$ rpki-client -vvf repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft File: 0D14F274908EB737876B8079A7129AF9936DB91E.mft (raw, json) Hash identifier: kAg+UyIvZN12b1F22keLOsz6dbP7mT7CElT0kD0hDFw= Subject key identifier: D8:B8:A3:B2:9A:36:D2:88:A5:52:7C:14:08:3B:8B:DF:4B:7E:2F:50 Authority key identifier: 0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E Certificate issuer: /CN=0D14F274908EB737876B8079A7129AF9936DB91E Certificate serial: 6889EF433032351835E37C2F68DA60524B712AE9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft Manifest number: C8 Signing time: Wed 25 Mar 2026 19:26:08 +0000 Manifest this update: Wed 25 Mar 2026 19:21:08 +0000 Manifest next update: Sat 28 Mar 2026 23:41:08 +0000 Files and hashes: 1: 3130332e3231342e3232392e302f32342d3234203d3e203634303330.roa (hash: K2W9qbBj9KtIPfv2sbPkGTtIyrnqSh85ZwXUf2SSTZc=) 2: 0D14F274908EB737876B8079A7129AF9936DB91E.crl (hash: n70N8hmTqNJUOX8zOaISKw7a5yQGjeBtfSaK+0Qubjo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:41:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:89:ef:43:30:32:35:18:35:e3:7c:2f:68:da:60:52:4b:71:2a:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0D14F274908EB737876B8079A7129AF9936DB91E Validity Not Before: Mar 25 19:21:08 2026 GMT Not After : Mar 28 23:41:08 2026 GMT Subject: CN=D8B8A3B29A36D288A5527C14083B8BDF4B7E2F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:49:fa:8a:0b:2d:d5:ea:2c:0d:6b:37:ac:7b: d1:23:82:ec:3c:9a:f6:0f:ea:1b:02:86:50:e2:8a: 63:21:d1:39:08:4c:cf:aa:8f:34:25:59:c2:f4:61: bb:42:16:57:3c:86:e4:2c:40:d4:25:52:06:89:65: 1a:03:e0:d2:17:c9:d7:b4:b2:f0:0f:49:4e:3b:1b: 9a:18:a0:b2:a5:9e:b1:9f:42:40:83:8f:11:7c:9c: 61:da:8e:e7:d6:8c:a1:f0:b0:2f:03:56:2f:23:f9: 3d:f4:bb:10:d7:ab:dd:c2:1a:d5:1b:8f:c5:61:9a: db:8c:61:60:9b:b0:76:86:49:d6:88:c5:49:bc:8e: 71:cc:a4:00:0c:62:31:16:46:0b:4f:82:2a:d0:fe: 42:7b:12:69:f5:92:48:79:f5:6c:3c:ba:81:8c:32: bd:4e:e3:63:95:6b:44:ef:6e:af:65:03:b5:95:53: 65:2f:92:be:9a:e0:4c:04:ac:28:f7:f0:76:4b:0b: 4f:d4:bb:3c:e6:0b:48:21:d4:49:7e:81:b0:1e:e8: f0:eb:2b:9a:01:3c:b4:42:98:ed:45:57:dc:05:3a: ae:b0:07:2f:8e:8b:76:28:d1:4d:5c:10:64:61:89: 2f:ae:c0:bd:bf:9c:78:78:2e:42:74:42:c9:ec:92: c0:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:B8:A3:B2:9A:36:D2:88:A5:52:7C:14:08:3B:8B:DF:4B:7E:2F:50 X509v3 Authority Key Identifier: keyid:0D:14:F2:74:90:8E:B7:37:87:6B:80:79:A7:12:9A:F9:93:6D:B9:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D14F274908EB737876B8079A7129AF9936DB91E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3320556d-cc21-4e57-a5ba-a2111e059b7a/0/0D14F274908EB737876B8079A7129AF9936DB91E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:ec:70:cb:67:70:e8:1f:bd:1d:76:7d:72:b6:5c:e7:36:32: 69:ec:28:9e:29:13:cb:01:48:33:0a:83:96:1e:d2:99:3d:50: 91:32:69:48:ce:e0:eb:d4:cc:46:a0:ac:b6:81:86:bd:22:b8: 1e:f9:8d:35:39:d1:b6:21:68:a5:38:6f:4b:4d:67:43:15:5b: 96:bc:5b:31:dc:b3:1d:b8:59:b0:df:46:e5:4a:54:7b:56:c5: dc:ba:f6:88:f6:b5:fe:6c:10:30:4a:3a:28:15:6e:f7:ac:71: 40:7d:1e:ce:59:65:a5:4f:6c:5d:40:e9:6f:80:fa:ec:04:77: 45:01:68:27:24:8b:79:66:1e:e4:30:d5:bc:7c:b1:34:10:75: 4b:9f:5d:df:52:62:f5:b6:cf:75:79:93:4b:6f:e8:2d:92:7d: a5:62:2d:40:8c:c1:11:0b:98:33:3b:3a:ad:a0:03:eb:79:6c: b8:35:c8:6e:ca:aa:8f:98:4f:8f:d0:ca:99:69:3b:a2:fa:6c: 08:82:4c:fa:92:bb:55:1e:0a:5f:4c:7c:8f:5f:54:69:3d:42: ad:61:92:e5:cb:b2:ca:c9:f1:c2:a4:87:5d:73:d5:c0:a6:b9: 5d:f1:05:cc:21:37:28:c8:73:f3:38:44:8d:13:d1:a0:4b:de: 19:fd:ee:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaInvQzAyNRg143wvaNpgUktxKukwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5 MzZEQjkxRTAeFw0yNjAzMjUxOTIxMDhaFw0yNjAzMjgyMzQxMDhaMDMxMTAvBgNV BAMTKEQ4QjhBM0IyOUEzNkQyODhBNTUyN0MxNDA4M0I4QkRGNEI3RTJGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+SfqKCy3V6iwNazese9Ejguw8 mvYP6hsChlDiimMh0TkITM+qjzQlWcL0YbtCFlc8huQsQNQlUgaJZRoD4NIXyde0 svAPSU47G5oYoLKlnrGfQkCDjxF8nGHajufWjKHwsC8DVi8j+T30uxDXq93CGtUb j8VhmtuMYWCbsHaGSdaIxUm8jnHMpAAMYjEWRgtPgirQ/kJ7Emn1kkh59Ww8uoGM Mr1O42OVa0Tvbq9lA7WVU2Uvkr6a4EwErCj38HZLC0/UuzzmC0gh1El+gbAe6PDr K5oBPLRCmO1FV9wFOq6wBy+Oi3Yo0U1cEGRhiS+uwL2/nHh4LkJ0QsnsksApAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2Lijspo20oilUnwUCDuL30t+L1AwHwYDVR0j BBgwFoAUDRTydJCOtzeHa4B5pxKa+ZNtuR4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MzIwNTU2ZC1jYzIxLTRlNTctYTViYS1hMjExMWUwNTliN2EvMC8wRDE0RjI3NDkw OEVCNzM3ODc2QjgwNzlBNzEyOUFGOTkzNkRCOTFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlBRjk5MzZE QjkxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzMyMDU1NmQtY2MyMS00ZTU3LWE1 YmEtYTIxMTFlMDU5YjdhLzAvMEQxNEYyNzQ5MDhFQjczNzg3NkI4MDc5QTcxMjlB Rjk5MzZEQjkxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHzscMtncOgfvR12fXK2XOc2MmnsKJ4pE8sB SDMKg5Ye0pk9UJEyaUjO4OvUzEagrLaBhr0iuB75jTU50bYhaKU4b0tNZ0MVW5a8 WzHcsx24WbDfRuVKVHtWxdy69oj2tf5sEDBKOigVbvescUB9Hs5ZZaVPbF1A6W+A +uwEd0UBaCcki3lmHuQw1bx8sTQQdUufXd9SYvW2z3V5k0tv6C2SfaViLUCMwREL mDM7Oq2gA+t5bLg1yG7Kqo+YT4/QyplpO6L6bAiCTPqSu1UeCl9MfI9fVGk9Qq1h kuXLssrJ8cKkh11z1cCmuV3xBcwhNyjIc/M4RI0T0aBL3hn97hk= -----END CERTIFICATE-----Generated at Thu Mar 26 08:48:58 2026 by rpki-client