$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: u5b4fBGQEPnS0tjojDS4DD0f+B5Q+REPKXRsUtLpYno= Subject key identifier: F3:1F:0E:D4:2B:05:1F:35:1E:11:46:54:1C:B5:A1:98:D0:9D:C3:39 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 71C0173DBEA625B511F0D7288D320DB268253DD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: D5 Signing time: Tue 24 Mar 2026 23:21:57 +0000 Manifest this update: Tue 24 Mar 2026 23:16:57 +0000 Manifest next update: Sat 28 Mar 2026 00:08:57 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: 1gCacKAGAA6jM4ezbOV3ZZf2T07Wgye8X9QXV92oz54=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:08:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:c0:17:3d:be:a6:25:b5:11:f0:d7:28:8d:32:0d:b2:68:25:3d:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Mar 24 23:16:57 2026 GMT Not After : Mar 28 00:08:57 2026 GMT Subject: CN=F31F0ED42B051F351E1146541CB5A198D09DC339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:bb:dd:12:ad:9d:3d:54:1a:b5:8e:13:55:27: c9:82:7c:1c:bc:39:fc:4e:cd:1f:89:83:fc:14:9d: c2:19:79:21:4c:73:67:71:f9:5f:28:5b:85:68:c6: 0f:66:14:3a:54:5d:5e:14:d5:5a:54:fc:ad:c1:45: a2:e0:29:ea:9f:82:cd:7d:b9:de:e3:9c:0e:13:a5: 48:bf:65:f8:ce:43:3a:cb:85:05:92:a3:e3:8a:68: f7:66:70:f4:12:31:4b:54:1d:c5:1e:81:70:d2:4a: 2e:16:bf:e1:68:de:63:44:2c:64:cf:66:b2:7d:bb: 48:b9:81:0f:52:6d:80:f5:16:fd:7e:a6:ce:d0:41: e5:44:23:60:3f:e8:b1:69:77:c5:2d:7f:16:d2:5b: 97:b0:3a:22:c1:4f:0c:e2:39:fb:40:a5:05:58:81: 02:3a:fd:c4:86:ce:7e:0c:99:4d:62:5c:4a:e5:9f: 4e:f2:51:bd:05:47:fe:83:dd:9e:0b:c9:d9:bc:a3: cb:fa:52:5f:f3:6b:45:5b:dd:70:41:a3:11:e3:73: 47:e0:8f:52:1e:9d:8a:73:40:2b:66:c8:88:b5:59: 1b:ec:1f:0b:aa:5c:4d:29:22:09:c6:e4:db:9d:37: 1b:21:73:58:04:90:2f:4b:2e:63:e2:66:90:8d:50: e9:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:1F:0E:D4:2B:05:1F:35:1E:11:46:54:1C:B5:A1:98:D0:9D:C3:39 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:dd:99:84:5c:a6:59:2e:58:4c:6a:ba:7a:89:53:9c:a6:a8: 73:8a:1a:66:6f:5d:c4:02:d2:f0:c0:f2:47:4f:3e:2e:b4:ca: c8:05:c2:f5:0a:cf:b7:91:b3:7e:de:23:2c:b9:c4:1f:db:81: 7f:1a:ed:43:6c:d3:b6:86:08:5e:89:e3:f4:db:b8:1c:c8:42: 33:ba:9e:87:27:9b:bb:81:7a:84:0f:0c:0f:5b:96:dc:63:13: 34:e2:7d:63:46:95:2e:15:69:7d:35:fc:b1:bf:8f:1c:ed:da: 34:af:ac:b4:93:b1:e7:30:87:bb:26:1c:8f:fe:5d:e6:ab:75: 88:53:fa:b8:6f:3f:98:9a:72:b5:a4:5e:dc:7d:62:63:d6:f3: 0e:fa:1f:52:05:82:95:c4:49:4f:88:5a:e5:10:e8:99:1c:5d: 45:15:f7:4c:71:0f:7e:92:63:3a:09:3d:2f:ac:65:76:46:79: f7:37:05:fb:a2:ff:b4:db:a3:ee:00:66:e6:bc:81:7f:b2:60: e3:6b:0b:3f:a0:08:9c:5a:35:52:7b:a7:3e:16:05:c0:e1:42: ac:d1:90:f7:6b:5d:ec:61:30:de:4f:09:66:70:40:fb:b1:4d: 46:f1:de:e8:66:02:57:d1:96:60:5e:93:ba:fe:0d:38:87:0c: 6e:93:0b:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUccAXPb6mJbUR8NcojTINsmglPdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNjAzMjQyMzE2NTdaFw0yNjAzMjgwMDA4NTdaMDMxMTAvBgNV BAMTKEYzMUYwRUQ0MkIwNTFGMzUxRTExNDY1NDFDQjVBMTk4RDA5REMzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBu90SrZ09VBq1jhNVJ8mCfBy8 OfxOzR+Jg/wUncIZeSFMc2dx+V8oW4Voxg9mFDpUXV4U1VpU/K3BRaLgKeqfgs19 ud7jnA4TpUi/ZfjOQzrLhQWSo+OKaPdmcPQSMUtUHcUegXDSSi4Wv+Fo3mNELGTP ZrJ9u0i5gQ9SbYD1Fv1+ps7QQeVEI2A/6LFpd8UtfxbSW5ewOiLBTwziOftApQVY gQI6/cSGzn4MmU1iXErln07yUb0FR/6D3Z4Lydm8o8v6Ul/za0Vb3XBBoxHjc0fg j1IenYpzQCtmyIi1WRvsHwuqXE0pIgnG5NudNxshc1gEkC9LLmPiZpCNUOmXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8x8O1CsFHzUeEUZUHLWhmNCdwzkwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbdmYRcplkuWExqunqJU5ymqHOKGmZvXcQC 0vDA8kdPPi60ysgFwvUKz7eRs37eIyy5xB/bgX8a7UNs07aGCF6J4/TbuBzIQjO6 nocnm7uBeoQPDA9bltxjEzTifWNGlS4VaX01/LG/jxzt2jSvrLSTsecwh7smHI/+ XeardYhT+rhvP5iacrWkXtx9YmPW8w76H1IFgpXESU+IWuUQ6JkcXUUV90xxD36S YzoJPS+sZXZGefc3Bfui/7Tbo+4AZua8gX+yYONrCz+gCJxaNVJ7pz4WBcDhQqzR kPdrXexhMN5PCWZwQPuxTUbx3uhmAlfRlmBek7r+DTiHDG6TCzA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:05:17 2026 by rpki-client