$ rpki-client -vvf repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft File: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft (raw, json) Hash identifier: yMoXluNBvLrYX37hwjLmSy+e5MV1NQXa4M2AvVbcD9k= Subject key identifier: 99:1B:5D:99:DF:1B:CD:A9:4D:96:28:45:8D:C1:64:B3:31:98:56:F7 Authority key identifier: A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E Certificate issuer: /CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Certificate serial: 224D97BDEDAA3564CB812A29BCE26C894803478A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft Manifest number: 02A3 Signing time: Sat 28 Feb 2026 08:21:25 +0000 Manifest this update: Sat 28 Feb 2026 08:16:25 +0000 Manifest next update: Tue 03 Mar 2026 19:35:25 +0000 Files and hashes: 1: A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl (hash: U+fi/GUmt1hgQa/p4IuMUggNwe0QI8SHmJDG7LTfXZQ=) 2: 3130332e3137312e37392e302f32342d3234203d3e20313432333932.roa (hash: aV5yiYhEjo0Djjw17Cd86FNmWGNEd83JMXu1qygwBWY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4d:97:bd:ed:aa:35:64:cb:81:2a:29:bc:e2:6c:89:48:03:47:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E Validity Not Before: Feb 28 08:16:25 2026 GMT Not After : Mar 3 19:35:25 2026 GMT Subject: CN=991B5D99DF1BCDA94D9628458DC164B3319856F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:ff:4d:42:b0:ef:57:c5:e8:a3:06:07:97:a5: 4e:d8:d7:4e:fc:ec:28:f7:37:14:bf:94:19:ff:82: 29:50:a6:99:62:b1:0d:d2:aa:5c:ac:2e:cf:87:a2: 15:fc:2a:1a:04:46:e3:d0:2e:92:14:0a:3c:02:55: 96:db:27:e4:42:f7:0a:33:dd:ee:01:e8:08:33:bd: 97:5a:c4:bc:2f:85:7e:ff:6e:fb:c7:ec:a2:6a:de: 1b:21:2d:28:d3:7f:d2:f1:9c:c9:4e:7d:0b:37:15: a5:b2:06:8c:74:c3:5e:72:ef:90:b2:03:80:36:7f: dc:6f:82:b7:51:f4:e1:4a:eb:c0:cc:57:67:d1:33: 62:19:4e:aa:0c:83:8c:52:b9:3a:35:bf:ae:b2:80: c5:9a:d8:30:a1:ff:f7:b9:14:6e:ec:ec:78:d3:28: 9f:e1:08:86:d0:ea:2a:4a:c1:fe:f0:aa:43:c5:0b: 9d:be:ad:3a:8d:d3:a3:8e:66:1d:a0:3e:e5:1b:56: e6:69:ba:b0:94:5c:53:44:0a:74:f3:0d:ae:55:36: 75:de:22:ab:22:77:c0:4d:07:f6:bd:26:fc:0f:9f: 5b:18:27:e4:e8:64:61:a1:f0:a3:f5:b6:3b:24:4d: 22:59:c3:0d:fb:8a:2d:fa:dc:40:00:dc:af:6e:42: 38:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:1B:5D:99:DF:1B:CD:A9:4D:96:28:45:8D:C1:64:B3:31:98:56:F7 X509v3 Authority Key Identifier: keyid:A6:8E:D4:D9:0C:F8:EA:A8:75:9C:E8:4C:F5:FC:68:B5:6F:62:85:0E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3b8ceab-fb5c-40a9-b889-2d1889a5004b/0/A68ED4D90CF8EAA8759CE84CF5FC68B56F62850E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:c8:e8:cd:ed:fc:2e:de:7a:52:68:5b:0a:3d:a9:87:ee:eb: f3:e2:3f:bc:f8:8c:68:ef:57:e8:52:83:66:ec:34:ae:a4:2c: 2d:38:61:79:70:31:1b:1f:bb:47:a5:71:ef:ee:2a:d6:3b:81: 39:c2:c7:ab:8a:9d:98:ea:00:e5:c2:c3:10:cb:ba:d5:e1:6d: 90:71:17:02:83:26:95:47:2b:9d:91:9b:87:f0:80:bf:07:6b: ff:a0:9f:a1:94:17:ad:b5:7a:69:d6:76:ab:96:03:50:ab:70: 77:63:44:f4:5f:90:4d:24:1a:30:c6:e6:47:b2:72:50:48:bf: 66:e0:02:39:ba:a2:be:f2:33:b2:8c:20:91:62:ee:77:63:6c: b0:1b:2b:33:f9:6f:1a:8a:bc:c9:d7:bb:1f:ac:8f:36:39:58: b3:cf:30:8a:04:96:c5:7c:f7:b7:7f:f8:38:b8:4c:ac:05:e7: 50:a3:83:c9:fd:2d:da:e0:4f:ba:b1:33:14:0f:e6:36:29:a4: ee:5c:3c:7c:25:b8:ff:a1:45:c1:ad:f2:a9:a7:f7:e0:00:a1: 70:4a:44:45:3e:32:e5:a9:2d:bc:2c:4c:7b:18:d1:4c:dd:bd: e6:de:2a:e6:e5:7d:2c:5a:c4:71:b3:c1:05:60:45:ea:6f:f1: f7:27:bc:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIk2Xve2qNWTLgSopvOJsiUgDR4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2 RjYyODUwRTAeFw0yNjAyMjgwODE2MjVaFw0yNjAzMDMxOTM1MjVaMDMxMTAvBgNV BAMTKDk5MUI1RDk5REYxQkNEQTk0RDk2Mjg0NThEQzE2NEIzMzE5ODU2RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD/01CsO9XxeijBgeXpU7Y1078 7Cj3NxS/lBn/gilQpplisQ3SqlysLs+HohX8KhoERuPQLpIUCjwCVZbbJ+RC9woz 3e4B6AgzvZdaxLwvhX7/bvvH7KJq3hshLSjTf9LxnMlOfQs3FaWyBox0w15y75Cy A4A2f9xvgrdR9OFK68DMV2fRM2IZTqoMg4xSuTo1v66ygMWa2DCh//e5FG7s7HjT KJ/hCIbQ6ipKwf7wqkPFC52+rTqN06OOZh2gPuUbVuZpurCUXFNECnTzDa5VNnXe Iqsid8BNB/a9JvwPn1sYJ+ToZGGh8KP1tjskTSJZww37ii363EAA3K9uQjgjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmRtdmd8bzalNlihFjcFkszGYVvcwHwYDVR0j BBgwFoAUpo7U2Qz46qh1nOhM9fxotW9ihQ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2I4Y2VhYi1mYjVjLTQwYTktYjg4OS0yZDE4ODlhNTAwNGIvMC9BNjhFRDREOTBD RjhFQUE4NzU5Q0U4NENGNUZDNjhCNTZGNjI4NTBFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4QjU2RjYy ODUwRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNiOGNlYWItZmI1Yy00MGE5LWI4 ODktMmQxODg5YTUwMDRiLzAvQTY4RUQ0RDkwQ0Y4RUFBODc1OUNFODRDRjVGQzY4 QjU2RjYyODUwRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHI6M3t/C7eelJoWwo9qYfu6/PiP7z4jGjv V+hSg2bsNK6kLC04YXlwMRsfu0elce/uKtY7gTnCx6uKnZjqAOXCwxDLutXhbZBx FwKDJpVHK52Rm4fwgL8Ha/+gn6GUF621emnWdquWA1CrcHdjRPRfkE0kGjDG5key clBIv2bgAjm6or7yM7KMIJFi7ndjbLAbKzP5bxqKvMnXux+sjzY5WLPPMIoElsV8 97d/+Di4TKwF51Cjg8n9LdrgT7qxMxQP5jYppO5cPHwluP+hRcGt8qmn9+AAoXBK REU+MuWpLbwsTHsY0UzdvebeKublfSxaxHGzwQVgRepv8fcnvJA= -----END CERTIFICATE-----Generated at Mon Mar 2 05:58:14 2026 by rpki-client