$ rpki-client -vvf repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft File: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft (raw, json) Hash identifier: UJKXu9UQt4bc/D8Y6S/j1BCcyW2oTM98kGUk6pU0+Q4= Subject key identifier: 56:B5:0F:99:D3:34:88:6D:4E:D2:D8:6D:94:FF:2E:1D:D9:88:41:49 Authority key identifier: A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 Certificate issuer: /CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Certificate serial: 786EBA8529A627EF0C3FA86F1BA1F30BBEF4BEED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft Manifest number: 01E4 Signing time: Mon 02 Mar 2026 09:51:19 +0000 Manifest this update: Mon 02 Mar 2026 09:46:19 +0000 Manifest next update: Thu 05 Mar 2026 17:54:19 +0000 Files and hashes: 1: A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl (hash: WLgR3P+sPU+Y0t/+wU/3KatadBR/o7vdnem2mZPm8i0=) 2: 3130332e3133392e3230372e302f32342d3234203d3e20313530353133.roa (hash: vGWib/ZMzGPAxY4ZeXyIPjhvX8AUDKQVTzcT6lw1mtE=) 3: 3130332e3139352e32382e302f32342d3234203d3e20313530353133.roa (hash: 4LNzIiiVAjfAPDaN3C6qI+UuH36Wsb+t94eV+et+GFs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6e:ba:85:29:a6:27:ef:0c:3f:a8:6f:1b:a1:f3:0b:be:f4:be:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A01B6715A5B29F23D33C70B4E59135B0FA2231F5 Validity Not Before: Mar 2 09:46:19 2026 GMT Not After : Mar 5 17:54:19 2026 GMT Subject: CN=56B50F99D334886D4ED2D86D94FF2E1DD9884149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:ca:f5:2d:b8:e7:08:1c:3e:01:16:19:b3:48: 80:9d:4d:ab:0a:fa:6a:eb:02:0d:2a:98:78:87:f5: 74:10:93:27:34:2d:18:35:90:47:1c:ff:ec:10:e6: b2:bd:cb:47:9f:0e:32:96:db:77:3e:a2:02:6d:82: e9:a4:3f:12:10:aa:ec:8f:94:e4:95:89:48:60:f3: 16:00:48:8e:1c:5d:a1:54:4b:bf:17:ea:0b:b9:d9: 4d:59:59:cd:3c:2d:db:e6:77:7f:fd:44:c0:73:b4: 18:4f:33:99:7b:00:60:45:06:9b:fb:9c:ed:1e:09: 9b:0c:27:e1:40:9a:f4:08:94:3a:91:d6:7d:b9:a3: f5:d8:a7:47:55:10:bc:64:a1:70:37:5b:48:ed:a3: 06:42:2f:25:3c:2b:68:bc:85:ee:ce:39:17:4c:0c: 87:18:1f:fe:c6:3e:d0:5b:68:68:7b:46:53:61:fa: 0a:8e:cc:5d:ca:b6:4c:32:75:69:15:fa:e6:8e:f3: 5a:90:c9:70:b4:0a:ce:d4:06:74:a9:a0:db:2a:c3: f1:30:9f:3b:cb:be:73:13:b3:2f:71:06:9a:7b:40: c9:e2:64:97:e4:5c:5f:a9:e1:34:e0:35:26:b5:73: 98:3f:33:0d:f2:a5:39:ff:be:37:a0:18:c0:36:a4: 33:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:B5:0F:99:D3:34:88:6D:4E:D2:D8:6D:94:FF:2E:1D:D9:88:41:49 X509v3 Authority Key Identifier: keyid:A0:1B:67:15:A5:B2:9F:23:D3:3C:70:B4:E5:91:35:B0:FA:22:31:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4912c9b-dce4-40e6-9588-d7ca8c37ef4d/0/A01B6715A5B29F23D33C70B4E59135B0FA2231F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:78:de:20:6a:72:09:8e:9e:20:49:a1:d5:ae:6d:8c:cb:4f: 30:55:ec:b9:15:64:70:92:6f:33:c8:19:ec:fe:68:03:4d:26: 3e:88:5a:7f:0b:44:d2:c2:de:2f:bf:2e:7a:3d:2d:11:ac:92: f0:f1:95:ff:f5:b4:6b:68:b9:5b:96:97:12:36:1f:97:33:d3: 1c:20:76:48:9d:b5:3a:df:88:32:a9:e8:e9:70:39:12:dd:5f: a3:ff:e8:cb:60:fc:fd:10:d9:41:94:1d:92:a5:2a:ff:52:ae: 0b:9f:60:1d:c4:72:4d:0b:8f:36:be:2c:15:5e:27:ed:5e:a6: d8:1b:06:5b:50:27:6c:78:7e:92:2f:a4:b6:7a:45:7c:24:b2: 50:d4:f2:b3:39:3f:a7:10:8b:1f:20:14:ce:41:77:58:34:3d: f1:19:1e:2a:3f:77:84:ca:67:d0:33:00:57:0a:35:f4:fd:60: fe:0b:18:cd:f4:1a:f5:d4:72:65:be:12:01:63:0d:f9:77:e2: 1f:30:12:ec:b8:c2:d5:12:b8:b0:f5:1e:59:a1:13:81:4a:5e: 5f:d7:77:7c:84:d5:b9:88:80:6a:da:11:e0:c9:39:13:54:7d: 49:af:a8:7b:ea:ab:3b:a2:6f:95:42:1b:7e:48:b9:07:f6:d0: 4a:24:aa:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeG66hSmmJ+8MP6hvG6HzC770vu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBG QTIyMzFGNTAeFw0yNjAzMDIwOTQ2MTlaFw0yNjAzMDUxNzU0MTlaMDMxMTAvBgNV BAMTKDU2QjUwRjk5RDMzNDg4NkQ0RUQyRDg2RDk0RkYyRTFERDk4ODQxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdyvUtuOcIHD4BFhmzSICdTasK +mrrAg0qmHiH9XQQkyc0LRg1kEcc/+wQ5rK9y0efDjKW23c+ogJtgumkPxIQquyP lOSViUhg8xYASI4cXaFUS78X6gu52U1ZWc08Ldvmd3/9RMBztBhPM5l7AGBFBpv7 nO0eCZsMJ+FAmvQIlDqR1n25o/XYp0dVELxkoXA3W0jtowZCLyU8K2i8he7OORdM DIcYH/7GPtBbaGh7RlNh+gqOzF3KtkwydWkV+uaO81qQyXC0Cs7UBnSpoNsqw/Ew nzvLvnMTsy9xBpp7QMniZJfkXF+p4TTgNSa1c5g/Mw3ypTn/vjegGMA2pDMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVrUPmdM0iG1O0thtlP8uHdmIQUkwHwYDVR0j BBgwFoAUoBtnFaWynyPTPHC05ZE1sPoiMfUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NDkxMmM5Yi1kY2U0LTQwZTYtOTU4OC1kN2NhOGMzN2VmNGQvMC9BMDFCNjcxNUE1 QjI5RjIzRDMzQzcwQjRFNTkxMzVCMEZBMjIzMUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1QjBGQTIy MzFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjQ5MTJjOWItZGNlNC00MGU2LTk1 ODgtZDdjYThjMzdlZjRkLzAvQTAxQjY3MTVBNUIyOUYyM0QzM0M3MEI0RTU5MTM1 QjBGQTIyMzFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI143iBqcgmOniBJodWubYzLTzBV7LkVZHCS bzPIGez+aANNJj6IWn8LRNLC3i+/Lno9LRGskvDxlf/1tGtouVuWlxI2H5cz0xwg dkidtTrfiDKp6OlwORLdX6P/6Mtg/P0Q2UGUHZKlKv9SrgufYB3Eck0Ljza+LBVe J+1eptgbBltQJ2x4fpIvpLZ6RXwkslDU8rM5P6cQix8gFM5Bd1g0PfEZHio/d4TK Z9AzAFcKNfT9YP4LGM30GvXUcmW+EgFjDfl34h8wEuy4wtUSuLD1HlmhE4FKXl/X d3yE1bmIgGraEeDJORNUfUmvqHvqqzuib5VCG35IuQf20EokqoQ= -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:46 2026 by rpki-client