$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: Dfl/PyC9iD8SdhlIINoJiAUaebj81YSLeRQdBqq5/ew= Subject key identifier: 18:18:10:0D:2D:0B:17:4A:E7:73:95:D2:6E:C2:FF:FA:82:83:EF:BF Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 36310B556F344DD3402D04898FFAF5BFF8563AF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 0125 Signing time: Wed 25 Mar 2026 12:32:36 +0000 Manifest this update: Wed 25 Mar 2026 12:27:36 +0000 Manifest next update: Sat 28 Mar 2026 15:51:36 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: i+aWB3ByZKJNtWqqQN6QFAuR5BtpCbA0Rmck60LE0V8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:31:0b:55:6f:34:4d:d3:40:2d:04:89:8f:fa:f5:bf:f8:56:3a:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Mar 25 12:27:36 2026 GMT Not After : Mar 28 15:51:36 2026 GMT Subject: CN=1818100D2D0B174AE77395D26EC2FFFA8283EFBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:fc:3f:5d:b0:d6:2d:ee:46:bc:be:71:09:f6: 41:8d:3d:46:30:e9:af:93:54:f9:b1:8a:0f:2e:88: eb:d3:81:b0:25:9c:9b:57:f2:b7:95:07:fc:97:95: 05:5d:60:7c:3c:88:dd:16:86:09:de:04:98:0f:bb: 18:c3:a1:23:73:ee:61:68:a6:01:f9:8b:cb:ad:7a: 50:f5:8c:3c:b0:c3:70:67:da:42:2b:9b:70:80:f0: 99:d4:e9:77:76:b9:71:d5:c2:1f:f0:de:e6:f3:f3: 50:fa:90:e2:e0:2b:75:c1:42:85:cb:3e:2a:5c:bf: 04:72:77:22:61:d7:e8:9c:7e:dd:db:29:e6:0f:a9: 25:b9:f9:53:ec:17:8f:31:e3:48:ce:d0:eb:d2:8f: 23:5d:78:f7:8e:f0:1a:d7:2a:00:de:c3:c6:08:18: a0:51:4f:d1:37:d9:4b:e2:15:50:99:e8:f1:41:58: 1e:22:fa:65:c6:89:50:e0:05:b9:2f:1b:7f:d1:57: f7:42:08:6e:47:99:67:d7:57:f5:61:3f:4d:a4:8e: 94:a8:ee:88:46:d9:45:3a:4b:c0:c7:34:01:9e:fd: 49:0f:ef:b7:9f:fb:55:f3:93:6b:e1:3d:5b:a6:a9: 4c:b9:74:be:80:65:62:3d:44:c3:88:da:33:e3:5d: bc:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:18:10:0D:2D:0B:17:4A:E7:73:95:D2:6E:C2:FF:FA:82:83:EF:BF X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fc:28:b8:07:64:24:5c:b6:b0:1e:b6:fe:11:df:d4:2e:8c: 27:cc:9e:f0:14:ef:89:13:cb:50:81:18:07:9d:3e:4b:0d:2b: 20:6a:58:5a:14:c1:2a:fe:39:3c:78:04:a6:55:50:5c:26:4b: ed:38:16:48:15:b4:c3:cb:bd:00:4b:1e:7f:30:0f:ce:6a:3b: cb:a1:c3:ee:7a:43:63:2f:04:e3:3b:5f:07:49:f0:53:bf:9a: 9b:b6:b1:4c:a5:9f:28:33:a0:df:01:1a:6f:ce:1a:df:71:4e: 5b:dc:4d:e5:2f:cd:d5:4e:0f:fa:98:98:4b:15:e9:d0:a6:12: 95:47:96:87:c9:32:ae:d6:df:8b:d8:c4:1e:4e:da:86:ca:ff: 95:56:43:4f:af:7b:13:d9:2c:2f:42:d2:f6:08:46:e1:9b:6e: 7e:cc:7b:b1:a2:71:b4:ab:3d:40:65:38:7a:98:7b:f1:80:d9: 07:49:a7:fe:e7:76:d3:d9:84:1a:c9:3e:56:09:7a:c5:6e:64: a2:7e:f7:88:e9:57:e6:da:74:fa:a8:a5:fc:9b:49:e5:cc:ee: c9:1e:d4:f0:a7:7f:61:4a:82:54:4a:8b:cb:d7:0d:41:c9:db: 4d:bb:1f:a1:6b:84:5d:29:34:18:52:f9:15:b4:18:0a:74:34: 75:fa:ab:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNjELVW80TdNALQSJj/r1v/hWOvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNjAzMjUxMjI3MzZaFw0yNjAzMjgxNTUxMzZaMDMxMTAvBgNV BAMTKDE4MTgxMDBEMkQwQjE3NEFFNzczOTVEMjZFQzJGRkZBODI4M0VGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2/D9dsNYt7ka8vnEJ9kGNPUYw 6a+TVPmxig8uiOvTgbAlnJtX8reVB/yXlQVdYHw8iN0WhgneBJgPuxjDoSNz7mFo pgH5i8utelD1jDyww3Bn2kIrm3CA8JnU6Xd2uXHVwh/w3ubz81D6kOLgK3XBQoXL PipcvwRydyJh1+icft3bKeYPqSW5+VPsF48x40jO0OvSjyNdePeO8BrXKgDew8YI GKBRT9E32UviFVCZ6PFBWB4i+mXGiVDgBbkvG3/RV/dCCG5HmWfXV/VhP02kjpSo 7ohG2UU6S8DHNAGe/UkP77ef+1Xzk2vhPVumqUy5dL6AZWI9RMOI2jPjXbxBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGBgQDS0LF0rnc5XSbsL/+oKD778wHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT8KLgHZCRctrAetv4R39QujCfMnvAU74kT y1CBGAedPksNKyBqWFoUwSr+OTx4BKZVUFwmS+04FkgVtMPLvQBLHn8wD85qO8uh w+56Q2MvBOM7XwdJ8FO/mpu2sUylnygzoN8BGm/OGt9xTlvcTeUvzdVOD/qYmEsV 6dCmEpVHlofJMq7W34vYxB5O2obK/5VWQ0+vexPZLC9C0vYIRuGbbn7Me7GicbSr PUBlOHqYe/GA2QdJp/7ndtPZhBrJPlYJesVuZKJ+94jpV+badPqopfybSeXM7ske 1PCnf2FKglRKi8vXDUHJ2027H6FrhF0pNBhS+RW0GAp0NHX6q28= -----END CERTIFICATE-----Generated at Thu Mar 26 19:30:53 2026 by rpki-client