$ rpki-client -vvf repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft File: C42304B7D0E216E2F73305D25EBA185E1A321586.mft (raw, json) Hash identifier: buHJBb7tkPECseRbZJbisJwXjIW7RfQeiMerCN6xQIs= Subject key identifier: CC:86:72:0D:39:B2:54:10:22:79:A8:88:C9:94:A5:99:BA:AB:37:FF Authority key identifier: C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 Certificate issuer: /CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Certificate serial: F0720668152B1F32AE769C4245D7351019EA45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject info access: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft Manifest number: 20 Signing time: Wed 25 Mar 2026 15:12:33 +0000 Manifest this update: Wed 25 Mar 2026 15:07:33 +0000 Manifest next update: Sat 28 Mar 2026 22:19:33 +0000 Files and hashes: 1: C42304B7D0E216E2F73305D25EBA185E1A321586.crl (hash: 2nOLLI0UaZ45h56nlao2i9FB3Ohnwjciu1Fyncersps=) 2: 3131342e3134312e35392e302f32342d3234203d3e20313432333632.roa (hash: huqt9zp4ZaM/ehHcf/q79Imf4OzuK2ijijHg2TgEeMU=) 3: 3131342e3134312e35372e302f32342d3234203d3e20313339393937.roa (hash: XWuaYLYmlK9hExFjkzInUKqGyFC8YbxMTIf12TewHWo=) 4: 3131342e3134312e35362e302f32342d3234203d3e20313339393937.roa (hash: /XfV+lJcb9X56N7rlaHL4tfgC5CfK4dQVit65blaNYo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: f0:72:06:68:15:2b:1f:32:ae:76:9c:42:45:d7:35:10:19:ea:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C42304B7D0E216E2F73305D25EBA185E1A321586 Validity Not Before: Mar 25 15:07:33 2026 GMT Not After : Mar 28 22:19:33 2026 GMT Subject: CN=CC86720D39B254102279A888C994A599BAAB37FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b2:83:5a:d3:25:f8:47:8e:c1:d8:d4:2d:b6: ee:b0:85:f2:e3:04:e8:cc:2f:1a:a2:92:53:43:11: 2e:c5:4b:20:ad:62:01:e8:45:8d:e2:e4:bb:21:5a: 29:ad:3e:84:7f:38:fa:59:1e:48:4b:12:99:4d:ef: 62:bc:ce:54:33:f0:96:19:6f:7f:9b:9f:a4:40:f5: 9e:4f:1b:f8:32:d5:b5:08:82:b6:18:f2:38:65:45: 5e:16:d4:8b:24:9c:87:b4:54:36:15:13:8a:f6:f0: 40:be:7d:a0:9f:5e:bb:d4:f0:2d:ff:17:6f:86:49: df:a5:06:8b:59:7c:2e:f3:0e:84:25:43:3e:c8:b2: 27:94:03:96:48:5b:d6:b0:3a:db:46:96:1f:02:db: d1:11:22:c1:2b:83:6c:4b:96:6a:d2:77:24:19:64: 98:5d:83:07:7e:52:75:7f:37:3c:64:a3:dd:03:5f: 37:c0:d8:49:00:03:ee:8e:b4:17:3c:cb:22:4c:59: e4:c6:01:d9:91:ea:71:89:d3:0e:46:85:63:18:38: 47:0c:0e:df:8d:ff:63:c6:f4:f5:cf:53:d3:fe:66: b3:1a:47:66:f1:7c:8c:e4:71:a1:8c:e5:d2:74:70: 21:80:14:37:5f:e8:73:71:0d:b9:10:c0:55:85:5f: 28:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:86:72:0D:39:B2:54:10:22:79:A8:88:C9:94:A5:99:BA:AB:37:FF X509v3 Authority Key Identifier: keyid:C4:23:04:B7:D0:E2:16:E2:F7:33:05:D2:5E:BA:18:5E:1A:32:15:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C42304B7D0E216E2F73305D25EBA185E1A321586.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65a96b81-d128-4965-a177-facf341e7f89/0/C42304B7D0E216E2F73305D25EBA185E1A321586.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:3c:7b:1c:76:36:a5:72:ea:ab:63:b4:66:26:30:28:e6:5d: 34:a8:60:5e:e9:6c:0c:cd:46:83:ff:25:9b:e2:e3:6e:e3:7c: 7d:12:e2:53:74:97:d9:62:a5:50:cc:7c:d0:a4:4b:ee:ca:6f: 60:4f:ff:93:5b:21:8d:a2:cf:76:b7:09:b4:95:3d:26:4d:d3: 86:9c:70:fc:b1:85:a8:ef:10:0e:35:b8:5e:44:ac:38:1d:cb: 0c:df:0c:54:d2:cc:8f:0a:80:21:51:2c:37:f3:5a:06:2c:4e: f5:72:a9:56:ca:e0:94:2f:1d:41:84:63:9a:b9:21:e8:fe:f2: 6d:a3:3e:bb:b5:c1:24:eb:c7:72:a6:74:66:15:0a:31:2e:21: a4:d7:08:f6:fd:97:c2:07:24:b8:d1:4b:e9:8a:23:58:f5:27: 0b:92:ec:a0:7e:ae:7a:82:f2:b5:16:8e:3f:ea:70:bc:e3:7f: 56:3b:78:cd:f4:34:89:1b:33:7a:4f:12:4a:6a:39:9c:d4:22: cf:f7:19:54:87:51:13:db:67:dd:28:a1:2f:ee:cf:11:91:ca: 68:f3:08:0a:80:e7:bc:53:16:b4:42:5d:e8:f2:5e:9b:14:c5: 96:cc:e3:df:6a:0e:c9:c7:de:5f:d4:8b:85:13:61:57:c1:33: 91:8a:fd:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAPByBmgVKx8yrnacQkXXNRAZ6kUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUx QTMyMTU4NjAeFw0yNjAzMjUxNTA3MzNaFw0yNjAzMjgyMjE5MzNaMDMxMTAvBgNV BAMTKENDODY3MjBEMzlCMjU0MTAyMjc5QTg4OEM5OTRBNTk5QkFBQjM3RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrsoNa0yX4R47B2NQttu6whfLj BOjMLxqiklNDES7FSyCtYgHoRY3i5LshWimtPoR/OPpZHkhLEplN72K8zlQz8JYZ b3+bn6RA9Z5PG/gy1bUIgrYY8jhlRV4W1IsknIe0VDYVE4r28EC+faCfXrvU8C3/ F2+GSd+lBotZfC7zDoQlQz7IsieUA5ZIW9awOttGlh8C29ERIsErg2xLlmrSdyQZ ZJhdgwd+UnV/Nzxko90DXzfA2EkAA+6OtBc8yyJMWeTGAdmR6nGJ0w5GhWMYOEcM Dt+N/2PG9PXPU9P+ZrMaR2bxfIzkcaGM5dJ0cCGAFDdf6HNxDbkQwFWFXygTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzIZyDTmyVBAieaiIyZSlmbqrN/8wHwYDVR0j BBgwFoAUxCMEt9DiFuL3MwXSXroYXhoyFYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NWE5NmI4MS1kMTI4LTQ5NjUtYTE3Ny1mYWNmMzQxZTdmODkvMC9DNDIzMDRCN0Qw RTIxNkUyRjczMzA1RDI1RUJBMTg1RTFBMzIxNTg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4NUUxQTMy MTU4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjVhOTZiODEtZDEyOC00OTY1LWEx NzctZmFjZjM0MWU3Zjg5LzAvQzQyMzA0QjdEMEUyMTZFMkY3MzMwNUQyNUVCQTE4 NUUxQTMyMTU4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA08exx2NqVy6qtjtGYmMCjmXTSoYF7pbAzN RoP/JZvi427jfH0S4lN0l9lipVDMfNCkS+7Kb2BP/5NbIY2iz3a3CbSVPSZN04ac cPyxhajvEA41uF5ErDgdywzfDFTSzI8KgCFRLDfzWgYsTvVyqVbK4JQvHUGEY5q5 Iej+8m2jPru1wSTrx3KmdGYVCjEuIaTXCPb9l8IHJLjRS+mKI1j1JwuS7KB+rnqC 8rUWjj/qcLzjf1Y7eM30NIkbM3pPEkpqOZzUIs/3GVSHURPbZ90ooS/uzxGRymjz CAqA57xTFrRCXejyXpsUxZbM499qDsnH3l/Ui4UTYVfBM5GK/eU= -----END CERTIFICATE-----Generated at Thu Mar 26 17:07:02 2026 by rpki-client