$ rpki-client -vvf repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft File: A532AD36631301388EC939BEB0F099FCDE956410.mft (raw, json) Hash identifier: BMPdo4wE2dNoTaaDKzCWXb3L5Cjk6jsFwQrDZZ8edww= Subject key identifier: AD:C7:FB:C5:93:C2:99:6F:24:BB:E2:12:CC:A0:BA:CD:2B:71:5D:38 Authority key identifier: A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 Certificate issuer: /CN=A532AD36631301388EC939BEB0F099FCDE956410 Certificate serial: 5EE38DA6D15918BE4FF913D2DCDF527E322CF585 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft Manifest number: 04F0 Signing time: Sun 01 Mar 2026 12:41:10 +0000 Manifest this update: Sun 01 Mar 2026 12:36:10 +0000 Manifest next update: Wed 04 Mar 2026 20:03:10 +0000 Files and hashes: 1: A532AD36631301388EC939BEB0F099FCDE956410.crl (hash: r+FQwfm7HlRgimUnLuzEOe+2jbBhIaPupoTdMERFSEo=) 2: 3130332e3135352e3139362e302f32342d3234203d3e20313431303731.roa (hash: 9d7XfsrnfpJJqX9nZsXt1hskjbe4qjeQ8U4bAFN72jc=) 3: 323430363a373634303a3a2f33322d3332203d3e20313431303731.roa (hash: K39s3wS3Vh4TYLX9M09o/p8vacYQJwPBuPPh6URO38M=) 4: 3130332e3135352e3139362e302f32332d3233203d3e20313431303731.roa (hash: HCgC8t5pLbfKkTdfn0NYL/tY86j47b08S0q/IzNGAAA=) 5: 3130332e3135352e3139372e302f32342d3234203d3e20313431303731.roa (hash: giT40O2wWmvxV65/dwsGgg901Qzr1+BEnGc0lAnFIDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 20:03:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:e3:8d:a6:d1:59:18:be:4f:f9:13:d2:dc:df:52:7e:32:2c:f5:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A532AD36631301388EC939BEB0F099FCDE956410 Validity Not Before: Mar 1 12:36:10 2026 GMT Not After : Mar 4 20:03:10 2026 GMT Subject: CN=ADC7FBC593C2996F24BBE212CCA0BACD2B715D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:28:70:9a:45:2e:81:62:7b:5f:1a:1f:bb:01: 04:c7:0a:90:27:a6:c3:0f:00:f2:b1:01:83:6b:2e: 2e:4a:06:1f:60:ff:0d:fd:8b:84:ef:cd:47:c5:18: ba:8f:40:d4:e9:bb:77:7e:fe:5b:ec:ea:98:5b:0a: 4c:89:1a:a9:ef:70:c2:fe:f8:70:97:af:c8:5d:3f: 7a:05:b1:0e:0a:b7:25:a2:61:64:f9:6a:25:a7:6c: 52:f3:45:7c:2d:68:0d:b8:94:f9:bd:f2:86:db:68: 70:68:5d:de:05:23:54:74:c9:84:17:ed:49:ed:85: 26:cb:4d:57:3b:27:a8:a6:7e:47:50:a9:ed:ed:76: e4:2d:9e:5c:9e:97:f8:80:77:d3:f5:89:26:42:64: c8:8d:d7:a4:78:ad:24:46:3f:d7:62:cd:e6:f5:62: fe:ca:43:ef:c8:eb:ed:94:51:85:d7:ae:c9:73:4f: e5:bd:e0:52:8c:b2:56:44:59:fc:43:91:ce:29:0b: 5b:6f:7a:62:c7:d5:65:fc:5a:a3:58:d7:7b:a1:4b: 87:22:03:ec:d3:2a:82:c0:4b:09:10:35:d0:02:43: e8:31:58:e7:eb:0c:5c:5a:36:e0:40:8c:f2:8d:68: 13:5e:13:6c:15:43:bf:bb:6f:a1:70:65:4a:ed:d6: cb:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:C7:FB:C5:93:C2:99:6F:24:BB:E2:12:CC:A0:BA:CD:2B:71:5D:38 X509v3 Authority Key Identifier: keyid:A5:32:AD:36:63:13:01:38:8E:C9:39:BE:B0:F0:99:FC:DE:95:64:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A532AD36631301388EC939BEB0F099FCDE956410.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9ce0c94-0d6c-45b3-aac6-34d0ce9b1f08/0/A532AD36631301388EC939BEB0F099FCDE956410.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:4c:84:87:28:11:e4:0c:41:25:47:52:ce:84:d5:1b:2a:8e: 56:a6:69:d1:0e:53:2f:0a:f7:af:a0:e2:e3:ba:cf:ba:04:df: d8:c4:88:f9:ae:dd:4e:30:84:8f:da:1d:44:d0:48:d6:da:ec: 4b:65:69:c4:4e:4b:d7:93:f5:6a:b6:14:e3:fb:b2:9d:d8:3b: 27:4b:d2:19:6c:f0:2e:6e:58:5f:04:5c:5c:69:2f:d8:06:7a: 9c:99:4c:20:37:a0:49:04:15:af:c7:48:d3:0b:70:89:df:32: 46:12:54:d6:5d:c8:d5:1a:b5:08:e4:9d:31:66:b5:27:b3:ef: 2c:68:ba:54:4f:5c:e1:82:23:a1:69:1f:13:f5:71:fd:d0:db: 9b:c1:8c:d5:99:a8:f7:38:ae:75:cd:2e:71:9a:5d:2e:bb:50: fd:d2:73:c7:bb:c5:54:33:03:36:db:6b:1e:22:45:be:9a:3f: 8a:ee:7b:0e:28:35:cb:d5:cf:81:f7:8c:ac:ba:9a:3d:7b:f1: f8:04:a9:6f:ec:53:86:f2:8e:34:dd:9c:3f:17:04:19:12:14: 97:a5:15:85:74:b1:58:34:eb:ed:62:f4:b0:41:a5:ee:4e:ba: ce:1e:65:e8:e1:43:b1:d9:93:4a:bc:ba:b5:57:20:db:c5:f3: 36:2f:27:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXuONptFZGL5P+RPS3N9SfjIs9YUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNE RTk1NjQxMDAeFw0yNjAzMDExMjM2MTBaFw0yNjAzMDQyMDAzMTBaMDMxMTAvBgNV BAMTKEFEQzdGQkM1OTNDMjk5NkYyNEJCRTIxMkNDQTBCQUNEMkI3MTVEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfKHCaRS6BYntfGh+7AQTHCpAn psMPAPKxAYNrLi5KBh9g/w39i4TvzUfFGLqPQNTpu3d+/lvs6phbCkyJGqnvcML+ +HCXr8hdP3oFsQ4KtyWiYWT5aiWnbFLzRXwtaA24lPm98obbaHBoXd4FI1R0yYQX 7UnthSbLTVc7J6imfkdQqe3tduQtnlyel/iAd9P1iSZCZMiN16R4rSRGP9dizeb1 Yv7KQ+/I6+2UUYXXrslzT+W94FKMslZEWfxDkc4pC1tvemLH1WX8WqNY13uhS4ci A+zTKoLASwkQNdACQ+gxWOfrDFxaNuBAjPKNaBNeE2wVQ7+7b6FwZUrt1surAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrcf7xZPCmW8ku+ISzKC6zStxXTgwHwYDVR0j BBgwFoAUpTKtNmMTATiOyTm+sPCZ/N6VZBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m OWNlMGM5NC0wZDZjLTQ1YjMtYWFjNi0zNGQwY2U5YjFmMDgvMC9BNTMyQUQzNjYz MTMwMTM4OEVDOTM5QkVCMEYwOTlGQ0RFOTU2NDEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5RkNERTk1 NjQxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjljZTBjOTQtMGQ2Yy00NWIzLWFh YzYtMzRkMGNlOWIxZjA4LzAvQTUzMkFEMzY2MzEzMDEzODhFQzkzOUJFQjBGMDk5 RkNERTk1NjQxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBMhIcoEeQMQSVHUs6E1RsqjlamadEOUy8K 96+g4uO6z7oE39jEiPmu3U4whI/aHUTQSNba7EtlacROS9eT9Wq2FOP7sp3YOydL 0hls8C5uWF8EXFxpL9gGepyZTCA3oEkEFa/HSNMLcInfMkYSVNZdyNUatQjknTFm tSez7yxoulRPXOGCI6FpHxP1cf3Q25vBjNWZqPc4rnXNLnGaXS67UP3Sc8e7xVQz Azbbax4iRb6aP4ruew4oNcvVz4H3jKy6mj178fgEqW/sU4byjjTdnD8XBBkSFJel FYV0sVg06+1i9LBBpe5Ous4eZejhQ7HZk0q8urVXINvF8zYvJ4I= -----END CERTIFICATE-----Generated at Mon Mar 2 13:05:56 2026 by rpki-client