$ rpki-client -vvf repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft File: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft (raw, json) Hash identifier: 05tdvcWB8eUlCUtRsryDxcyzn13SMZIa/FB7iF2RBYc= Subject key identifier: 2D:8D:29:9C:6D:1D:EE:66:17:BB:65:60:67:3A:AF:C6:2E:AE:18:A8 Authority key identifier: C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A Certificate issuer: /CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Certificate serial: 56FBC5F2BFA5EB3A1B5EB4F503C84051E744B512 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft Manifest number: 011F Signing time: Wed 25 Mar 2026 01:01:34 +0000 Manifest this update: Wed 25 Mar 2026 00:56:34 +0000 Manifest next update: Sat 28 Mar 2026 11:44:34 +0000 Files and hashes: 1: 3130332e3138362e3139322e302f32342d3234203d3e20313439393238.roa (hash: aEavLtAbdRxoRXxDQMLv+ovCw/uDfoEk+/AelkTfu1k=) 2: C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl (hash: rDG98/aJeYGJX9L6vDqoKOOAQWqzDKakTgfXWDmTFDM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:44:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fb:c5:f2:bf:a5:eb:3a:1b:5e:b4:f5:03:c8:40:51:e7:44:b5:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C447AFC4547DCF16A24E96FFB3A2FD98CA42796A Validity Not Before: Mar 25 00:56:34 2026 GMT Not After : Mar 28 11:44:34 2026 GMT Subject: CN=2D8D299C6D1DEE6617BB6560673AAFC62EAE18A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:b1:73:7b:ae:c0:00:89:e9:d3:3c:4d:9c:ee: 77:c4:d5:03:1a:b6:14:81:b8:6e:78:ec:65:a5:73: 00:b6:a4:f8:0e:15:2f:8b:23:f8:13:f1:d5:51:ec: e4:dd:d2:f8:cd:5a:65:df:da:3c:69:e0:30:3d:b9: 1b:a8:c7:bf:54:8f:bd:66:f9:ce:95:11:bb:e4:1b: cf:44:64:ab:aa:7d:0b:1f:86:e4:47:5f:ec:34:63: ae:69:55:9c:a0:38:53:74:df:b4:1e:9e:6c:eb:cd: 73:bf:51:eb:74:88:80:8d:9a:3b:cc:f4:d3:6a:03: 95:66:85:e9:92:94:94:10:dc:2f:52:41:ed:99:d0: c0:75:6b:70:51:02:79:aa:c6:bc:88:c2:cd:ba:84: 1f:a1:97:dc:e3:39:a6:32:7c:b1:ef:ee:a8:51:68: 4e:f5:5b:48:e6:5a:7b:0d:d5:cc:47:f9:12:ef:76: 83:a5:6c:a8:bb:3c:46:89:22:1d:91:00:02:eb:3d: e2:24:07:f5:ad:97:c1:6f:0a:fc:98:96:70:d8:04: 2c:0c:44:c7:6d:e2:ee:02:4b:e9:e0:91:96:2f:97: 27:3b:1f:d9:21:7c:b9:ad:5d:cd:d9:05:95:bc:c0: 19:3d:09:92:cf:c5:15:0a:43:6e:e9:5a:eb:76:13: 9e:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:8D:29:9C:6D:1D:EE:66:17:BB:65:60:67:3A:AF:C6:2E:AE:18:A8 X509v3 Authority Key Identifier: keyid:C4:47:AF:C4:54:7D:CF:16:A2:4E:96:FF:B3:A2:FD:98:CA:42:79:6A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c35a9ddf-c109-4fc1-a30d-8f04b83381be/0/C447AFC4547DCF16A24E96FFB3A2FD98CA42796A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:f7:d6:6e:6d:84:60:5b:4e:dd:49:f2:3f:95:b3:43:04:d8: b4:c0:9f:ae:df:67:c3:60:62:2c:8d:00:8c:b7:c6:23:5c:6d: d8:ea:d8:01:44:23:5f:f2:1f:02:53:11:e6:5f:1a:4f:79:eb: 69:a0:62:3c:3c:df:65:40:3f:59:04:7b:0d:6c:3f:84:1d:c0: 4c:f2:b3:3e:9b:9c:34:62:b7:d6:e9:a0:2f:5a:d6:e4:89:54: 01:23:10:b6:cf:c3:88:a8:49:b3:e2:0a:17:6f:4b:61:30:1d: fd:2c:8f:9c:95:43:b5:f0:f1:cc:53:df:1b:79:cb:7d:77:f9: cc:3f:60:1f:00:ce:c0:81:1d:58:06:ad:bc:18:b0:93:1a:5d: 11:16:86:99:32:13:1e:6a:cd:58:19:80:3c:47:a7:a3:61:fc: 98:f6:db:20:d1:9f:b7:81:65:2a:f3:ad:30:28:50:02:29:9c: 9d:7a:04:26:24:bb:5f:2c:4c:93:93:4b:04:a9:ba:b7:2f:8c: 36:11:17:2f:94:d8:32:5d:5e:a6:73:30:d7:0c:4e:75:03:a3: cc:dc:26:26:01:91:b4:a7:a3:a4:12:dc:fd:de:92:9c:8f:e8: 8c:af:ee:56:3a:aa:ca:97:2d:e4:28:b5:02:7b:fa:7f:87:d4: 9d:39:8b:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVvvF8r+l6zobXrT1A8hAUedEtRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThD QTQyNzk2QTAeFw0yNjAzMjUwMDU2MzRaFw0yNjAzMjgxMTQ0MzRaMDMxMTAvBgNV BAMTKDJEOEQyOTlDNkQxREVFNjYxN0JCNjU2MDY3M0FBRkM2MkVBRTE4QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9sXN7rsAAienTPE2c7nfE1QMa thSBuG547GWlcwC2pPgOFS+LI/gT8dVR7OTd0vjNWmXf2jxp4DA9uRuox79Uj71m +c6VEbvkG89EZKuqfQsfhuRHX+w0Y65pVZygOFN037QenmzrzXO/Uet0iICNmjvM 9NNqA5VmhemSlJQQ3C9SQe2Z0MB1a3BRAnmqxryIws26hB+hl9zjOaYyfLHv7qhR aE71W0jmWnsN1cxH+RLvdoOlbKi7PEaJIh2RAALrPeIkB/Wtl8FvCvyYlnDYBCwM RMdt4u4CS+ngkZYvlyc7H9khfLmtXc3ZBZW8wBk9CZLPxRUKQ27pWut2E56ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULY0pnG0d7mYXu2VgZzqvxi6uGKgwHwYDVR0j BBgwFoAUxEevxFR9zxaiTpb/s6L9mMpCeWowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MzVhOWRkZi1jMTA5LTRmYzEtYTMwZC04ZjA0YjgzMzgxYmUvMC9DNDQ3QUZDNDU0 N0RDRjE2QTI0RTk2RkZCM0EyRkQ5OENBNDI3OTZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZEOThDQTQy Nzk2QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzM1YTlkZGYtYzEwOS00ZmMxLWEz MGQtOGYwNGI4MzM4MWJlLzAvQzQ0N0FGQzQ1NDdEQ0YxNkEyNEU5NkZGQjNBMkZE OThDQTQyNzk2QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT31m5thGBbTt1J8j+Vs0ME2LTAn67fZ8Ng YiyNAIy3xiNcbdjq2AFEI1/yHwJTEeZfGk9562mgYjw832VAP1kEew1sP4QdwEzy sz6bnDRit9bpoC9a1uSJVAEjELbPw4ioSbPiChdvS2EwHf0sj5yVQ7Xw8cxT3xt5 y313+cw/YB8AzsCBHVgGrbwYsJMaXREWhpkyEx5qzVgZgDxHp6Nh/Jj22yDRn7eB ZSrzrTAoUAIpnJ16BCYku18sTJOTSwSpurcvjDYRFy+U2DJdXqZzMNcMTnUDo8zc JiYBkbSno6QS3P3ekpyP6Iyv7lY6qsqXLeQotQJ7+n+H1J05i/s= -----END CERTIFICATE-----Generated at Thu Mar 26 18:19:52 2026 by rpki-client