$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: PtmUvKGhRileJBCF1ecYRO2dFPE++B261isQghgX8LU= Subject key identifier: B0:1A:BF:96:C9:23:CF:9E:B0:F9:07:40:64:69:B7:79:CC:22:FA:39 Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 4D1E6B82E35E308666B3DB6A263A99F0DEDDD7E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0243 Signing time: Wed 25 Mar 2026 07:12:01 +0000 Manifest this update: Wed 25 Mar 2026 07:07:01 +0000 Manifest next update: Sat 28 Mar 2026 09:23:01 +0000 Files and hashes: 1: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 2: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA=) 3: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM=) 4: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: 9TkgCLApK9fU6jxeR1y6nSkcssFc5rcsUbUkmEpQIhM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:23:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:1e:6b:82:e3:5e:30:86:66:b3:db:6a:26:3a:99:f0:de:dd:d7:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Mar 25 07:07:01 2026 GMT Not After : Mar 28 09:23:01 2026 GMT Subject: CN=B01ABF96C923CF9EB0F907406469B779CC22FA39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:fd:04:4a:49:3f:9c:91:98:93:ee:52:2c:f1: 39:ac:8b:4e:e2:16:83:5c:99:4c:ea:86:b9:f1:5f: b8:9b:6b:5e:86:35:cb:1b:05:a2:aa:44:88:69:67: c3:fc:65:dc:0f:72:0e:1e:0d:55:60:a0:49:13:db: 7f:08:48:04:4c:ff:79:21:db:85:f2:c1:af:3c:e8: ba:e0:6c:56:cc:4f:40:2e:9c:16:af:2c:72:5a:25: c7:10:c4:bf:aa:ba:d1:12:19:c0:86:58:7e:49:24: 43:3b:8b:f0:bc:81:45:af:28:dc:ad:b8:55:a7:77: 7c:4d:5c:2d:c1:dd:24:a9:00:99:cb:e6:f2:99:2a: a8:17:ce:c1:76:d9:7f:58:db:c6:4f:88:20:c4:ef: 1e:6e:87:66:9a:cd:de:af:2b:87:ec:39:d0:31:30: 71:db:35:8a:30:91:84:40:3b:bb:12:50:85:b8:1e: 58:7a:89:39:7b:78:56:1e:fb:a4:a6:d1:76:ba:f4: de:f8:c5:b1:4f:ff:a8:c4:29:93:4a:aa:d5:ce:37: 5c:cb:43:77:8a:e3:03:3b:ec:a9:c0:5f:d3:7a:4a: 32:a3:e8:c3:fe:97:53:6e:e3:31:19:b5:92:a0:bb: 1a:70:c2:29:2a:65:e4:fb:eb:ef:d0:c2:ab:3d:4d: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1A:BF:96:C9:23:CF:9E:B0:F9:07:40:64:69:B7:79:CC:22:FA:39 X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:31:ea:0c:e0:9e:73:eb:ac:73:f7:d1:cd:41:35:ac:92:ef: eb:a0:08:84:84:89:ee:d8:5a:fa:51:dc:e1:9b:e7:31:b9:19: 2c:4c:ee:43:61:63:41:b0:ed:57:a2:29:df:5e:a6:ff:32:c6: 50:fc:7c:c0:8a:e6:8a:19:57:cf:f8:f5:63:51:d5:34:1c:35: 5d:55:b1:58:3b:26:1d:f8:90:19:c1:e2:38:41:50:d6:6d:6e: e6:33:50:16:e4:9c:bd:f7:d1:3c:3e:3f:2b:99:0b:c8:f7:b2: 69:7c:e7:61:3d:35:35:ac:6e:3c:6d:39:60:63:6b:b5:2d:2c: bb:1c:2c:6f:10:12:89:70:15:39:66:30:de:8f:e7:c5:55:70: 69:a5:d0:1f:43:95:85:44:f0:e1:08:03:32:2a:76:32:f3:57: 9f:d1:af:b9:60:78:fe:d9:55:c2:95:8d:89:2d:91:7d:31:35: 55:dc:a3:79:d6:69:8e:30:66:4f:51:31:74:17:5e:d0:a7:08: 41:59:c3:6f:2f:d2:86:f0:d2:5d:1b:19:98:0a:fb:96:d7:93: d2:09:c8:59:46:99:e4:b8:56:06:12:09:bf:fb:08:10:f8:ad: 19:41:4e:63:63:22:65:34:91:98:fa:31:ba:4f:6e:01:2a:d2: 83:3f:a0:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTR5rguNeMIZms9tqJjqZ8N7d1+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAzMjUwNzA3MDFaFw0yNjAzMjgwOTIzMDFaMDMxMTAvBgNV BAMTKEIwMUFCRjk2QzkyM0NGOUVCMEY5MDc0MDY0NjlCNzc5Q0MyMkZBMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl/QRKST+ckZiT7lIs8Tmsi07i FoNcmUzqhrnxX7iba16GNcsbBaKqRIhpZ8P8ZdwPcg4eDVVgoEkT238ISARM/3kh 24Xywa886LrgbFbMT0AunBavLHJaJccQxL+qutESGcCGWH5JJEM7i/C8gUWvKNyt uFWnd3xNXC3B3SSpAJnL5vKZKqgXzsF22X9Y28ZPiCDE7x5uh2aazd6vK4fsOdAx MHHbNYowkYRAO7sSUIW4Hlh6iTl7eFYe+6Sm0Xa69N74xbFP/6jEKZNKqtXON1zL Q3eK4wM77KnAX9N6SjKj6MP+l1Nu4zEZtZKguxpwwikqZeT76+/Qwqs9TX1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsBq/lskjz56w+QdAZGm3ecwi+jkwHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGQx6gzgnnPrrHP30c1BNayS7+ugCISEie7Y WvpR3OGb5zG5GSxM7kNhY0Gw7VeiKd9epv8yxlD8fMCK5ooZV8/49WNR1TQcNV1V sVg7Jh34kBnB4jhBUNZtbuYzUBbknL330Tw+PyuZC8j3sml852E9NTWsbjxtOWBj a7UtLLscLG8QEolwFTlmMN6P58VVcGml0B9DlYVE8OEIAzIqdjLzV5/Rr7lgeP7Z VcKVjYktkX0xNVXco3nWaY4wZk9RMXQXXtCnCEFZw28v0obw0l0bGZgK+5bXk9IJ yFlGmeS4VgYSCb/7CBD4rRlBTmNjImU0kZj6MbpPbgEq0oM/oEQ= -----END CERTIFICATE-----Generated at Fri Mar 27 02:01:27 2026 by rpki-client