$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: TQ3CCYWqJiFCpqzN3J6BNRaAOnl5VRlNaPRTYAkl8/s= Subject key identifier: E1:34:7C:6E:EA:51:D1:F1:0B:56:C4:A8:3F:71:E8:B4:3F:87:AC:52 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 0423682023E8B6FECAC4F0EFA4ED89D19D6105C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: 0126 Signing time: Tue 24 Mar 2026 17:42:20 +0000 Manifest this update: Tue 24 Mar 2026 17:37:20 +0000 Manifest next update: Sat 28 Mar 2026 00:52:20 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: EHhlpV3ON5ypFLrJcwvrdcgvOplhX3i4KmiPP2qeFTg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:52:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:23:68:20:23:e8:b6:fe:ca:c4:f0:ef:a4:ed:89:d1:9d:61:05:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Mar 24 17:37:20 2026 GMT Not After : Mar 28 00:52:20 2026 GMT Subject: CN=E1347C6EEA51D1F10B56C4A83F71E8B43F87AC52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:ea:0c:d0:48:bd:1c:18:d6:a1:d0:23:6a:71: 84:7a:ea:a8:d9:7b:54:15:d8:c0:1f:bd:86:2a:e8: fb:25:9b:12:49:53:7a:3e:5a:32:60:7b:ba:5d:bd: 6e:d7:19:b9:52:71:c0:4a:66:1a:ff:30:11:33:f7: 1e:b1:34:a2:2a:b9:23:8a:8a:4d:73:ac:f0:d9:42: 7a:b5:59:1b:39:cc:a3:88:03:5c:ab:89:6c:70:9a: 7b:47:68:10:12:35:62:5a:74:29:c5:a9:e6:a5:99: b0:13:a3:12:b6:7b:a8:cc:af:95:a6:86:a9:0c:7a: 24:01:a0:83:e6:d3:45:7f:e6:a7:0f:db:58:d9:b9: 12:69:43:4f:23:ee:43:54:70:bd:fb:f2:7a:85:fd: 14:e6:56:10:5e:27:84:7e:45:bd:19:92:a1:51:01: 9b:51:87:a3:f4:18:e2:26:a6:ce:a4:ab:3d:fa:f7: 38:fb:03:86:b0:6f:60:28:39:be:1a:a5:01:2b:7f: 72:66:99:c6:64:13:e1:7d:a5:fa:16:65:c8:36:00: 3d:28:93:ae:cd:d3:cb:ed:fd:b5:a3:2f:d7:ef:de: 08:0b:b0:c8:e1:76:90:83:95:4b:d1:09:2e:ae:15: 1b:12:b2:62:07:c1:51:29:75:c9:11:0f:67:33:7e: 65:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:34:7C:6E:EA:51:D1:F1:0B:56:C4:A8:3F:71:E8:B4:3F:87:AC:52 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e8:3d:08:6b:fe:20:5e:87:24:e8:48:b5:56:d2:4b:2f:9c: b8:d0:36:95:91:0b:b5:cb:e1:78:9f:99:0b:0d:c2:2f:9f:45: 92:cb:d8:b4:ff:58:03:95:26:9e:90:25:f9:14:5b:53:fa:f8: 0c:84:14:70:67:42:73:29:7f:97:6c:3d:12:b2:d2:c0:d5:62: e9:3c:29:c3:0c:36:3f:c3:1e:57:d1:99:22:c9:25:bc:b0:89: 21:61:33:61:fe:a8:2d:0d:c9:f2:64:a3:cf:df:f9:e4:6b:44: d3:4f:57:13:81:d3:0c:73:c4:98:26:e6:e3:cf:50:9a:47:bf: e9:ef:24:40:01:96:4d:50:8e:a1:e8:00:8d:52:ff:b1:50:50: c0:70:3d:80:90:de:b9:fc:d9:31:8e:5a:d1:3c:ad:30:61:33: a7:39:85:1e:bf:ce:0e:75:dd:06:10:b6:9a:0e:d0:41:f4:13: 3b:fd:0d:32:ec:a6:0d:d7:77:d0:72:b4:1d:a8:75:d9:b7:fc: a3:c7:e6:73:e6:bd:84:b9:9f:00:57:cd:33:5b:c6:58:fb:ad: 47:a4:57:31:a6:88:c0:26:8a:62:32:9e:8d:2c:d2:53:a4:3d: 85:79:1e:e2:a4:33:a3:d6:f5:8d:99:4c:ef:d2:8d:c6:fb:85: 9f:2f:40:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBCNoICPotv7KxPDvpO2J0Z1hBcgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNjAzMjQxNzM3MjBaFw0yNjAzMjgwMDUyMjBaMDMxMTAvBgNV BAMTKEUxMzQ3QzZFRUE1MUQxRjEwQjU2QzRBODNGNzFFOEI0M0Y4N0FDNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN6gzQSL0cGNah0CNqcYR66qjZ e1QV2MAfvYYq6PslmxJJU3o+WjJge7pdvW7XGblSccBKZhr/MBEz9x6xNKIquSOK ik1zrPDZQnq1WRs5zKOIA1yriWxwmntHaBASNWJadCnFqealmbAToxK2e6jMr5Wm hqkMeiQBoIPm00V/5qcP21jZuRJpQ08j7kNUcL378nqF/RTmVhBeJ4R+Rb0ZkqFR AZtRh6P0GOImps6kqz369zj7A4awb2AoOb4apQErf3JmmcZkE+F9pfoWZcg2AD0o k67N08vt/bWjL9fv3ggLsMjhdpCDlUvRCS6uFRsSsmIHwVEpdckRD2czfmXNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4TR8bupR0fELVsSoP3HotD+HrFIwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3oPQhr/iBehyToSLVW0ksvnLjQNpWRC7XL 4XifmQsNwi+fRZLL2LT/WAOVJp6QJfkUW1P6+AyEFHBnQnMpf5dsPRKy0sDVYuk8 KcMMNj/DHlfRmSLJJbywiSFhM2H+qC0NyfJko8/f+eRrRNNPVxOB0wxzxJgm5uPP UJpHv+nvJEABlk1QjqHoAI1S/7FQUMBwPYCQ3rn82TGOWtE8rTBhM6c5hR6/zg51 3QYQtpoO0EH0Ezv9DTLspg3Xd9BytB2oddm3/KPH5nPmvYS5nwBXzTNbxlj7rUek VzGmiMAmimIyno0s0lOkPYV5HuKkM6PW9Y2ZTO/Sjcb7hZ8vQF8= -----END CERTIFICATE-----Generated at Thu Mar 26 10:35:01 2026 by rpki-client