$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: +Ir4mLSlvWCz0o/aoUkyPu8TO6KEc3Z3tedpGealMbY= Subject key identifier: 3D:8F:FE:FB:49:84:18:29:D4:54:44:16:62:47:24:11:B2:1F:2C:BB Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 73DAD766C003F9E86CCE9049972EB78E51B8C4E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03ED Signing time: Fri 17 Apr 2026 00:21:13 +0000 Manifest this update: Fri 17 Apr 2026 00:16:13 +0000 Manifest next update: Mon 20 Apr 2026 08:31:13 +0000 Files and hashes: 1: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: 8OOCI6MYgwDKy2D6iLKIw3baH7QyXO8lUlRmAjt+heI=) 2: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: 4Za79O2pOqYyEg71MHYi33MQC7fX17zufj5pKBV+I48=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 08:31:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:da:d7:66:c0:03:f9:e8:6c:ce:90:49:97:2e:b7:8e:51:b8:c4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Apr 17 00:16:13 2026 GMT Not After : Apr 20 08:31:13 2026 GMT Subject: CN=3D8FFEFB49841829D454441662472411B21F2CBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:29:e2:41:3e:61:70:dc:57:9f:8f:54:67:39: 6a:d6:89:c3:0f:6e:dd:ee:be:46:34:fe:74:d0:23: c0:d7:03:b6:d9:04:17:b9:2b:1a:4e:3f:67:01:12: 16:5c:1f:30:3e:7e:cc:57:41:32:f8:1c:50:d0:31: 5e:06:d4:72:9c:71:e5:81:8f:c8:5a:64:dd:d1:7b: b9:eb:30:6f:16:f1:91:de:24:89:06:99:6d:4e:d1: f1:3c:e0:c8:05:af:fa:9d:34:5d:f2:db:b4:83:58: c8:01:93:1b:44:f4:0d:79:e2:e0:51:a0:03:b2:d6: 97:5c:89:1a:23:9e:2c:fa:df:6c:e4:44:a5:2f:77: 91:e5:c9:3d:e3:fb:69:f1:a5:e4:33:fc:11:3b:bc: 83:36:5d:d0:09:a4:e7:0b:8c:d1:52:e5:85:44:6d: ea:3c:d4:96:df:a3:8c:f4:62:55:04:f5:7a:46:a8: 8f:04:06:7f:23:2e:73:46:3f:75:6a:bf:cc:7c:a0: 4c:07:5a:16:ba:33:cd:0c:2e:69:f3:1b:55:35:ba: c0:ea:bf:4a:39:09:31:6f:cb:f7:81:23:ed:e9:0e: 6d:20:61:b6:13:43:c2:39:ed:66:44:3a:04:39:7b: b4:97:f2:ba:e6:4d:89:18:dd:32:93:04:2a:0d:77: fc:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:8F:FE:FB:49:84:18:29:D4:54:44:16:62:47:24:11:B2:1F:2C:BB X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:57:45:30:7a:cd:b5:7c:5c:bc:73:38:f7:c1:61:37:c6:8f: e7:7a:d3:36:aa:f8:2c:62:bb:c4:4e:76:4b:31:0b:6c:71:ad: 14:26:98:fa:16:e9:f8:2f:60:c5:05:9e:6b:3a:7f:02:de:bd: b1:d7:f2:e8:99:61:2b:cf:ea:e7:2b:ec:69:18:66:23:1e:f8: f0:e9:de:64:a5:98:3b:7d:d0:b1:75:56:7d:33:6a:37:ff:39: d0:ac:12:ce:f1:6c:1f:14:fb:0e:b4:4f:26:ca:6b:e5:bb:1e: 51:63:6b:5b:a2:db:88:56:d4:dd:84:2f:fa:54:c9:b0:95:54: 17:d9:d4:ed:79:f7:37:b5:6d:58:f7:ce:81:9c:9a:4e:7b:c4: 2c:d7:de:44:46:52:42:98:5e:b6:b8:6f:3e:44:e7:b1:a1:7c: 8d:9e:49:9f:65:52:9c:11:39:0c:94:58:2a:30:1f:8d:2c:4e: 5b:4b:92:66:5d:8c:65:4a:dc:67:5b:92:16:b7:24:74:32:1c: 04:82:47:9e:f0:81:b9:f5:75:a4:63:60:8b:3b:a9:ac:d0:df: 12:a9:88:cf:ea:40:01:82:3d:39:bc:59:ed:59:86:b4:10:cd: af:2b:ce:4f:d7:9c:82:6f:f8:c6:df:3c:08:49:d3:47:a7:7f: 90:16:27:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9rXZsAD+ehszpBJly63jlG4xOgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNjA0MTcwMDE2MTNaFw0yNjA0MjAwODMxMTNaMDMxMTAvBgNV BAMTKDNEOEZGRUZCNDk4NDE4MjlENDU0NDQxNjYyNDcyNDExQjIxRjJDQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYKeJBPmFw3Fefj1RnOWrWicMP bt3uvkY0/nTQI8DXA7bZBBe5KxpOP2cBEhZcHzA+fsxXQTL4HFDQMV4G1HKcceWB j8haZN3Re7nrMG8W8ZHeJIkGmW1O0fE84MgFr/qdNF3y27SDWMgBkxtE9A154uBR oAOy1pdciRojniz632zkRKUvd5HlyT3j+2nxpeQz/BE7vIM2XdAJpOcLjNFS5YVE beo81Jbfo4z0YlUE9XpGqI8EBn8jLnNGP3Vqv8x8oEwHWha6M80MLmnzG1U1usDq v0o5CTFvy/eBI+3pDm0gYbYTQ8I57WZEOgQ5e7SX8rrmTYkY3TKTBCoNd/wxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPY/++0mEGCnUVEQWYkckEbIfLLswHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABFXRTB6zbV8XLxzOPfBYTfGj+d60zaq+Cxi u8ROdksxC2xxrRQmmPoW6fgvYMUFnms6fwLevbHX8uiZYSvP6ucr7GkYZiMe+PDp 3mSlmDt90LF1Vn0zajf/OdCsEs7xbB8U+w60TybKa+W7HlFja1ui24hW1N2EL/pU ybCVVBfZ1O159ze1bVj3zoGcmk57xCzX3kRGUkKYXra4bz5E57GhfI2eSZ9lUpwR OQyUWCowH40sTltLkmZdjGVK3Gdbkha3JHQyHASCR57wgbn1daRjYIs7qazQ3xKp iM/qQAGCPTm8We1ZhrQQza8rzk/XnIJv+MbfPAhJ00enf5AWJ3I= -----END CERTIFICATE-----Generated at Sat Apr 18 04:39:40 2026 by rpki-client