$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: OHJphDJ0MjJtjR4rRxQI0EHObfo+FJcD9NPaL5ANhW8= Subject key identifier: 45:89:95:ED:55:A6:31:EE:CA:BA:CF:D7:93:76:71:E8:EB:F2:2E:42 Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 032C5E7915ED4431A4312C9353ABB6159F7660D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: 0118 Signing time: Tue 24 Mar 2026 12:41:49 +0000 Manifest this update: Tue 24 Mar 2026 12:36:49 +0000 Manifest next update: Fri 27 Mar 2026 22:13:49 +0000 Files and hashes: 1: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: wHjDTi86aCDTS5X2N7gs+NfOCWBJ5bb2cIFLbnTobsY=) 2: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:13:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:2c:5e:79:15:ed:44:31:a4:31:2c:93:53:ab:b6:15:9f:76:60:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Mar 24 12:36:49 2026 GMT Not After : Mar 27 22:13:49 2026 GMT Subject: CN=458995ED55A631EECABACFD7937671E8EBF22E42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:49:fc:3c:d3:51:48:c8:4c:2b:91:52:50:f6: ad:70:6f:87:85:f5:da:0b:1c:aa:e1:af:02:c3:c2: 24:65:2e:05:17:1c:96:8d:49:cf:5d:ae:dd:8f:80: bb:19:1f:99:29:2e:1e:d1:63:7b:58:d4:1b:63:bf: 7d:0d:37:d5:b7:31:a8:bf:15:92:13:f3:8d:ff:d2: 50:36:4c:4b:b0:ae:f3:16:dd:66:44:3f:db:c8:0b: 91:95:11:9a:25:1e:6a:dd:fe:38:dd:78:93:6d:23: 44:8a:45:9f:71:c8:38:08:7f:2b:89:78:0a:f2:a2: 14:75:eb:89:b2:4c:01:70:9a:6a:b6:3e:7a:f1:09: 1e:1f:9f:22:b8:f6:c1:2a:be:52:8d:f0:ac:06:ca: b8:bb:07:02:e0:6c:73:54:92:4e:4a:b7:fe:cc:63: 7b:d5:19:bf:b7:c4:11:62:d8:db:2f:1c:8a:45:cf: 58:bf:5e:a5:b8:4c:b9:a4:dc:bf:fc:99:fe:c5:43: 07:98:24:b1:be:cd:04:c8:02:71:61:d1:c3:3d:d3: ed:7c:99:54:78:68:17:c7:e4:e3:7c:c8:41:ab:3a: 8b:2c:6a:ec:18:bd:e2:fc:5b:c8:d1:ad:4c:bd:ab: 78:bb:72:58:e5:42:df:b4:4e:2e:4f:c0:fb:e7:b4: da:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:89:95:ED:55:A6:31:EE:CA:BA:CF:D7:93:76:71:E8:EB:F2:2E:42 X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:19:e4:a4:4f:ed:65:e6:0a:4b:41:7a:8c:d4:3e:19:a3:09: 33:83:02:99:13:e3:cb:d5:b9:e2:d7:09:82:b4:37:95:14:07: 59:cc:91:01:16:10:5e:12:da:73:a7:95:94:22:59:a1:ec:d9: 36:08:07:41:d5:3d:16:a5:73:92:fd:be:13:81:19:fe:82:42: c8:58:20:1a:56:2b:af:50:90:c5:82:be:5c:61:4e:b1:e0:6d: 24:c6:fb:1a:6f:57:04:cc:18:b9:1c:97:ed:05:1c:49:fb:02: 22:4c:ac:86:e9:bd:b6:fc:ec:22:9a:3b:83:b2:ff:67:db:b6: 42:de:b8:8e:0c:e7:87:f5:98:2e:97:db:41:08:57:49:0e:b6: fb:7f:59:28:56:33:85:a0:a1:d0:13:3c:26:ea:54:96:df:83: f1:be:05:28:f9:ca:1f:f3:2e:7a:b4:fa:ee:1c:bc:50:44:c2: 03:35:12:05:02:da:c7:f6:9b:1b:18:34:05:0f:96:9f:50:54: 1a:5b:9b:16:4d:e1:34:66:e1:c2:25:1c:8d:14:6a:75:bc:55: 7c:a0:b8:dd:a5:00:25:29:9f:1e:86:d3:a9:80:b3:47:c4:a5: 1c:76:8a:85:fa:52:a3:57:88:96:a6:9e:18:ac:46:92:bc:fc: 1f:ed:3a:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAyxeeRXtRDGkMSyTU6u2FZ92YNMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNjAzMjQxMjM2NDlaFw0yNjAzMjcyMjEzNDlaMDMxMTAvBgNV BAMTKDQ1ODk5NUVENTVBNjMxRUVDQUJBQ0ZENzkzNzY3MUU4RUJGMjJFNDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRSfw801FIyEwrkVJQ9q1wb4eF 9doLHKrhrwLDwiRlLgUXHJaNSc9drt2PgLsZH5kpLh7RY3tY1Btjv30NN9W3Mai/ FZIT843/0lA2TEuwrvMW3WZEP9vIC5GVEZolHmrd/jjdeJNtI0SKRZ9xyDgIfyuJ eAryohR164myTAFwmmq2PnrxCR4fnyK49sEqvlKN8KwGyri7BwLgbHNUkk5Kt/7M Y3vVGb+3xBFi2NsvHIpFz1i/XqW4TLmk3L/8mf7FQweYJLG+zQTIAnFh0cM90+18 mVR4aBfH5ON8yEGrOossauwYveL8W8jRrUy9q3i7cljlQt+0Ti5PwPvntNqXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURYmV7VWmMe7Kus/Xk3Zx6OvyLkIwHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEZ5KRP7WXmCktBeozUPhmjCTODApkT48vV ueLXCYK0N5UUB1nMkQEWEF4S2nOnlZQiWaHs2TYIB0HVPRalc5L9vhOBGf6CQshY IBpWK69QkMWCvlxhTrHgbSTG+xpvVwTMGLkcl+0FHEn7AiJMrIbpvbb87CKaO4Oy /2fbtkLeuI4M54f1mC6X20EIV0kOtvt/WShWM4WgodATPCbqVJbfg/G+BSj5yh/z Lnq0+u4cvFBEwgM1EgUC2sf2mxsYNAUPlp9QVBpbmxZN4TRm4cIlHI0UanW8VXyg uN2lACUpnx6G06mAs0fEpRx2ioX6UqNXiJamnhisRpK8/B/tOnQ= -----END CERTIFICATE-----Generated at Thu Mar 26 15:05:24 2026 by rpki-client