$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: DBM0PwmVaPH//039o7HHrI6u+Ih6ogN9WDsunrCYDXE= Subject key identifier: E4:5F:EE:F6:78:95:2F:0C:1A:AE:D3:3E:B0:67:FA:4C:39:A8:20:99 Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 65CA506E2BB9BB3A76638E5AF65D47F1B2B79D5B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0279 Signing time: Tue 24 Mar 2026 22:22:24 +0000 Manifest this update: Tue 24 Mar 2026 22:17:24 +0000 Manifest next update: Sat 28 Mar 2026 03:29:24 +0000 Files and hashes: 1: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=) 2: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: 1R0u+F9afe90o78jzXaNenztYHfUyfS1GefgzVxXzB4=) 3: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=) 4: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:29:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:ca:50:6e:2b:b9:bb:3a:76:63:8e:5a:f6:5d:47:f1:b2:b7:9d:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Mar 24 22:17:24 2026 GMT Not After : Mar 28 03:29:24 2026 GMT Subject: CN=E45FEEF678952F0C1AAED33EB067FA4C39A82099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:14:3d:11:27:b1:84:5e:5b:75:53:1f:5c:43: 18:34:68:1e:1c:b3:ac:ab:1a:37:5a:ff:96:9d:6e: fd:1d:fe:f7:21:c8:46:1d:fc:12:03:a4:8c:ee:3a: a8:06:f9:55:ba:ae:53:82:ab:0f:07:b0:06:9e:d7: dd:c1:61:0b:2b:6c:87:e9:9e:35:06:b6:60:24:7c: f0:03:d2:3b:af:f7:97:a5:d6:a3:19:7a:ab:2e:af: ea:33:a4:83:66:b4:9b:6d:3b:e1:d9:4e:e4:4c:87: ce:8f:30:79:c5:49:41:00:5c:0e:fb:16:58:71:97: 4e:54:e9:b2:0a:0b:ca:7b:e4:6e:9b:18:a5:ff:da: a5:33:37:ff:04:65:b5:62:2f:68:54:70:bf:6a:83: 4d:f8:08:92:aa:4b:80:30:83:19:24:cf:a8:fa:d9: db:35:04:65:62:60:70:8b:a7:0c:30:08:de:95:b5: 9c:66:7f:c0:5b:d3:f0:e7:0c:90:bb:e6:3f:1d:26: 2f:8b:66:0d:3e:0f:8d:70:f3:ff:ea:1d:1a:a5:9b: 8c:ec:3f:94:c9:cc:a8:74:67:d7:bc:3f:65:a1:b7: 6c:ce:45:b6:5f:4a:48:a1:51:11:44:32:7c:0a:ec: 34:47:65:10:85:0e:e7:9b:d5:94:a4:9e:c2:31:d8: 0a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5F:EE:F6:78:95:2F:0C:1A:AE:D3:3E:B0:67:FA:4C:39:A8:20:99 X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:ae:cb:6f:1d:ad:cb:3e:4d:2d:4e:74:59:2d:3c:df:65:e4: 05:4c:ad:f1:89:87:07:77:e6:8d:61:c5:1f:7a:31:95:e9:2b: cd:ff:7d:c3:64:3c:a8:5c:a6:5e:db:ec:26:4a:e4:a6:fc:3d: b5:ef:2f:22:06:e1:7b:40:e2:0f:1b:1f:28:c7:1b:73:01:4b: 0a:01:21:62:9a:45:8f:f9:19:cf:da:44:29:3d:29:fc:29:43: 09:e1:a7:2a:95:28:4a:c1:15:ac:1b:7c:70:13:64:64:93:8e: 98:d2:3a:af:27:0e:e9:ba:b0:08:d5:49:eb:d6:bc:1a:e2:1f: c1:5b:aa:05:b2:30:2e:43:91:a1:79:4c:f6:d1:77:81:39:a8: b2:5e:74:cc:78:dc:85:19:fc:b5:a4:c7:93:f5:0e:80:a8:36: 8b:89:78:31:d6:3f:77:7a:fc:6f:eb:45:24:e4:ef:f5:42:2e: a3:a3:82:5f:8b:9c:2e:d4:c7:82:6e:f0:0a:9e:30:80:91:9b: d9:4c:81:23:6a:79:c3:f3:48:b1:f0:69:a4:8f:f7:f4:57:c7: 04:5c:82:57:83:de:95:6d:ca:36:fa:13:7b:1e:7c:20:cc:ea: 5d:b8:1f:23:68:49:61:81:fe:d3:ea:53:ab:26:1f:dc:f9:ba: 3a:d0:bc:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZcpQbiu5uzp2Y45a9l1H8bK3nVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNjAzMjQyMjE3MjRaFw0yNjAzMjgwMzI5MjRaMDMxMTAvBgNV BAMTKEU0NUZFRUY2Nzg5NTJGMEMxQUFFRDMzRUIwNjdGQTRDMzlBODIwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFD0RJ7GEXlt1Ux9cQxg0aB4c s6yrGjda/5adbv0d/vchyEYd/BIDpIzuOqgG+VW6rlOCqw8HsAae193BYQsrbIfp njUGtmAkfPAD0juv95el1qMZeqsur+ozpINmtJttO+HZTuRMh86PMHnFSUEAXA77 Flhxl05U6bIKC8p75G6bGKX/2qUzN/8EZbViL2hUcL9qg034CJKqS4Awgxkkz6j6 2ds1BGViYHCLpwwwCN6VtZxmf8Bb0/DnDJC75j8dJi+LZg0+D41w8//qHRqlm4zs P5TJzKh0Z9e8P2Wht2zORbZfSkihURFEMnwK7DRHZRCFDueb1ZSknsIx2ArNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5F/u9niVLwwartM+sGf6TDmoIJkwHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJmuy28drcs+TS1OdFktPN9l5AVMrfGJhwd3 5o1hxR96MZXpK83/fcNkPKhcpl7b7CZK5Kb8PbXvLyIG4XtA4g8bHyjHG3MBSwoB IWKaRY/5Gc/aRCk9KfwpQwnhpyqVKErBFawbfHATZGSTjpjSOq8nDum6sAjVSevW vBriH8FbqgWyMC5DkaF5TPbRd4E5qLJedMx43IUZ/LWkx5P1DoCoNouJeDHWP3d6 /G/rRSTk7/VCLqOjgl+LnC7Ux4Ju8AqeMICRm9lMgSNqecPzSLHwaaSP9/RXxwRc gleD3pVtyjb6E3sefCDM6l24HyNoSWGB/tPqU6smH9z5ujrQvF8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:58:00 2026 by rpki-client