$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: ezxM3wKOyi0QIc/BbLxnGq/MEMxL+DAnVm8jk0S0F5w= Subject key identifier: 23:3A:FE:81:9F:05:53:8B:47:96:A8:F3:F0:E6:AA:86:86:2F:D1:C5 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 04CA8B39937449DC8955445767B89571BF1AB272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0284 Signing time: Thu 26 Mar 2026 05:11:16 +0000 Manifest this update: Thu 26 Mar 2026 05:06:16 +0000 Manifest next update: Sun 29 Mar 2026 13:31:16 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: QmM1Z2Z4uIpPK8JZRvnQA0TUaQpZxuxqFK0VfqGHaJE=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: 1HQUgBaMMc8FXO2SWeKN9gV36q4emO7zTpOs+ZYJF8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:31:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ca:8b:39:93:74:49:dc:89:55:44:57:67:b8:95:71:bf:1a:b2:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Mar 26 05:06:16 2026 GMT Not After : Mar 29 13:31:16 2026 GMT Subject: CN=233AFE819F05538B4796A8F3F0E6AA86862FD1C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:af:7e:35:2f:47:b7:75:88:8c:99:e4:c9:2f: 10:bd:6e:5a:cc:d3:02:de:03:aa:25:46:e8:5c:28: ac:eb:52:fc:f5:4f:3d:e4:98:b4:f5:16:33:43:cf: e6:d0:d2:c3:e4:61:81:ef:e7:0e:88:99:1f:01:5d: 5a:50:18:20:cf:7f:c7:89:32:2e:ba:28:6e:9f:4d: dd:66:cb:2e:7a:0e:a4:fd:c6:a8:84:b6:de:d6:e5: 70:f2:a3:74:79:b3:99:27:b0:8f:c0:1b:1f:9f:0a: ab:6f:b4:14:45:0e:47:0c:a7:53:99:4c:8b:37:a7: b1:62:89:80:5e:4e:a1:42:b8:11:c1:26:dc:7a:be: d7:b8:e7:37:d3:14:80:d2:77:25:f4:7e:d0:3e:74: b8:b9:6c:fe:e2:0f:bb:f3:1c:7d:31:3b:ef:3d:8e: aa:a6:a5:dd:e8:f7:30:4b:f7:90:af:98:d0:23:fe: b2:fb:a0:93:f9:db:bd:b2:cf:e5:10:56:f0:5e:69: 83:43:78:08:43:76:44:ec:cc:d3:bf:f4:32:5c:2c: 9d:aa:cf:7b:d5:54:d8:97:5b:f9:6c:e3:b0:89:f4: 2b:01:0a:5b:ae:17:08:10:14:bc:68:6d:63:98:17: 23:a2:e2:07:a0:9a:ac:f8:75:a3:ac:87:28:c8:05: c6:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:3A:FE:81:9F:05:53:8B:47:96:A8:F3:F0:E6:AA:86:86:2F:D1:C5 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:80:9e:4e:7f:57:5c:f2:46:cf:03:0a:d6:cd:53:e9:26:38: b8:b6:b9:6d:81:84:25:7d:5f:39:3c:62:90:f6:f9:be:29:56: 23:82:ea:01:12:6c:e4:7a:71:13:fd:93:12:55:80:7b:7c:ae: 00:b6:51:8a:e7:da:91:c1:4d:82:ac:74:76:8e:0b:00:10:43: 17:97:80:0a:70:b4:da:ea:77:6b:c1:c6:aa:4c:15:7b:9e:4a: f3:44:4c:51:ed:09:ab:c9:42:93:19:62:78:44:80:10:89:85: 9c:f2:0f:10:09:89:85:b4:d1:35:e8:6e:8e:f8:62:cb:da:6b: 55:9c:73:5a:fb:c5:1b:45:95:5e:79:13:90:d9:33:cb:55:b4: 59:61:53:5c:6a:82:1c:e7:eb:d6:ed:ac:aa:7a:e8:a8:5c:4f: c9:1e:eb:35:0a:1d:e1:06:ff:d4:00:8c:51:ee:58:74:af:52: f9:5b:52:f3:32:b1:77:40:b3:9d:7c:b6:98:fc:3c:ba:a2:90: 26:22:1b:eb:d2:c9:78:e7:a3:81:6f:55:38:dd:a4:6c:4e:44: de:98:5f:54:ae:34:e5:54:53:81:da:ab:f1:2b:d1:eb:3f:e8: 6e:f0:7d:56:fb:b0:a0:d1:9b:9e:3d:6e:73:a6:df:91:69:b1: b0:3d:09:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMqLOZN0SdyJVURXZ7iVcb8asnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNjAzMjYwNTA2MTZaFw0yNjAzMjkxMzMxMTZaMDMxMTAvBgNV BAMTKDIzM0FGRTgxOUYwNTUzOEI0Nzk2QThGM0YwRTZBQTg2ODYyRkQxQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTr341L0e3dYiMmeTJLxC9blrM 0wLeA6olRuhcKKzrUvz1Tz3kmLT1FjNDz+bQ0sPkYYHv5w6ImR8BXVpQGCDPf8eJ Mi66KG6fTd1myy56DqT9xqiEtt7W5XDyo3R5s5knsI/AGx+fCqtvtBRFDkcMp1OZ TIs3p7FiiYBeTqFCuBHBJtx6vte45zfTFIDSdyX0ftA+dLi5bP7iD7vzHH0xO+89 jqqmpd3o9zBL95CvmNAj/rL7oJP5272yz+UQVvBeaYNDeAhDdkTszNO/9DJcLJ2q z3vVVNiXW/ls47CJ9CsBCluuFwgQFLxobWOYFyOi4gegmqz4daOshyjIBcaxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIzr+gZ8FU4tHlqjz8OaqhoYv0cUwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKAnk5/V1zyRs8DCtbNU+kmOLi2uW2BhCV9 Xzk8YpD2+b4pViOC6gESbOR6cRP9kxJVgHt8rgC2UYrn2pHBTYKsdHaOCwAQQxeX gApwtNrqd2vBxqpMFXueSvNETFHtCavJQpMZYnhEgBCJhZzyDxAJiYW00TXobo74 Ysvaa1Wcc1r7xRtFlV55E5DZM8tVtFlhU1xqghzn69btrKp66KhcT8ke6zUKHeEG /9QAjFHuWHSvUvlbUvMysXdAs518tpj8PLqikCYiG+vSyXjno4FvVTjdpGxORN6Y X1SuNOVUU4Haq/Er0es/6G7wfVb7sKDRm549bnOm35FpsbA9Cc8= -----END CERTIFICATE-----Generated at Thu Mar 26 16:10:11 2026 by rpki-client