$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: e710DAcif4jjE+rdNRcOuSjtTZ3y3t7TJthnF8aLIC0= Subject key identifier: 71:76:52:9B:A5:5F:EF:2F:9D:4C:BC:53:D6:8F:B0:25:2F:BD:4A:19 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 4D4CD43E253C838199A5351F3F0A91A3F58F49F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 0246 Signing time: Thu 16 Apr 2026 19:42:37 +0000 Manifest this update: Thu 16 Apr 2026 19:37:37 +0000 Manifest next update: Mon 20 Apr 2026 00:57:37 +0000 Files and hashes: 1: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) 2: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: 0vrdLNHB3f0hq4gzmd0awoHcIO6k+ic7LaVCRGsp3lg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 00:57:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:4c:d4:3e:25:3c:83:81:99:a5:35:1f:3f:0a:91:a3:f5:8f:49:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Apr 16 19:37:37 2026 GMT Not After : Apr 20 00:57:37 2026 GMT Subject: CN=7176529BA55FEF2F9D4CBC53D68FB0252FBD4A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:22:34:ca:51:4d:55:a0:49:cc:f5:f2:4d:ae: 64:64:21:b6:91:d5:c9:8a:1c:43:c5:3c:6b:a6:a5: 14:37:fe:90:c1:dd:2f:0b:65:23:59:6e:52:b4:82: 31:42:61:60:12:6f:66:62:1f:23:7c:99:14:e6:1f: e5:b8:11:e4:26:6a:b3:b1:5f:2b:0e:77:78:32:61: d7:7f:31:05:28:27:8a:a3:0e:e3:3f:75:9f:f4:90: ff:8d:3f:7b:7c:9c:18:6f:40:1e:dc:b4:69:9c:c7: 83:e3:cc:b2:73:d7:d2:62:52:a8:8d:5c:df:01:3e: 57:2c:31:6d:8d:62:bc:a0:d1:d2:19:81:83:43:76: e9:47:38:b7:7f:bd:ab:d6:b3:39:be:fd:c6:77:8b: 78:38:6d:cf:4b:b6:33:c0:c0:29:f4:28:78:21:cf: 31:64:51:6c:7e:70:72:a6:87:6c:2d:25:55:f1:b8: 96:23:a9:8d:cb:02:27:a9:08:c5:9c:cb:90:83:32: 09:e1:98:64:5f:6c:98:a6:37:29:28:ed:f7:73:4a: 57:ae:3e:6a:e0:4e:e8:2e:de:07:ef:c9:ea:88:f9: 6f:84:67:8e:29:73:9d:e4:cf:f3:e7:6c:7a:25:6c: 9c:b1:eb:0f:66:a5:88:d1:b3:4d:c1:cb:f1:5d:e3: 40:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:76:52:9B:A5:5F:EF:2F:9D:4C:BC:53:D6:8F:B0:25:2F:BD:4A:19 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:cf:78:05:db:96:bc:fd:dc:4d:c0:ff:56:d8:8b:47:8e:04: a7:bc:54:8e:71:76:de:6f:32:cf:ff:8c:e4:1d:5c:12:46:99: 2f:69:06:6b:2a:53:e4:3e:5a:b8:4c:c4:24:db:94:f4:9b:70: 66:ab:09:84:0f:2d:c6:47:9c:e5:7b:f7:c3:1c:b7:ea:49:5a: 15:11:05:d4:80:f4:43:20:16:d8:8f:0d:64:7a:61:97:2b:89: f5:a7:4d:a9:34:32:f7:2b:c1:e8:9d:e8:7b:1e:36:f6:e5:1c: 9f:0a:01:50:a7:75:7c:fc:cd:2f:e0:db:77:b9:05:17:07:7a: c9:b7:8d:60:9b:e1:9a:1c:e7:b6:00:61:4e:2e:6c:37:0c:69: 9e:4b:5d:d3:5f:21:41:de:1f:94:3f:1b:9d:e6:68:43:29:fb: ea:52:47:13:98:40:75:30:e0:05:e6:df:b7:57:ea:88:86:f3: 51:21:45:76:b7:02:1c:3c:61:94:7a:cc:7e:6c:30:3a:4f:c3: 3f:02:47:3b:a5:55:e1:55:41:7d:c0:fb:81:11:45:47:1a:59: 5f:97:0d:0e:1d:fd:f5:a2:35:75:d7:bd:f1:4a:7f:29:4f:73: 05:bf:b7:d7:cf:03:ed:4e:a7:cc:bd:27:3e:cd:14:5e:13:5e: 80:10:c6:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTUzUPiU8g4GZpTUfPwqRo/WPSfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNjA0MTYxOTM3MzdaFw0yNjA0MjAwMDU3MzdaMDMxMTAvBgNV BAMTKDcxNzY1MjlCQTU1RkVGMkY5RDRDQkM1M0Q2OEZCMDI1MkZCRDRBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8IjTKUU1VoEnM9fJNrmRkIbaR 1cmKHEPFPGumpRQ3/pDB3S8LZSNZblK0gjFCYWASb2ZiHyN8mRTmH+W4EeQmarOx XysOd3gyYdd/MQUoJ4qjDuM/dZ/0kP+NP3t8nBhvQB7ctGmcx4PjzLJz19JiUqiN XN8BPlcsMW2NYryg0dIZgYNDdulHOLd/vavWszm+/cZ3i3g4bc9LtjPAwCn0KHgh zzFkUWx+cHKmh2wtJVXxuJYjqY3LAiepCMWcy5CDMgnhmGRfbJimNyko7fdzSleu PmrgTugu3gfvyeqI+W+EZ44pc53kz/PnbHolbJyx6w9mpYjRs03By/Fd40BfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcXZSm6Vf7y+dTLxT1o+wJS+9ShkwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjPeAXblrz93E3A/1bYi0eOBKe8VI5xdt5v Ms//jOQdXBJGmS9pBmsqU+Q+WrhMxCTblPSbcGarCYQPLcZHnOV798Mct+pJWhUR BdSA9EMgFtiPDWR6YZcrifWnTak0Mvcrweid6HseNvblHJ8KAVCndXz8zS/g23e5 BRcHesm3jWCb4Zoc57YAYU4ubDcMaZ5LXdNfIUHeH5Q/G53maEMp++pSRxOYQHUw 4AXm37dX6oiG81EhRXa3Ahw8YZR6zH5sMDpPwz8CRzulVeFVQX3A+4ERRUcaWV+X DQ4d/fWiNXXXvfFKfylPcwW/t9fPA+1Op8y9Jz7NFF4TXoAQxns= -----END CERTIFICATE-----Generated at Fri Apr 17 19:35:24 2026 by rpki-client