$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft File: 194F6EF659F1115C068AB59065D57F150E23F5B6.mft (raw, json) Hash identifier: CcO603gU5NgYkvsKDXLGSse22T8eqz1l4rMmVuE2YlQ= Subject key identifier: 3B:F8:9C:5A:E4:6E:B8:45:F4:A9:98:79:BF:F1:82:79:B0:E5:32:B3 Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Certificate serial: 1917BBBC58BBB2240E81C155FED3FCA3827168D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft Manifest number: 0229 Signing time: Thu 26 Mar 2026 01:44:24 +0000 Manifest this update: Thu 26 Mar 2026 01:39:24 +0000 Manifest next update: Sun 29 Mar 2026 05:11:24 +0000 Files and hashes: 1: 34332e3234302e3232352e302f32342d3234203d3e203633343933.roa (hash: iiMdXC5IwE7CrNkyDM/L6svytNKfCeHud3DpbhTkmXw=) 2: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (hash: d0HjkKB7FfimroRB+n2YS7p7zUW66ddpBfJeipPxBBQ=) 3: 194F6EF659F1115C068AB59065D57F150E23F5B6.crl (hash: mdk+3FflFAPi3aMAn0lKifSCOCAx5wd67p/SmaNNx0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:11:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:17:bb:bc:58:bb:b2:24:0e:81:c1:55:fe:d3:fc:a3:82:71:68:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6 Validity Not Before: Mar 26 01:39:24 2026 GMT Not After : Mar 29 05:11:24 2026 GMT Subject: CN=3BF89C5AE46EB845F4A99879BFF18279B0E532B3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:8b:32:57:84:32:7d:f7:4a:7d:ee:97:ea:8a: 6c:58:ca:1a:eb:bd:90:6c:4d:e5:27:b8:fd:bf:a4: 9b:4b:a2:5e:53:a7:a7:cd:3a:4b:3d:34:2d:ff:6c: cd:02:ed:15:34:03:d6:d3:22:64:c5:fb:7e:bf:82: f9:96:e3:c3:76:0a:33:da:fd:6b:1b:89:f5:64:86: 35:fd:02:6c:44:74:9b:ef:9f:bd:3c:f4:e0:fc:5e: c1:40:a3:cf:db:9c:d4:d5:cd:26:d2:38:06:7c:c9: 73:a9:c2:1d:0d:5a:6a:11:92:e3:e1:61:f9:f7:7c: 47:fd:fa:44:3d:3e:0f:b1:58:7f:78:75:8b:d0:2d: 18:57:48:a9:63:c7:c6:ae:be:20:b2:e1:d8:19:c0: 7a:1e:43:b9:7c:d7:87:1d:32:cd:a5:c7:c4:57:fa: 4d:9a:21:c3:ee:96:f8:10:03:89:18:fd:64:2f:c1: 35:83:23:b6:d5:3f:81:14:ef:28:2d:b5:9f:86:89: 82:d8:40:92:8a:1e:7c:16:89:72:91:b9:d1:a2:fb: 5a:ca:ad:6a:bc:43:00:3a:73:b5:77:7c:8e:95:e1: 1c:f0:43:53:1b:d6:26:0d:6e:fb:b7:ea:81:25:8c: d2:25:b1:06:71:c2:4e:10:56:57:11:a4:d9:9e:3c: 05:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F8:9C:5A:E4:6E:B8:45:F4:A9:98:79:BF:F1:82:79:B0:E5:32:B3 X509v3 Authority Key Identifier: keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:de:96:bf:4a:78:37:a0:3c:3e:68:0c:0b:48:31:3d:db:b0: 2e:c5:6e:f3:41:d3:55:9d:30:6b:c9:52:38:c7:b3:5e:0c:d6: 3f:07:f0:ee:27:74:42:20:25:1d:25:e6:53:dc:e7:4e:a3:1c: 40:18:02:b2:15:43:dd:5d:9e:cf:10:79:68:ed:e5:a8:e3:15: 5f:75:d1:4a:53:d5:8f:0e:f5:71:f9:f5:80:ad:14:37:74:9b: 8c:db:bd:d3:d8:49:82:ef:41:36:10:5c:47:09:d3:58:0b:0f: a5:20:3f:93:4f:db:44:3a:d2:9e:b8:0a:bc:62:ef:e7:81:5e: 16:92:a6:57:d7:77:d6:b1:6d:8c:fb:4f:1d:a9:32:8e:54:25: 4f:93:8e:2e:76:0b:eb:28:83:96:37:ae:b5:52:22:b4:b1:a5: 64:22:74:9a:4c:c1:ca:6b:8c:5e:c7:3c:65:8f:14:ae:c3:39: da:0c:aa:0d:83:2c:e7:d4:6f:53:1c:b1:ae:a3:65:65:2d:8c: c7:97:2c:b4:13:27:83:58:72:5e:c7:06:6e:18:13:17:04:68: 94:f5:38:e1:43:bf:18:72:0b:d4:92:88:af:c9:f2:88:36:f6: f5:a4:9f:88:3f:9e:4c:38:37:dc:96:74:a9:8a:0e:9e:f1:51: 5d:d6:ed:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGRe7vFi7siQOgcFV/tP8o4JxaNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw RTIzRjVCNjAeFw0yNjAzMjYwMTM5MjRaFw0yNjAzMjkwNTExMjRaMDMxMTAvBgNV BAMTKDNCRjg5QzVBRTQ2RUI4NDVGNEE5OTg3OUJGRjE4Mjc5QjBFNTMyQjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3izJXhDJ990p97pfqimxYyhrr vZBsTeUnuP2/pJtLol5Tp6fNOks9NC3/bM0C7RU0A9bTImTF+36/gvmW48N2CjPa /WsbifVkhjX9AmxEdJvvn7089OD8XsFAo8/bnNTVzSbSOAZ8yXOpwh0NWmoRkuPh Yfn3fEf9+kQ9Pg+xWH94dYvQLRhXSKljx8auviCy4dgZwHoeQ7l814cdMs2lx8RX +k2aIcPulvgQA4kY/WQvwTWDI7bVP4EU7ygttZ+GiYLYQJKKHnwWiXKRudGi+1rK rWq8QwA6c7V3fI6V4RzwQ1Mb1iYNbvu36oEljNIlsQZxwk4QVlcRpNmePAU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/icWuRuuEX0qZh5v/GCebDlMrMwHwYDVR0j BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5 RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz RjVCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2ZhYmVjNzEtN2VjYi00ZGJkLWE0 MjEtOTliOWNkMjA5MDNhLzAvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdG MTUwRTIzRjVCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADrelr9KeDegPD5oDAtIMT3bsC7FbvNB01Wd MGvJUjjHs14M1j8H8O4ndEIgJR0l5lPc506jHEAYArIVQ91dns8QeWjt5ajjFV91 0UpT1Y8O9XH59YCtFDd0m4zbvdPYSYLvQTYQXEcJ01gLD6UgP5NP20Q60p64Crxi 7+eBXhaSplfXd9axbYz7Tx2pMo5UJU+Tji52C+sog5Y3rrVSIrSxpWQidJpMwcpr jF7HPGWPFK7DOdoMqg2DLOfUb1Mcsa6jZWUtjMeXLLQTJ4NYcl7HBm4YExcEaJT1 OOFDvxhyC9SSiK/J8og29vWkn4g/nkw4N9yWdKmKDp7xUV3W7Xs= -----END CERTIFICATE-----Generated at Thu Mar 26 10:36:48 2026 by rpki-client