$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: eKoqifjQOk9boQwzSs82rbQ07yFFTZrCcHdr0mqaLgU= Subject key identifier: D5:4D:A8:44:D3:11:9D:6B:F2:B1:E0:F1:1E:B4:10:71:8E:A8:8A:8D Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 4C7DF26A5A51B00565DD6DC5D7066726C1328A4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: 0110 Signing time: Thu 26 Mar 2026 18:01:34 +0000 Manifest this update: Thu 26 Mar 2026 17:56:34 +0000 Manifest next update: Mon 30 Mar 2026 05:55:34 +0000 Files and hashes: 1: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: Ags6qEj8G1tNVxqoTo734mNPZsVwGq25ouTkNgTgiXA=) 2: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: 5kO0RGREhO8piarykNi5/KHR7WVtvVUHyFO9M7Pe3mY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 22:25:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:7d:f2:6a:5a:51:b0:05:65:dd:6d:c5:d7:06:67:26:c1:32:8a:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Mar 26 17:56:34 2026 GMT Not After : Mar 30 05:55:34 2026 GMT Subject: CN=D54DA844D3119D6BF2B1E0F11EB410718EA88A8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:25:76:50:06:68:fa:b2:3b:cc:4e:58:ed:64: 45:bd:e3:6f:81:d1:11:21:06:80:32:15:44:26:c8: b2:eb:17:e1:b0:1d:93:72:49:08:48:87:de:d0:a7: 40:9b:e2:6a:20:39:7e:c9:94:92:c5:ae:09:b8:db: 3e:af:a7:a9:df:80:cd:1a:72:01:9e:57:74:60:6d: 81:d6:e6:5d:e1:34:46:15:e0:62:5c:00:42:a4:ac: 44:53:0c:e4:81:cd:47:b2:1a:37:38:8d:a6:9e:39: 77:e2:4b:98:bf:05:fa:43:c6:89:38:45:42:8f:93: 95:b1:a7:96:43:78:13:ee:91:19:15:c4:6c:95:bb: 47:cd:26:71:bc:73:25:86:0f:35:8c:ec:a7:9a:15: 49:a2:b0:b8:a8:2c:b1:93:ee:13:ba:66:1a:a9:06: e0:8a:09:c5:2d:84:5b:81:2f:d8:cf:23:67:3f:9d: 64:c0:30:cc:06:fd:05:3b:1d:80:40:84:f4:de:cd: 63:e6:dd:84:a9:c3:eb:8f:2d:8b:fd:43:55:1f:4f: 8c:08:01:10:0e:50:08:30:6f:94:dd:ac:cc:39:f7: 82:7e:86:ab:f9:9e:03:d3:d4:1a:07:40:eb:ca:cb: 4b:cb:d7:06:bc:30:d2:61:a9:a0:87:46:55:72:dc: ab:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:4D:A8:44:D3:11:9D:6B:F2:B1:E0:F1:1E:B4:10:71:8E:A8:8A:8D X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:f2:5f:24:2a:c8:20:3c:3e:29:83:82:b7:fa:e8:b4:f8:18: 31:5f:d4:0e:1c:86:8c:4c:81:da:ef:82:96:59:03:b5:47:57: e6:cf:25:f0:e4:08:c5:8b:59:fd:a1:1c:97:1c:52:b0:ca:a3: 7e:99:4f:d6:f4:cf:d3:57:bc:48:ba:44:fb:cd:53:5f:02:b0: 2c:cc:cf:2f:1d:cf:00:96:f6:3b:5e:ae:e5:11:f1:d2:c8:da: 99:a8:7c:1c:1c:8d:bd:2d:83:fc:ba:fe:30:fa:c7:54:13:d0: e6:ed:af:32:8a:04:c5:1a:18:41:69:6d:8e:f9:69:2e:15:ec: cb:89:dc:21:c8:ca:6f:75:f0:f7:95:20:d2:32:fc:fa:dd:6a: 51:4f:cd:55:32:47:3e:c2:e3:39:fc:84:b7:4a:d8:d5:38:3d: 44:05:f5:b7:d0:78:1b:35:0c:fc:69:90:f6:1d:7d:e8:f4:ec: a6:d9:a3:50:66:05:e5:29:6c:46:9c:62:1c:5c:b9:3b:74:08: 45:dd:2b:bb:b0:14:9a:a4:e5:fe:f4:d9:5a:ff:83:12:18:91: 9d:75:80:31:b9:1f:53:65:52:a9:97:2f:7f:9d:ff:37:77:ba: 4c:61:d1:5a:63:25:ca:65:c4:6d:f5:08:92:52:f4:92:0b:be: 43:4d:7a:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTH3yalpRsAVl3W3F1wZnJsEyik8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNjAzMjYxNzU2MzRaFw0yNjAzMzAwNTU1MzRaMDMxMTAvBgNV BAMTKEQ1NERBODQ0RDMxMTlENkJGMkIxRTBGMTFFQjQxMDcxOEVBODhBOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJXZQBmj6sjvMTljtZEW942+B 0REhBoAyFUQmyLLrF+GwHZNySQhIh97Qp0Cb4mogOX7JlJLFrgm42z6vp6nfgM0a cgGeV3RgbYHW5l3hNEYV4GJcAEKkrERTDOSBzUeyGjc4jaaeOXfiS5i/BfpDxok4 RUKPk5Wxp5ZDeBPukRkVxGyVu0fNJnG8cyWGDzWM7KeaFUmisLioLLGT7hO6Zhqp BuCKCcUthFuBL9jPI2c/nWTAMMwG/QU7HYBAhPTezWPm3YSpw+uPLYv9Q1UfT4wI ARAOUAgwb5TdrMw594J+hqv5ngPT1BoHQOvKy0vL1wa8MNJhqaCHRlVy3KsvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1U2oRNMRnWvyseDxHrQQcY6oio0wHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfyXyQqyCA8PimDgrf66LT4GDFf1A4choxM gdrvgpZZA7VHV+bPJfDkCMWLWf2hHJccUrDKo36ZT9b0z9NXvEi6RPvNU18CsCzM zy8dzwCW9jteruUR8dLI2pmofBwcjb0tg/y6/jD6x1QT0ObtrzKKBMUaGEFpbY75 aS4V7MuJ3CHIym918PeVINIy/PrdalFPzVUyRz7C4zn8hLdK2NU4PUQF9bfQeBs1 DPxpkPYdfej07KbZo1BmBeUpbEacYhxcuTt0CEXdK7uwFJqk5f702Vr/gxIYkZ11 gDG5H1NlUqmXL3+d/zd3ukxh0VpjJcplxG31CJJS9JILvkNNehU= -----END CERTIFICATE-----Generated at Thu Mar 26 21:13:07 2026 by rpki-client