$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: 17VENe3Uq2esBRQOBXZ9MRRKrWx4Z3KrW5oFYEeneq4= Subject key identifier: EB:E9:36:89:17:9B:A7:C4:56:29:81:6D:5A:07:23:4C:93:1C:9F:03 Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 26B7B452A6820E98D0A80D10C7013E12702508B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03D8 Signing time: Sun 01 Mar 2026 11:12:06 +0000 Manifest this update: Sun 01 Mar 2026 11:07:06 +0000 Manifest next update: Wed 04 Mar 2026 16:34:06 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: wlLQgKGi+3kOkpoMGY9JN77emC4dgM41KfE2Q+cd+bg=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: 8OOCI6MYgwDKy2D6iLKIw3baH7QyXO8lUlRmAjt+heI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:34:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:b7:b4:52:a6:82:0e:98:d0:a8:0d:10:c7:01:3e:12:70:25:08:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Mar 1 11:07:06 2026 GMT Not After : Mar 4 16:34:06 2026 GMT Subject: CN=EBE93689179BA7C45629816D5A07234C931C9F03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ef:55:c9:8b:85:be:65:15:68:2c:bc:2f:ab: c0:40:c3:0e:f4:55:60:38:35:73:9c:02:b0:9a:5f: 0b:cc:f5:38:38:30:db:14:90:3f:50:49:a8:03:4d: 95:0e:1b:fc:e3:9d:04:6b:01:26:11:b5:71:8e:f9: ff:12:a2:e9:70:44:96:04:b2:88:cb:2a:e6:2b:dc: 0b:0f:39:c6:0c:1b:13:ec:14:43:07:39:78:dc:1a: eb:2a:93:05:7e:26:d4:da:6c:c2:a7:a9:47:1e:36: 63:c4:81:c9:34:cd:5d:9f:71:25:38:d0:5c:c2:e3: 15:05:45:be:49:a2:fa:a0:05:b0:f1:13:0a:95:89: 48:9f:ef:d3:f2:6d:95:19:99:0c:6f:6a:7d:be:70: 5e:07:50:a9:dc:a8:8c:81:13:f2:f0:54:ca:54:11: 05:e2:8d:93:f7:d2:e9:7e:b7:b3:8a:a7:00:59:0c: 84:1a:f1:ea:77:24:ca:fb:e5:44:de:6c:2e:61:80: 32:e6:0c:7e:37:ef:30:b7:67:7e:ae:9c:f1:41:69: fc:9e:90:52:13:01:11:0d:b8:12:6b:e1:0d:f9:01: e9:63:2b:e3:91:17:97:85:f8:c9:33:90:31:bb:81: 09:3f:ae:51:04:7b:f9:48:6f:16:c0:31:75:b8:22: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:E9:36:89:17:9B:A7:C4:56:29:81:6D:5A:07:23:4C:93:1C:9F:03 X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:96:43:e7:a5:c2:ef:3b:44:9c:90:39:d4:f7:0e:8f:b0:43: 0d:cc:62:b3:1b:a3:32:96:8c:bc:cc:79:d8:6c:dd:90:38:d2: 1a:3a:13:19:d1:bb:51:a1:93:05:81:b2:8d:57:f3:08:e2:ac: d4:98:80:92:09:48:94:8c:a0:35:33:d5:d5:78:22:a6:3c:7c: b9:f2:10:6c:c3:4f:2f:09:b5:1b:08:9c:d5:59:15:b4:d2:c4: eb:59:41:96:88:ad:cc:58:91:2a:a4:10:6a:b5:9b:44:99:78: 70:06:13:ad:8c:ff:01:79:c5:35:97:9f:fd:33:1c:61:1a:64: fb:ce:7f:ad:45:28:8b:15:35:ab:3c:42:fc:b1:73:d9:af:a1: bc:06:33:18:e1:b5:79:38:c4:b6:06:9c:d5:51:76:16:50:71: c1:78:2e:f1:90:bb:ac:8f:6c:a7:95:f7:8e:93:60:d1:4b:08: a5:c1:7d:f0:fd:54:87:76:b6:f1:56:0b:0c:56:94:f9:26:a3: 50:3c:b6:10:0b:1a:29:f0:1d:06:2f:8a:10:d4:63:53:19:97: c3:45:31:3a:ff:3d:ef:96:9c:66:2d:db:73:0d:da:bb:81:f0: 4b:40:48:8a:be:01:d2:b9:b6:ca:e2:2f:f1:91:0b:46:43:31: 63:eb:b3:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJre0UqaCDpjQqA0QxwE+EnAlCLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNjAzMDExMTA3MDZaFw0yNjAzMDQxNjM0MDZaMDMxMTAvBgNV BAMTKEVCRTkzNjg5MTc5QkE3QzQ1NjI5ODE2RDVBMDcyMzRDOTMxQzlGMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC271XJi4W+ZRVoLLwvq8BAww70 VWA4NXOcArCaXwvM9Tg4MNsUkD9QSagDTZUOG/zjnQRrASYRtXGO+f8SoulwRJYE sojLKuYr3AsPOcYMGxPsFEMHOXjcGusqkwV+JtTabMKnqUceNmPEgck0zV2fcSU4 0FzC4xUFRb5JovqgBbDxEwqViUif79PybZUZmQxvan2+cF4HUKncqIyBE/LwVMpU EQXijZP30ul+t7OKpwBZDIQa8ep3JMr75UTebC5hgDLmDH437zC3Z36unPFBafye kFITARENuBJr4Q35AeljK+ORF5eF+MkzkDG7gQk/rlEEe/lIbxbAMXW4Ijk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6+k2iRebp8RWKYFtWgcjTJMcnwMwHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEWWQ+elwu87RJyQOdT3Do+wQw3MYrMbozKW jLzMedhs3ZA40ho6ExnRu1GhkwWBso1X8wjirNSYgJIJSJSMoDUz1dV4IqY8fLny EGzDTy8JtRsInNVZFbTSxOtZQZaIrcxYkSqkEGq1m0SZeHAGE62M/wF5xTWXn/0z HGEaZPvOf61FKIsVNas8Qvyxc9mvobwGMxjhtXk4xLYGnNVRdhZQccF4LvGQu6yP bKeV946TYNFLCKXBffD9VId2tvFWCwxWlPkmo1A8thALGinwHQYvihDUY1MZl8NF MTr/Pe+WnGYt23MN2ruB8EtASIq+AdK5tsriL/GRC0ZDMWPrs0s= -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:55 2026 by rpki-client