$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: KKzURdIhOGtgFJTW2WV9NTjv5Mqn8KCk2p0MDIMTaJA= Subject key identifier: 98:86:1D:A3:26:A2:6A:67:26:57:67:E0:C6:A9:E2:53:A7:CE:68:53 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 06656537F1FF8D9A01B47DC435F165D535E7285F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 026F Signing time: Sun 01 Mar 2026 20:52:21 +0000 Manifest this update: Sun 01 Mar 2026 20:47:21 +0000 Manifest next update: Thu 05 Mar 2026 05:37:21 +0000 Files and hashes: 1: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: 3N9vGpzicEQrKCimsnqA3w/ihRG/AGoFcGCXi7kF8Ts=) 2: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=) 3: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:37:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:65:65:37:f1:ff:8d:9a:01:b4:7d:c4:35:f1:65:d5:35:e7:28:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Mar 1 20:47:21 2026 GMT Not After : Mar 5 05:37:21 2026 GMT Subject: CN=98861DA326A26A67265767E0C6A9E253A7CE6853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:ea:b9:2b:df:65:40:1f:07:38:22:86:44:16: d3:97:59:5f:b9:7c:1a:b3:58:7e:58:be:1f:4f:85: ba:72:92:38:9a:50:c3:46:7f:5b:9a:ee:ee:22:92: 7a:19:2d:22:5b:e8:bf:20:8b:1f:58:da:9f:5d:39: 30:f6:6b:58:a7:df:4d:c4:53:aa:60:a0:a5:9c:61: 4c:92:a9:42:ad:82:af:1c:6f:8f:c5:c2:f7:13:87: a1:63:4f:1c:4b:8f:33:3f:ef:45:51:16:f1:af:f1: ad:25:0d:5c:c6:da:7c:59:6b:6f:6d:e2:a8:76:fa: ff:97:0a:75:66:7c:e6:a8:35:80:69:c8:4e:2c:90: 55:d1:29:a1:02:0e:5c:b4:d7:65:3e:a0:25:a6:4c: 9f:57:aa:59:fa:ca:ae:dd:e0:ba:f0:c6:3b:a4:2f: a2:44:4a:37:53:bd:1d:21:d7:74:bb:7e:56:72:10: 07:e5:4c:cf:b2:5f:f8:b6:16:ed:59:37:e6:1f:13: 50:7a:65:b0:a0:38:47:91:03:9f:6e:24:bb:e4:57: fe:14:df:2b:2a:38:d4:c1:90:81:21:6c:3c:55:92: c5:0d:b8:0d:33:80:72:c9:5f:98:57:29:2d:74:3e: 9b:ae:16:8a:77:46:1c:81:6d:60:00:14:28:78:d3: 9b:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:86:1D:A3:26:A2:6A:67:26:57:67:E0:C6:A9:E2:53:A7:CE:68:53 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:73:a0:30:89:6c:f9:37:2d:ef:2a:88:7b:61:0f:40:3a:b5: 85:c0:b6:1c:a1:8f:7f:a0:ff:41:76:57:57:36:82:5a:8c:7e: 13:a2:98:64:48:83:be:c9:6b:b7:77:6f:dd:e8:5b:35:14:1e: 85:ca:08:2a:a1:89:98:fa:bd:9d:7d:d8:c6:d9:7d:18:4b:67: e0:71:b0:aa:72:5c:71:ea:e4:ec:0d:e2:9c:36:e3:31:f9:08: ff:ac:71:fa:10:1e:35:dc:00:a4:f6:06:a5:97:d6:66:53:b3: cf:69:c2:26:b0:be:63:6f:69:e2:f5:9a:d9:e0:b7:8d:ce:54: 7b:aa:6e:1e:fd:b5:bb:65:3a:b7:38:b9:1b:75:83:3e:04:4d: 71:1b:1d:24:33:ac:c4:63:b3:65:40:ba:96:c7:70:0a:a5:3d: df:be:b2:7a:f7:2b:e2:7a:46:81:93:51:df:38:8e:7d:7c:0c: 3c:d2:1c:40:c9:1d:a9:46:8b:8b:70:e2:ec:ba:a1:78:4b:fc: 0d:07:4d:89:e0:c4:8f:db:40:ee:35:3d:0b:23:7f:eb:b2:cf: f8:02:f4:d8:fd:84:2a:c7:31:a9:5f:8a:7c:f4:21:c2:f4:26: 0c:e7:0b:0e:b5:8e:bc:bd:26:8b:dd:e0:c6:fb:69:e2:af:66: 7b:19:16:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBmVlN/H/jZoBtH3ENfFl1TXnKF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNjAzMDEyMDQ3MjFaFw0yNjAzMDUwNTM3MjFaMDMxMTAvBgNV BAMTKDk4ODYxREEzMjZBMjZBNjcyNjU3NjdFMEM2QTlFMjUzQTdDRTY4NTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDE6rkr32VAHwc4IoZEFtOXWV+5 fBqzWH5Yvh9PhbpykjiaUMNGf1ua7u4iknoZLSJb6L8gix9Y2p9dOTD2a1in303E U6pgoKWcYUySqUKtgq8cb4/FwvcTh6FjTxxLjzM/70VRFvGv8a0lDVzG2nxZa29t 4qh2+v+XCnVmfOaoNYBpyE4skFXRKaECDly012U+oCWmTJ9Xqln6yq7d4Lrwxjuk L6JESjdTvR0h13S7flZyEAflTM+yX/i2Fu1ZN+YfE1B6ZbCgOEeRA59uJLvkV/4U 3ysqONTBkIEhbDxVksUNuA0zgHLJX5hXKS10PpuuFop3RhyBbWAAFCh405vjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmIYdoyaiamcmV2fgxqniU6fOaFMwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHpzoDCJbPk3Le8qiHthD0A6tYXAthyhj3+g /0F2V1c2glqMfhOimGRIg77Ja7d3b93oWzUUHoXKCCqhiZj6vZ192MbZfRhLZ+Bx sKpyXHHq5OwN4pw24zH5CP+scfoQHjXcAKT2BqWX1mZTs89pwiawvmNvaeL1mtng t43OVHuqbh79tbtlOrc4uRt1gz4ETXEbHSQzrMRjs2VAupbHcAqlPd++snr3K+J6 RoGTUd84jn18DDzSHEDJHalGi4tw4uy6oXhL/A0HTYngxI/bQO41PQsjf+uyz/gC 9Nj9hCrHMalfinz0IcL0JgznCw61jry9Jovd4Mb7aeKvZnsZFnU= -----END CERTIFICATE-----Generated at Mon Mar 2 14:29:29 2026 by rpki-client