$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: YhSX/Wzaedgs+rTdhGQzit8B5j3aL6HWMd72rkjU470= Subject key identifier: 5F:44:56:F3:08:CB:7F:F2:AC:5B:3A:7D:8C:B8:B9:0D:F5:DC:94:28 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 5E455861FBE5662E503F7DBD168BFA4F30375F04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 023C Signing time: Thu 26 Mar 2026 00:05:28 +0000 Manifest this update: Thu 26 Mar 2026 00:00:28 +0000 Manifest next update: Sun 29 Mar 2026 04:34:28 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: TABZKN8Rkk8NufuFaPRyDM6kh0aOK2E/0sL3u7ZfVPk=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:34:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:45:58:61:fb:e5:66:2e:50:3f:7d:bd:16:8b:fa:4f:30:37:5f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Mar 26 00:00:28 2026 GMT Not After : Mar 29 04:34:28 2026 GMT Subject: CN=5F4456F308CB7FF2AC5B3A7D8CB8B90DF5DC9428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:6f:7b:6b:3e:08:70:02:fc:54:8d:e9:e7:3e: 87:c0:91:11:d4:01:fa:98:9f:6a:ee:b8:65:3e:7e: f4:54:bf:a7:a2:de:67:99:f7:2f:d1:e2:ad:2e:0b: 14:23:80:3b:3a:95:a7:d0:6b:01:5f:d6:bd:b9:48: 01:a6:eb:98:de:fd:0a:db:87:0c:59:90:a4:59:63: 47:d6:9a:6d:e4:f8:9c:57:10:25:aa:30:0d:fe:74: 23:08:43:bd:99:9c:e3:21:9e:f4:5b:94:ef:8f:31: 5c:bf:a2:6c:c7:d9:78:74:76:0c:bd:45:ae:e9:22: 0f:48:cf:ab:7c:5d:23:28:7e:04:bc:34:13:94:c4: e2:12:73:62:cc:cd:9b:b5:97:1d:13:c1:27:0b:5a: a2:bc:9d:5f:94:8a:14:b7:6e:01:39:e4:30:20:0a: de:8a:17:62:48:e2:4a:8a:cd:07:13:eb:be:99:d8: fd:3a:66:5f:ef:86:fd:a4:11:d6:54:18:31:af:d2: 7e:b6:36:96:db:89:a9:43:48:d9:5b:68:c0:a9:17: 43:61:a1:2a:4c:17:28:8b:f4:2d:2e:72:53:d0:ba: 1c:6e:c0:50:5a:57:05:2c:30:1b:5e:52:36:6b:61: b7:9d:94:7d:d4:26:e1:e5:a1:15:d3:a3:05:dd:18: d6:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:44:56:F3:08:CB:7F:F2:AC:5B:3A:7D:8C:B8:B9:0D:F5:DC:94:28 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:0a:20:17:18:b2:b0:98:d2:8e:c5:eb:10:67:64:47:50:45: 64:f1:0d:8a:61:19:c6:de:ea:a1:41:72:c8:04:5e:39:f4:a4: 7b:54:04:d4:24:bd:ba:22:db:02:7b:66:9d:ad:4d:0d:54:83: 91:f1:18:b3:53:a1:34:94:54:86:71:be:fc:2b:f2:0b:98:8a: 14:b3:0a:dd:04:5c:1a:13:cb:89:28:a8:3b:aa:8a:aa:33:b6: 7d:f3:29:89:1f:cb:ca:ea:2b:03:5d:fa:d9:88:29:18:83:fe: 1e:22:ad:d1:c5:1e:fb:b4:58:9c:6c:a5:c2:40:9f:9b:03:a2: ed:fb:d4:3c:f4:c6:e2:1d:61:61:58:57:21:c8:32:c9:63:c1: c4:61:c7:90:69:ba:73:d2:bc:4f:ac:3c:f2:41:a4:1c:b1:fd: 3c:46:e5:e5:58:0b:e9:03:ca:e4:ec:5d:29:15:31:03:49:d0: 00:87:f1:22:cc:b7:44:45:31:23:61:f3:ec:75:de:5f:69:e6: 93:ce:ad:c4:5b:3d:1b:2e:91:c8:00:ed:7c:c8:ca:6a:cb:6a: 5f:90:ab:1e:09:40:02:d6:2d:b9:bf:89:15:6d:41:f8:ac:ec: 59:fe:62:d2:38:32:b1:7b:1d:2c:31:e1:be:2c:d7:3c:f2:a4: b8:2c:77:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXkVYYfvlZi5QP329Fov6TzA3XwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNjAzMjYwMDAwMjhaFw0yNjAzMjkwNDM0MjhaMDMxMTAvBgNV BAMTKDVGNDQ1NkYzMDhDQjdGRjJBQzVCM0E3RDhDQjhCOTBERjVEQzk0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKb3trPghwAvxUjennPofAkRHU AfqYn2ruuGU+fvRUv6ei3meZ9y/R4q0uCxQjgDs6lafQawFf1r25SAGm65je/Qrb hwxZkKRZY0fWmm3k+JxXECWqMA3+dCMIQ72ZnOMhnvRblO+PMVy/omzH2Xh0dgy9 Ra7pIg9Iz6t8XSMofgS8NBOUxOISc2LMzZu1lx0TwScLWqK8nV+UihS3bgE55DAg Ct6KF2JI4kqKzQcT676Z2P06Zl/vhv2kEdZUGDGv0n62NpbbialDSNlbaMCpF0Nh oSpMFyiL9C0uclPQuhxuwFBaVwUsMBteUjZrYbedlH3UJuHloRXTowXdGNYvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX0RW8wjLf/KsWzp9jLi5DfXclCgwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0KIBcYsrCY0o7F6xBnZEdQRWTxDYphGcbe 6qFBcsgEXjn0pHtUBNQkvboi2wJ7Zp2tTQ1Ug5HxGLNToTSUVIZxvvwr8guYihSz Ct0EXBoTy4koqDuqiqoztn3zKYkfy8rqKwNd+tmIKRiD/h4irdHFHvu0WJxspcJA n5sDou371Dz0xuIdYWFYVyHIMsljwcRhx5BpunPSvE+sPPJBpByx/TxG5eVYC+kD yuTsXSkVMQNJ0ACH8SLMt0RFMSNh8+x13l9p5pPOrcRbPRsukcgA7XzIymrLal+Q qx4JQALWLbm/iRVtQfis7Fn+YtI4MrF7HSwx4b4s1zzypLgsd/c= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:41 2026 by rpki-client