$ rpki-client -vvf repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft File: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft (raw, json) Hash identifier: 8ZDF2Q+/AYdp+n8haoGHPoOonEJQI1OFIk3p4h/OQZg= Subject key identifier: 19:53:0E:CC:D3:BB:30:F5:8C:15:CF:76:1A:C2:72:1D:1D:8A:23:8B Authority key identifier: A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD Certificate issuer: /CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Certificate serial: 782546F283A3F853ABE83A6B24337B8CC38E08DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft Manifest number: 0211 Signing time: Sat 28 Feb 2026 15:51:15 +0000 Manifest this update: Sat 28 Feb 2026 15:46:15 +0000 Manifest next update: Tue 03 Mar 2026 19:47:15 +0000 Files and hashes: 1: A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl (hash: FgRgOn9bYSPp7CHT8GRb+KZ6PHi0Jsb+PzahDUqL64U=) 2: 3130332e3134372e3134322e302f32332d3234203d3e203137373639.roa (hash: PrW1B+JOk51E9zyJqPaIkQOhvDojGNHgAHNsvo2TOSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:25:46:f2:83:a3:f8:53:ab:e8:3a:6b:24:33:7b:8c:c3:8e:08:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A2D790243ED650B27D7A54EBD16ADC6811CF14BD Validity Not Before: Feb 28 15:46:15 2026 GMT Not After : Mar 3 19:47:15 2026 GMT Subject: CN=19530ECCD3BB30F58C15CF761AC2721D1D8A238B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:0e:d6:84:0f:51:ec:84:ab:27:17:43:b4:fc: 51:84:5e:0a:c6:bb:73:d0:0e:43:6d:0b:2f:2e:a3: 8b:d3:e7:ff:f5:23:60:cc:90:cd:ec:81:6b:14:c7: 42:1e:1b:38:df:35:d0:f5:15:e8:40:a0:d3:19:d0: 10:0b:43:72:f2:0e:a5:a9:4c:db:07:c2:d8:98:33: a8:7c:6d:bf:59:9f:a9:03:2f:f8:32:9c:eb:fd:43: b2:e8:b7:42:2a:7d:d0:b1:3e:36:2a:d0:fb:57:a5: b4:f0:d7:78:89:2f:93:74:cf:63:c7:f2:9e:79:ab: ae:e7:dd:12:c8:c5:6f:99:69:85:d9:10:71:dc:78: ac:e0:6c:14:8d:d9:4b:68:1c:46:c0:11:ba:2f:9e: 6f:46:75:7c:72:27:9f:fb:e1:ff:76:d5:b3:55:c8: da:10:e6:39:2a:34:69:90:8b:24:26:23:b7:17:ec: 26:6e:29:25:5f:80:6d:28:10:27:7d:90:9f:20:20: 57:8f:4c:45:5c:ec:bd:ec:d3:bf:a3:d0:9e:64:08: 25:c7:ff:ea:8d:e0:5f:d6:72:f9:ec:f6:e6:af:9e: 56:9e:b5:16:1d:d0:ee:e5:89:49:4e:c1:d5:09:19: 1e:bf:8a:44:d9:de:69:27:49:3c:c1:2e:67:4e:3c: 0e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:53:0E:CC:D3:BB:30:F5:8C:15:CF:76:1A:C2:72:1D:1D:8A:23:8B X509v3 Authority Key Identifier: keyid:A2:D7:90:24:3E:D6:50:B2:7D:7A:54:EB:D1:6A:DC:68:11:CF:14:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dff0af6a-c680-4731-9b92-9aa93d9c016c/0/A2D790243ED650B27D7A54EBD16ADC6811CF14BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:c5:38:be:ca:83:01:34:45:26:de:bb:a9:12:23:56:90:ab: d5:1b:a1:0d:36:20:2f:da:72:2e:40:75:4c:bf:0f:ab:2c:34: e1:e2:fc:51:b2:cd:85:57:8d:f5:29:a8:09:54:43:34:a9:d7: df:48:53:59:92:0e:65:23:8d:11:44:16:34:e6:e3:99:82:7e: e2:d8:79:ad:66:fe:b1:22:91:b2:26:1d:9c:38:6a:41:dd:53: 19:3a:64:7a:84:cc:ea:d9:a1:af:45:38:9a:8e:ee:7a:b3:af: 62:d9:f7:c8:b1:ac:db:1c:a8:9b:bc:a6:c4:12:50:53:a9:eb: d9:09:fd:79:d6:af:b0:db:e2:71:18:bd:08:5a:1e:4e:c0:73: d5:21:b8:98:18:00:62:3b:0d:f3:95:f1:2f:fb:c4:86:1b:86: f1:0b:f4:33:d8:8d:f9:23:64:ef:71:83:48:7a:5c:ac:e9:d8: 28:c3:f1:a2:13:4a:af:71:c7:84:22:53:a9:fc:6c:e0:28:8e: a9:84:2d:13:f3:4a:b8:9a:d6:85:3a:a4:5b:9b:04:43:7d:44: 2e:ad:88:01:39:32:5a:20:fc:cc:fe:20:6a:5f:62:de:31:f1: db:60:35:b8:fa:65:1c:bd:ca:e6:aa:44:c7:26:46:bd:08:33: 1c:38:97:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeCVG8oOj+FOr6DprJDN7jMOOCN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgx MUNGMTRCRDAeFw0yNjAyMjgxNTQ2MTVaFw0yNjAzMDMxOTQ3MTVaMDMxMTAvBgNV BAMTKDE5NTMwRUNDRDNCQjMwRjU4QzE1Q0Y3NjFBQzI3MjFEMUQ4QTIzOEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1DtaED1HshKsnF0O0/FGEXgrG u3PQDkNtCy8uo4vT5//1I2DMkM3sgWsUx0IeGzjfNdD1FehAoNMZ0BALQ3LyDqWp TNsHwtiYM6h8bb9Zn6kDL/gynOv9Q7Lot0IqfdCxPjYq0PtXpbTw13iJL5N0z2PH 8p55q67n3RLIxW+ZaYXZEHHceKzgbBSN2UtoHEbAEbovnm9GdXxyJ5/74f921bNV yNoQ5jkqNGmQiyQmI7cX7CZuKSVfgG0oECd9kJ8gIFePTEVc7L3s07+j0J5kCCXH /+qN4F/Wcvns9uavnlaetRYd0O7liUlOwdUJGR6/ikTZ3mknSTzBLmdOPA7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGVMOzNO7MPWMFc92GsJyHR2KI4swHwYDVR0j BBgwFoAUoteQJD7WULJ9elTr0WrcaBHPFL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmYwYWY2YS1jNjgwLTQ3MzEtOWI5Mi05YWE5M2Q5YzAxNmMvMC9BMkQ3OTAyNDNF RDY1MEIyN0Q3QTU0RUJEMTZBREM2ODExQ0YxNEJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURDNjgxMUNG MTRCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZmMGFmNmEtYzY4MC00NzMxLTli OTItOWFhOTNkOWMwMTZjLzAvQTJENzkwMjQzRUQ2NTBCMjdEN0E1NEVCRDE2QURD NjgxMUNGMTRCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfFOL7KgwE0RSbeu6kSI1aQq9UboQ02IC/a ci5AdUy/D6ssNOHi/FGyzYVXjfUpqAlUQzSp199IU1mSDmUjjRFEFjTm45mCfuLY ea1m/rEikbImHZw4akHdUxk6ZHqEzOrZoa9FOJqO7nqzr2LZ98ixrNscqJu8psQS UFOp69kJ/XnWr7Db4nEYvQhaHk7Ac9UhuJgYAGI7DfOV8S/7xIYbhvEL9DPYjfkj ZO9xg0h6XKzp2CjD8aITSq9xx4QiU6n8bOAojqmELRPzSria1oU6pFubBEN9RC6t iAE5Mlog/Mz+IGpfYt4x8dtgNbj6ZRy9yuaqRMcmRr0IMxw4l0o= -----END CERTIFICATE-----Generated at Mon Mar 2 18:30:56 2026 by rpki-client