$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json) Hash identifier: KfIZxxYvH2WTWICmRjoPkKX7UvJr+Eae6rpCkdsmlRU= Subject key identifier: 33:D3:BA:11:A2:70:14:17:04:AC:A5:A7:8C:C3:DC:C9:8F:18:2D:38 Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 541F8A918BA8754D6BFE0446E486AA9BD85D03BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft Manifest number: 05AA Signing time: Wed 25 Mar 2026 05:02:44 +0000 Manifest this update: Wed 25 Mar 2026 04:57:44 +0000 Manifest next update: Sat 28 Mar 2026 13:14:44 +0000 Files and hashes: 1: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=) 2: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=) 3: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: twSGwt6Fotgsl0DbfHgg9x8SNLnHsi/QE3YaQYCzzMs=) 4: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=) 5: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=) 6: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=) 7: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=) 8: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=) 9: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=) 10: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=) 11: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=) 12: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: 4SNP6NIhlhNqgA7SNhfztK1EGxfF/KrDULJ5s2tFgoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:14:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:1f:8a:91:8b:a8:75:4d:6b:fe:04:46:e4:86:aa:9b:d8:5d:03:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Mar 25 04:57:44 2026 GMT Not After : Mar 28 13:14:44 2026 GMT Subject: CN=33D3BA11A270141704ACA5A78CC3DCC98F182D38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:5c:b3:82:c0:af:f1:bf:da:85:7a:42:93:60: f0:7a:d2:fc:a4:be:9e:f6:5b:22:c4:c4:63:03:db: 3f:7a:e8:93:7c:3f:41:b4:6a:2a:df:83:3c:54:9a: 17:8e:ac:97:7f:33:3b:ce:cd:40:bf:b9:9c:88:76: f1:98:e4:97:81:5d:e6:58:96:5f:06:d0:9a:dc:ad: 56:99:72:dc:9b:81:1e:05:5f:57:db:f4:bf:4e:1d: ea:32:2e:e1:00:f4:d4:a9:8a:98:08:5e:8c:55:23: 58:57:2c:5a:f2:ec:b3:3e:8b:bf:8a:e6:bc:28:dd: b9:45:03:36:0b:99:7f:dd:de:02:2a:71:d7:64:00: 35:1e:f2:76:39:5a:a3:0c:13:6d:cc:a5:6f:ef:55: 03:b0:38:ba:51:b4:cc:ed:e2:8d:f7:52:54:7c:04: 23:32:db:9a:7b:40:e4:8b:6a:bd:44:d8:37:bc:35: 74:ec:63:0d:0c:03:5c:4e:d1:96:1e:bd:f2:f4:9a: 5d:c3:75:c1:3a:18:5b:1d:80:e7:d9:58:c8:6d:ae: 61:b7:17:b9:8d:79:dc:86:f5:0d:88:0a:3a:14:f1: 14:26:d6:92:98:a0:0c:c6:18:c2:d9:66:b4:df:dd: 51:fe:8d:0d:fd:31:9e:f2:b9:19:9c:93:7b:23:91: 97:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D3:BA:11:A2:70:14:17:04:AC:A5:A7:8C:C3:DC:C9:8F:18:2D:38 X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:72:d7:07:ef:f7:29:a3:ea:30:c9:98:b0:40:29:77:ad:96: 3a:42:cb:8c:32:d3:fc:40:89:1d:62:d9:e9:bc:e0:92:a6:26: 71:2f:0e:0f:bd:f2:11:b5:80:65:22:72:24:4f:8e:f6:5e:af: 14:d1:0b:24:9e:77:74:bc:9b:e9:1f:40:2b:a3:ac:f5:a6:e9: 0b:d0:99:28:f2:a6:21:69:30:ff:47:74:0d:f8:ed:55:54:4e: 5a:b8:fa:0b:10:37:2e:6e:ee:b1:2f:87:69:20:db:ac:bc:95: 2d:4a:7a:3c:c9:10:0e:52:85:d6:32:13:83:d3:9c:46:4a:de: 38:8b:05:2e:a3:64:fd:e2:b9:d6:92:9b:80:78:35:3f:3f:f6: 3b:40:e6:45:c5:f2:a2:2e:4a:f0:3f:68:33:fb:4d:be:59:dc: 03:42:98:ea:4a:55:cb:f5:b1:25:5a:15:d1:08:f7:2d:5d:b6: ad:3a:d8:ae:da:13:e4:13:e6:29:6c:c8:dd:db:a5:4e:a7:f4: c5:48:a8:85:8c:1f:d7:56:f5:53:cc:d1:f0:45:cd:a7:bf:a0: b2:0f:21:e9:2c:17:c2:22:01:b8:fb:06:6f:aa:3f:ed:c4:60: c1:8a:67:d7:a9:aa:c6:da:70:2f:f7:3c:f8:4e:4f:27:f5:7b: e6:95:b0:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVB+KkYuodU1r/gRG5Iaqm9hdA70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNjAzMjUwNDU3NDRaFw0yNjAzMjgxMzE0NDRaMDMxMTAvBgNV BAMTKDMzRDNCQTExQTI3MDE0MTcwNEFDQTVBNzhDQzNEQ0M5OEYxODJEMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDXLOCwK/xv9qFekKTYPB60vyk vp72WyLExGMD2z966JN8P0G0airfgzxUmheOrJd/MzvOzUC/uZyIdvGY5JeBXeZY ll8G0JrcrVaZctybgR4FX1fb9L9OHeoyLuEA9NSpipgIXoxVI1hXLFry7LM+i7+K 5rwo3blFAzYLmX/d3gIqcddkADUe8nY5WqMME23MpW/vVQOwOLpRtMzt4o33UlR8 BCMy25p7QOSLar1E2De8NXTsYw0MA1xO0ZYevfL0ml3DdcE6GFsdgOfZWMhtrmG3 F7mNedyG9Q2ICjoU8RQm1pKYoAzGGMLZZrTf3VH+jQ39MZ7yuRmck3sjkZfzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9O6EaJwFBcErKWnjMPcyY8YLTgwHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1 QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApy1wfv9ymj6jDJmLBAKXetljpCy4wy0/xA iR1i2em84JKmJnEvDg+98hG1gGUiciRPjvZerxTRCySed3S8m+kfQCujrPWm6QvQ mSjypiFpMP9HdA347VVUTlq4+gsQNy5u7rEvh2kg26y8lS1KejzJEA5ShdYyE4PT nEZK3jiLBS6jZP3iudaSm4B4NT8/9jtA5kXF8qIuSvA/aDP7Tb5Z3ANCmOpKVcv1 sSVaFdEI9y1dtq062K7aE+QT5ilsyN3bpU6n9MVIqIWMH9dW9VPM0fBFzae/oLIP IeksF8IiAbj7Bm+qP+3EYMGKZ9epqsbacC/3PPhOTyf1e+aVsKQ= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:06 2026 by rpki-client