$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: Ip5kLsKOS6HXpqUis2xQjUDyOosE5jEFQ8zu7iG9YAQ= Subject key identifier: 6E:CD:8B:9C:5A:78:A8:B9:3D:1D:43:C7:2E:81:95:F0:E4:63:E4:6C Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 059ECCA32241482A23B93F11CBA3DDB9CEDAC901 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 0231 Signing time: Sat 28 Feb 2026 16:22:29 +0000 Manifest this update: Sat 28 Feb 2026 16:17:29 +0000 Manifest next update: Tue 03 Mar 2026 18:52:29 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: InYPgPmRbZ43vz0dTX4TMI1kzL+nu2Q/H0PhuPtx1MY=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 18:52:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:9e:cc:a3:22:41:48:2a:23:b9:3f:11:cb:a3:dd:b9:ce:da:c9:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Feb 28 16:17:29 2026 GMT Not After : Mar 3 18:52:29 2026 GMT Subject: CN=6ECD8B9C5A78A8B93D1D43C72E8195F0E463E46C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:43:41:4d:09:84:72:74:d2:a5:6f:16:76:04: a2:d2:79:cd:02:96:f5:de:43:af:ab:53:3a:76:2a: 79:27:44:6b:3f:d7:dd:fc:31:df:5b:df:0e:95:63: fe:9d:16:a5:27:36:c4:a2:6c:d7:d1:72:9d:c3:ca: 1e:2e:5f:3c:b7:1b:f7:f1:b2:bf:ca:58:0a:23:3a: 90:2c:27:51:85:c6:36:06:29:20:e2:6e:0f:3f:e5: 5f:8a:55:25:46:7b:7b:9f:5f:38:1a:f1:c8:10:cf: 7a:4d:2f:c6:b4:12:fa:ec:25:ee:36:37:d1:4f:94: eb:63:d2:05:6d:cf:f6:52:51:c7:36:eb:aa:60:5c: e8:72:91:95:55:24:bb:8c:8a:42:25:21:5d:c1:f3: 4b:02:42:2b:b3:9f:09:66:ab:62:8c:97:3c:20:da: 88:1d:40:5f:63:7c:73:f6:16:0d:37:e6:fa:37:70: 48:54:3a:90:2b:9e:bf:8b:2b:ef:85:b5:28:02:b1: fd:f5:20:20:73:71:3a:34:8e:20:53:8f:3c:88:3d: e2:71:a1:09:14:9c:a9:e3:be:36:3d:bd:6d:cc:a1: ac:08:82:5e:54:ce:30:f0:d1:fc:2a:b1:26:84:70: b7:70:cc:4c:df:d9:0a:7d:53:88:fb:49:e6:6c:3c: fe:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:CD:8B:9C:5A:78:A8:B9:3D:1D:43:C7:2E:81:95:F0:E4:63:E4:6C X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:5f:fa:98:65:b8:aa:b7:9a:ca:b4:96:a4:9a:51:28:1d:76: 9e:1c:a8:93:54:92:b8:cc:0d:c4:21:cf:e9:2e:ea:96:42:5f: 66:dc:86:61:61:3c:fc:3e:90:ba:4b:66:e9:32:32:28:ef:c1: 24:2e:98:d3:06:dd:3d:48:c6:5b:60:01:33:56:2c:c8:c7:6f: cf:d9:f3:67:c2:ca:c1:d2:4f:f2:a9:73:c3:1d:8b:0c:67:fa: b2:2b:c9:39:9d:6d:5d:4f:6f:b4:a5:a7:33:e8:4d:00:63:87: 0c:5f:ff:70:0e:38:1b:f0:1a:b5:f3:dd:dc:ee:c9:ee:da:8f: 82:41:90:71:b9:ab:e1:d7:cd:f2:85:7a:1b:20:91:78:b4:77: f7:92:1b:14:01:05:64:c1:3e:9e:46:e5:b3:0e:61:eb:53:f2: 76:98:16:56:ce:b0:97:26:24:37:19:7b:69:a1:ba:c8:63:3e: 55:b0:16:fd:b5:5b:ad:3c:15:80:46:7b:92:0d:77:91:df:84: 35:44:0d:64:10:0b:d4:a7:a4:a4:59:c6:0f:b3:e8:cb:54:e6: 38:34:c8:ed:6c:06:9e:d2:25:a9:fd:90:e5:d6:9e:8e:45:ea: 62:68:86:1c:6c:d3:30:23:4e:33:92:5e:b4:0e:0d:9b:fd:fb: 02:1e:06:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZ7MoyJBSCojuT8Ry6Pduc7ayQEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNjAyMjgxNjE3MjlaFw0yNjAzMDMxODUyMjlaMDMxMTAvBgNV BAMTKDZFQ0Q4QjlDNUE3OEE4QjkzRDFENDNDNzJFODE5NUYwRTQ2M0U0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTQ0FNCYRydNKlbxZ2BKLSec0C lvXeQ6+rUzp2KnknRGs/1938Md9b3w6VY/6dFqUnNsSibNfRcp3Dyh4uXzy3G/fx sr/KWAojOpAsJ1GFxjYGKSDibg8/5V+KVSVGe3ufXzga8cgQz3pNL8a0EvrsJe42 N9FPlOtj0gVtz/ZSUcc266pgXOhykZVVJLuMikIlIV3B80sCQiuznwlmq2KMlzwg 2ogdQF9jfHP2Fg035vo3cEhUOpArnr+LK++FtSgCsf31ICBzcTo0jiBTjzyIPeJx oQkUnKnjvjY9vW3MoawIgl5UzjDw0fwqsSaEcLdwzEzf2Qp9U4j7SeZsPP5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbs2LnFp4qLk9HUPHLoGV8ORj5GwwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxf+phluKq3msq0lqSaUSgddp4cqJNUkrjM DcQhz+ku6pZCX2bchmFhPPw+kLpLZukyMijvwSQumNMG3T1IxltgATNWLMjHb8/Z 82fCysHST/Kpc8Mdiwxn+rIryTmdbV1Pb7SlpzPoTQBjhwxf/3AOOBvwGrXz3dzu ye7aj4JBkHG5q+HXzfKFehsgkXi0d/eSGxQBBWTBPp5G5bMOYetT8naYFlbOsJcm JDcZe2mhushjPlWwFv21W608FYBGe5INd5HfhDVEDWQQC9SnpKRZxg+z6MtU5jg0 yO1sBp7SJan9kOXWno5F6mJohhxs0zAjTjOSXrQODZv9+wIeBiU= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:29 2026 by rpki-client