$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: vXd2nDPlfXvv4tY1bsYxuOMimoJRO2CV9kbHogSA3m0= Subject key identifier: 8E:A4:0E:B9:A5:24:5E:35:5C:B6:D4:87:63:81:62:79:15:48:1C:0C Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 2082B039A9DD6181B4911CFA2EF0613D356B703E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 024C Signing time: Wed 25 Mar 2026 10:31:44 +0000 Manifest this update: Wed 25 Mar 2026 10:26:44 +0000 Manifest next update: Sat 28 Mar 2026 17:02:44 +0000 Files and hashes: 1: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: 34/R8QTjCFJsUx7prL6eX2eJ9Y/fnEucfem7nusLMB8=) 2: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: EDPK0eOxqBPQlG42EiZMre0RjhVvjul6NQmz0+X17bE=) 3: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: G4Krnjq1tHA6GCwOiBkfZYXlx8nnxAxrso7bAHuADVY=) 4: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: 5lY4f9V94dB+03La5b3P91qI5RBjwa5CSpgEJJRGvxc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:02:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:82:b0:39:a9:dd:61:81:b4:91:1c:fa:2e:f0:61:3d:35:6b:70:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Mar 25 10:26:44 2026 GMT Not After : Mar 28 17:02:44 2026 GMT Subject: CN=8EA40EB9A5245E355CB6D4876381627915481C0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:b3:7e:d5:5d:4b:0c:bf:32:13:cb:7f:ed:c2: b3:5b:0d:dd:2b:d9:48:e2:c2:32:bc:23:02:d7:49: cd:c2:76:39:6d:97:d1:66:00:cc:b0:7d:17:e4:b6: fd:12:ee:46:83:35:e2:0e:8f:ac:01:35:27:92:04: 88:ae:01:38:a8:66:9d:bf:2d:65:de:20:52:57:95: 3e:63:bb:46:a0:00:c9:e9:83:37:0e:77:d9:92:be: f7:c8:5c:a7:78:c8:8a:96:8c:7a:45:a5:37:df:a2: 04:ee:7d:41:29:db:54:28:14:86:64:22:e2:68:60: b0:7a:7a:46:5c:d6:87:21:a6:72:e2:aa:82:a7:b6: 6d:05:8f:34:f4:41:c2:ca:f7:ee:a0:87:a7:65:0b: f1:1c:02:49:a0:b5:b8:ce:e8:a0:9d:44:e5:10:f9: 24:11:7e:6a:62:e4:66:c6:ba:01:82:7c:d3:8b:ba: 1a:72:d2:54:d2:e1:5c:65:62:93:6e:e3:95:04:b2: da:0c:9a:74:28:45:74:fd:ba:d9:8e:b7:99:b5:fb: 6b:d5:24:9d:2b:89:48:7f:84:a5:d9:a2:58:be:e5: 46:07:15:fc:9f:19:d5:fb:63:d4:1b:ab:9a:4c:5f: 12:25:6f:c1:ab:19:17:48:a1:dc:ba:18:7d:f9:7b: fc:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:A4:0E:B9:A5:24:5E:35:5C:B6:D4:87:63:81:62:79:15:48:1C:0C X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:af:36:ff:9c:37:3e:4f:ce:c7:0e:5e:64:79:12:98:3a:a1: f2:96:2f:a7:2e:6a:da:e2:6a:2a:a2:20:f4:0b:1a:c4:8d:f8: 39:6d:a0:2b:15:85:b8:48:78:41:5f:ed:8e:f1:7c:13:10:46: 75:da:45:a4:93:9e:b8:2c:5a:33:38:6c:3d:29:b5:9d:a4:2c: 14:e6:e6:e6:ac:fe:a0:90:5b:00:46:53:a2:a2:7c:68:2b:c0: b8:dd:5a:62:80:7b:e0:4d:e3:ab:5e:47:8a:e7:21:bf:ec:a2: af:d1:28:8f:a9:a6:63:cf:75:17:f6:83:de:9f:04:5d:71:a9: 0e:dc:bf:26:43:c2:09:b8:a7:fe:5b:6d:52:f8:ee:14:c4:ce: 46:13:97:e8:50:e5:3c:81:39:84:38:f1:9f:4a:5f:6c:ae:46: 6b:45:5b:2b:6b:a9:d3:4c:d6:1f:fd:62:8a:d4:b1:d3:5f:a9: be:44:72:6c:0d:8e:65:9d:42:79:79:e8:ee:df:55:39:6e:2c: 8a:5d:29:49:43:f5:c9:9a:eb:4a:59:be:3c:b8:05:b6:a7:8f: 63:d5:19:6f:9f:e9:53:2e:c3:35:cc:0e:33:50:9e:00:e6:52: 53:be:61:b1:65:cc:bd:24:2c:11:60:20:76:eb:7f:a4:59:e5: ec:44:4c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIIKwOandYYG0kRz6LvBhPTVrcD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNjAzMjUxMDI2NDRaFw0yNjAzMjgxNzAyNDRaMDMxMTAvBgNV BAMTKDhFQTQwRUI5QTUyNDVFMzU1Q0I2RDQ4NzYzODE2Mjc5MTU0ODFDMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDys37VXUsMvzITy3/twrNbDd0r 2UjiwjK8IwLXSc3Cdjltl9FmAMywfRfktv0S7kaDNeIOj6wBNSeSBIiuATioZp2/ LWXeIFJXlT5ju0agAMnpgzcOd9mSvvfIXKd4yIqWjHpFpTffogTufUEp21QoFIZk IuJoYLB6ekZc1ochpnLiqoKntm0FjzT0QcLK9+6gh6dlC/EcAkmgtbjO6KCdROUQ +SQRfmpi5GbGugGCfNOLuhpy0lTS4VxlYpNu45UEstoMmnQoRXT9utmOt5m1+2vV JJ0riUh/hKXZoli+5UYHFfyfGdX7Y9Qbq5pMXxIlb8GrGRdIody6GH35e/wVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjqQOuaUkXjVcttSHY4FieRVIHAwwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGKvNv+cNz5PzscOXmR5Epg6ofKWL6cuatri aiqiIPQLGsSN+DltoCsVhbhIeEFf7Y7xfBMQRnXaRaSTnrgsWjM4bD0ptZ2kLBTm 5uas/qCQWwBGU6KifGgrwLjdWmKAe+BN46teR4rnIb/soq/RKI+ppmPPdRf2g96f BF1xqQ7cvyZDwgm4p/5bbVL47hTEzkYTl+hQ5TyBOYQ48Z9KX2yuRmtFWytrqdNM 1h/9YorUsdNfqb5EcmwNjmWdQnl56O7fVTluLIpdKUlD9cma60pZvjy4Bbanj2PV GW+f6VMuwzXMDjNQngDmUlO+YbFlzL0kLBFgIHbrf6RZ5exETK0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:08:05 2026 by rpki-client