$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: hFSgo4AeVcsfz7pCz4p9ska0XRiWnlDnrbq79Czxx8c= Subject key identifier: C8:C9:C0:77:4C:A8:01:88:E3:CC:CA:A7:ED:2C:3B:F9:BD:D1:45:D3 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 21259EE14F76048A9A144474181D0234707BD506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 02A0 Signing time: Thu 16 Apr 2026 11:32:05 +0000 Manifest this update: Thu 16 Apr 2026 11:27:05 +0000 Manifest next update: Sun 19 Apr 2026 20:03:05 +0000 Files and hashes: 1: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 2: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: RxMOzyZqEtlfVF9bmmJ+OzE3quPoVuRLn77EkMlPa8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 20:03:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:25:9e:e1:4f:76:04:8a:9a:14:44:74:18:1d:02:34:70:7b:d5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Apr 16 11:27:05 2026 GMT Not After : Apr 19 20:03:05 2026 GMT Subject: CN=C8C9C0774CA80188E3CCCAA7ED2C3BF9BDD145D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:98:54:93:0b:8a:d3:64:66:32:5f:ea:37:58: bd:f1:20:95:dc:2b:19:39:47:70:42:15:76:0e:58: c7:79:3f:8f:ec:21:1e:82:9f:28:f9:e1:fb:5b:7c: 2b:a1:bd:66:5d:63:37:bc:d6:4c:fa:c6:e4:75:e6: 79:f2:d0:3e:02:c2:e5:c9:39:4e:e0:26:53:b1:16: cb:36:40:d5:06:23:b6:4e:eb:dd:0c:6e:d1:b6:f8: 88:d0:37:15:06:2a:4c:99:4b:7a:a2:1b:6b:12:55: d7:6c:2a:93:08:56:af:f1:64:8d:ef:76:01:c5:d1: 7e:f7:ad:54:29:8a:12:a2:d9:bc:3d:0a:19:0f:23: 93:fc:c8:37:60:f9:96:e6:32:df:71:1f:e9:68:3e: 85:76:f5:58:2d:a0:62:0d:60:33:33:66:3f:43:15: 66:a9:27:13:a7:ed:c6:0b:33:f7:2b:02:95:87:70: 9d:b9:3b:e9:cc:51:0b:04:88:7d:c1:98:de:ac:fc: 9f:81:92:0a:b8:dd:4d:12:1d:27:c9:e5:1f:2f:68: bf:dc:67:a7:eb:5c:74:bb:06:81:e7:83:a7:83:5a: a5:bb:54:84:1e:6b:30:24:09:77:39:81:8e:45:c2: 3b:66:8a:72:d3:0c:b8:66:9c:01:65:7d:2f:a1:6b: dd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C8:C9:C0:77:4C:A8:01:88:E3:CC:CA:A7:ED:2C:3B:F9:BD:D1:45:D3 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:d6:0d:73:45:61:84:09:34:02:7e:de:c1:f1:6e:31:62:3f: b8:0e:99:3b:d2:28:57:a8:4c:6e:7a:1a:6c:bd:1b:ca:71:f3: 10:7b:52:12:4a:48:c2:7c:b2:67:b0:19:79:b1:fa:67:ac:60: 75:34:fb:ab:e1:ad:b0:8b:72:2b:e8:e5:01:2c:e0:65:9a:35: f1:ff:b1:e7:5c:21:c3:74:fb:dc:7a:6a:c5:a8:d1:24:f5:d4: 84:4e:6e:7b:6a:ff:5d:96:03:c5:3e:2b:3a:c0:41:f9:bf:d5: c4:26:a9:fa:7b:2d:19:77:03:2b:39:6f:19:d9:52:0d:c2:77: 14:e3:1d:d7:42:3d:ca:48:4a:63:7b:e5:b5:89:c7:f0:ce:7f: 34:94:6b:11:cb:f9:19:9e:77:52:a9:25:f5:f6:c0:b5:fe:f7: 12:04:de:43:79:13:be:ab:f7:d6:b5:02:6f:fb:c0:34:12:ea: b4:1b:41:45:ed:16:d2:af:86:a5:d0:84:fd:5e:32:ef:15:2c: bb:75:55:bc:1e:3b:8b:90:cc:08:a7:6f:0c:fd:65:5b:a7:71: 94:04:45:b9:7a:5b:83:76:ec:fd:16:d7:17:b6:32:0e:91:b5: ed:72:dc:a4:19:11:9a:48:f8:c7:11:a5:32:15:34:0b:78:17: ef:c2:28:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUISWe4U92BIqaFER0GB0CNHB71QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNjA0MTYxMTI3MDVaFw0yNjA0MTkyMDAzMDVaMDMxMTAvBgNV BAMTKEM4QzlDMDc3NENBODAxODhFM0NDQ0FBN0VEMkMzQkY5QkREMTQ1RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsmFSTC4rTZGYyX+o3WL3xIJXc Kxk5R3BCFXYOWMd5P4/sIR6Cnyj54ftbfCuhvWZdYze81kz6xuR15nny0D4CwuXJ OU7gJlOxFss2QNUGI7ZO690MbtG2+IjQNxUGKkyZS3qiG2sSVddsKpMIVq/xZI3v dgHF0X73rVQpihKi2bw9ChkPI5P8yDdg+ZbmMt9xH+loPoV29VgtoGINYDMzZj9D FWapJxOn7cYLM/crApWHcJ25O+nMUQsEiH3BmN6s/J+Bkgq43U0SHSfJ5R8vaL/c Z6frXHS7BoHng6eDWqW7VIQeazAkCXc5gY5FwjtminLTDLhmnAFlfS+ha91TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyMnAd0yoAYjjzMqn7Sw7+b3RRdMwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFXWDXNFYYQJNAJ+3sHxbjFiP7gOmTvSKFeo TG56Gmy9G8px8xB7UhJKSMJ8smewGXmx+mesYHU0+6vhrbCLcivo5QEs4GWaNfH/ sedcIcN0+9x6asWo0ST11IRObntq/12WA8U+KzrAQfm/1cQmqfp7LRl3Ays5bxnZ Ug3CdxTjHddCPcpISmN75bWJx/DOfzSUaxHL+Rmed1KpJfX2wLX+9xIE3kN5E76r 99a1Am/7wDQS6rQbQUXtFtKvhqXQhP1eMu8VLLt1VbweO4uQzAinbwz9ZVuncZQE Rbl6W4N27P0W1xe2Mg6Rte1y3KQZEZpI+McRpTIVNAt4F+/CKMA= -----END CERTIFICATE-----Generated at Fri Apr 17 14:17:30 2026 by rpki-client