$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: 9j1+GzdJnqrcr7BUxeVbosW9KCC7ZN6VN/gcqPYRRj4= Subject key identifier: FA:E9:C4:CA:77:65:F4:71:36:9C:44:5D:AF:8E:41:C8:05:4D:11:56 Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 341E02DBBA39F0A2EB0B912AF42A3402F13A01F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: 0106 Signing time: Thu 16 Apr 2026 15:11:46 +0000 Manifest this update: Thu 16 Apr 2026 15:06:46 +0000 Manifest next update: Sun 19 Apr 2026 18:50:46 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: Fz0gforwNeptsap43+zmStu2ZLYdZxJ+3J6Rl5qLlCU=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 18:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:1e:02:db:ba:39:f0:a2:eb:0b:91:2a:f4:2a:34:02:f1:3a:01:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Apr 16 15:06:46 2026 GMT Not After : Apr 19 18:50:46 2026 GMT Subject: CN=FAE9C4CA7765F471369C445DAF8E41C8054D1156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:e4:7e:2c:7f:7e:3b:77:c9:5b:06:66:4a:cd: fe:5f:36:67:12:f5:ef:95:67:76:a2:bb:5a:02:b1: a2:0b:56:f0:31:fc:56:e2:df:c3:d3:04:b0:db:f2: ee:7b:4e:61:3d:5a:5d:61:4c:b6:e7:79:ed:f3:2b: 9e:fb:4c:8c:f2:61:95:ca:e7:6c:35:3f:11:f4:8f: a2:40:7f:08:09:0b:99:0a:b9:2f:35:b8:7b:3b:e7: b9:39:85:09:5d:19:d7:98:8d:53:9d:2b:b0:a6:e9: 5d:66:36:8d:58:b3:87:73:1a:15:39:45:0d:86:f9: 6a:25:5e:73:4a:b2:9b:00:19:03:f0:bd:49:ff:5b: 1b:ae:84:de:80:6d:ae:ff:53:96:ba:5f:eb:e9:a8: 9a:74:df:3f:f7:1f:4b:a6:ef:5e:45:bb:ae:de:3d: 55:73:a3:4b:67:d5:8d:29:2b:60:19:d5:25:94:76: 98:7f:b2:5c:61:a3:8e:07:f6:87:fd:98:4f:28:2b: cf:05:52:7e:93:35:75:f0:9e:5b:b3:e4:32:a3:6c: 27:3b:35:84:11:8e:25:76:0b:6c:46:3c:8c:bd:df: b7:77:d6:7b:49:c2:5e:4e:e5:cd:4a:db:88:46:b7: f2:1c:53:11:33:4e:e0:85:7a:f3:24:bd:4b:ae:53: ab:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:E9:C4:CA:77:65:F4:71:36:9C:44:5D:AF:8E:41:C8:05:4D:11:56 X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:ac:56:0f:02:1f:1e:b9:87:9e:e9:1d:cd:70:44:56:4c:78: f5:6e:39:ad:34:93:95:3e:e7:1e:9a:36:49:ce:bc:46:1d:15: 9d:a3:19:99:d6:aa:b4:06:f0:1a:27:66:ad:10:7a:4c:36:8d: 2b:83:2e:0e:02:cf:5f:a2:94:29:97:29:b6:08:32:25:36:44: f6:9c:25:27:8a:99:d1:57:c3:68:6b:77:d7:9f:94:15:f9:39: 48:18:f2:b1:55:6d:4e:81:38:21:bd:dd:7a:57:0b:b6:78:34: c6:51:f7:50:c2:50:e2:3e:ff:60:74:ec:8d:93:55:7d:21:aa: 35:8a:36:00:fc:63:81:39:53:df:d4:97:d6:2d:62:74:cf:5d: 4a:d8:c5:59:74:65:8d:27:19:9e:05:4b:0f:93:c6:4f:43:66: 9b:a3:eb:ee:53:db:1c:e7:3e:d7:59:9f:72:e3:54:89:5f:65: 06:df:c4:32:01:f9:fd:11:3c:b5:3d:bb:a2:bd:f8:37:9a:a7: 88:cf:ee:b6:88:8e:15:69:0d:fa:ff:96:fd:81:90:31:d6:a3: e2:c5:19:45:87:79:22:07:71:d4:4f:33:51:b5:ce:ff:5c:ed: df:9b:28:3f:40:f0:ee:ee:65:c4:03:b2:1b:3f:a7:00:dc:39: 8b:18:e2:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNB4C27o58KLrC5Eq9Co0AvE6AfYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNjA0MTYxNTA2NDZaFw0yNjA0MTkxODUwNDZaMDMxMTAvBgNV BAMTKEZBRTlDNENBNzc2NUY0NzEzNjlDNDQ1REFGOEU0MUM4MDU0RDExNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCW5H4sf347d8lbBmZKzf5fNmcS 9e+VZ3aiu1oCsaILVvAx/Fbi38PTBLDb8u57TmE9Wl1hTLbnee3zK577TIzyYZXK 52w1PxH0j6JAfwgJC5kKuS81uHs757k5hQldGdeYjVOdK7Cm6V1mNo1Ys4dzGhU5 RQ2G+WolXnNKspsAGQPwvUn/WxuuhN6Aba7/U5a6X+vpqJp03z/3H0um715Fu67e PVVzo0tn1Y0pK2AZ1SWUdph/slxho44H9of9mE8oK88FUn6TNXXwnluz5DKjbCc7 NYQRjiV2C2xGPIy937d31ntJwl5O5c1K24hGt/IcUxEzTuCFevMkvUuuU6tXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+unEyndl9HE2nERdr45ByAVNEVYwHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAACsVg8CHx65h57pHc1wRFZMePVuOa00k5U+ 5x6aNknOvEYdFZ2jGZnWqrQG8BonZq0Qekw2jSuDLg4Cz1+ilCmXKbYIMiU2RPac JSeKmdFXw2hrd9eflBX5OUgY8rFVbU6BOCG93XpXC7Z4NMZR91DCUOI+/2B07I2T VX0hqjWKNgD8Y4E5U9/Ul9YtYnTPXUrYxVl0ZY0nGZ4FSw+Txk9DZpuj6+5T2xzn PtdZn3LjVIlfZQbfxDIB+f0RPLU9u6K9+Deap4jP7raIjhVpDfr/lv2BkDHWo+LF GUWHeSIHcdRPM1G1zv9c7d+bKD9A8O7uZcQDshs/pwDcOYsY4v8= -----END CERTIFICATE-----Generated at Fri Apr 17 12:56:48 2026 by rpki-client