$ rpki-client -vvf repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft File: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft (raw, json) Hash identifier: MM4/VbRPOu0syIcV+zHNeyA/bNYuiiUbDB/pgubaVHI= Subject key identifier: EB:99:BD:28:D1:13:56:C0:C9:D8:8B:A0:EE:11:51:FC:09:17:C0:E4 Authority key identifier: C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 Certificate issuer: /CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Certificate serial: 400898539AFE7068568A0E5AEB51D39F17DB4A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft Manifest number: 03AB Signing time: Thu 26 Mar 2026 01:12:09 +0000 Manifest this update: Thu 26 Mar 2026 01:07:09 +0000 Manifest next update: Sun 29 Mar 2026 04:21:09 +0000 Files and hashes: 1: 3130332e3136312e37332e302f32342d3234203d3e203538333738.roa (hash: yhKeiwU+JCs9UN8oh228h1Q0h11o4+yJwLGZRxsDQjM=) 2: 3130332e3136312e37322e302f32342d3234203d3e203538333738.roa (hash: KGeHvvLL7YUj6ruPXwXmEedVa7petv8U3MdeekZgjts=) 3: C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl (hash: YrjGQww5bHUXk7wDJjNl034pMswTZK+DHZjV3VpEcxg=) 4: 3130332e3136312e37332e302f32342d3234203d3e20313430333936.roa (hash: /rt35EUSw4Ix6/cmxLUEYEesdVZ42xEum9IJJSBZ0aY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:21:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:08:98:53:9a:fe:70:68:56:8a:0e:5a:eb:51:d3:9f:17:db:4a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4 Validity Not Before: Mar 26 01:07:09 2026 GMT Not After : Mar 29 04:21:09 2026 GMT Subject: CN=EB99BD28D11356C0C9D88BA0EE1151FC0917C0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:6d:6d:91:11:6a:7f:ac:f3:3e:d2:a4:f9:c3: d3:0b:29:92:f7:d4:ee:44:ea:14:b9:e8:bf:10:e5: d1:fa:e9:f1:78:d7:ad:6e:66:c7:a3:69:26:64:63: 05:9e:bf:fd:a8:1b:85:0a:b3:b1:6a:b3:0a:d5:b2: a4:f2:3f:ee:04:3d:90:8b:69:ff:b2:05:31:a3:5b: 0a:c0:7a:f6:20:7a:6a:17:72:6c:6e:71:f6:c0:aa: fc:c6:61:9d:d8:29:d0:3f:f1:73:48:c3:a1:63:39: 54:e5:18:08:3a:00:f1:fc:96:71:32:64:70:ee:9b: 83:93:f5:8a:7e:52:50:68:26:f5:4d:f3:6c:74:7e: 93:6b:bf:71:59:8d:53:3b:32:19:ac:a1:87:be:70: fc:ad:98:69:fb:b0:59:9b:dd:58:e0:4b:dc:71:95: f9:91:31:0d:3e:c6:0f:05:77:71:4f:3d:45:ef:a8: 55:16:c8:c8:10:b6:f0:f4:c2:da:91:f6:a8:18:a6: 5b:7f:4e:18:f1:e3:63:a6:18:03:f3:b7:b9:13:ee: aa:be:9c:b5:6a:99:5d:97:0f:d4:5f:c2:6f:08:5c: 7d:ac:65:76:e9:64:f2:c7:a6:81:22:e6:1e:78:e2: 1d:0c:a9:b8:b8:06:d3:1d:1d:4a:bd:d8:5b:3a:c6: 66:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:99:BD:28:D1:13:56:C0:C9:D8:8B:A0:EE:11:51:FC:09:17:C0:E4 X509v3 Authority Key Identifier: keyid:C2:0D:D3:7A:F0:EF:3C:A0:55:DF:DF:8F:3F:5D:18:F0:81:81:96:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9ebe7ad8-e15c-4014-bfb3-be69b7d5de88/0/C20DD37AF0EF3CA055DFDF8F3F5D18F0818196F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:fd:71:e6:ff:3f:de:e6:6e:a4:43:85:c1:47:96:a2:8d:b2: 5f:50:62:a3:46:8a:a2:07:58:73:42:c6:85:71:85:de:27:3f: e0:3a:88:9d:a9:d3:93:dd:81:bf:2c:a1:54:42:55:fc:4d:cc: 61:b3:23:69:bb:e8:78:29:b7:76:b8:ad:d7:32:3b:c3:75:67: 6c:b4:3d:a8:93:10:67:d9:97:d0:6e:12:3b:e7:1d:39:9b:99: 09:17:15:48:d8:11:0f:04:3b:14:89:67:1c:d4:bf:00:a1:d5: 5d:af:c5:4c:8d:31:52:f8:f8:1e:b3:dc:34:aa:d9:5b:90:60: f2:3e:0c:48:19:00:a6:55:fd:10:16:65:38:62:b8:66:f0:97: 63:ab:de:79:21:06:03:56:a5:5b:20:d2:e0:12:46:11:e1:0e: 33:ce:4a:fe:e4:12:b8:b1:1e:fb:82:de:2c:cd:5d:de:dd:8d: a8:24:bf:4e:93:db:0d:ac:13:5f:49:15:92:2f:9f:46:d0:26: c8:55:c2:04:34:14:5a:e6:2b:19:c8:e3:3e:ab:3d:37:c9:1f: 2a:95:96:21:f7:c2:d5:48:d5:a1:0e:b3:2e:a7:63:cb:24:eb: 1c:27:d7:f2:f5:5c:a3:95:6a:2b:98:76:a8:71:48:e7:a5:90: 5e:b0:75:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQAiYU5r+cGhWig5a61HTnxfbSl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4 MTgxOTZGNDAeFw0yNjAzMjYwMTA3MDlaFw0yNjAzMjkwNDIxMDlaMDMxMTAvBgNV BAMTKEVCOTlCRDI4RDExMzU2QzBDOUQ4OEJBMEVFMTE1MUZDMDkxN0MwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBbW2REWp/rPM+0qT5w9MLKZL3 1O5E6hS56L8Q5dH66fF4161uZsejaSZkYwWev/2oG4UKs7FqswrVsqTyP+4EPZCL af+yBTGjWwrAevYgemoXcmxucfbAqvzGYZ3YKdA/8XNIw6FjOVTlGAg6APH8lnEy ZHDum4OT9Yp+UlBoJvVN82x0fpNrv3FZjVM7MhmsoYe+cPytmGn7sFmb3VjgS9xx lfmRMQ0+xg8Fd3FPPUXvqFUWyMgQtvD0wtqR9qgYplt/Thjx42OmGAPzt7kT7qq+ nLVqmV2XD9Rfwm8IXH2sZXbpZPLHpoEi5h544h0Mqbi4BtMdHUq92Fs6xmbzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU65m9KNETVsDJ2Iug7hFR/AkXwOQwHwYDVR0j BBgwFoAUwg3TevDvPKBV39+PP10Y8IGBlvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWJlN2FkOC1lMTVjLTQwMTQtYmZiMy1iZTY5YjdkNWRlODgvMC9DMjBERDM3QUYw RUYzQ0EwNTVERkRGOEYzRjVEMThGMDgxODE5NkY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4RjA4MTgx OTZGNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWViZTdhZDgtZTE1Yy00MDE0LWJm YjMtYmU2OWI3ZDVkZTg4LzAvQzIwREQzN0FGMEVGM0NBMDU1REZERjhGM0Y1RDE4 RjA4MTgxOTZGNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADb9ceb/P97mbqRDhcFHlqKNsl9QYqNGiqIH WHNCxoVxhd4nP+A6iJ2p05Pdgb8soVRCVfxNzGGzI2m76Hgpt3a4rdcyO8N1Z2y0 PaiTEGfZl9BuEjvnHTmbmQkXFUjYEQ8EOxSJZxzUvwCh1V2vxUyNMVL4+B6z3DSq 2VuQYPI+DEgZAKZV/RAWZThiuGbwl2Or3nkhBgNWpVsg0uASRhHhDjPOSv7kErix HvuC3izNXd7djagkv06T2w2sE19JFZIvn0bQJshVwgQ0FFrmKxnI4z6rPTfJHyqV liH3wtVI1aEOsy6nY8sk6xwn1/L1XKOVaiuYdqhxSOelkF6wdU0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:57:25 2026 by rpki-client