$ rpki-client -vvf repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft File: 2140359E23DF113617F9AB2E131D231E4D35F9AA.mft (raw, json) Hash identifier: hD9BT0U6r2srMssM4C6qpwRgihTT9J5TswAHEutkMII= Subject key identifier: 17:5B:98:A5:7F:CC:7F:85:98:79:E2:AC:0B:D8:95:87:F3:9A:D7:03 Authority key identifier: 21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA Certificate issuer: /CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Certificate serial: 4DFFBC5F52CC7150CB31F4DDCB6A50235B91A54C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft Manifest number: 0561 Signing time: Wed 25 Mar 2026 05:42:17 +0000 Manifest this update: Wed 25 Mar 2026 05:37:17 +0000 Manifest next update: Sat 28 Mar 2026 12:59:17 +0000 Files and hashes: 1: 2140359E23DF113617F9AB2E131D231E4D35F9AA.crl (hash: GP6ZmWpa4QJkaQWfkIR7VdlLchT9RmZplgasGDXn+Dc=) 2: 3130312e3230332e3136382e302f32322d3234203d3e203535363734.roa (hash: g2j4L6oa7s+Yo5r0t0sgHCPdhAYOBJ4LtHuSFZmj5UA=) 3: 323430353a6234303a3a2f33322d3438203d3e203535363734.roa (hash: M9IqkBmv/6mvit+aqd+lb7yJ4UZJweQxalWJOia6lMg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 12:59:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:ff:bc:5f:52:cc:71:50:cb:31:f4:dd:cb:6a:50:23:5b:91:a5:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2140359E23DF113617F9AB2E131D231E4D35F9AA Validity Not Before: Mar 25 05:37:17 2026 GMT Not After : Mar 28 12:59:17 2026 GMT Subject: CN=175B98A57FCC7F859879E2AC0BD89587F39AD703 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:59:76:4c:d4:ef:7c:9c:d4:bd:96:7a:96:a4: 3c:65:f0:01:ce:ae:c3:cc:4c:3c:61:63:4a:3d:3f: 1b:a8:c8:72:ac:b6:70:fa:e2:1c:ac:ab:0e:a5:13: c7:65:46:3d:36:d9:83:54:62:0d:b5:b5:62:38:d8: bc:c7:f7:e2:d2:bb:b1:54:92:97:0c:2b:f2:2f:b4: e4:6f:48:fb:4b:0a:43:ba:c3:ed:f7:ec:3e:71:6d: 0e:b0:17:30:7b:c7:8d:cb:6e:03:fa:fb:aa:ed:4d: 2e:99:04:f4:79:a5:87:9e:1a:11:f4:21:19:98:78: de:42:c6:d4:12:c5:fe:ea:54:70:e0:75:00:68:65: db:4b:17:76:8e:49:c9:68:7e:ce:95:af:07:e7:e7: 58:84:2d:a0:3d:50:4c:d8:49:71:a4:f9:76:f9:ea: 3a:ed:52:12:d4:70:ed:5e:43:d5:7e:8f:9a:48:80: ae:6f:50:db:e8:4e:ba:0a:47:1b:1f:0a:19:64:d0: 0d:91:82:c6:81:c3:38:3c:ef:4a:8a:45:dc:38:4a: 64:08:b4:be:5a:51:a8:e3:40:3e:48:ff:22:6c:28: d2:20:94:1d:73:55:f5:68:80:28:c0:d5:e7:ee:a8: c0:78:75:2c:82:ef:c3:d5:e2:77:54:8b:5b:e4:9f: 3c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:5B:98:A5:7F:CC:7F:85:98:79:E2:AC:0B:D8:95:87:F3:9A:D7:03 X509v3 Authority Key Identifier: keyid:21:40:35:9E:23:DF:11:36:17:F9:AB:2E:13:1D:23:1E:4D:35:F9:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2140359E23DF113617F9AB2E131D231E4D35F9AA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0180f755-5c27-40f8-80af-2fa8df115282/0/2140359E23DF113617F9AB2E131D231E4D35F9AA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:c6:a4:5f:cd:ba:59:f5:1f:98:3a:d7:d9:b8:79:89:ce:aa: 93:9e:b5:51:82:5e:38:c7:73:a7:ea:8b:f8:d1:85:61:27:7c: f2:8f:4a:46:60:bb:02:73:56:82:18:82:42:af:80:c3:f2:9e: 38:c1:19:40:fe:0b:5c:8e:37:b4:b0:53:ee:5b:7c:84:c3:48: 4f:9a:13:09:1a:c1:f5:32:e3:9e:bc:96:49:53:80:cb:b5:96: 2a:eb:f7:b5:80:cd:50:36:2f:d0:92:7a:6f:88:cf:c7:de:3f: ae:38:b6:a9:dc:8d:fa:10:2a:8e:41:49:3f:c0:de:3c:cf:85: 49:72:f4:f4:e5:68:c2:4e:62:f3:c6:3d:c5:00:0c:9e:3c:96: 1b:d3:79:85:46:13:58:c9:25:c3:c1:3d:0c:80:03:c3:e1:73: 7d:a3:74:75:5b:16:53:f8:d9:02:88:62:c1:6c:d3:55:68:92: 86:f5:b1:60:fa:31:43:2e:4a:da:45:18:a0:39:f5:fc:fd:c7: 10:2c:9b:a2:12:5f:92:85:ce:03:1b:39:39:d7:1c:36:9d:80: d7:90:f9:9d:ac:6e:57:70:d7:51:b2:ab:e3:e1:3b:60:3d:0c: c0:64:2a:97:96:ba:06:8b:93:fe:bd:d5:d0:33:9f:62:7e:c4: f3:68:88:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTf+8X1LMcVDLMfTdy2pQI1uRpUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0 RDM1RjlBQTAeFw0yNjAzMjUwNTM3MTdaFw0yNjAzMjgxMjU5MTdaMDMxMTAvBgNV BAMTKDE3NUI5OEE1N0ZDQzdGODU5ODc5RTJBQzBCRDg5NTg3RjM5QUQ3MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHWXZM1O98nNS9lnqWpDxl8AHO rsPMTDxhY0o9PxuoyHKstnD64hysqw6lE8dlRj022YNUYg21tWI42LzH9+LSu7FU kpcMK/IvtORvSPtLCkO6w+337D5xbQ6wFzB7x43LbgP6+6rtTS6ZBPR5pYeeGhH0 IRmYeN5CxtQSxf7qVHDgdQBoZdtLF3aOSclofs6Vrwfn51iELaA9UEzYSXGk+Xb5 6jrtUhLUcO1eQ9V+j5pIgK5vUNvoTroKRxsfChlk0A2RgsaBwzg870qKRdw4SmQI tL5aUajjQD5I/yJsKNIglB1zVfVogCjA1efuqMB4dSyC78PV4ndUi1vknzxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF1uYpX/Mf4WYeeKsC9iVh/Oa1wMwHwYDVR0j BBgwFoAUIUA1niPfETYX+asuEx0jHk01+aowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTgwZjc1NS01YzI3LTQwZjgtODBhZi0yZmE4ZGYxMTUyODIvMC8yMTQwMzU5RTIz REYxMTM2MTdGOUFCMkUxMzFEMjMxRTREMzVGOUFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIzMUU0RDM1 RjlBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE4MGY3NTUtNWMyNy00MGY4LTgw YWYtMmZhOGRmMTE1MjgyLzAvMjE0MDM1OUUyM0RGMTEzNjE3RjlBQjJFMTMxRDIz MUU0RDM1RjlBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFTGpF/Nuln1H5g619m4eYnOqpOetVGCXjjH c6fqi/jRhWEnfPKPSkZguwJzVoIYgkKvgMPynjjBGUD+C1yON7SwU+5bfITDSE+a EwkawfUy4568lklTgMu1lirr97WAzVA2L9CSem+Iz8feP644tqncjfoQKo5BST/A 3jzPhUly9PTlaMJOYvPGPcUADJ48lhvTeYVGE1jJJcPBPQyAA8Phc32jdHVbFlP4 2QKIYsFs01Vokob1sWD6MUMuStpFGKA59fz9xxAsm6ISX5KFzgMbOTnXHDadgNeQ +Z2sbldw11Gyq+PhO2A9DMBkKpeWugaLk/691dAzn2J+xPNoiEA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:04:19 2026 by rpki-client