$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: jbdbKvC/DBIbF73xuoisaOVsEvXqN8MQXp0mxsM8TPA= Subject key identifier: 1A:91:42:C6:31:67:55:55:5E:78:18:99:26:81:1A:B1:7D:C0:35:3A Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 0CDD4A08EB4AC8349142655B9DEAE30546B4DAAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 0113 Signing time: Tue 24 Mar 2026 17:21:40 +0000 Manifest this update: Tue 24 Mar 2026 17:16:40 +0000 Manifest next update: Sat 28 Mar 2026 01:51:40 +0000 Files and hashes: 1: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 2: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 3: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) 4: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: Nwj7p59B34MJYoE7mxdEXLoRZeg/Jk3duLIt2o89KTs=) 5: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) 6: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 7: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:dd:4a:08:eb:4a:c8:34:91:42:65:5b:9d:ea:e3:05:46:b4:da:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Mar 24 17:16:40 2026 GMT Not After : Mar 28 01:51:40 2026 GMT Subject: CN=1A9142C6316755555E78189926811AB17DC0353A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:ed:0a:bf:ab:73:8b:96:e6:79:0f:1d:da:0b: 51:1c:d3:c4:5c:8c:62:fa:77:bb:c3:e9:9f:a4:10: 2e:1d:b9:ab:3c:33:28:c7:fa:9c:5c:6e:5e:da:8e: ca:52:e7:64:dc:7d:c7:25:6d:1e:a3:aa:92:44:20: 37:0b:27:25:d3:8d:e4:6b:7f:af:7c:f4:92:44:ac: 9c:5d:66:1a:f5:a2:00:a0:f9:2f:3b:69:e2:dd:06: 71:26:e3:6f:13:19:9a:76:2f:4b:0b:7a:e8:5f:4c: 7c:2e:4c:1a:16:c0:42:60:3a:87:6f:f4:47:04:c4: 30:87:a9:68:e6:12:fb:d6:1b:79:c7:93:5c:ed:a7: 99:83:d1:12:7b:6f:4d:ba:55:f6:eb:f5:e3:64:21: d1:0f:66:a1:d8:04:ee:91:ed:d1:43:f8:75:a7:97: 65:f0:04:78:2d:d6:ec:c8:fc:e6:d7:2f:7f:42:fe: e9:df:c5:6a:14:43:a5:f4:a0:d5:7c:5a:24:08:02: 3f:cf:12:c7:5e:9a:92:7c:3f:3b:4e:f1:00:d1:db: b8:9c:96:19:50:22:40:b8:f6:b5:55:22:85:fa:16: 19:2c:e5:32:7e:07:c6:f7:ce:b4:1e:3d:d5:63:11: f0:eb:fd:5c:22:8e:8b:26:78:d5:99:6b:4e:00:b9: 42:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:91:42:C6:31:67:55:55:5E:78:18:99:26:81:1A:B1:7D:C0:35:3A X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:8f:ed:ba:51:92:ba:30:c3:36:ac:17:29:97:1e:26:4a:7f: f2:f0:ff:db:5a:5c:bd:54:f4:59:0f:80:e3:81:cc:af:93:95: 5b:60:76:78:a1:8a:5f:61:39:96:c1:b6:79:85:c4:d4:94:1a: 35:ed:df:ef:aa:ea:b7:e2:8a:e1:cd:9b:46:02:1b:f3:51:76: 71:84:d1:b0:4c:97:2e:34:45:46:90:37:fa:8a:5b:a7:9b:f7: 81:4c:3f:76:61:86:93:0f:1a:12:88:27:28:07:4d:92:97:12: e4:a7:0c:74:62:bb:f3:0d:7d:18:a2:8b:ef:82:39:a8:20:a0: 93:1d:db:98:47:a8:09:e0:8a:0f:b9:00:24:75:90:b6:13:63: f3:06:ea:46:d0:93:0b:96:57:49:b4:2b:28:83:39:14:9e:9d: 27:d5:b9:58:a2:5e:8a:46:84:2d:00:40:e4:4b:42:71:ef:71: 19:32:ab:9e:fb:8e:b9:35:b6:9e:24:44:5b:b4:d6:47:60:dc: 6f:f1:d2:49:0f:c2:21:2e:64:f2:fb:39:ff:ca:f4:dc:d7:7e: 07:cd:3c:19:a0:7b:26:d1:d3:e6:d1:29:1b:89:f2:31:e9:dd: 37:69:38:8b:64:d5:3a:89:96:8f:4a:f7:72:e6:eb:c9:45:a0: d3:f5:a1:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDN1KCOtKyDSRQmVbnerjBUa02qswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNjAzMjQxNzE2NDBaFw0yNjAzMjgwMTUxNDBaMDMxMTAvBgNV BAMTKDFBOTE0MkM2MzE2NzU1NTU1RTc4MTg5OTI2ODExQUIxN0RDMDM1M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7Qq/q3OLluZ5Dx3aC1Ec08Rc jGL6d7vD6Z+kEC4duas8MyjH+pxcbl7ajspS52TcfcclbR6jqpJEIDcLJyXTjeRr f6989JJErJxdZhr1ogCg+S87aeLdBnEm428TGZp2L0sLeuhfTHwuTBoWwEJgOodv 9EcExDCHqWjmEvvWG3nHk1ztp5mD0RJ7b026Vfbr9eNkIdEPZqHYBO6R7dFD+HWn l2XwBHgt1uzI/ObXL39C/unfxWoUQ6X0oNV8WiQIAj/PEsdempJ8PztO8QDR27ic lhlQIkC49rVVIoX6Fhks5TJ+B8b3zrQePdVjEfDr/VwijosmeNWZa04AuUIzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGpFCxjFnVVVeeBiZJoEasX3ANTowHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGqP7bpRkrowwzasFymXHiZKf/Lw/9taXL1U 9FkPgOOBzK+TlVtgdnihil9hOZbBtnmFxNSUGjXt3++q6rfiiuHNm0YCG/NRdnGE 0bBMly40RUaQN/qKW6eb94FMP3ZhhpMPGhKIJygHTZKXEuSnDHRiu/MNfRiii++C OaggoJMd25hHqAngig+5ACR1kLYTY/MG6kbQkwuWV0m0KyiDORSenSfVuViiXopG hC0AQORLQnHvcRkyq577jrk1tp4kRFu01kdg3G/x0kkPwiEuZPL7Of/K9NzXfgfN PBmgeybR0+bRKRuJ8jHp3TdpOItk1TqJlo9K93Lm68lFoNP1oTo= -----END CERTIFICATE-----Generated at Thu Mar 26 21:38:44 2026 by rpki-client