$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft File: C380A411E3CE15C60336341BB4B0994B307B920D.mft (raw, json) Hash identifier: MUuAbV2pzdVDTLpWETZl8SGdPbMLQiOCzZKLNVTYuf0= Subject key identifier: D2:F8:91:39:3A:87:D5:81:74:47:74:54:5B:4F:03:98:29:1C:60:64 Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D Certificate issuer: /CN=C380A411E3CE15C60336341BB4B0994B307B920D Certificate serial: 254D6D5EB7C88E18995D9923DEB9E3A63892E120 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft Manifest number: 0442 Signing time: Sun 01 Mar 2026 22:52:11 +0000 Manifest this update: Sun 01 Mar 2026 22:47:11 +0000 Manifest next update: Thu 05 Mar 2026 05:05:11 +0000 Files and hashes: 1: 3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (hash: KoXVL6WzAZujvpo00umxzYa6CA8boG1qF0govC2qVVE=) 2: 3130332e3134332e32352e302f32342d3234203d3e203536323432.roa (hash: RAP4Y3UNMM22dRDZbSXvZfkAeFFl21PNSif0XVosalM=) 3: 3130332e3134332e32342e302f32342d3234203d3e203536323432.roa (hash: 2rrLsC09Wk5In+nn3fns2W2xhNn/o1UykNLInh2ZFNs=) 4: C380A411E3CE15C60336341BB4B0994B307B920D.crl (hash: jp0Oiqtj07MN6Xr7INKk84IQG0liOfo8OGI5SlxJWEA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:05:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:4d:6d:5e:b7:c8:8e:18:99:5d:99:23:de:b9:e3:a6:38:92:e1:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D Validity Not Before: Mar 1 22:47:11 2026 GMT Not After : Mar 5 05:05:11 2026 GMT Subject: CN=D2F891393A87D581744774545B4F0398291C6064 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6d:4b:db:d0:8f:54:85:f2:b5:6e:cc:57:69: 3e:a4:4a:6b:62:50:e9:58:b7:66:56:0a:9d:5b:a0: 03:00:49:e7:2c:9d:f1:33:cc:f6:ba:7e:ee:06:5b: fd:49:e6:15:a2:84:54:03:4e:40:66:eb:86:e6:81: 2e:d5:f0:4e:3e:26:b1:7f:3e:6c:b4:27:4b:aa:86: 8b:07:10:b3:25:c3:db:0c:dc:a8:cf:d1:74:9b:b0: d0:78:66:d1:ac:4d:55:61:1d:75:aa:6c:cd:bd:51: 63:79:c4:59:74:68:3b:17:d5:28:30:f8:9e:7c:95: ec:14:2f:d1:d0:6b:60:bf:5d:54:fd:cb:36:ce:05: db:b1:38:72:8b:71:ec:2b:67:10:3a:3e:11:5f:73: f8:e4:d6:c9:75:ec:e7:46:19:79:b5:2f:54:3e:e3: c5:76:40:8d:56:63:e5:b3:56:53:7c:2f:38:67:aa: 60:db:f1:2d:e1:91:0c:5e:b9:b5:05:73:e8:9a:90: 7e:dc:a8:d8:e2:6e:29:b1:9b:d6:ab:61:c6:c9:d3: dc:21:af:e4:ee:f4:a4:13:eb:19:0e:32:82:8f:08: d1:8e:71:44:36:06:5b:72:81:1f:6e:c7:96:29:61: 0a:3f:10:b7:6f:c2:ca:a7:71:8b:7a:c8:fe:c0:bb: 5d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F8:91:39:3A:87:D5:81:74:47:74:54:5B:4F:03:98:29:1C:60:64 X509v3 Authority Key Identifier: keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:15:6f:cb:6e:67:76:64:c7:ff:89:d9:fb:65:ba:ef:26:bc: c4:0d:8b:c0:d1:07:fc:ab:90:d1:89:a7:49:1a:3d:2f:60:5d: 88:54:c2:17:03:9e:00:92:14:94:54:44:13:97:d1:8a:12:a5: b6:5e:f0:ed:b0:83:4c:d5:b2:97:0f:8e:1a:fc:14:1f:73:73: eb:03:3f:d2:0b:4d:9e:9c:88:71:a7:f1:de:df:d6:e6:b5:63: 8c:7b:7a:f2:c8:d5:69:d4:46:21:d6:3b:be:d4:90:26:fb:87: 65:06:f5:12:cf:a7:40:46:34:18:c2:84:cc:60:f4:4f:f0:68: b9:7e:20:80:28:a5:a8:ae:83:f6:47:73:50:b8:54:fe:57:63: 03:42:46:42:90:8f:6c:a0:ad:55:3f:35:8d:91:22:8e:f0:fe: ad:14:70:6b:df:73:c5:e6:21:b9:7e:d7:6b:c8:fa:94:f1:07: 54:a7:cc:39:f0:0c:5c:07:19:38:06:97:cf:b3:63:e0:ac:2d: ba:ab:95:ec:4b:99:e4:08:d2:f2:f5:b5:77:e7:c3:7a:3a:ea: 96:3b:90:9d:d5:06:36:c4:f9:25:78:fb:56:88:ef:bd:2a:6a: 5c:5d:ca:e1:2e:88:d5:a1:73:36:6b:e9:54:8f:a3:92:30:9a: 47:ea:b3:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJU1tXrfIjhiZXZkj3rnjpjiS4SAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz MDdCOTIwRDAeFw0yNjAzMDEyMjQ3MTFaFw0yNjAzMDUwNTA1MTFaMDMxMTAvBgNV BAMTKEQyRjg5MTM5M0E4N0Q1ODE3NDQ3NzQ1NDVCNEYwMzk4MjkxQzYwNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEbUvb0I9UhfK1bsxXaT6kSmti UOlYt2ZWCp1boAMASecsnfEzzPa6fu4GW/1J5hWihFQDTkBm64bmgS7V8E4+JrF/ Pmy0J0uqhosHELMlw9sM3KjP0XSbsNB4ZtGsTVVhHXWqbM29UWN5xFl0aDsX1Sgw +J58lewUL9HQa2C/XVT9yzbOBduxOHKLcewrZxA6PhFfc/jk1sl17OdGGXm1L1Q+ 48V2QI1WY+WzVlN8LzhnqmDb8S3hkQxeubUFc+iakH7cqNjibimxm9arYcbJ09wh r+Tu9KQT6xkOMoKPCNGOcUQ2BltygR9ux5YpYQo/ELdvwsqncYt6yP7Au10BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0viROTqH1YF0R3RUW08DmCkcYGQwHwYDVR0j BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC OTIwRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVjNDAwZDEtOWJiZC00ZTJiLThk NTgtNmY3NDlkYmMzOTJkLzAvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5 NEIzMDdCOTIwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJQVb8tuZ3Zkx/+J2ftluu8mvMQNi8DRB/yr kNGJp0kaPS9gXYhUwhcDngCSFJRURBOX0YoSpbZe8O2wg0zVspcPjhr8FB9zc+sD P9ILTZ6ciHGn8d7f1ua1Y4x7evLI1WnURiHWO77UkCb7h2UG9RLPp0BGNBjChMxg 9E/waLl+IIAopaiug/ZHc1C4VP5XYwNCRkKQj2ygrVU/NY2RIo7w/q0UcGvfc8Xm Ibl+12vI+pTxB1SnzDnwDFwHGTgGl8+zY+CsLbqrlexLmeQI0vL1tXfnw3o66pY7 kJ3VBjbE+SV4+1aI770qalxdyuEuiNWhczZr6VSPo5Iwmkfqs90= -----END CERTIFICATE-----Generated at Mon Mar 2 20:14:47 2026 by rpki-client