$ rpki-client -vvf repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft File: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft (raw, json) Hash identifier: etgJIDWRIgxYUkJcRjZ3fvTI04kAKn46Apzod4RysrU= Subject key identifier: 1D:44:E6:22:DB:C1:58:67:4A:C3:1E:D9:AF:24:87:31:88:A6:8C:05 Authority key identifier: C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD Certificate issuer: /CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Certificate serial: 677AA2D39CE1E7BA85EDF33F9AF14F439381992E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft Manifest number: 012C Signing time: Mon 02 Mar 2026 01:22:23 +0000 Manifest this update: Mon 02 Mar 2026 01:17:23 +0000 Manifest next update: Thu 05 Mar 2026 12:08:23 +0000 Files and hashes: 1: C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl (hash: ur4sN1PazKf2uOiGrkfr6+KuAFwfOxQmD++kjx7HPdI=) 2: 3136302e31392e38352e302f32342d3234203d3e20313532373534.roa (hash: frMDYjZLvx/PXC3WNp74+r5lWIhNgG/QgNa89ajNdXU=) 3: 3136302e31392e38342e302f32332d3233203d3e20313532373534.roa (hash: zJyhGvQzaDs1uZ/vkTZ4lisg94de9IwLPmGapH9vBW8=) 4: 3136302e31392e38342e302f32342d3234203d3e20313532373534.roa (hash: XsjHTUcHkRjkYPKHbvijLc/iJA9BjCnhWYDW42TR7Mc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:7a:a2:d3:9c:e1:e7:ba:85:ed:f3:3f:9a:f1:4f:43:93:81:99:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD Validity Not Before: Mar 2 01:17:23 2026 GMT Not After : Mar 5 12:08:23 2026 GMT Subject: CN=1D44E622DBC158674AC31ED9AF24873188A68C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b2:82:e3:31:2b:9d:92:ad:05:e1:02:47:99: 88:d5:8d:1c:fa:43:cf:28:4c:3a:30:c0:10:3d:a2: a2:59:71:43:72:b8:5f:80:7c:d6:84:a6:b1:f3:3c: 25:28:16:64:ec:8a:63:0d:94:52:2f:5a:9d:22:1b: 7a:40:45:e0:92:91:bd:74:a0:4a:c4:e4:6f:c5:66: d6:d2:c0:54:ad:86:ed:08:9b:7b:6f:df:ae:0c:a9: d9:c5:a7:80:d0:93:db:53:f1:9d:7a:cb:c7:6c:0b: 70:ca:95:2e:e5:f3:0f:3f:d0:26:74:f6:69:f9:a8: fb:45:c5:ff:41:e0:a8:88:65:95:9d:b5:57:d3:5e: 4c:4f:2a:50:0d:f4:6f:d6:77:9e:88:b8:3d:2e:17: 1c:ba:33:e2:32:39:13:6f:d5:62:5d:46:b9:d2:0a: 5a:39:5e:ce:8b:e7:65:0a:0b:ee:45:c2:f1:fd:10: 55:06:61:43:e5:aa:15:8a:80:2b:e5:d6:23:0b:d1: da:40:ea:3b:16:59:7b:33:f2:f9:d3:22:ef:28:06: 54:b4:6f:d8:10:b5:c3:46:44:11:1f:1d:79:4d:1f: af:96:32:60:27:c6:ce:ea:d5:9f:da:9d:dc:42:73: d7:d9:82:01:0c:78:16:90:77:9c:1c:0f:9e:9d:39: b6:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:44:E6:22:DB:C1:58:67:4A:C3:1E:D9:AF:24:87:31:88:A6:8C:05 X509v3 Authority Key Identifier: keyid:C1:84:D0:BB:A0:CD:19:44:C1:99:BF:20:D0:EB:A5:1A:9F:B4:7A:DD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e374d48-5a70-4c7f-bdfd-d8052ebaf0ab/0/C184D0BBA0CD1944C199BF20D0EBA51A9FB47ADD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:bb:68:f0:e2:54:9d:e1:74:53:5d:13:18:66:f6:1b:b1:71: 97:3e:66:67:3f:2c:63:dc:0f:2b:09:c9:d0:26:bb:86:07:6b: 6a:3c:0b:88:b9:db:a7:63:f8:a7:d7:98:61:dd:60:a5:a2:ac: 0d:98:fa:c7:c0:28:32:c0:14:a6:5e:0e:34:c1:27:d6:b7:5c: fa:f7:01:02:14:bf:46:e7:12:85:42:df:ca:5a:73:29:ff:eb: e1:a2:b8:f5:77:0d:b6:9b:e2:fa:e9:eb:ac:2f:d7:dc:9d:c7: 87:c8:54:91:dc:08:d8:d2:18:11:7e:28:73:b9:77:bf:87:00: cc:b9:e9:d0:9e:9f:f3:4d:d6:4f:ec:47:99:09:f6:ec:88:a4: 36:b7:e2:a3:0a:6c:d1:ca:4c:35:a4:d6:68:bd:e2:84:49:d8: d4:4f:5e:b8:0d:b4:89:c0:14:dd:4e:5d:a9:d6:e2:bf:bb:38: 0d:06:3f:bf:5b:7c:c8:7a:d7:df:81:78:20:06:f3:ed:93:4b: ee:7a:72:13:be:15:fc:34:42:2c:41:e6:cd:79:e1:ad:8b:15: ae:f8:4c:82:26:84:7a:90:5f:4b:92:7b:18:ac:07:1a:f1:4c: f0:fb:3d:9d:32:1b:0e:89:2f:21:32:32:9b:56:d7:be:26:b6: dc:fd:05:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ3qi05zh57qF7fM/mvFPQ5OBmS4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5 RkI0N0FERDAeFw0yNjAzMDIwMTE3MjNaFw0yNjAzMDUxMjA4MjNaMDMxMTAvBgNV BAMTKDFENDRFNjIyREJDMTU4Njc0QUMzMUVEOUFGMjQ4NzMxODhBNjhDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBsoLjMSudkq0F4QJHmYjVjRz6 Q88oTDowwBA9oqJZcUNyuF+AfNaEprHzPCUoFmTsimMNlFIvWp0iG3pAReCSkb10 oErE5G/FZtbSwFSthu0Im3tv364MqdnFp4DQk9tT8Z16y8dsC3DKlS7l8w8/0CZ0 9mn5qPtFxf9B4KiIZZWdtVfTXkxPKlAN9G/Wd56IuD0uFxy6M+IyORNv1WJdRrnS Clo5Xs6L52UKC+5FwvH9EFUGYUPlqhWKgCvl1iML0dpA6jsWWXsz8vnTIu8oBlS0 b9gQtcNGRBEfHXlNH6+WMmAnxs7q1Z/andxCc9fZggEMeBaQd5wcD56dObYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHUTmItvBWGdKwx7ZrySHMYimjAUwHwYDVR0j BBgwFoAUwYTQu6DNGUTBmb8g0OulGp+0et0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZTM3NGQ0OC01YTcwLTRjN2YtYmRmZC1kODA1MmViYWYwYWIvMC9DMTg0RDBCQkEw Q0QxOTQ0QzE5OUJGMjBEMEVCQTUxQTlGQjQ3QURELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1MUE5RkI0 N0FERC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGUzNzRkNDgtNWE3MC00YzdmLWJk ZmQtZDgwNTJlYmFmMGFiLzAvQzE4NEQwQkJBMENEMTk0NEMxOTlCRjIwRDBFQkE1 MUE5RkI0N0FERC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHm7aPDiVJ3hdFNdExhm9huxcZc+Zmc/LGPc DysJydAmu4YHa2o8C4i526dj+KfXmGHdYKWirA2Y+sfAKDLAFKZeDjTBJ9a3XPr3 AQIUv0bnEoVC38pacyn/6+GiuPV3Dbab4vrp66wv19ydx4fIVJHcCNjSGBF+KHO5 d7+HAMy56dCen/NN1k/sR5kJ9uyIpDa34qMKbNHKTDWk1mi94oRJ2NRPXrgNtInA FN1OXanW4r+7OA0GP79bfMh619+BeCAG8+2TS+56chO+Ffw0QixB5s154a2LFa74 TIImhHqQX0uSexisBxrxTPD7PZ0yGw6JLyEyMptW174mttz9BbI= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:20 2026 by rpki-client