$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft File: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft (raw, json) Hash identifier: lpoUT0akeyxCa2IIFcuvdFPYcQmRLpWAdD4sM1Ggryk= Subject key identifier: 24:3C:A0:A1:55:17:DB:D8:BB:27:67:6B:86:98:83:76:CB:DE:DE:23 Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E Certificate issuer: /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Certificate serial: 22656B6B0B1834E210A5CB1DF826E1E52F4666E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft Manifest number: 0296 Signing time: Tue 24 Mar 2026 22:42:04 +0000 Manifest this update: Tue 24 Mar 2026 22:37:04 +0000 Manifest next update: Sat 28 Mar 2026 08:51:04 +0000 Files and hashes: 1: 3130332e3138322e37372e302f32342d3234203d3e20313439333938.roa (hash: NjnzTE7HAq8sbYsGZQEimgvwNjF5ogQWUuKW9h86Xbw=) 2: 323030313a6466303a376234303a3a2f34382d3438203d3e20313439333938.roa (hash: psLXI8EhSprvLBeHE4NaEuLwpqU51lfxmeH1s52rh8s=) 3: 3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (hash: o9O3KufUxhY/QnUiaYAfCr9ULzRbw09anvuTj9389Ns=) 4: 14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl (hash: 9TLLDLHjKGi3nIwSvEJNfxIRmfSJq8SPBtzWMDPy/rA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:51:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:65:6b:6b:0b:18:34:e2:10:a5:cb:1d:f8:26:e1:e5:2f:46:66:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E Validity Not Before: Mar 24 22:37:04 2026 GMT Not After : Mar 28 08:51:04 2026 GMT Subject: CN=243CA0A15517DBD8BB27676B86988376CBDEDE23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d9:ab:b8:5c:d9:ea:a4:2d:77:58:59:40:f8: d0:d0:cf:a2:4d:79:57:6f:dc:f8:70:a7:fe:19:50: 51:b7:5e:ff:19:4f:07:c0:f0:de:a2:8b:5e:17:f1: 77:d9:36:75:7b:bd:81:25:13:c3:99:9d:3c:aa:93: 02:fd:65:8e:37:03:2d:9b:cd:f8:34:79:74:85:10: 47:16:ce:a5:7f:36:96:ec:1d:00:7f:24:07:e3:d1: 31:89:5c:31:f6:58:d9:7f:86:f1:f2:c2:d1:65:a7: 1b:e3:29:60:a2:fe:bd:4b:5e:32:4b:4d:5a:29:5f: 1b:ea:0d:77:eb:ef:44:6e:50:07:cb:f7:b7:90:b1: 1f:8a:c7:4e:2e:f2:df:ee:d6:84:64:9f:0c:c0:ad: 53:d2:4f:58:85:cf:28:b7:3e:02:a9:9e:a5:de:51: 43:76:11:29:97:f4:fc:df:d1:21:f2:46:b7:53:e6: 6a:f8:a8:15:ad:52:de:92:f2:23:fa:31:13:77:b9: 7a:2b:74:dc:65:f4:d6:de:fd:d4:dc:70:39:c3:9a: aa:8a:87:85:47:b3:bb:be:19:e7:bd:cf:df:e8:be: 65:f4:6e:87:ca:68:2d:38:61:b8:4a:c2:4c:04:4f: ef:ee:d3:c8:76:26:17:8c:4b:ba:49:6e:f2:44:98: 31:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:3C:A0:A1:55:17:DB:D8:BB:27:67:6B:86:98:83:76:CB:DE:DE:23 X509v3 Authority Key Identifier: keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:d7:79:13:30:41:21:6e:74:7f:1d:77:f1:bb:d9:e4:6b:c9: b9:fb:6a:15:85:fc:a1:ec:f8:0e:ad:09:1e:44:c2:3a:86:5b: 79:32:01:81:44:9f:3f:8e:20:c2:f6:6e:ed:12:bc:c8:02:1f: 64:a6:28:fc:01:e8:84:78:e3:96:78:f4:61:48:a8:d3:6b:a4: 8f:22:15:83:79:65:a2:4d:f6:1c:3f:ae:3b:f7:c3:7d:87:34: c0:b8:3a:f0:d1:0f:00:b2:22:7c:89:be:2d:53:9a:21:77:90: 18:1d:f4:f5:d6:82:51:6a:c2:72:17:33:77:5d:41:24:47:6b: 81:79:39:f3:45:7e:29:c0:c2:bf:6f:30:0e:39:be:bd:45:a8: 49:be:4e:df:d6:ae:7c:9d:d1:51:76:de:ec:12:2a:ff:14:a0: a3:93:59:56:58:f3:99:d3:9a:fb:6c:3d:9a:66:4f:df:bf:61: 28:c5:14:1e:b3:ff:6e:74:0d:a0:75:f4:d7:8f:b7:c1:e0:57: 1e:e7:29:d0:95:fe:bc:c5:46:c4:2a:14:fb:a9:fd:72:16:c1: 20:65:df:a7:ea:fe:61:4d:80:08:42:90:21:a0:9d:38:d6:45: e8:c5:95:a4:73:f7:41:d4:e1:a7:b3:5e:0e:1b:7b:cc:55:c7: e0:32:10:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImVrawsYNOIQpcsd+Cbh5S9GZuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FG MTU5NEQ5RTAeFw0yNjAzMjQyMjM3MDRaFw0yNjAzMjgwODUxMDRaMDMxMTAvBgNV BAMTKDI0M0NBMEExNTUxN0RCRDhCQjI3Njc2Qjg2OTg4Mzc2Q0JERURFMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC2au4XNnqpC13WFlA+NDQz6JN eVdv3Phwp/4ZUFG3Xv8ZTwfA8N6ii14X8XfZNnV7vYElE8OZnTyqkwL9ZY43Ay2b zfg0eXSFEEcWzqV/NpbsHQB/JAfj0TGJXDH2WNl/hvHywtFlpxvjKWCi/r1LXjJL TVopXxvqDXfr70RuUAfL97eQsR+Kx04u8t/u1oRknwzArVPST1iFzyi3PgKpnqXe UUN2ESmX9Pzf0SHyRrdT5mr4qBWtUt6S8iP6MRN3uXordNxl9Nbe/dTccDnDmqqK h4VHs7u+Gee9z9/ovmX0bofKaC04YbhKwkwET+/u08h2JheMS7pJbvJEmDFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJDygoVUX29i7J2drhpiDdsve3iMwHwYDVR0j BBgwFoAUFMs7bOi0O7dDmq6obXPfOvFZTZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDRkY2RlMy03NTdmLTQzZDQtYWRlMi1mZjA4ODdjYzI0ODcvMC8xNENCM0I2Q0U4 QjQzQkI3NDM5QUFFQTg2RDczREYzQUYxNTk0RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RGM0FGMTU5 NEQ5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQ0ZGNkZTMtNzU3Zi00M2Q0LWFk ZTItZmYwODg3Y2MyNDg3LzAvMTRDQjNCNkNFOEI0M0JCNzQzOUFBRUE4NkQ3M0RG M0FGMTU5NEQ5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIrXeRMwQSFudH8dd/G72eRrybn7ahWF/KHs +A6tCR5EwjqGW3kyAYFEnz+OIML2bu0SvMgCH2SmKPwB6IR445Z49GFIqNNrpI8i FYN5ZaJN9hw/rjv3w32HNMC4OvDRDwCyInyJvi1TmiF3kBgd9PXWglFqwnIXM3dd QSRHa4F5OfNFfinAwr9vMA45vr1FqEm+Tt/Wrnyd0VF23uwSKv8UoKOTWVZY85nT mvtsPZpmT9+/YSjFFB6z/250DaB19NePt8HgVx7nKdCV/rzFRsQqFPup/XIWwSBl 36fq/mFNgAhCkCGgnTjWRejFlaRz90HU4aezXg4be8xVx+AyEH4= -----END CERTIFICATE-----Generated at Thu Mar 26 12:23:55 2026 by rpki-client