$ rpki-client -vvf repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft File: A781200DA8EA5D34C742642B1E502D67A5B2279E.mft (raw, json) Hash identifier: pdKiCEdPXJJS0RvvmmFJLC1enW/yhlBjx+su+bTJyQY= Subject key identifier: 3B:73:40:CB:D6:FC:81:8C:84:68:04:6E:5D:11:68:DA:19:BE:8F:69 Authority key identifier: A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E Certificate issuer: /CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Certificate serial: 2A1200E4EDC4A58F83FA09910BEBC95BC61DAB76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft Manifest number: 022E Signing time: Sun 01 Mar 2026 02:40:48 +0000 Manifest this update: Sun 01 Mar 2026 02:35:48 +0000 Manifest next update: Wed 04 Mar 2026 05:20:48 +0000 Files and hashes: 1: 3230322e35312e3139382e302f32342d3234203d3e203130323230.roa (hash: INN9h8serr/CQ6jBqp1R8d307W4fR88s0fl4Gzwo2gU=) 2: 3130332e3231352e31362e302f32342d3234203d3e203634303331.roa (hash: iTXijEjQts+GxMwVGkPiv33W0uV/9tdMEiAqMwI4dno=) 3: 3130332e3231352e31392e302f32342d3234203d3e203634303331.roa (hash: ye+cYX2bhxXPeuSvU8p0xT1eC4Vs1OuUE3wcpd1xNMY=) 4: A781200DA8EA5D34C742642B1E502D67A5B2279E.crl (hash: EXZwqZpHSysREw+W8o44dcdcDYQRmkoBrYGeDimzVKk=) 5: 3230322e35312e3231342e302f32342d3234203d3e203130323230.roa (hash: XAE8gjNY+boQayyymijM/NO8daFcdyz78y1MThdC1do=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:20:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:12:00:e4:ed:c4:a5:8f:83:fa:09:91:0b:eb:c9:5b:c6:1d:ab:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A781200DA8EA5D34C742642B1E502D67A5B2279E Validity Not Before: Mar 1 02:35:48 2026 GMT Not After : Mar 4 05:20:48 2026 GMT Subject: CN=3B7340CBD6FC818C8468046E5D1168DA19BE8F69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6e:82:c5:45:8e:64:a6:13:ec:14:be:fe:01: 37:c0:f5:23:79:43:0d:40:98:3b:66:87:b8:04:41: 1f:ac:c9:39:46:f0:bb:86:81:42:fc:de:8d:16:c6: 32:6a:3e:1e:2f:df:2e:fd:fd:4d:ff:2d:3b:68:f1: d2:92:7d:ac:0a:5d:4e:68:f8:cf:1e:66:d1:1c:fe: 2d:5f:9c:cd:78:dc:6a:96:93:4d:48:09:0d:87:47: 66:1c:84:d2:41:29:49:7b:65:d1:4b:e7:92:aa:e9: 69:8b:34:a0:98:73:85:a7:89:b8:0b:03:bf:d1:8a: 53:ca:8d:66:50:77:7c:6b:7f:d9:df:82:30:39:74: 18:a5:55:5e:97:1f:67:bd:98:54:31:36:38:f6:3f: 0c:c6:de:1b:a2:d5:00:b6:f1:a6:be:91:9e:a5:af: 45:69:d7:d0:d2:8b:2c:05:c9:29:b4:49:02:1e:cc: ea:f4:44:bf:07:57:c0:ba:25:05:96:4f:87:76:f0: 9a:15:1d:42:e1:ae:d0:12:2d:4c:6b:f5:60:99:5e: dc:a5:54:cd:ca:f4:44:53:c7:1e:f3:94:20:ec:19: 7a:4b:fd:c2:19:3e:94:04:8c:7b:2e:7d:24:d1:2d: 95:09:e3:bf:7a:45:8a:cb:07:b3:88:11:88:35:3d: 64:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:73:40:CB:D6:FC:81:8C:84:68:04:6E:5D:11:68:DA:19:BE:8F:69 X509v3 Authority Key Identifier: keyid:A7:81:20:0D:A8:EA:5D:34:C7:42:64:2B:1E:50:2D:67:A5:B2:27:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A781200DA8EA5D34C742642B1E502D67A5B2279E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed70cc37-1fa6-4fa0-a88c-408aed28d9aa/0/A781200DA8EA5D34C742642B1E502D67A5B2279E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:c8:01:7e:9f:c9:a2:89:ab:60:64:89:a2:cf:5f:f7:25:ac: 92:d2:3e:08:3d:60:11:db:f5:f5:44:0f:09:23:92:a5:e0:bd: 03:bf:d8:c1:3a:d7:8b:7f:4f:48:10:95:2a:74:ed:d3:cb:94: 5b:23:fd:44:8a:b1:c8:0f:f5:ab:90:f0:69:0a:7a:5e:49:8a: 99:5a:23:49:fe:1f:2e:ab:43:49:2c:0b:0a:74:76:1f:27:ec: fd:aa:97:8b:d5:51:d3:48:17:26:c5:18:57:90:a0:3c:50:11: 7d:0b:11:b7:bc:4e:10:b9:3d:1c:da:e4:70:91:07:89:74:8c: b0:e5:70:92:e0:9d:03:bb:0c:d0:8e:a1:ba:69:d1:0e:7f:48: 41:77:64:01:0f:98:8a:b5:54:e3:49:68:43:60:ef:a9:68:ee: 95:87:62:3e:c0:0a:6e:18:8c:54:1c:cf:b8:f7:3f:c1:d8:de: 86:c1:b7:72:c4:eb:57:d1:12:97:b5:e2:95:1c:91:fb:5e:56: b9:40:5e:da:d0:b9:18:27:66:3f:06:66:b3:15:2b:a2:29:e9: 16:30:c8:76:45:7e:83:18:6e:2a:0b:56:f6:78:0b:a1:ef:09: 10:37:e6:1c:c8:ab:d6:83:91:99:92:72:1e:5b:ea:37:ce:eb: 0d:6f:4b:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKhIA5O3EpY+D+gmRC+vJW8Ydq3YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdB NUIyMjc5RTAeFw0yNjAzMDEwMjM1NDhaFw0yNjAzMDQwNTIwNDhaMDMxMTAvBgNV BAMTKDNCNzM0MENCRDZGQzgxOEM4NDY4MDQ2RTVEMTE2OERBMTlCRThGNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4boLFRY5kphPsFL7+ATfA9SN5 Qw1AmDtmh7gEQR+syTlG8LuGgUL83o0WxjJqPh4v3y79/U3/LTto8dKSfawKXU5o +M8eZtEc/i1fnM143GqWk01ICQ2HR2YchNJBKUl7ZdFL55Kq6WmLNKCYc4WnibgL A7/RilPKjWZQd3xrf9nfgjA5dBilVV6XH2e9mFQxNjj2PwzG3hui1QC28aa+kZ6l r0Vp19DSiywFySm0SQIezOr0RL8HV8C6JQWWT4d28JoVHULhrtASLUxr9WCZXtyl VM3K9ERTxx7zlCDsGXpL/cIZPpQEjHsufSTRLZUJ4796RYrLB7OIEYg1PWQnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO3NAy9b8gYyEaARuXRFo2hm+j2kwHwYDVR0j BBgwFoAUp4EgDajqXTTHQmQrHlAtZ6WyJ54wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZDcwY2MzNy0xZmE2LTRmYTAtYTg4Yy00MDhhZWQyOGQ5YWEvMC9BNzgxMjAwREE4 RUE1RDM0Qzc0MjY0MkIxRTUwMkQ2N0E1QjIyNzlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJENjdBNUIy Mjc5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWQ3MGNjMzctMWZhNi00ZmEwLWE4 OGMtNDA4YWVkMjhkOWFhLzAvQTc4MTIwMERBOEVBNUQzNEM3NDI2NDJCMUU1MDJE NjdBNUIyMjc5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzIAX6fyaKJq2BkiaLPX/clrJLSPgg9YBHb 9fVEDwkjkqXgvQO/2ME614t/T0gQlSp07dPLlFsj/USKscgP9auQ8GkKel5Jipla I0n+Hy6rQ0ksCwp0dh8n7P2ql4vVUdNIFybFGFeQoDxQEX0LEbe8ThC5PRza5HCR B4l0jLDlcJLgnQO7DNCOobpp0Q5/SEF3ZAEPmIq1VONJaENg76lo7pWHYj7ACm4Y jFQcz7j3P8HY3obBt3LE61fREpe14pUckfteVrlAXtrQuRgnZj8GZrMVK6Ip6RYw yHZFfoMYbioLVvZ4C6HvCRA35hzIq9aDkZmSch5b6jfO6w1vS9A= -----END CERTIFICATE-----Generated at Mon Mar 2 11:22:43 2026 by rpki-client