$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: EjRSQ+3/ZXYseTFlXSXTlDs4dmxkeEKTgHh+c3fNNDo= Subject key identifier: 21:60:F3:75:02:4A:F1:00:7E:EA:FC:10:92:4F:1B:79:8C:2E:B3:CE Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 34A5747F129892C3B179F480B4B98C4B3FAF1D1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: 0114 Signing time: Sat 28 Feb 2026 10:41:30 +0000 Manifest this update: Sat 28 Feb 2026 10:36:30 +0000 Manifest next update: Tue 03 Mar 2026 17:39:30 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: aEavLtAbdRxoRXxDQMLv+ovCw/uDfoEk+/AelkTfu1k=) 2: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: oADpEx3xutrbhnqFH2ha0y8od8MPY+JKM9eIAslaoOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:a5:74:7f:12:98:92:c3:b1:79:f4:80:b4:b9:8c:4b:3f:af:1d:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Feb 28 10:36:30 2026 GMT Not After : Mar 3 17:39:30 2026 GMT Subject: CN=2160F375024AF1007EEAFC10924F1B798C2EB3CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:f5:e9:b5:20:97:13:6b:d6:51:17:9f:3f:83: 54:2c:28:cf:f2:6c:b2:9a:80:62:ba:21:2b:d3:09: 0e:f9:21:96:6c:c6:40:b5:4c:94:d7:82:f0:41:64: 58:80:e6:04:de:ee:27:48:5e:40:47:c6:68:37:9d: fe:82:d6:61:97:69:94:31:11:34:75:a6:f6:09:5e: 6c:90:30:33:53:b6:c2:af:fe:94:63:1c:69:8d:01: 83:d6:75:c7:5e:d7:d8:81:38:10:d3:80:58:74:4b: f9:c4:3d:22:4f:6c:69:1c:38:89:a7:13:a9:9a:be: 64:b5:24:94:c2:10:98:60:4f:62:20:e3:32:1a:06: 1d:c3:81:4a:f4:00:c4:1e:4f:c1:4c:a7:8d:5d:6f: 60:61:2a:20:da:15:ba:2a:8e:7e:af:8c:f7:3a:43: 72:5f:ed:9b:f7:75:08:86:20:ee:e3:3a:80:85:71: 1b:d5:98:fe:f1:17:bb:47:c1:40:35:75:c2:ff:5d: 71:15:47:a6:43:a9:af:4a:be:48:88:4e:a3:c7:15: 9e:c5:db:95:df:9c:ab:12:af:58:dc:5d:b8:40:86: f0:d6:8e:bd:ae:f2:83:1c:3a:3d:55:56:e4:8d:77: 7c:8e:78:65:cf:6e:e3:00:52:67:64:58:e6:89:eb: 48:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:60:F3:75:02:4A:F1:00:7E:EA:FC:10:92:4F:1B:79:8C:2E:B3:CE X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:6a:35:a5:5e:b8:2b:37:b6:70:05:93:b1:50:a6:2b:31:c5: 04:dc:08:50:12:48:59:ee:0a:97:16:c2:ff:fd:c4:0a:49:2a: 46:72:24:6b:d7:20:9a:51:ae:6e:51:d9:fa:3f:76:9d:55:b0: 8c:7c:30:d8:53:d3:68:14:63:0b:2f:44:88:3a:7f:af:65:b4: 3e:08:2b:9a:a0:07:c8:ac:dd:c6:8e:3f:aa:42:a4:72:9d:d7: e1:50:5b:ae:63:53:65:5f:98:fd:a3:19:c1:d7:ab:8e:b5:ef: a8:6a:fa:0f:dd:f2:4a:3e:ca:84:d2:33:04:16:00:53:4c:98: 5f:4e:63:0b:82:ed:fb:05:67:0c:17:b2:3e:0a:0d:19:8d:ec: ff:fa:e9:e8:55:e0:16:83:5e:ce:68:b3:bb:c6:57:33:b4:92: 65:f8:54:26:84:64:fd:2d:5a:1e:be:48:e5:70:72:72:00:f5: 07:41:d2:dd:89:12:ef:d2:0b:e5:66:79:51:c8:57:b1:6e:e9: 37:70:9e:92:d9:02:16:6b:4e:15:43:97:6e:d4:ff:be:02:b8: d6:14:82:59:f4:b3:3b:55:6f:0d:6a:5e:52:7d:a9:21:51:60: 96:47:e3:7a:d0:8e:8a:85:00:6f:44:42:e1:a5:f0:cb:89:c2: 21:dc:a9:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNKV0fxKYksOxefSAtLmMSz+vHRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNjAyMjgxMDM2MzBaFw0yNjAzMDMxNzM5MzBaMDMxMTAvBgNV BAMTKDIxNjBGMzc1MDI0QUYxMDA3RUVBRkMxMDkyNEYxQjc5OEMyRUIzQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCV9em1IJcTa9ZRF58/g1QsKM/y bLKagGK6ISvTCQ75IZZsxkC1TJTXgvBBZFiA5gTe7idIXkBHxmg3nf6C1mGXaZQx ETR1pvYJXmyQMDNTtsKv/pRjHGmNAYPWdcde19iBOBDTgFh0S/nEPSJPbGkcOImn E6mavmS1JJTCEJhgT2Ig4zIaBh3DgUr0AMQeT8FMp41db2BhKiDaFboqjn6vjPc6 Q3Jf7Zv3dQiGIO7jOoCFcRvVmP7xF7tHwUA1dcL/XXEVR6ZDqa9KvkiITqPHFZ7F 25XfnKsSr1jcXbhAhvDWjr2u8oMcOj1VVuSNd3yOeGXPbuMAUmdkWOaJ60g1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIWDzdQJK8QB+6vwQkk8beYwus84wHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlqNaVeuCs3tnAFk7FQpisxxQTcCFASSFnu CpcWwv/9xApJKkZyJGvXIJpRrm5R2fo/dp1VsIx8MNhT02gUYwsvRIg6f69ltD4I K5qgB8is3caOP6pCpHKd1+FQW65jU2VfmP2jGcHXq46176hq+g/d8ko+yoTSMwQW AFNMmF9OYwuC7fsFZwwXsj4KDRmN7P/66ehV4BaDXs5os7vGVzO0kmX4VCaEZP0t Wh6+SOVwcnIA9QdB0t2JEu/SC+VmeVHIV7Fu6TdwnpLZAhZrThVDl27U/74CuNYU gln0sztVbw1qXlJ9qSFRYJZH43rQjoqFAG9EQuGl8MuJwiHcqQc= -----END CERTIFICATE-----Generated at Mon Mar 2 05:02:07 2026 by rpki-client