$ rpki-client -vvf repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft File: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft (raw, json) Hash identifier: me7bCbX0zI46usHLjeySEAZQ5/GBJdn3AXhJyLbCQto= Subject key identifier: 2E:40:3C:85:75:44:8F:1B:A4:FE:74:DD:0A:7D:9F:F4:2E:0C:A7:0F Authority key identifier: 10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 Certificate issuer: /CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Certificate serial: 454179DA5E6319650361A28975617EF50F71E42B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft Manifest number: 0140 Signing time: Thu 26 Mar 2026 09:21:48 +0000 Manifest this update: Thu 26 Mar 2026 09:16:48 +0000 Manifest next update: Sun 29 Mar 2026 14:56:48 +0000 Files and hashes: 1: 3132332e3130382e36372e302f32342d3234203d3e20313333373939.roa (hash: za0Z0h7B6rXfwK+gwVXCLP4pPInhM0Xgqb7AixJZuSM=) 2: 3130332e34322e3235322e302f32342d3234203d3e20313333373939.roa (hash: Eio3CIIbJAaiz2bm6bSx1QfF11U/yV3nf0IBr7k8yqU=) 3: 3132332e3130382e36342e302f32322d3232203d3e20313333373939.roa (hash: XpUOiQ9XLis+siwm2ltXy8+AprbbUAtuufHs1GLS3qc=) 4: 3130332e34322e3235322e302f32322d3232203d3e20313333373939.roa (hash: +UxVLTx+8JWWF1I8NQ2V32cZmbcrP31Hh0f15uy9i4c=) 5: 3132332e3130382e36352e302f32342d3234203d3e20313333373939.roa (hash: qx0gRpyS+qkoTAupBc4dylyNn0JvIVKzjb3xlZMzfnc=) 6: 3132332e3130382e36362e302f32342d3234203d3e20313333373939.roa (hash: xVuWjNIPg+9K49gtAuNGLfqYN7QFfENKsG3WlW8R/sk=) 7: 108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl (hash: 2aK0pGdIxozz1l21EznLzhhm3Xgnfx3rNGuCClySKYw=) 8: 323430313a626538303a3a2f33322d3332203d3e20313333373939.roa (hash: ylV8IEJ3lwV0WCMtlAlERcBMFz/TQP3ymIMtXkYk6Q4=) 9: 3132332e3130382e36342e302f32342d3234203d3e20313333373939.roa (hash: gJJCOrNxdaxjtZq7LDGjA/51Y+Aw2M/H/vJeKD854SU=) 10: 3130332e34322e3235332e302f32342d3234203d3e20313333373939.roa (hash: GwmFP4HHeJBtoNFyPKI5mF0Cj0VtYHLQG/3aYlgxoFI=) 11: 3130332e34322e3235352e302f32342d3234203d3e20313333373939.roa (hash: dFvCzz4DaG28iCZNf6uex6BP+H0ISLeKfNuskC4b1Vg=) 12: 3130332e34322e3235342e302f32342d3234203d3e20313333373939.roa (hash: Ef5HpkdJVz/4uKZmf0k+esuKvIhSnmMUGjmBM9Einzk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:41:79:da:5e:63:19:65:03:61:a2:89:75:61:7e:f5:0f:71:e4:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=108261B2B5A1F3CC828EF2A532ED94DFC1202853 Validity Not Before: Mar 26 09:16:48 2026 GMT Not After : Mar 29 14:56:48 2026 GMT Subject: CN=2E403C8575448F1BA4FE74DD0A7D9FF42E0CA70F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e2:7e:63:e6:6b:d9:4d:79:5e:e2:e7:9c:b1: 51:42:22:2a:77:56:3e:96:2c:75:5e:93:02:29:84: b8:69:cc:af:d3:2b:63:f6:ec:db:ce:0c:e4:ee:38: cd:d6:db:1e:89:e3:bd:d5:ac:fb:48:af:01:70:78: 4a:13:0d:b8:94:ea:d5:52:69:7c:f1:c2:ef:0f:1c: 4f:fb:f4:f5:44:e5:28:33:eb:aa:a5:16:ea:6a:b7: 5a:6c:2d:f8:19:f7:30:25:ce:50:39:fb:1a:e9:ac: c5:35:22:87:de:72:94:95:22:e3:50:03:47:8b:95: bb:4c:a0:fc:2b:44:9f:e2:f0:42:de:4d:cd:1e:06: 16:17:3f:3b:b2:c4:10:43:fa:0d:78:ab:63:b6:03: 03:71:b3:08:73:53:ed:77:2e:fc:ce:b5:08:f6:fa: 6d:4e:7e:0f:21:72:0f:72:b9:4c:e5:34:9c:d9:60: ac:26:56:b4:96:eb:51:52:ba:ab:19:62:0a:db:f9: d1:7e:6c:fc:30:22:c6:70:c7:a7:3f:5e:9c:75:de: 73:ab:c9:c5:b1:f6:31:00:b3:30:5f:f3:e2:df:1f: 14:46:f6:ae:69:a5:a4:4b:5e:0e:9b:db:f1:1a:0e: 66:1b:4c:f5:11:ae:1c:9e:ce:eb:0c:18:53:c5:72: cb:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:3C:85:75:44:8F:1B:A4:FE:74:DD:0A:7D:9F:F4:2E:0C:A7:0F X509v3 Authority Key Identifier: keyid:10:82:61:B2:B5:A1:F3:CC:82:8E:F2:A5:32:ED:94:DF:C1:20:28:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/108261B2B5A1F3CC828EF2A532ED94DFC1202853.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cb63f771-a95f-4b53-87bc-8bff504da1f4/0/108261B2B5A1F3CC828EF2A532ED94DFC1202853.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:3b:44:12:68:5a:0f:56:74:4c:8f:50:2e:c6:0c:8a:3c:86: cf:06:8d:d7:04:62:f5:e3:5d:a3:fa:78:0f:16:aa:d6:87:79: f8:8d:d1:3a:c6:d3:3a:f1:53:2b:b8:2a:10:82:d7:c6:52:77: 47:04:8a:87:98:61:1f:ae:81:87:e6:84:a0:48:e1:8a:66:47: b4:2f:63:d7:96:0f:b4:6d:d2:ca:7d:4a:70:6a:6d:44:3e:07: cf:62:dc:dd:5a:90:99:e5:f5:27:66:68:e7:da:13:eb:54:fd: bd:7f:6c:42:89:9b:17:e0:b0:de:66:1a:00:c3:c9:dd:36:9a: 3b:c3:47:4a:1f:fd:ee:68:f1:a0:5c:57:ab:b4:08:8c:55:b9: b9:dd:7e:89:d4:83:0a:5a:c2:47:2f:6d:85:73:a7:12:02:5f: d1:28:6a:4e:99:d0:6a:e4:d2:86:df:0c:cc:38:66:ec:cd:0f: fc:d1:4b:f1:cf:0a:6d:aa:bc:8b:06:03:ed:f1:8d:08:87:c5: 5b:a4:ae:84:a3:38:5d:d8:73:1d:6c:10:bc:aa:a6:f4:b0:73: b8:fd:d9:23:23:17:2a:52:f3:77:a9:a9:fe:4d:de:2a:77:58: 3d:75:48:37:14:56:3f:4f:a5:45:7c:bd:88:84:cb:58:7e:34: a2:ac:c9:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURUF52l5jGWUDYaKJdWF+9Q9x5CswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZD MTIwMjg1MzAeFw0yNjAzMjYwOTE2NDhaFw0yNjAzMjkxNDU2NDhaMDMxMTAvBgNV BAMTKDJFNDAzQzg1NzU0NDhGMUJBNEZFNzRERDBBN0Q5RkY0MkUwQ0E3MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ4n5j5mvZTXle4uecsVFCIip3 Vj6WLHVekwIphLhpzK/TK2P27NvODOTuOM3W2x6J473VrPtIrwFweEoTDbiU6tVS aXzxwu8PHE/79PVE5Sgz66qlFupqt1psLfgZ9zAlzlA5+xrprMU1IofecpSVIuNQ A0eLlbtMoPwrRJ/i8ELeTc0eBhYXPzuyxBBD+g14q2O2AwNxswhzU+13LvzOtQj2 +m1Ofg8hcg9yuUzlNJzZYKwmVrSW61FSuqsZYgrb+dF+bPwwIsZwx6c/Xpx13nOr ycWx9jEAszBf8+LfHxRG9q5ppaRLXg6b2/EaDmYbTPURrhyezusMGFPFcss1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULkA8hXVEjxuk/nTdCn2f9C4Mpw8wHwYDVR0j BBgwFoAUEIJhsrWh88yCjvKlMu2U38EgKFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YjYzZjc3MS1hOTVmLTRiNTMtODdiYy04YmZmNTA0ZGExZjQvMC8xMDgyNjFCMkI1 QTFGM0NDODI4RUYyQTUzMkVEOTRERkMxMjAyODUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0REZDMTIw Mjg1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2I2M2Y3NzEtYTk1Zi00YjUzLTg3 YmMtOGJmZjUwNGRhMWY0LzAvMTA4MjYxQjJCNUExRjNDQzgyOEVGMkE1MzJFRDk0 REZDMTIwMjg1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJU7RBJoWg9WdEyPUC7GDIo8hs8GjdcEYvXj XaP6eA8WqtaHefiN0TrG0zrxUyu4KhCC18ZSd0cEioeYYR+ugYfmhKBI4YpmR7Qv Y9eWD7Rt0sp9SnBqbUQ+B89i3N1akJnl9SdmaOfaE+tU/b1/bEKJmxfgsN5mGgDD yd02mjvDR0of/e5o8aBcV6u0CIxVubndfonUgwpawkcvbYVzpxICX9Eoak6Z0Grk 0obfDMw4ZuzND/zRS/HPCm2qvIsGA+3xjQiHxVukroSjOF3Ycx1sELyqpvSwc7j9 2SMjFypS83epqf5N3ip3WD11SDcUVj9PpUV8vYiEy1h+NKKsyTI= -----END CERTIFICATE-----Generated at Thu Mar 26 15:23:28 2026 by rpki-client