$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft File: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft (raw, json) Hash identifier: usRvJkfDEyRXaUegyVmkBu2l2LIF25/OErP2z3B0xRM= Subject key identifier: 8A:0F:32:30:16:17:C9:C1:21:82:53:12:11:D7:81:69:15:BB:29:E3 Authority key identifier: CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 Certificate issuer: /CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Certificate serial: 6C298F84F12A11A56979C8A0687E00CFFDA0C4EB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft Manifest number: 014D Signing time: Wed 25 Mar 2026 00:20:47 +0000 Manifest this update: Wed 25 Mar 2026 00:15:47 +0000 Manifest next update: Sat 28 Mar 2026 00:29:47 +0000 Files and hashes: 1: 3135372e31352e36322e302f32332d3233203d3e20313532333733.roa (hash: Us649gKgLXgCXiwIAPzSRfT2vwc2Xrs3/JnrzSYazTY=) 2: 3135372e31352e36332e302f32342d3234203d3e20313532333733.roa (hash: VPkKq5pW4icrUWwOkyNSfwGvVjdptRStLH0drWvxYBA=) 3: CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl (hash: aOB4ZdabF4PVzQuxPptjL70D2rCigT+Bm0oealyA5WQ=) 4: 3135372e31352e36322e302f32342d3234203d3e20313532333733.roa (hash: 1dTygyk/7ehjmuKZCXq/8/I9EJofLtz0v42TURzqMFw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:29:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:29:8f:84:f1:2a:11:a5:69:79:c8:a0:68:7e:00:cf:fd:a0:c4:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB54DC526FA214F9F736926E6AAA16ABE39BF8E8 Validity Not Before: Mar 25 00:15:47 2026 GMT Not After : Mar 28 00:29:47 2026 GMT Subject: CN=8A0F32301617C9C12182531211D7816915BB29E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:03:24:05:8b:ad:f6:a9:74:4d:e8:9c:82: a8:4b:46:23:83:a2:88:a9:dd:6a:59:d7:92:b9:22: cb:bf:b8:45:94:04:b1:9e:1c:43:3f:40:af:01:72: 07:00:bd:87:ea:33:97:b8:d9:50:e7:6b:14:63:e3: 0e:a5:fc:58:58:5d:31:07:25:1f:26:60:a3:52:8a: 23:5d:ba:2f:3a:96:cf:1b:97:f9:95:31:99:0b:80: 4d:ed:21:f1:53:8b:9c:2c:2d:6f:85:5a:2e:b6:9b: 15:83:52:00:07:19:8d:9c:a6:c1:ec:77:f2:c2:6e: a9:bf:21:2f:bd:ac:54:5b:40:d1:cc:9d:3a:a9:ed: d7:99:70:96:37:0b:60:39:b6:ff:82:05:5e:77:87: 28:1d:d0:b3:08:21:84:b8:ef:fb:f6:e4:db:10:18: f9:43:3e:82:b1:53:90:c8:1a:05:79:c9:6e:d4:fa: a4:77:69:6d:14:26:f7:3c:80:78:f9:6b:b5:a5:52: 39:8e:eb:4e:43:dc:1c:fe:7e:6f:80:ad:b5:22:54: 27:7e:d0:e9:cd:a8:cc:17:b1:95:a8:56:07:b2:f1: c7:0b:48:a0:ef:48:6e:a6:99:b3:e8:dd:fc:dd:69: 7c:b0:c4:b9:99:8d:85:e1:09:d4:5e:68:c6:e0:a7: 4b:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:0F:32:30:16:17:C9:C1:21:82:53:12:11:D7:81:69:15:BB:29:E3 X509v3 Authority Key Identifier: keyid:CB:54:DC:52:6F:A2:14:F9:F7:36:92:6E:6A:AA:16:AB:E3:9B:F8:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/0/CB54DC526FA214F9F736926E6AAA16ABE39BF8E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c8:23:b3:b9:2c:fb:ce:c3:c3:41:d4:f9:6a:38:7d:b9:d2: 77:9f:4f:2e:a7:50:78:17:59:70:95:ea:05:dc:e4:b3:5a:d9: c6:bb:18:f7:ed:01:99:b2:ce:dd:a1:8f:ec:d5:9d:0e:25:53: e6:5d:90:d5:a2:c4:94:c5:ee:4a:e6:60:04:44:85:f7:dd:8d: 13:46:60:f8:ab:d8:2e:0e:ad:55:89:b7:3e:12:e0:4e:72:c0: 90:13:ee:05:f0:f4:9e:f4:3d:fe:bd:45:31:36:be:21:50:05: 5b:2d:57:c6:58:3b:d1:85:fd:c3:14:d9:24:44:c8:bd:8a:a5: 1f:2f:34:53:02:7d:b3:52:35:20:5c:d8:a0:57:32:95:41:15: ad:91:e9:0d:48:e7:4d:e5:dc:d0:e5:7a:03:6a:6e:af:01:1a: 50:37:53:6e:83:82:23:50:35:93:25:8e:1d:74:0c:cd:1d:6d: e5:63:11:b2:27:cb:b6:39:00:9f:f5:60:f0:8f:c2:60:27:35: 54:38:4d:fa:db:0e:c3:da:ee:5e:8e:4c:3f:20:81:38:df:c7: ad:4b:a2:30:5a:55:24:75:7c:2b:a2:aa:84:70:fe:e6:bb:a1: fb:51:3b:03:71:53:68:97:30:78:a7:c3:93:83:8d:3a:6f:d3: 8d:58:71:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbCmPhPEqEaVpecigaH4Az/2gxOswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJF MzlCRjhFODAeFw0yNjAzMjUwMDE1NDdaFw0yNjAzMjgwMDI5NDdaMDMxMTAvBgNV BAMTKDhBMEYzMjMwMTYxN0M5QzEyMTgyNTMxMjExRDc4MTY5MTVCQjI5RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC78AMkBYut9ql0TeicgqhLRiOD ooip3WpZ15K5Isu/uEWUBLGeHEM/QK8BcgcAvYfqM5e42VDnaxRj4w6l/FhYXTEH JR8mYKNSiiNdui86ls8bl/mVMZkLgE3tIfFTi5wsLW+FWi62mxWDUgAHGY2cpsHs d/LCbqm/IS+9rFRbQNHMnTqp7deZcJY3C2A5tv+CBV53hygd0LMIIYS47/v25NsQ GPlDPoKxU5DIGgV5yW7U+qR3aW0UJvc8gHj5a7WlUjmO605D3Bz+fm+ArbUiVCd+ 0OnNqMwXsZWoVgey8ccLSKDvSG6mmbPo3fzdaXywxLmZjYXhCdReaMbgp0vVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUig8yMBYXycEhglMSEdeBaRW7KeMwHwYDVR0j BBgwFoAUy1TcUm+iFPn3NpJuaqoWq+Ob+OgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMC9DQjU0REM1MjZG QTIxNEY5RjczNjkyNkU2QUFBMTZBQkUzOUJGOEU4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2QUJFMzlC RjhFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzAvQ0I1NERDNTI2RkEyMTRGOUY3MzY5MjZFNkFBQTE2 QUJFMzlCRjhFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPII7O5LPvOw8NB1PlqOH250nefTy6nUHgX WXCV6gXc5LNa2ca7GPftAZmyzt2hj+zVnQ4lU+ZdkNWixJTF7krmYAREhffdjRNG YPir2C4OrVWJtz4S4E5ywJAT7gXw9J70Pf69RTE2viFQBVstV8ZYO9GF/cMU2SRE yL2KpR8vNFMCfbNSNSBc2KBXMpVBFa2R6Q1I503l3NDlegNqbq8BGlA3U26DgiNQ NZMljh10DM0dbeVjEbIny7Y5AJ/1YPCPwmAnNVQ4TfrbDsPa7l6OTD8ggTjfx61L ojBaVSR1fCuiqoRw/ua7oftROwNxU2iXMHinw5ODjTpv041Ycb4= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:20 2026 by rpki-client