$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft File: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft (raw, json) Hash identifier: gRvbD0qzUxaMNUKhyJYS3r7OGv/gC5mcoC156jsJ9TM= Subject key identifier: BE:13:AB:FF:48:E2:5B:D9:77:42:F1:A5:19:8F:88:48:50:01:A6:AC Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 Certificate issuer: /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Certificate serial: 76C060041219D6C6598E250490342EE3EC9B40BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft Manifest number: 0251 Signing time: Sun 01 Mar 2026 10:51:47 +0000 Manifest this update: Sun 01 Mar 2026 10:46:47 +0000 Manifest next update: Wed 04 Mar 2026 19:40:47 +0000 Files and hashes: 1: 3130332e3136352e3234362e302f32332d3234203d3e20313339343630.roa (hash: vtEjv2q0SLw+wrm21rrZ1C1Z0EF7U2shQs5wt9qaUps=) 2: A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl (hash: UGNKjWX7x4e+gpzUKGs+fw1sL4A/9o6srscuINO2k1c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:40:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:c0:60:04:12:19:d6:c6:59:8e:25:04:90:34:2e:e3:ec:9b:40:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340 Validity Not Before: Mar 1 10:46:47 2026 GMT Not After : Mar 4 19:40:47 2026 GMT Subject: CN=BE13ABFF48E25BD97742F1A5198F88485001A6AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:13:0e:5f:ea:97:fa:4a:0d:cf:7f:bc:ac:22: 52:1a:9f:8f:0a:47:bd:d0:a5:2b:4a:dc:05:2e:60: ec:67:78:29:cd:2d:9a:3c:9f:1e:b6:6b:58:fe:c1: 4e:63:90:c1:c6:ae:0c:04:7f:dc:fe:1d:c2:3a:d9: 68:1a:64:da:a2:fa:91:58:d1:db:52:d6:67:83:6f: c8:40:fc:2b:6a:11:e7:74:2e:ef:62:a2:9a:cb:db: 97:af:ab:16:f9:18:38:3f:ab:68:bc:7f:14:68:62: ba:f1:8b:d1:e2:f0:4b:66:e6:92:e3:3f:0e:fa:7e: cf:36:ce:7c:06:ec:01:22:d4:85:13:4c:22:99:39: 00:55:dc:da:ae:9f:98:e9:cc:c2:09:c3:68:8e:41: ce:39:48:e1:04:18:33:b0:ae:fa:ea:7f:cf:ff:ec: 82:5c:d0:92:1f:10:9a:f7:c8:ea:7e:0e:f4:a3:b9: a3:fc:1f:bd:47:fc:0a:1c:25:ad:a2:19:a8:29:14: 5d:b6:dd:e0:3d:c1:0c:e0:85:c8:65:49:42:72:e2: bb:e7:90:cb:e8:a9:6f:f5:fa:d2:f7:0a:70:35:74: b1:03:4e:41:c3:74:90:3e:ad:e1:c8:0b:7c:8f:1f: c9:cb:02:fe:5b:70:66:7f:b9:2b:34:72:04:94:cd: c1:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:13:AB:FF:48:E2:5B:D9:77:42:F1:A5:19:8F:88:48:50:01:A6:AC X509v3 Authority Key Identifier: keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b2:9d:15:7e:79:b7:20:0d:61:00:2c:ac:ea:4f:c0:04:a4: 8f:26:1c:b3:9e:2b:86:77:34:51:4c:e0:5b:8c:f8:53:51:fb: b3:8f:54:66:80:3a:98:c0:8b:a0:a3:5a:30:b3:e1:73:b1:d4: 05:c9:95:37:b5:a3:aa:22:24:c0:d2:28:a1:ec:90:89:7a:a3: 35:c6:35:18:59:ba:c3:ad:2c:6e:9d:6a:2f:4c:15:7c:53:17: 7a:20:33:57:64:e6:f7:68:56:c2:4f:8c:b2:35:c6:09:f3:37: 1e:75:1c:e8:fd:b2:b9:2b:2d:41:23:67:64:04:b9:48:da:fb: 9e:c1:d8:27:76:cb:9c:8a:0c:3c:42:52:2b:16:cf:90:0a:49: 1b:47:99:66:ea:b8:03:41:ac:7c:42:78:d5:ef:d4:c7:bf:f5: 3d:51:e0:53:39:44:03:e1:78:ff:87:54:72:ef:e3:ad:1e:1f: ff:4d:4f:47:92:57:a4:0f:9c:1b:c4:10:9e:f3:24:d0:81:b3: a6:77:a7:89:28:7d:5f:85:27:f2:e6:00:51:22:dd:56:f3:2c: 43:a8:f6:4f:c9:55:be:a1:4a:f4:93:f9:b5:30:56:ab:84:08: a5:3a:20:b1:52:13:7d:fe:69:d1:bd:87:af:03:25:dd:39:25: cd:ca:50:d5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdsBgBBIZ1sZZjiUEkDQu4+ybQL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2 MkRDQjM0MDAeFw0yNjAzMDExMDQ2NDdaFw0yNjAzMDQxOTQwNDdaMDMxMTAvBgNV BAMTKEJFMTNBQkZGNDhFMjVCRDk3NzQyRjFBNTE5OEY4ODQ4NTAwMUE2QUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPEw5f6pf6Sg3Pf7ysIlIan48K R73QpStK3AUuYOxneCnNLZo8nx62a1j+wU5jkMHGrgwEf9z+HcI62WgaZNqi+pFY 0dtS1meDb8hA/CtqEed0Lu9ioprL25evqxb5GDg/q2i8fxRoYrrxi9Hi8Etm5pLj Pw76fs82znwG7AEi1IUTTCKZOQBV3Nqun5jpzMIJw2iOQc45SOEEGDOwrvrqf8// 7IJc0JIfEJr3yOp+DvSjuaP8H71H/AocJa2iGagpFF223eA9wQzghchlSUJy4rvn kMvoqW/1+tL3CnA1dLEDTkHDdJA+reHIC3yPH8nLAv5bcGZ/uSs0cgSUzcF7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvhOr/0jiW9l3QvGlGY+ISFABpqwwHwYDVR0j BBgwFoAUoZGMFWqaz83yRx3q/GGO4WLcs0AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NjhjN2EzNC1iYTMxLTRkMjktODM4NC0xODY3ODliMzg0ZjEvMC9BMTkxOEMxNTZB OUFDRkNERjI0NzFERUFGQzYxOEVFMTYyRENCMzQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThFRTE2MkRD QjM0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDY4YzdhMzQtYmEzMS00ZDI5LTgz ODQtMTg2Nzg5YjM4NGYxLzAvQTE5MThDMTU2QTlBQ0ZDREYyNDcxREVBRkM2MThF RTE2MkRDQjM0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyynRV+ebcgDWEALKzqT8AEpI8mHLOeK4Z3 NFFM4FuM+FNR+7OPVGaAOpjAi6CjWjCz4XOx1AXJlTe1o6oiJMDSKKHskIl6ozXG NRhZusOtLG6dai9MFXxTF3ogM1dk5vdoVsJPjLI1xgnzNx51HOj9srkrLUEjZ2QE uUja+57B2Cd2y5yKDDxCUisWz5AKSRtHmWbquANBrHxCeNXv1Me/9T1R4FM5RAPh eP+HVHLv460eH/9NT0eSV6QPnBvEEJ7zJNCBs6Z3p4kofV+FJ/LmAFEi3VbzLEOo 9k/JVb6hSvST+bUwVquECKU6ILFSE33+adG9h68DJd05Jc3KUNU= -----END CERTIFICATE-----Generated at Mon Mar 2 04:42:29 2026 by rpki-client