzf6VwQAsXe3voKaLLAdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVMDJezQWCyuNHyk/KjGYJQwLEVowHwYDVR0j BBgwFoAUovEl4c25W6KvVjavKEo5lJZVXzgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzM3MGQyNC1hNjU2LTQzMzYtODQyYi05YmQ1ZGNhMmI0MGEvMC9BMkYxMjVFMUNE Qjk1QkEyQUY1NjM2QUYyODRBMzk5NDk2NTU1RjM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5OTQ5NjU1 NUYzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzNzBkMjQtYTY1Ni00MzM2LTg0 MmItOWJkNWRjYTJiNDBhLzAvQTJGMTI1RTFDREI5NUJBMkFGNTYzNkFGMjg0QTM5 OTQ5NjU1NUYzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAszE+D6VTaPHxe5UXg40b31UX8JErdH88NJ c9krjA8euWQNYDMyYuBAl+Brnnkv6stZwIoZ2QtZqxK4Rgm4RJXxE63tzEePCnM8 pgxhyAa/lhzGgwNAMMGYUMzLy7hshx7qH3HGmSEp0iCN1dLxLtHNN8P/W/ydPPXi FlN2+YesbCs85yWoDPmHPVs38WpRSwguu5/16Njcq58v7/1/J27oD7uFmful4b4Z IluKRJvDEyxifdHXT3OX55Id7VUslUX11x7PnxizCHNktWlCuCX6kfVsLQ4eHCjA ezbkmryTbgfJUEGhCsEmTfsvqIQsAgzi18BD8xVbhArGkzGfqPI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:20 2026 by rpki-client