$ rpki-client -vvf repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft File: 945AD192B10F71CE48362295A9C6281FE3395786.mft (raw, json) Hash identifier: ouo64oM9Tjyc3BcCpnp7rq4LI2zoxmDJ0KasIVAc2lo= Subject key identifier: DD:AA:21:C6:F6:3F:2F:F9:06:B7:64:4A:0D:98:F3:E3:84:72:22:4B Authority key identifier: 94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 Certificate issuer: /CN=945AD192B10F71CE48362295A9C6281FE3395786 Certificate serial: 365C920FE72E7A22BE282511AC0348D62EC8E8C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft Manifest number: 0266 Signing time: Thu 26 Mar 2026 20:12:31 +0000 Manifest this update: Thu 26 Mar 2026 20:07:31 +0000 Manifest next update: Mon 30 Mar 2026 06:19:31 +0000 Files and hashes: 1: 3130332e3138392e39342e302f32332d3234203d3e2034383030.roa (hash: wuBJwpKwOiGhlkXr5a00YrNTyDMK7HD3QVMHitGSpjk=) 2: 945AD192B10F71CE48362295A9C6281FE3395786.crl (hash: MaXkpIVl2kUxhTDVfSLyQSXzKwgMO3oo6yPdG1K9QIc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 04:30:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:5c:92:0f:e7:2e:7a:22:be:28:25:11:ac:03:48:d6:2e:c8:e8:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=945AD192B10F71CE48362295A9C6281FE3395786 Validity Not Before: Mar 26 20:07:31 2026 GMT Not After : Mar 30 06:19:31 2026 GMT Subject: CN=DDAA21C6F63F2FF906B7644A0D98F3E38472224B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:fc:eb:61:b2:c0:f7:8a:f5:23:57:7e:66:ea: e5:db:14:2b:b3:04:18:12:83:8b:e0:79:46:ca:2f: bc:e7:1a:ac:11:f1:dd:c1:24:ce:39:cd:8b:ea:60: a4:da:5b:7a:8e:63:4c:08:ab:66:0f:b0:e1:97:7c: 42:46:1e:0b:48:af:68:9e:2d:de:28:76:2a:4b:c0: 33:a7:75:6e:37:63:7a:ef:85:c3:6f:f9:48:7a:7f: 8b:1c:8c:71:bf:ec:e9:1d:1b:b0:69:96:95:d3:7a: f8:ac:41:8b:b5:8b:b6:31:55:26:ee:e0:d8:14:cc: c7:db:21:24:05:e6:d6:d7:00:73:90:95:1b:a5:d8: e3:3d:2f:61:3f:a7:c6:9d:29:e9:ff:67:bf:b1:26: 4f:a8:c1:0c:78:2d:a1:b8:08:b3:60:b5:ed:6c:cf: cc:98:8b:75:42:72:9c:05:bf:83:84:16:51:5a:be: f6:83:8c:96:2c:aa:b1:11:f5:af:b4:7c:f0:41:cf: af:23:19:c3:60:31:d3:39:77:43:ea:65:ce:53:f7: 59:9a:7d:8f:67:36:8a:b0:38:ad:68:fd:9d:c3:36: 05:98:54:fc:91:f0:f1:e1:de:40:54:12:1d:02:73: d3:ef:a0:bc:37:18:f1:65:98:46:bd:f3:dd:4a:d1: ed:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:AA:21:C6:F6:3F:2F:F9:06:B7:64:4A:0D:98:F3:E3:84:72:22:4B X509v3 Authority Key Identifier: keyid:94:5A:D1:92:B1:0F:71:CE:48:36:22:95:A9:C6:28:1F:E3:39:57:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/945AD192B10F71CE48362295A9C6281FE3395786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43a52045-a6fc-45b1-be59-825735c96f54/0/945AD192B10F71CE48362295A9C6281FE3395786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:46:99:af:bb:d8:81:e4:26:e0:6d:bc:38:66:9b:8f:ff:ef: 31:2f:cc:b0:a0:88:71:b6:4a:e8:c3:bc:cc:6b:95:bc:b7:45: e5:12:5d:b4:fd:32:4a:30:3f:1c:f2:dc:ec:c0:bd:83:04:58: e4:ff:d9:a5:1d:12:43:1e:de:54:44:73:b3:83:39:2c:01:b9: 8f:bf:07:e8:e3:6f:95:c7:bc:86:d7:45:cc:d5:93:ff:0e:61: f7:72:e9:af:fd:f6:b6:95:31:0f:96:b3:b9:fc:60:33:03:83: 75:37:42:37:e0:91:22:6e:54:32:a7:25:e9:2d:b0:0f:ae:df: 20:40:50:f9:7c:d8:a8:8f:5c:bc:6b:c5:74:4a:a7:28:45:fe: fa:4d:c8:8a:62:7e:a1:23:5d:3c:e5:7f:9f:53:90:47:44:b5: 12:48:3c:f6:fa:01:8c:19:14:a7:3d:7f:59:59:75:28:2d:69: 2f:5b:f0:53:ad:6a:da:ca:d9:a4:64:57:7e:dd:75:67:29:4f: 5b:5d:74:22:26:78:2d:5b:22:e4:13:e2:39:a9:24:d1:26:3b: b9:38:76:d6:5e:32:e2:60:cb:e6:f4:8a:85:aa:90:2c:da:d9: 3e:c5:62:6c:ee:99:7a:a0:df:78:bb:16:0c:ff:0d:02:b0:27: 5b:13:37:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNlySD+cueiK+KCURrANI1i7I6MIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZF MzM5NTc4NjAeFw0yNjAzMjYyMDA3MzFaFw0yNjAzMzAwNjE5MzFaMDMxMTAvBgNV BAMTKEREQUEyMUM2RjYzRjJGRjkwNkI3NjQ0QTBEOThGM0UzODQ3MjIyNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF/OthssD3ivUjV35m6uXbFCuz BBgSg4vgeUbKL7znGqwR8d3BJM45zYvqYKTaW3qOY0wIq2YPsOGXfEJGHgtIr2ie Ld4odipLwDOndW43Y3rvhcNv+Uh6f4scjHG/7OkdG7BplpXTevisQYu1i7YxVSbu 4NgUzMfbISQF5tbXAHOQlRul2OM9L2E/p8adKen/Z7+xJk+owQx4LaG4CLNgte1s z8yYi3VCcpwFv4OEFlFavvaDjJYsqrER9a+0fPBBz68jGcNgMdM5d0PqZc5T91ma fY9nNoqwOK1o/Z3DNgWYVPyR8PHh3kBUEh0Cc9PvoLw3GPFlmEa9891K0e1rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3aohxvY/L/kGt2RKDZjz44RyIkswHwYDVR0j BBgwFoAUlFrRkrEPcc5INiKVqcYoH+M5V4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 M2E1MjA0NS1hNmZjLTQ1YjEtYmU1OS04MjU3MzVjOTZmNTQvMC85NDVBRDE5MkIx MEY3MUNFNDgzNjIyOTVBOUM2MjgxRkUzMzk1Nzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4MUZFMzM5 NTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDNhNTIwNDUtYTZmYy00NWIxLWJl NTktODI1NzM1Yzk2ZjU0LzAvOTQ1QUQxOTJCMTBGNzFDRTQ4MzYyMjk1QTlDNjI4 MUZFMzM5NTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFGma+72IHkJuBtvDhmm4//7zEvzLCgiHG2 SujDvMxrlby3ReUSXbT9MkowPxzy3OzAvYMEWOT/2aUdEkMe3lREc7ODOSwBuY+/ B+jjb5XHvIbXRczVk/8OYfdy6a/99raVMQ+Ws7n8YDMDg3U3QjfgkSJuVDKnJekt sA+u3yBAUPl82KiPXLxrxXRKpyhF/vpNyIpifqEjXTzlf59TkEdEtRJIPPb6AYwZ FKc9f1lZdSgtaS9b8FOtatrK2aRkV37ddWcpT1tddCImeC1bIuQT4jmpJNEmO7k4 dtZeMuJgy+b0ioWqkCza2T7FYmzumXqg33i7Fgz/DQKwJ1sTN6M= -----END CERTIFICATE-----Generated at Fri Mar 27 05:11:02 2026 by rpki-client