$ rpki-client -vvf repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft File: A708865394D992A01D1736F0AB500E24889B7F34.mft (raw, json) Hash identifier: SDhus//ShAV+HxHe8uOP3HluvCT/6gHe7x7f5IqYRJM= Subject key identifier: 20:B6:9E:6E:06:60:75:C6:58:A1:7C:17:98:29:9D:EA:BD:19:9C:33 Authority key identifier: A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 Certificate issuer: /CN=A708865394D992A01D1736F0AB500E24889B7F34 Certificate serial: 6C0FBFC6DAA1DF72B7C6A1A1A0685220666C176B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft Manifest number: 01A9 Signing time: Sat 28 Feb 2026 10:20:54 +0000 Manifest this update: Sat 28 Feb 2026 10:15:54 +0000 Manifest next update: Tue 03 Mar 2026 12:07:54 +0000 Files and hashes: 1: 3130332e3234322e31302e302f32332d3234203d3e20313336303532.roa (hash: yL0gLS/lvq9j5h+L42yAYYctUM1Kqtv5bl12En0Z8dY=) 2: A708865394D992A01D1736F0AB500E24889B7F34.crl (hash: dUzFcIYsaLiYxHUU/8vpRb4/SAvVBnL9kj+TX0lrA34=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:07:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0f:bf:c6:da:a1:df:72:b7:c6:a1:a1:a0:68:52:20:66:6c:17:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A708865394D992A01D1736F0AB500E24889B7F34 Validity Not Before: Feb 28 10:15:54 2026 GMT Not After : Mar 3 12:07:54 2026 GMT Subject: CN=20B69E6E066075C658A17C1798299DEABD199C33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:1f:f9:4b:9b:40:bc:d3:cc:73:be:26:e0:80: b2:43:6d:82:88:5e:85:1d:98:ae:16:0d:46:44:d4: 76:69:8f:45:b8:b3:6f:8d:f7:ce:6e:0c:6b:64:5c: f4:03:85:e4:8d:c3:38:6b:70:b3:e3:dd:79:d9:78: 05:0c:a0:e5:94:4e:de:26:97:b6:d1:02:70:4a:af: 64:98:76:ef:9c:de:2e:d4:6d:84:3d:03:8b:a2:49: 80:76:35:0a:7b:17:80:19:b1:52:24:af:4a:b7:aa: 6e:cf:34:47:bb:e6:8c:02:34:39:51:32:94:07:f7: d3:8b:fe:fa:e4:ce:44:96:0a:a5:3c:f5:0f:ff:72: a0:c2:2e:e1:0f:be:1e:30:f9:b9:59:51:43:a3:16: 6e:4c:aa:07:3a:ec:dd:80:4f:4f:5f:40:43:c1:7e: ec:62:ae:1a:d6:5d:0b:18:ea:60:be:ae:c9:c1:b6: 8b:4a:86:e2:52:f7:4b:b1:11:64:7f:97:99:66:b0: f1:58:7d:04:df:e6:d4:a5:36:08:66:b2:53:ba:43: d3:d9:b4:60:a0:9a:e5:13:6f:c9:8e:de:5c:38:55: 74:1d:37:4d:4c:73:cf:ad:11:cc:dd:df:cd:01:5c: c2:43:04:3b:00:34:d0:51:83:73:2d:87:56:b6:c0: f4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:B6:9E:6E:06:60:75:C6:58:A1:7C:17:98:29:9D:EA:BD:19:9C:33 X509v3 Authority Key Identifier: keyid:A7:08:86:53:94:D9:92:A0:1D:17:36:F0:AB:50:0E:24:88:9B:7F:34 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A708865394D992A01D1736F0AB500E24889B7F34.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bf0c7a37-5d19-4c5c-9301-a14a7f185c92/0/A708865394D992A01D1736F0AB500E24889B7F34.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:35:3c:d5:8c:d3:87:55:ea:f4:96:24:16:cb:f9:ba:b6:f3: 2f:6f:8b:29:43:25:d5:9a:f1:d1:b2:67:91:9c:9c:8c:d4:2b: 1a:5d:1b:08:cf:9c:a8:e4:0c:50:2c:ea:29:a5:81:1a:9a:14: 17:df:3f:0a:66:02:28:fb:a5:a2:00:98:af:62:d8:49:86:19: 8b:60:ef:b5:05:54:b3:36:0c:f1:0f:38:7c:07:8f:b8:62:59: 49:cd:0e:32:e9:2a:82:d4:f9:4b:04:d1:05:12:3f:3b:b8:de: b1:88:5b:27:19:a8:ab:a2:86:91:12:8c:f5:45:7e:3f:a2:cb: 6d:ab:47:65:86:33:6d:9d:e2:0b:6d:ef:89:f9:4e:21:7f:07: dc:0e:9e:90:2e:2b:92:15:91:77:8a:60:83:99:f7:b2:20:ac: 2c:b8:5e:31:e2:a5:38:0f:c6:ad:21:5f:d6:a9:8e:f2:44:fe: f7:83:be:6d:a8:b8:e2:3f:e7:fd:dd:84:81:32:cf:1f:fa:c0: cd:73:63:12:84:92:41:f1:58:61:e5:19:2c:fb:b8:f7:67:76: f9:08:97:15:6f:f6:93:22:84:09:b4:e8:57:62:ab:d0:d8:4e: 98:18:e1:1c:45:ef:cf:cc:47:a3:08:b8:a2:50:8d:a8:7a:53: 83:26:01:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbA+/xtqh33K3xqGhoGhSIGZsF2swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4 ODlCN0YzNDAeFw0yNjAyMjgxMDE1NTRaFw0yNjAzMDMxMjA3NTRaMDMxMTAvBgNV BAMTKDIwQjY5RTZFMDY2MDc1QzY1OEExN0MxNzk4Mjk5REVBQkQxOTlDMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpH/lLm0C808xzvibggLJDbYKI XoUdmK4WDUZE1HZpj0W4s2+N985uDGtkXPQDheSNwzhrcLPj3XnZeAUMoOWUTt4m l7bRAnBKr2SYdu+c3i7UbYQ9A4uiSYB2NQp7F4AZsVIkr0q3qm7PNEe75owCNDlR MpQH99OL/vrkzkSWCqU89Q//cqDCLuEPvh4w+blZUUOjFm5Mqgc67N2AT09fQEPB fuxirhrWXQsY6mC+rsnBtotKhuJS90uxEWR/l5lmsPFYfQTf5tSlNghmslO6Q9PZ tGCgmuUTb8mO3lw4VXQdN01Mc8+tEczd380BXMJDBDsANNBRg3Mth1a2wPTZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUILaebgZgdcZYoXwXmCmd6r0ZnDMwHwYDVR0j BBgwFoAUpwiGU5TZkqAdFzbwq1AOJIibfzQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZjBjN2EzNy01ZDE5LTRjNWMtOTMwMS1hMTRhN2YxODVjOTIvMC9BNzA4ODY1Mzk0 RDk5MkEwMUQxNzM2RjBBQjUwMEUyNDg4OUI3RjM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBFMjQ4ODlC N0YzNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmYwYzdhMzctNWQxOS00YzVjLTkz MDEtYTE0YTdmMTg1YzkyLzAvQTcwODg2NTM5NEQ5OTJBMDFEMTczNkYwQUI1MDBF MjQ4ODlCN0YzNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFM1PNWM04dV6vSWJBbL+bq28y9viylDJdWa 8dGyZ5GcnIzUKxpdGwjPnKjkDFAs6imlgRqaFBffPwpmAij7paIAmK9i2EmGGYtg 77UFVLM2DPEPOHwHj7hiWUnNDjLpKoLU+UsE0QUSPzu43rGIWycZqKuihpESjPVF fj+iy22rR2WGM22d4gtt74n5TiF/B9wOnpAuK5IVkXeKYIOZ97IgrCy4XjHipTgP xq0hX9apjvJE/veDvm2ouOI/5/3dhIEyzx/6wM1zYxKEkkHxWGHlGSz7uPdndvkI lxVv9pMihAm06Fdiq9DYTpgY4RxF78/MR6MIuKJQjah6U4MmAbw= -----END CERTIFICATE-----Generated at Mon Mar 2 13:37:51 2026 by rpki-client