$ rpki-client -vvf repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft File: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft (raw, json) Hash identifier: I8AiV4Z6smivCXXNU2Xr1JQfFSA7qf6tRkIhvDSrEI8= Subject key identifier: EE:0C:6E:5E:99:2B:C3:3E:F4:F7:37:E9:B2:91:AE:43:A7:6F:6B:53 Authority key identifier: 14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B Certificate issuer: /CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Certificate serial: 2B83A415B2E57C90E46BA70C7BBF242619CCCB7B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft Manifest number: FC Signing time: Wed 25 Mar 2026 11:31:10 +0000 Manifest this update: Wed 25 Mar 2026 11:26:10 +0000 Manifest next update: Sat 28 Mar 2026 16:47:10 +0000 Files and hashes: 1: 14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl (hash: GpJRdyVBeGM1Jt1JXEBpyNTMPqN+p2MOy5+PqBm1XP4=) 2: 3230322e34372e3137352e302f32342d3234203d3e20313532303333.roa (hash: XksCWCwCEfjKtaahou1lG189rxAz7b8EI9jL1IweY6M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:47:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:83:a4:15:b2:e5:7c:90:e4:6b:a7:0c:7b:bf:24:26:19:cc:cb:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CF99DEFA1B9276EBEE61180DF4770177957E3B Validity Not Before: Mar 25 11:26:10 2026 GMT Not After : Mar 28 16:47:10 2026 GMT Subject: CN=EE0C6E5E992BC33EF4F737E9B291AE43A76F6B53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:ef:79:2c:5f:2d:1e:63:55:82:12:94:b4:18: 36:05:ca:1a:6b:43:c0:69:62:35:8d:29:23:a9:79: 98:77:61:1e:6b:e8:f6:09:2a:28:14:cf:9e:e4:e2: 6b:54:f1:3a:a3:42:5b:7e:c1:35:82:0e:8e:62:9e: e0:02:ad:89:e5:fd:8f:2c:11:46:b5:3a:02:fb:39: ab:a0:6c:d9:bf:21:93:12:97:e0:3b:8d:18:bb:f9: 16:cc:8a:d1:c8:a3:b2:ac:6a:fb:c0:b4:55:ba:96: 4c:26:2d:b8:dd:22:a6:86:cd:3c:7d:1d:39:19:68: 6a:29:95:7e:d9:2e:0b:8f:86:26:52:c5:fa:46:73: dd:bb:37:05:2b:8b:96:4d:19:5b:2e:f1:73:5b:7d: dc:c8:c6:ca:6a:53:61:90:fa:30:0b:7c:aa:2d:8d: 87:9a:f3:da:a5:57:2e:9c:4f:8b:4c:99:72:0e:f2: 4d:6e:96:70:97:77:9e:1d:01:20:e1:0f:60:36:bf: 59:51:d4:55:8a:e2:da:02:fc:45:0e:58:48:b4:05: 15:76:85:d9:22:aa:cf:a1:83:26:32:12:28:a3:30: a3:a8:1b:6f:ec:f2:d7:a0:6b:80:6e:4d:66:eb:11: 2b:2b:dd:32:9c:fa:d2:23:74:e7:6c:22:24:97:75: c1:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:0C:6E:5E:99:2B:C3:3E:F4:F7:37:E9:B2:91:AE:43:A7:6F:6B:53 X509v3 Authority Key Identifier: keyid:14:CF:99:DE:FA:1B:92:76:EB:EE:61:18:0D:F4:77:01:77:95:7E:3B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CF99DEFA1B9276EBEE61180DF4770177957E3B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/097f5161-070f-4339-af4e-bc33fdfb67b8/0/14CF99DEFA1B9276EBEE61180DF4770177957E3B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:0a:2a:88:df:03:76:f5:2b:d2:c0:8a:6a:4f:30:16:38:18: 7d:2e:09:1c:ce:bb:53:a3:fb:46:1a:a0:c1:26:7c:7a:c9:57: b7:66:e7:0c:85:73:d0:75:88:fc:78:49:fb:47:f4:3d:ca:39: d6:ba:53:28:41:4a:48:9f:5f:68:34:21:91:2d:2c:a8:6e:ab: 2e:02:e7:d6:d3:01:5b:31:3e:25:ef:e2:47:dd:a4:60:63:31: 21:89:bf:35:86:e7:b5:e8:b1:72:1b:c2:41:60:f2:50:df:d4: 0a:b3:9d:c7:36:14:63:57:4a:35:58:68:b8:30:c7:2f:9b:5d: d0:74:e0:dc:a7:37:42:d7:fa:be:de:94:e1:63:b8:6b:26:ea: 66:f0:72:f8:14:3a:8e:c6:f6:ff:e9:3a:b2:90:0c:62:7a:6f: d4:38:e8:8e:8f:7f:41:38:1e:03:bc:30:8f:ac:4c:0f:74:1b: 16:0a:fa:52:80:93:53:b8:1f:36:dc:5d:af:3d:d2:07:17:51: c4:6f:ee:6a:24:d5:87:b4:62:34:f7:ef:6c:13:5c:1f:9a:65: cd:59:45:21:70:b9:8a:34:57:90:89:ad:c5:fa:f8:2a:43:fd: da:8b:e3:6b:46:fc:a1:85:01:27:40:97:01:53:9a:2f:22:5e: 54:62:08:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK4OkFbLlfJDka6cMe78kJhnMy3swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3 Nzk1N0UzQjAeFw0yNjAzMjUxMTI2MTBaFw0yNjAzMjgxNjQ3MTBaMDMxMTAvBgNV BAMTKEVFMEM2RTVFOTkyQkMzM0VGNEY3MzdFOUIyOTFBRTQzQTc2RjZCNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf73ksXy0eY1WCEpS0GDYFyhpr Q8BpYjWNKSOpeZh3YR5r6PYJKigUz57k4mtU8TqjQlt+wTWCDo5inuACrYnl/Y8s EUa1OgL7OaugbNm/IZMSl+A7jRi7+RbMitHIo7KsavvAtFW6lkwmLbjdIqaGzTx9 HTkZaGoplX7ZLguPhiZSxfpGc927NwUri5ZNGVsu8XNbfdzIxspqU2GQ+jALfKot jYea89qlVy6cT4tMmXIO8k1ulnCXd54dASDhD2A2v1lR1FWK4toC/EUOWEi0BRV2 hdkiqs+hgyYyEiijMKOoG2/s8tega4BuTWbrESsr3TKc+tIjdOdsIiSXdcGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7gxuXpkrwz709zfpspGuQ6dva1MwHwYDVR0j BBgwFoAUFM+Z3vobknbr7mEYDfR3AXeVfjswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTdmNTE2MS0wNzBmLTQzMzktYWY0ZS1iYzMzZmRmYjY3YjgvMC8xNENGOTlERUZB MUI5Mjc2RUJFRTYxMTgwREY0NzcwMTc3OTU3RTNCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3MDE3Nzk1 N0UzQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDk3ZjUxNjEtMDcwZi00MzM5LWFm NGUtYmMzM2ZkZmI2N2I4LzAvMTRDRjk5REVGQTFCOTI3NkVCRUU2MTE4MERGNDc3 MDE3Nzk1N0UzQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQKKojfA3b1K9LAimpPMBY4GH0uCRzOu1Oj +0YaoMEmfHrJV7dm5wyFc9B1iPx4SftH9D3KOda6UyhBSkifX2g0IZEtLKhuqy4C 59bTAVsxPiXv4kfdpGBjMSGJvzWG57XosXIbwkFg8lDf1Aqzncc2FGNXSjVYaLgw xy+bXdB04NynN0LX+r7elOFjuGsm6mbwcvgUOo7G9v/pOrKQDGJ6b9Q46I6Pf0E4 HgO8MI+sTA90GxYK+lKAk1O4HzbcXa890gcXUcRv7mok1Ye0YjT372wTXB+aZc1Z RSFwuYo0V5CJrcX6+CpD/dqL42tG/KGFASdAlwFTmi8iXlRiCME= -----END CERTIFICATE-----Generated at Thu Mar 26 16:01:45 2026 by rpki-client