$ rpki-client -vvf repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft File: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft (raw, json) Hash identifier: VPp5YbH+/woSc7YEIIFSKgKcvqmkbXPjPoZkjRplSlM= Subject key identifier: B6:02:09:CD:C8:AF:26:53:8F:0A:D0:F8:3D:88:6A:D4:E4:84:E3:26 Authority key identifier: AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 Certificate issuer: /CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Certificate serial: 34745910A7E6A3207290BFCC9C5F30249D3F1594 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft Manifest number: 010A Signing time: Sun 01 Mar 2026 08:02:17 +0000 Manifest this update: Sun 01 Mar 2026 07:57:17 +0000 Manifest next update: Wed 04 Mar 2026 15:30:17 +0000 Files and hashes: 1: 3136302e32352e3137352e302f32342d3234203d3e20313533303733.roa (hash: 1GdsDMn9IlNA2FNYR2FdTgcFsp12pZf8bJqQ9ss5+PA=) 2: 3136302e32352e3137342e302f32342d3234203d3e20313533303733.roa (hash: 9HcMn3I4XGR9gCZZPwjQDGBo7tgZN5G+yM9cxbzNmtk=) 3: AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl (hash: 9bjgbUFeQ7T2cR5IAHHxy5m3Mqj0mbdE+0jVBfKRlwA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:30:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:74:59:10:a7:e6:a3:20:72:90:bf:cc:9c:5f:30:24:9d:3f:15:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93 Validity Not Before: Mar 1 07:57:17 2026 GMT Not After : Mar 4 15:30:17 2026 GMT Subject: CN=B60209CDC8AF26538F0AD0F83D886AD4E484E326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:4d:56:52:b3:d3:67:78:4b:93:48:6b:4d:4c: b9:b7:0a:53:08:24:27:d8:de:75:06:ed:aa:14:2f: 95:ec:53:80:6d:3c:4b:43:4c:98:fe:3d:2a:25:7f: 7e:81:bc:b3:d1:91:3e:86:6c:a6:d9:53:be:75:ab: 1e:7e:2a:b3:85:9b:a7:c5:15:ca:a8:84:66:0c:ff: 7a:f6:68:cf:99:87:78:11:cd:b9:c4:ac:03:f5:44: 3c:29:ba:fe:07:41:b3:91:24:26:43:9b:f5:db:54: 2e:9a:e8:10:7c:e9:ad:88:a6:1f:40:a0:95:5f:6f: 19:b2:29:9a:6d:97:ee:eb:86:4e:49:13:9f:04:15: c3:c1:97:ef:74:a5:6a:6b:14:5d:7b:11:cb:b9:86: e7:e7:98:28:e3:5f:f1:8d:dd:08:1b:2e:30:f7:44: 70:c8:a7:3a:99:a4:c4:47:19:3a:16:ed:f1:7a:4c: e6:3f:e1:68:8a:a8:4b:79:ba:b3:8e:76:28:bc:01: c2:62:f9:01:94:f9:bc:ef:88:a9:63:69:f6:25:f8: d5:5d:c5:50:42:f4:de:a3:9d:10:7b:4e:d4:26:9e: 8f:ff:69:02:01:8f:05:dc:b9:fb:ab:d8:fe:1d:2e: 93:5e:f8:d0:de:5f:02:53:ec:e9:91:cb:b7:28:c0: 20:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:02:09:CD:C8:AF:26:53:8F:0A:D0:F8:3D:88:6A:D4:E4:84:E3:26 X509v3 Authority Key Identifier: keyid:AA:72:76:8F:DD:0C:61:5A:05:E4:A3:2A:06:F9:CC:B5:CA:7E:0D:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec72ee3c-e180-4296-9dad-9500efd94890/0/AA72768FDD0C615A05E4A32A06F9CCB5CA7E0D93.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:6b:63:42:0b:c0:62:30:1b:5d:0d:9e:1a:95:70:28:b8: 5e:1c:78:ed:8b:63:13:9c:e1:8e:80:55:8e:75:eb:2c:77:4f: 21:9c:0a:5c:0b:20:87:02:bf:b5:7f:1b:bb:33:52:17:d2:5b: a6:3b:5e:e3:9d:47:3b:d3:b0:ae:63:12:79:5a:d7:ac:36:a0: 74:e7:3d:f9:e3:03:a1:a8:ee:eb:f5:0f:00:9f:70:4f:39:3a: a4:f9:24:56:ec:ee:4a:65:ba:8b:6a:0c:1e:62:f5:d8:64:c4: 96:1c:37:69:e1:bf:4e:c1:eb:6e:2d:54:6b:54:f4:41:98:7b: c0:b2:78:c7:0e:27:fb:1a:a3:97:dd:1c:d0:85:12:c2:99:62: 46:98:80:89:ca:78:6d:3c:f4:68:b6:ca:0f:0a:c6:d3:30:c9: e6:01:3e:08:be:4e:8e:a1:1c:8d:7c:d1:5c:94:30:3d:64:fa: c4:c9:78:a2:66:3a:8b:9c:bb:a1:60:48:21:4e:65:aa:1c:b3: 65:42:b1:e4:73:6e:c0:39:36:34:f1:14:f7:a3:a9:2d:20:df: 8a:0a:1e:06:78:fe:27:07:65:84:8f:65:dd:d6:59:04:71:e0: b7:64:49:52:69:68:20:6a:52:df:d8:b5:9e:00:b6:fc:95:c3: cf:ed:68:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNHRZEKfmoyBykL/MnF8wJJ0/FZQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVD QTdFMEQ5MzAeFw0yNjAzMDEwNzU3MTdaFw0yNjAzMDQxNTMwMTdaMDMxMTAvBgNV BAMTKEI2MDIwOUNEQzhBRjI2NTM4RjBBRDBGODNEODg2QUQ0RTQ4NEUzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiTVZSs9NneEuTSGtNTLm3ClMI JCfY3nUG7aoUL5XsU4BtPEtDTJj+PSolf36BvLPRkT6GbKbZU751qx5+KrOFm6fF FcqohGYM/3r2aM+Zh3gRzbnErAP1RDwpuv4HQbORJCZDm/XbVC6a6BB86a2Iph9A oJVfbxmyKZptl+7rhk5JE58EFcPBl+90pWprFF17Ecu5hufnmCjjX/GN3QgbLjD3 RHDIpzqZpMRHGToW7fF6TOY/4WiKqEt5urOOdii8AcJi+QGU+bzviKljafYl+NVd xVBC9N6jnRB7TtQmno//aQIBjwXcufur2P4dLpNe+NDeXwJT7OmRy7cowCBbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtgIJzcivJlOPCtD4PYhq1OSE4yYwHwYDVR0j BBgwFoAUqnJ2j90MYVoF5KMqBvnMtcp+DZMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YzcyZWUzYy1lMTgwLTQyOTYtOWRhZC05NTAwZWZkOTQ4OTAvMC9BQTcyNzY4RkRE MEM2MTVBMDVFNEEzMkEwNkY5Q0NCNUNBN0UwRDkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUNDQjVDQTdF MEQ5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM3MmVlM2MtZTE4MC00Mjk2LTlk YWQtOTUwMGVmZDk0ODkwLzAvQUE3Mjc2OEZERDBDNjE1QTA1RTRBMzJBMDZGOUND QjVDQTdFMEQ5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAva2NCC8BiMBtdDZ4alXAouF4ceO2LYxOc 4Y6AVY516yx3TyGcClwLIIcCv7V/G7szUhfSW6Y7XuOdRzvTsK5jEnla16w2oHTn PfnjA6Go7uv1DwCfcE85OqT5JFbs7kpluotqDB5i9dhkxJYcN2nhv07B624tVGtU 9EGYe8CyeMcOJ/sao5fdHNCFEsKZYkaYgInKeG089Gi2yg8KxtMwyeYBPgi+To6h HI180VyUMD1k+sTJeKJmOoucu6FgSCFOZaocs2VCseRzbsA5NjTxFPejqS0g34oK HgZ4/icHZYSPZd3WWQRx4LdkSVJpaCBqUt/YtZ4AtvyVw8/taB0= -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:00 2026 by rpki-client