$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: pwbKFLlKNen60sPuV3jX9s4pZhC+tXe7WXGLzpmnfts= Subject key identifier: D2:F7:79:10:15:F1:3C:0F:88:19:DC:B0:03:2C:1A:0F:16:70:2D:DC Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 15BF9FB99A38DDF8DFAB2E030ACC812A9B00B91B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 0275 Signing time: Thu 26 Mar 2026 02:30:57 +0000 Manifest this update: Thu 26 Mar 2026 02:25:57 +0000 Manifest next update: Sun 29 Mar 2026 10:16:57 +0000 Files and hashes: 1: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) 2: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 3: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) 4: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: vFx9lRD8t5GbJ1hvyRETEzX8/H9lHj5NEY91qph0RyA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:16:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:bf:9f:b9:9a:38:dd:f8:df:ab:2e:03:0a:cc:81:2a:9b:00:b9:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Mar 26 02:25:57 2026 GMT Not After : Mar 29 10:16:57 2026 GMT Subject: CN=D2F7791015F13C0F8819DCB0032C1A0F16702DDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:35:2f:b9:40:22:87:d0:3e:cf:44:c2:ea:fd: 92:cc:5c:a5:06:64:e4:e6:85:2f:84:d2:15:76:85: 41:41:9b:37:88:92:a5:24:19:82:54:a1:8f:db:8d: 4f:0e:ab:2b:2b:06:7f:d6:c1:a0:58:03:da:3e:c1: 65:82:66:b0:b0:90:45:95:1f:fe:ce:1b:a2:4c:84: 33:c3:1e:ae:53:ac:8b:30:d8:f1:e6:ac:75:d4:04: 37:fe:c8:2d:85:15:fc:44:83:23:1e:74:12:e1:c5: 43:97:2e:d4:c4:3c:a2:79:25:c7:1a:0d:bc:4d:5a: 45:f3:28:d1:50:94:64:73:df:97:33:4d:92:50:38: 13:70:f7:05:64:9c:03:4d:f3:cc:08:08:72:a1:a7: 68:43:33:d7:70:eb:1f:4f:3b:1a:c2:7e:a5:68:9b: 2d:b6:1a:48:2e:01:69:22:e9:75:ce:b2:a8:f9:e9: fc:05:99:73:58:01:ce:f1:f8:78:e1:7b:1a:65:e1: b1:72:67:7a:1e:ca:61:aa:18:6a:9a:53:a5:88:5a: 90:98:61:25:cb:f9:8f:c8:35:d7:f7:d5:5d:69:c6: 87:45:5b:1e:b1:4d:2b:93:cd:b7:dc:72:b6:0c:e6: b6:9b:bc:6d:bf:ba:44:43:5d:7b:b4:2f:4a:55:5b: c9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F7:79:10:15:F1:3C:0F:88:19:DC:B0:03:2C:1A:0F:16:70:2D:DC X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:70:7c:7d:a9:73:16:48:e2:14:13:c5:bb:22:54:5f:b9:f1: 4c:94:0a:e0:a9:85:ae:04:2f:ba:d9:cb:50:84:1a:7e:40:40: e4:64:1f:90:36:3d:85:a7:15:d4:a1:96:ea:3a:97:0f:49:b3: cf:43:f0:67:08:3f:b6:c9:8e:c5:d7:be:f9:40:8a:1f:7c:d4: 7f:1d:49:33:cd:da:99:6b:f6:97:f6:ce:40:35:9b:49:ea:e1: a1:dd:35:6e:55:cc:27:28:01:16:31:0d:12:f7:eb:f8:3b:9b: 04:76:09:51:b6:9d:c3:fb:63:6e:b3:e4:ba:ab:41:f8:fd:b8: b0:ea:f6:d2:0b:85:f1:8e:fe:32:f2:e3:3a:06:95:e3:fd:20: ac:9a:04:fe:cb:5b:8f:5a:cc:c2:c7:94:8d:5f:fe:a3:61:10: 4e:26:09:c0:e0:d4:c3:c0:fb:d3:d6:ec:b9:6d:9f:74:db:af: 9e:f7:c8:96:e0:83:5e:4c:55:c9:a2:a1:82:4e:9c:2e:5b:a1: da:d0:7c:53:ed:c6:13:e9:81:3a:dc:85:33:fa:35:9b:2c:5a: 58:a2:14:a6:fa:b2:4d:8e:04:6b:ea:9d:c0:2a:2c:74:ea:3a: 1d:3f:7b:08:b2:50:31:02:ba:f6:83:07:dd:32:7d:5e:1f:ce: b5:5a:ae:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFb+fuZo43fjfqy4DCsyBKpsAuRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNjAzMjYwMjI1NTdaFw0yNjAzMjkxMDE2NTdaMDMxMTAvBgNV BAMTKEQyRjc3OTEwMTVGMTNDMEY4ODE5RENCMDAzMkMxQTBGMTY3MDJEREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDONS+5QCKH0D7PRMLq/ZLMXKUG ZOTmhS+E0hV2hUFBmzeIkqUkGYJUoY/bjU8OqysrBn/WwaBYA9o+wWWCZrCwkEWV H/7OG6JMhDPDHq5TrIsw2PHmrHXUBDf+yC2FFfxEgyMedBLhxUOXLtTEPKJ5Jcca DbxNWkXzKNFQlGRz35czTZJQOBNw9wVknANN88wICHKhp2hDM9dw6x9POxrCfqVo my22GkguAWki6XXOsqj56fwFmXNYAc7x+Hjhexpl4bFyZ3oeymGqGGqaU6WIWpCY YSXL+Y/INdf31V1pxodFWx6xTSuTzbfccrYM5rabvG2/ukRDXXu0L0pVW8nHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vd5EBXxPA+IGdywAywaDxZwLdwwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9wfH2pcxZI4hQTxbsiVF+58UyUCuCpha4E L7rZy1CEGn5AQORkH5A2PYWnFdShluo6lw9Js89D8GcIP7bJjsXXvvlAih981H8d STPN2plr9pf2zkA1m0nq4aHdNW5VzCcoARYxDRL36/g7mwR2CVG2ncP7Y26z5Lqr Qfj9uLDq9tILhfGO/jLy4zoGleP9IKyaBP7LW49azMLHlI1f/qNhEE4mCcDg1MPA +9PW7Lltn3Tbr573yJbgg15MVcmioYJOnC5bodrQfFPtxhPpgTrchTP6NZssWlii FKb6sk2OBGvqncAqLHTqOh0/ewiyUDECuvaDB90yfV4fzrVarsw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:05:50 2026 by rpki-client