$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: Z4TBcn0IGP15OyCRLOIPoayxU2h2qMbMSwCelacgV0g= Subject key identifier: 09:B9:5B:44:E1:0D:EA:02:29:FD:09:A8:E5:9B:CB:F5:4E:00:0F:3D Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 0FF2F4CF4667149B282E8746B4160D9A88828AE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 028B Signing time: Sat 28 Feb 2026 18:02:03 +0000 Manifest this update: Sat 28 Feb 2026 17:57:03 +0000 Manifest next update: Tue 03 Mar 2026 19:43:03 +0000 Files and hashes: 1: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 2: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: s4bRuoSPh+d9+JQeUE0z9VtoZZvG+/npXHi67oywqH8=) 3: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 4: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 19:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:f2:f4:cf:46:67:14:9b:28:2e:87:46:b4:16:0d:9a:88:82:8a:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Feb 28 17:57:03 2026 GMT Not After : Mar 3 19:43:03 2026 GMT Subject: CN=09B95B44E10DEA0229FD09A8E59BCBF54E000F3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:39:7b:28:69:21:d6:9d:35:9c:92:9f:5f:ec: 15:82:28:4a:f0:d3:1b:2f:73:cd:6b:3d:49:ec:92: 8e:b7:f3:0d:41:59:f1:51:8a:7a:02:e3:16:77:3d: f8:99:64:6d:1a:f1:d0:84:a5:8e:a8:e3:0e:cb:a9: 75:8c:8a:50:ea:6d:e0:e8:21:b3:7e:28:71:fd:b4: 4a:4e:b8:31:6d:d7:4b:cb:43:21:fc:f0:21:0d:5e: 0e:44:95:62:4d:57:64:fb:f7:1c:1c:61:28:5c:80: 43:72:60:bc:9c:3d:b4:07:3b:46:b5:68:bb:db:11: 95:56:36:76:c1:8b:ef:88:01:bd:91:be:38:f1:4c: c9:e2:da:6e:de:8e:2c:0c:1b:95:b5:a5:c1:b4:28: 78:1a:51:a5:e0:80:5c:80:69:a6:2e:f9:63:dc:04: 46:ee:d9:d8:5e:f5:f9:29:78:cf:19:8c:c2:d5:10: 35:c6:04:16:c9:e2:fe:a8:e0:83:2a:73:c8:f5:f8: 6e:f5:0d:a1:7e:b6:63:ba:e2:b1:1f:32:3c:4c:55: 1c:06:69:a6:97:51:83:a2:34:52:0f:dc:9c:b2:0d: 5f:c6:f1:48:79:67:e1:89:db:f1:52:6c:7b:ef:36: d5:69:9b:f7:03:b9:14:d4:8d:27:4e:d3:33:57:2a: c4:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:B9:5B:44:E1:0D:EA:02:29:FD:09:A8:E5:9B:CB:F5:4E:00:0F:3D X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:10:09:46:dc:a2:65:27:6e:5e:9b:69:af:5e:df:56:f6:eb: af:28:93:45:00:b4:a4:8e:6a:12:55:44:31:a0:ae:e9:d6:35: bf:93:eb:90:ff:58:e9:6c:7e:54:71:66:69:9d:77:88:fe:28: 08:5f:59:04:47:e4:ea:64:e7:9b:8b:4c:7c:21:e4:ea:28:12: 09:d1:7c:dc:67:ae:e8:b1:da:d2:b2:75:30:81:72:8d:98:7f: a3:70:e4:8c:60:82:52:19:a1:b3:b1:e4:0c:67:b4:2d:ef:b7: d0:9c:b8:fb:0a:26:7e:e9:ca:bb:84:7f:09:2b:8a:5e:95:4b: 8b:df:7c:0d:21:ee:25:8d:e6:87:0e:fd:aa:59:cd:8c:da:ea: b8:19:92:28:fb:69:1e:13:a4:d1:70:75:e0:a8:a7:74:63:ed: c0:41:de:37:79:be:61:39:82:a5:17:de:58:1f:5c:4b:db:6a: a3:a9:b1:bb:99:1f:45:91:40:48:8d:19:35:c0:ac:b2:b3:47: 71:46:f1:49:3f:20:17:cb:ef:10:21:08:ea:5c:26:ec:f3:e4: 6d:28:c1:4a:6f:16:ea:90:bf:34:70:5b:e9:45:c1:ea:c5:41: 65:9e:aa:7e:6b:39:32:7f:1d:62:39:a7:3b:6f:ca:d0:20:84: 54:a4:22:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD/L0z0ZnFJsoLodGtBYNmoiCiugwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNjAyMjgxNzU3MDNaFw0yNjAzMDMxOTQzMDNaMDMxMTAvBgNV BAMTKDA5Qjk1QjQ0RTEwREVBMDIyOUZEMDlBOEU1OUJDQkY1NEUwMDBGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpOXsoaSHWnTWckp9f7BWCKErw 0xsvc81rPUnsko638w1BWfFRinoC4xZ3PfiZZG0a8dCEpY6o4w7LqXWMilDqbeDo IbN+KHH9tEpOuDFt10vLQyH88CENXg5ElWJNV2T79xwcYShcgENyYLycPbQHO0a1 aLvbEZVWNnbBi++IAb2RvjjxTMni2m7ejiwMG5W1pcG0KHgaUaXggFyAaaYu+WPc BEbu2dhe9fkpeM8ZjMLVEDXGBBbJ4v6o4IMqc8j1+G71DaF+tmO64rEfMjxMVRwG aaaXUYOiNFIP3JyyDV/G8Uh5Z+GJ2/FSbHvvNtVpm/cDuRTUjSdO0zNXKsQtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCblbROEN6gIp/Qmo5ZvL9U4ADz0wHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGkQCUbcomUnbl6baa9e31b2668ok0UAtKSO ahJVRDGgrunWNb+T65D/WOlsflRxZmmdd4j+KAhfWQRH5Opk55uLTHwh5OooEgnR fNxnruix2tKydTCBco2Yf6Nw5IxgglIZobOx5AxntC3vt9CcuPsKJn7pyruEfwkr il6VS4vffA0h7iWN5ocO/apZzYza6rgZkij7aR4TpNFwdeCop3Rj7cBB3jd5vmE5 gqUX3lgfXEvbaqOpsbuZH0WRQEiNGTXArLKzR3FG8Uk/IBfL7xAhCOpcJuzz5G0o wUpvFuqQvzRwW+lFwerFQWWeqn5rOTJ/HWI5pztvytAghFSkIoI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:17:57 2026 by rpki-client