$ rpki-client -vvf repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft File: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft (raw, json) Hash identifier: evD4zwKlca+/oNe08MXhTQQ5XTKaLNugbWVwT3HjvY4= Subject key identifier: C0:A7:F8:42:30:D3:A1:6A:CC:63:24:DC:13:2A:FA:69:0A:F0:D1:F3 Authority key identifier: A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 Certificate issuer: /CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Certificate serial: 6838AA35BBCC0A3995B1286E6EC14B3D741B0822 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft Manifest number: 0176 Signing time: Sun 01 Mar 2026 13:31:31 +0000 Manifest this update: Sun 01 Mar 2026 13:26:31 +0000 Manifest next update: Thu 05 Mar 2026 00:55:31 +0000 Files and hashes: 1: 3130332e3134372e38312e302f32342d3234203d3e20313339393533.roa (hash: cossnBP1XdG0zEY8nTnjaUaCSRdcepAuP+Hq1t+V00c=) 2: 3130332e3134372e38302e302f32332d3233203d3e20323135373237.roa (hash: YkSgIj60/WrfXjkzTsvNmSBHnWYo3l/r2aakVLlTHlI=) 3: A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl (hash: hVghW0K/Wa8Df3QCU2QhdkRg28vEQb6WecsgEbkiW0o=) 4: 3130332e3134372e38312e302f32342d3234203d3e20313534343130.roa (hash: xUzQPT7Y48BY1f3qkuwnRycvuFaKrS+6XVzcFNbQt5U=) 5: 3130332e3134372e38312e302f32342d3234203d3e20323135373237.roa (hash: kN+ITRJB9Y4U/xn0VPZsd1TVeghOlD4cfCGOQ2XBRrQ=) 6: 3130332e3134372e38302e302f32342d3234203d3e20323135373237.roa (hash: OYS8ELzbytajd0ilVDQZgP9NBUy3Oh9sGjo4E0+GTlo=) 7: 3130332e3134372e38302e302f32342d3234203d3e20313534343130.roa (hash: uRfUQhVw2ch7VqXxR20eCaHEC59WymM8VUU6S8pSv3Q=) 8: 3130332e3134372e38302e302f32332d3233203d3e20313534343130.roa (hash: uTRK4cfs6kU0tRewOXGg2ZHMhMcLjNRyQucE48/K6O4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 00:55:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:38:aa:35:bb:cc:0a:39:95:b1:28:6e:6e:c1:4b:3d:74:1b:08:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246 Validity Not Before: Mar 1 13:26:31 2026 GMT Not After : Mar 5 00:55:31 2026 GMT Subject: CN=C0A7F84230D3A16ACC6324DC132AFA690AF0D1F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:70:d3:ac:9f:c2:24:d1:ac:6a:b5:90:e2:c3: 7e:41:77:a1:5a:7c:55:30:2e:b5:5c:7f:5e:f5:18: 48:04:1b:63:90:1b:bd:32:a8:bb:ab:55:61:7e:a6: 11:83:4b:0c:b8:4c:7d:0e:a0:ad:2a:4d:28:9b:12: b3:da:12:d7:07:d3:65:91:5e:eb:3f:f0:51:6f:bc: 72:bd:b1:6e:ed:f0:10:b4:8e:09:be:00:3c:a0:68: 31:84:32:75:b2:a7:f2:4e:6b:e7:ad:f1:50:52:e6: e3:03:20:73:ca:fc:ad:f2:ef:10:a6:b0:56:26:e1: 6b:ea:84:a3:e2:85:45:77:15:4c:39:f1:ed:75:79: 4c:bc:56:7a:18:cc:3c:33:c8:92:c0:d0:03:72:d8: f6:12:f6:b7:5a:9b:65:be:d8:4b:2d:48:8a:e9:ab: cc:4b:e8:34:8c:85:35:f9:5f:31:18:da:95:3b:b5: bb:9c:e6:91:e0:05:b9:12:be:00:61:a5:87:6e:bd: d7:94:33:3f:4c:64:9b:dd:2c:1a:7c:0e:db:cc:0c: 6b:57:0f:98:50:48:8a:4e:dc:73:0f:9e:59:21:8f: 95:a4:c8:2c:94:67:2e:b1:66:dc:8d:4d:a2:1d:5b: e5:0b:12:a1:af:ab:2d:67:cd:68:58:cc:64:a7:fc: 9c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A7:F8:42:30:D3:A1:6A:CC:63:24:DC:13:2A:FA:69:0A:F0:D1:F3 X509v3 Authority Key Identifier: keyid:A3:EF:DD:DA:D5:26:EF:A3:F2:82:1E:9E:6E:C6:E7:47:BB:5B:12:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c6c570ef-6efd-4f97-bf31-968126ab57c0/0/A3EFDDDAD526EFA3F2821E9E6EC6E747BB5B1246.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:cf:2d:2c:37:7d:b1:d8:62:2b:20:76:2b:e6:ee:e7:92:ff: ee:54:fe:e6:fb:b6:05:ef:1f:1f:e8:26:69:e6:88:22:3a:d9: b9:c2:e4:4a:21:6b:99:56:d9:68:61:64:32:e0:5d:e7:4a:09: 6b:c7:48:bf:3d:24:9c:32:dc:c4:04:f9:3b:22:05:b7:30:6a: 61:f1:ad:29:4c:56:9a:8c:bc:fb:32:16:25:67:16:ac:73:b5: 12:7c:0d:53:4a:bf:c0:95:9a:6e:12:54:5f:1e:3a:fc:98:5b: 54:d0:d6:f7:d9:af:26:55:d0:d4:ea:ca:bd:a6:88:31:46:f5: 99:e1:95:db:be:b3:87:e3:67:21:25:fb:bb:b5:0a:72:7c:3b: 2f:ce:c5:41:6d:0f:9d:33:78:2a:f1:09:1a:5b:c4:df:9e:29: c7:9a:d2:a3:af:30:f9:c9:59:d3:ed:eb:60:86:b0:9f:65:78: 4e:2d:03:30:00:49:94:34:01:61:84:5e:23:35:56:b7:4e:14: 0f:bf:ab:03:2e:83:87:6f:db:84:d5:e3:ef:c5:a7:44:1d:3c: 30:16:aa:e8:49:00:b5:48:9a:26:2d:bf:ab:6f:02:1e:3e:5f: bd:4b:6d:0c:6a:8b:ec:79:54:77:15:14:7b:f1:d1:41:07:78: f3:fe:81:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaDiqNbvMCjmVsShubsFLPXQbCCIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdC QjVCMTI0NjAeFw0yNjAzMDExMzI2MzFaFw0yNjAzMDUwMDU1MzFaMDMxMTAvBgNV BAMTKEMwQTdGODQyMzBEM0ExNkFDQzYzMjREQzEzMkFGQTY5MEFGMEQxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDccNOsn8Ik0axqtZDiw35Bd6Fa fFUwLrVcf171GEgEG2OQG70yqLurVWF+phGDSwy4TH0OoK0qTSibErPaEtcH02WR Xus/8FFvvHK9sW7t8BC0jgm+ADygaDGEMnWyp/JOa+et8VBS5uMDIHPK/K3y7xCm sFYm4WvqhKPihUV3FUw58e11eUy8VnoYzDwzyJLA0ANy2PYS9rdam2W+2EstSIrp q8xL6DSMhTX5XzEY2pU7tbuc5pHgBbkSvgBhpYduvdeUMz9MZJvdLBp8DtvMDGtX D5hQSIpO3HMPnlkhj5WkyCyUZy6xZtyNTaIdW+ULEqGvqy1nzWhYzGSn/Jx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKf4QjDToWrMYyTcEyr6aQrw0fMwHwYDVR0j BBgwFoAUo+/d2tUm76Pygh6ebsbnR7tbEkYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NmM1NzBlZi02ZWZkLTRmOTctYmYzMS05NjgxMjZhYjU3YzAvMC9BM0VGREREQUQ1 MjZFRkEzRjI4MjFFOUU2RUM2RTc0N0JCNUIxMjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3NDdCQjVC MTI0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzZjNTcwZWYtNmVmZC00Zjk3LWJm MzEtOTY4MTI2YWI1N2MwLzAvQTNFRkREREFENTI2RUZBM0YyODIxRTlFNkVDNkU3 NDdCQjVCMTI0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTPLSw3fbHYYisgdivm7ueS/+5U/ub7tgXv Hx/oJmnmiCI62bnC5Eoha5lW2WhhZDLgXedKCWvHSL89JJwy3MQE+TsiBbcwamHx rSlMVpqMvPsyFiVnFqxztRJ8DVNKv8CVmm4SVF8eOvyYW1TQ1vfZryZV0NTqyr2m iDFG9Znhldu+s4fjZyEl+7u1CnJ8Oy/OxUFtD50zeCrxCRpbxN+eKcea0qOvMPnJ WdPt62CGsJ9leE4tAzAASZQ0AWGEXiM1VrdOFA+/qwMug4dv24TV4+/Fp0QdPDAW quhJALVImiYtv6tvAh4+X71LbQxqi+x5VHcVFHvx0UEHePP+gS0= -----END CERTIFICATE-----Generated at Mon Mar 2 14:48:51 2026 by rpki-client