$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: PTolnQnUEA9yi6O3nroSbq+T/Iuh9kD8J/pSm/f61hU= Subject key identifier: 11:9F:7A:58:3E:E8:26:CE:CF:2D:C2:F6:49:F7:DB:A3:9C:07:3E:D2 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 39DB658C57FA7C4EBA55443BAA9C69926D041002 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0239 Signing time: Mon 02 Mar 2026 04:12:03 +0000 Manifest this update: Mon 02 Mar 2026 04:07:03 +0000 Manifest next update: Thu 05 Mar 2026 10:08:03 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: 0tQumRCvfQJ7Owz+mUTKrRFF7tMDmy5xAF0u1ho9LCQ=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA=) 3: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:db:65:8c:57:fa:7c:4e:ba:55:44:3b:aa:9c:69:92:6d:04:10:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Mar 2 04:07:03 2026 GMT Not After : Mar 5 10:08:03 2026 GMT Subject: CN=119F7A583EE826CECF2DC2F649F7DBA39C073ED2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:d6:61:95:1f:7d:d0:ce:cd:31:0b:a9:23:a8: 1c:61:d2:df:b6:78:28:4b:0b:36:eb:50:e5:58:e8: 83:c9:5d:84:04:c0:34:97:84:b3:88:38:d4:18:b7: 42:c2:46:47:55:e7:2f:0e:09:6c:1c:cc:80:5d:85: b2:dc:02:47:74:23:ef:2a:1a:e0:7c:24:cf:96:40: b5:e0:30:4c:bf:c6:c8:e2:56:b1:92:8a:29:12:d0: 0a:56:39:65:5d:a5:df:6d:d9:73:31:3c:7f:ae:76: 65:45:fc:ee:bc:6b:50:a0:90:38:cd:88:a6:cc:bb: 6c:23:60:74:0a:8a:92:9d:67:e0:49:0d:23:c8:c1: 96:96:e9:06:09:81:90:e0:4c:c5:0e:07:31:04:30: d2:4b:69:50:5a:74:b7:8f:78:e4:7e:ee:18:43:05: c1:58:5f:c4:25:c6:71:dd:c5:59:81:96:2f:89:76: e8:1d:53:44:52:55:08:d0:de:6f:bc:0c:87:ee:dc: d7:aa:36:b9:9e:1b:9b:15:aa:c5:4b:70:ea:7e:52: c2:b6:16:be:59:06:b8:c7:3d:55:6e:5b:20:1d:9a: 3a:d9:50:d4:9e:7b:66:d8:4f:ea:31:72:00:d4:7b: a4:57:74:fd:12:06:4a:16:ff:c2:aa:25:84:57:9f: 95:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:9F:7A:58:3E:E8:26:CE:CF:2D:C2:F6:49:F7:DB:A3:9C:07:3E:D2 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:36:e7:92:53:43:59:cf:a3:f7:68:84:91:e3:73:4f:2e:6c: eb:30:e5:59:f7:ce:66:49:ef:3d:fc:0e:fd:e9:ba:dd:33:8d: c8:f6:fa:29:39:bd:a2:0e:58:3f:5a:eb:44:f0:11:60:0b:3f: 99:b8:d8:d1:99:2e:6c:49:cb:9b:34:fe:c8:c2:53:98:3f:6a: f8:88:23:e9:1c:0f:f3:d6:96:fd:7f:f6:6b:10:b8:62:36:82: 32:ce:f1:65:42:7a:f2:ff:2e:77:e0:a6:93:e0:81:db:bf:f9: af:c3:1b:05:20:04:b1:a7:73:13:88:f6:37:c1:51:5e:31:9f: ae:90:9f:ac:7d:8f:27:f0:6e:de:25:fa:3e:9d:e3:ad:d5:ac: 3a:ac:cb:0f:66:2c:b0:76:46:9b:11:06:4a:ec:51:dc:4c:0f: e3:26:3c:85:c9:7a:d0:70:e8:50:b6:6a:48:96:28:ec:2f:2c: 8e:df:9c:6b:a1:41:fa:83:70:ba:37:bb:89:21:26:49:e7:91: 9f:3f:d0:84:10:4d:6a:50:53:36:2d:9a:8d:2b:37:6e:d1:10: 81:6c:e9:d6:e6:0d:68:48:4f:b8:b1:06:34:00:ac:ee:5d:40: ac:4e:ca:9d:eb:53:c1:c0:c8:9c:91:a6:8a:52:d0:d2:1b:85: 58:b9:8a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOdtljFf6fE66VUQ7qpxpkm0EEAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAzMDIwNDA3MDNaFw0yNjAzMDUxMDA4MDNaMDMxMTAvBgNV BAMTKDExOUY3QTU4M0VFODI2Q0VDRjJEQzJGNjQ5RjdEQkEzOUMwNzNFRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx1mGVH33Qzs0xC6kjqBxh0t+2 eChLCzbrUOVY6IPJXYQEwDSXhLOIONQYt0LCRkdV5y8OCWwczIBdhbLcAkd0I+8q GuB8JM+WQLXgMEy/xsjiVrGSiikS0ApWOWVdpd9t2XMxPH+udmVF/O68a1CgkDjN iKbMu2wjYHQKipKdZ+BJDSPIwZaW6QYJgZDgTMUOBzEEMNJLaVBadLePeOR+7hhD BcFYX8QlxnHdxVmBli+JdugdU0RSVQjQ3m+8DIfu3NeqNrmeG5sVqsVLcOp+UsK2 Fr5ZBrjHPVVuWyAdmjrZUNSee2bYT+oxcgDUe6RXdP0SBkoW/8KqJYRXn5VfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEZ96WD7oJs7PLcL2Sffbo5wHPtIwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFY255JTQ1nPo/dohJHjc08ubOsw5Vn3zmZJ 7z38Dv3put0zjcj2+ik5vaIOWD9a60TwEWALP5m42NGZLmxJy5s0/sjCU5g/aviI I+kcD/PWlv1/9msQuGI2gjLO8WVCevL/LnfgppPggdu/+a/DGwUgBLGncxOI9jfB UV4xn66Qn6x9jyfwbt4l+j6d463VrDqsyw9mLLB2RpsRBkrsUdxMD+MmPIXJetBw 6FC2akiWKOwvLI7fnGuhQfqDcLo3u4khJknnkZ8/0IQQTWpQUzYtmo0rN27REIFs 6dbmDWhIT7ixBjQArO5dQKxOyp3rU8HAyJyRpopS0NIbhVi5in8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:14 2026 by rpki-client