$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: p6M7i3C0/RrCZfBy3yu7o1T6Qr4VQHRanE94syxL9Ag= Subject key identifier: 2F:BF:F3:D9:CD:FE:4C:83:E4:B5:FB:91:F9:E9:C6:AC:38:F1:AF:3B Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 38E92E3EA58572B11C4B9E22FC4777A2694CEADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01E4 Signing time: Wed 25 Mar 2026 10:00:42 +0000 Manifest this update: Wed 25 Mar 2026 09:55:42 +0000 Manifest next update: Sat 28 Mar 2026 14:04:42 +0000 Files and hashes: 1: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) 2: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc=) 3: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps=) 4: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: SNJ9R/RphO9Y0RbZ00VD27KY67oATOc4QBIGVGRYRcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:e9:2e:3e:a5:85:72:b1:1c:4b:9e:22:fc:47:77:a2:69:4c:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Mar 25 09:55:42 2026 GMT Not After : Mar 28 14:04:42 2026 GMT Subject: CN=2FBFF3D9CDFE4C83E4B5FB91F9E9C6AC38F1AF3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:f7:d2:4b:fc:f3:7d:48:1e:2f:1c:fa:e1:66: 7d:f8:1d:65:42:d5:cf:92:27:bf:76:ed:c2:f8:42: 7f:e5:96:e0:bb:11:c9:e2:b2:1c:d6:02:09:f5:66: 7b:40:57:25:e2:16:c3:39:44:6f:48:1a:02:0e:a0: 25:ee:3d:e8:35:f8:c5:b3:37:c1:cf:a3:ff:1c:de: cf:af:86:f6:54:72:e8:44:8e:90:a0:42:24:ae:31: 98:22:41:60:bb:f6:2b:b2:f0:0d:24:d4:82:80:07: 8d:53:a6:36:47:d6:a1:39:a5:8b:90:d4:c4:6f:6c: 2a:bb:e9:cc:53:da:bb:41:8f:7a:09:26:0b:4d:a3: 27:12:48:d6:5c:2a:21:cd:bf:04:1f:a7:78:a8:8e: 8e:4b:eb:86:a9:09:9c:0b:15:bd:32:5c:f5:d1:f2: 77:63:d1:21:3d:73:bd:9b:c0:6e:f0:de:41:dc:9b: 54:d5:cf:77:39:05:81:68:c2:f8:45:01:46:b4:9e: d4:68:e5:7b:a3:ab:6c:27:6d:66:23:9e:1e:8d:00: b0:37:cc:63:ed:b1:f4:6f:0b:be:79:69:b6:cd:10: 8e:d2:82:bd:09:98:5b:d1:a3:53:a6:b3:b0:df:52: 14:35:ec:27:bf:b4:8a:01:c8:bb:ce:22:bc:32:61: dc:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:BF:F3:D9:CD:FE:4C:83:E4:B5:FB:91:F9:E9:C6:AC:38:F1:AF:3B X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:a1:f2:5e:22:0f:08:93:8c:38:57:5b:f2:86:3c:dc:83:d9: 70:5f:3a:31:f8:a7:e9:ef:95:8d:61:bb:ba:5c:d4:1f:be:ce: ba:b7:73:dc:ae:16:dd:5a:7b:24:a0:46:23:89:21:f7:5f:cb: 6c:9d:cf:b9:44:13:46:f8:76:2c:4a:b2:49:95:dd:e0:32:66: fb:e9:a2:59:11:a9:59:a0:17:d4:5d:ab:7a:7f:22:9b:29:bf: 0e:fd:43:6f:b1:c9:d8:5e:3a:6f:b4:f8:a9:db:f3:75:41:0b: b3:ac:92:2e:cd:a1:90:4b:1b:6b:bd:62:86:1a:6c:c4:d5:2f: 37:2d:d1:d7:68:f5:78:89:f5:31:fb:9b:dd:84:cd:ae:9d:4f: f5:89:46:46:a4:a0:e6:82:52:76:fe:c6:90:dc:5e:d5:78:1f: bf:17:96:79:ca:df:a8:e6:61:86:18:7c:02:0a:e6:fa:3d:f1: 55:5b:2a:f8:62:c3:c4:4d:8b:d7:9a:3b:b5:63:9a:a6:fe:1e: 4c:40:1c:08:69:a6:e9:4c:fa:94:3e:53:5f:bd:88:89:a1:23: f4:d3:35:41:ad:0d:31:58:1e:2d:2a:99:3a:e3:99:0f:41:96: ed:2b:2c:70:94:24:47:07:56:4a:fb:7c:0e:9d:3a:bb:64:54: 17:1b:1a:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOOkuPqWFcrEcS54i/Ed3omlM6t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAzMjUwOTU1NDJaFw0yNjAzMjgxNDA0NDJaMDMxMTAvBgNV BAMTKDJGQkZGM0Q5Q0RGRTRDODNFNEI1RkI5MUY5RTlDNkFDMzhGMUFGM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ99JL/PN9SB4vHPrhZn34HWVC 1c+SJ7927cL4Qn/lluC7EcnishzWAgn1ZntAVyXiFsM5RG9IGgIOoCXuPeg1+MWz N8HPo/8c3s+vhvZUcuhEjpCgQiSuMZgiQWC79iuy8A0k1IKAB41TpjZH1qE5pYuQ 1MRvbCq76cxT2rtBj3oJJgtNoycSSNZcKiHNvwQfp3iojo5L64apCZwLFb0yXPXR 8ndj0SE9c72bwG7w3kHcm1TVz3c5BYFowvhFAUa0ntRo5Xujq2wnbWYjnh6NALA3 zGPtsfRvC755abbNEI7Sgr0JmFvRo1Oms7DfUhQ17Ce/tIoByLvOIrwyYdwrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL7/z2c3+TIPktfuR+enGrDjxrzswHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKh8l4iDwiTjDhXW/KGPNyD2XBfOjH4p+nv lY1hu7pc1B++zrq3c9yuFt1aeySgRiOJIfdfy2ydz7lEE0b4dixKskmV3eAyZvvp olkRqVmgF9Rdq3p/Ipspvw79Q2+xydheOm+0+Knb83VBC7Oski7NoZBLG2u9YoYa bMTVLzct0ddo9XiJ9TH7m92Eza6dT/WJRkakoOaCUnb+xpDcXtV4H78XlnnK36jm YYYYfAIK5vo98VVbKvhiw8RNi9eaO7Vjmqb+HkxAHAhppulM+pQ+U1+9iImhI/TT NUGtDTFYHi0qmTrjmQ9Blu0rLHCUJEcHVkr7fA6dOrtkVBcbGic= -----END CERTIFICATE-----Generated at Thu Mar 26 15:39:37 2026 by rpki-client