$ rpki-client -vvf repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft File: A142E54B1173D871802220D7946F31C1C8F55F58.mft (raw, json) Hash identifier: uZCr2doRM+/ibwL74VtHqcBGD4/T2bNCGWBV2EvsxUc= Subject key identifier: 73:23:1F:B5:96:B3:46:49:57:58:FD:AB:9F:C3:38:6A:C9:07:F5:44 Authority key identifier: A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 Certificate issuer: /CN=A142E54B1173D871802220D7946F31C1C8F55F58 Certificate serial: 5441854368C948CD64FE4F6D9D75C437C9D574CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft Manifest number: 66 Signing time: Mon 02 Mar 2026 00:40:00 +0000 Manifest this update: Mon 02 Mar 2026 00:35:00 +0000 Manifest next update: Thu 05 Mar 2026 11:38:00 +0000 Files and hashes: 1: 3130332e34392e3232382e302f32342d3234203d3e203633383638.roa (hash: +fz1OVHlNgOBqr0lbQQ+JDq3kgo82i16sacdT062DE8=) 2: 3130332e34392e3233312e302f32342d3234203d3e203633383638.roa (hash: A87x9izjeE8fUDhqMlkHjoCuxbSOiZqmsAQhFIKjo7Y=) 3: 3130332e34392e3233302e302f32342d3234203d3e203633383638.roa (hash: OBFtgkraA2mAt61IcdsL1WjQ+6oatnIwsFiBr9g1HRk=) 4: 3130332e34392e3232392e302f32342d3234203d3e203633383638.roa (hash: bojMt0gtubfTBb5QRBM0eDsyEh+eiJmKiv8uVqn90p8=) 5: A142E54B1173D871802220D7946F31C1C8F55F58.crl (hash: Iq/WqpiMp6v511Eq9S6G9Tsd30RDNRorlroglgQefl0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:41:85:43:68:c9:48:cd:64:fe:4f:6d:9d:75:c4:37:c9:d5:74:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A142E54B1173D871802220D7946F31C1C8F55F58 Validity Not Before: Mar 2 00:35:00 2026 GMT Not After : Mar 5 11:38:00 2026 GMT Subject: CN=73231FB596B346495758FDAB9FC3386AC907F544 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4e:55:b5:f8:01:36:dd:c5:6b:84:8d:1d:e7: d1:9e:9f:8e:d7:42:9b:a7:27:aa:0c:f7:99:76:bd: c7:b9:a2:f9:a2:95:b7:69:16:58:94:bd:86:65:e3: c6:74:47:db:98:98:88:b6:49:19:d8:2d:93:71:d1: ae:83:7f:7a:6c:33:2c:8a:66:22:65:6f:55:22:ce: 90:2d:cf:e6:51:00:38:72:bf:e3:ef:a5:89:2f:a6: f9:1f:00:8d:de:7b:e8:ac:f7:bc:df:30:b7:68:6a: 76:ef:7e:75:7f:a9:51:f1:40:6f:46:34:4e:9d:04: a7:90:fb:2e:cc:c1:a1:25:52:35:79:22:5f:9f:84: 7b:ab:61:ca:56:5e:99:8a:dc:4e:3a:8a:00:9b:1c: ea:2d:33:77:80:75:30:ee:58:0a:6e:dd:1d:8b:f4: 02:1e:9e:54:56:b5:56:4d:61:bf:b2:98:1c:8a:69: 30:8c:97:00:0e:87:49:b8:e1:15:c5:92:88:ef:d3: 25:32:89:00:5a:60:29:99:c1:6b:d7:81:72:0e:6f: bf:7e:52:e9:bc:e0:9c:a7:65:17:91:12:9e:70:61: 6f:9f:5c:29:5b:a6:51:5e:72:b4:b3:05:45:0b:33: e3:91:31:03:8b:d0:c8:ee:02:aa:a3:09:45:2a:6d: b8:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:23:1F:B5:96:B3:46:49:57:58:FD:AB:9F:C3:38:6A:C9:07:F5:44 X509v3 Authority Key Identifier: keyid:A1:42:E5:4B:11:73:D8:71:80:22:20:D7:94:6F:31:C1:C8:F5:5F:58 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A142E54B1173D871802220D7946F31C1C8F55F58.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d371929d-c3d0-4daa-b5fd-a249560d5d04/0/A142E54B1173D871802220D7946F31C1C8F55F58.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:43:41:d2:a0:86:f1:f4:b5:18:83:c6:6e:67:3d:d6:e7:62: 24:d3:a6:05:94:48:df:2d:b7:da:3e:06:38:5a:e6:ce:03:aa: f6:53:5b:8d:d9:7f:b6:9b:bd:a5:6d:10:0e:4f:aa:5e:9e:be: b7:bd:5b:1b:07:8c:59:30:5d:d4:58:2a:47:b1:b7:61:b1:0b: 1a:63:a6:6a:3f:ff:9e:ed:b4:a8:75:b9:97:33:26:7e:0f:de: 17:31:59:87:9d:09:08:81:b4:c4:8d:d9:fe:f1:80:8c:d1:f8: 7d:56:75:9f:51:7f:a4:a5:f3:5c:ff:99:ff:27:34:5a:90:ba: 25:cd:f3:80:e1:5a:50:52:1f:ae:6b:90:80:c3:2e:ab:bc:fa: f9:4c:6a:3d:38:bc:21:4c:03:5c:f4:67:d6:5a:48:f6:7a:1e: 91:c9:f0:33:7b:d3:c4:30:2d:26:4b:76:4b:63:d0:89:68:27: cf:cf:13:db:81:63:d4:04:80:2a:a4:60:f0:32:ba:75:fd:91: 14:ce:b3:fd:78:1e:4a:40:39:ae:32:73:9c:06:e7:6b:e6:68: 5d:4a:6a:70:37:be:1d:f2:8f:4b:3c:8c:1e:32:a3:58:21:67: b5:85:10:11:66:68:7e:41:9d:0b:11:91:a1:87:31:2d:b4:af: 30:fc:ef:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVEGFQ2jJSM1k/k9tnXXEN8nVdM0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFD OEY1NUY1ODAeFw0yNjAzMDIwMDM1MDBaFw0yNjAzMDUxMTM4MDBaMDMxMTAvBgNV BAMTKDczMjMxRkI1OTZCMzQ2NDk1NzU4RkRBQjlGQzMzODZBQzkwN0Y1NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVTlW1+AE23cVrhI0d59Gen47X QpunJ6oM95l2vce5ovmilbdpFliUvYZl48Z0R9uYmIi2SRnYLZNx0a6Df3psMyyK ZiJlb1UizpAtz+ZRADhyv+PvpYkvpvkfAI3ee+is97zfMLdoanbvfnV/qVHxQG9G NE6dBKeQ+y7MwaElUjV5Il+fhHurYcpWXpmK3E46igCbHOotM3eAdTDuWApu3R2L 9AIenlRWtVZNYb+ymByKaTCMlwAOh0m44RXFkojv0yUyiQBaYCmZwWvXgXIOb79+ Uum84JynZReREp5wYW+fXClbplFecrSzBUULM+ORMQOL0MjuAqqjCUUqbbhtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcyMftZazRklXWP2rn8M4askH9UQwHwYDVR0j BBgwFoAUoULlSxFz2HGAIiDXlG8xwcj1X1gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MzcxOTI5ZC1jM2QwLTRkYWEtYjVmZC1hMjQ5NTYwZDVkMDQvMC9BMTQyRTU0QjEx NzNEODcxODAyMjIwRDc5NDZGMzFDMUM4RjU1RjU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMxQzFDOEY1 NUY1OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDM3MTkyOWQtYzNkMC00ZGFhLWI1 ZmQtYTI0OTU2MGQ1ZDA0LzAvQTE0MkU1NEIxMTczRDg3MTgwMjIyMEQ3OTQ2RjMx QzFDOEY1NUY1OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRDQdKghvH0tRiDxm5nPdbnYiTTpgWUSN8t t9o+Bjha5s4DqvZTW43Zf7abvaVtEA5Pql6evre9WxsHjFkwXdRYKkext2GxCxpj pmo//57ttKh1uZczJn4P3hcxWYedCQiBtMSN2f7xgIzR+H1WdZ9Rf6Sl81z/mf8n NFqQuiXN84DhWlBSH65rkIDDLqu8+vlMaj04vCFMA1z0Z9ZaSPZ6HpHJ8DN708Qw LSZLdktj0IloJ8/PE9uBY9QEgCqkYPAyunX9kRTOs/14HkpAOa4yc5wG52vmaF1K anA3vh3yj0s8jB4yo1ghZ7WFEBFmaH5BnQsRkaGHMS20rzD877c= -----END CERTIFICATE-----Generated at Mon Mar 2 08:39:56 2026 by rpki-client