$ rpki-client -vvf repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft File: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft (raw, json) Hash identifier: CHkDEt8mqf+vm2t0qq//Kwqk6xJ8/XJlCGF0zlhEbRc= Subject key identifier: D4:4A:3E:93:04:B8:B6:36:97:46:A8:01:88:2D:70:69:BC:D2:29:5A Authority key identifier: C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 Certificate issuer: /CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Certificate serial: 6D55430B45227E40B6AE22B0E9AF4009B1F5459C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft Manifest number: FA Signing time: Wed 25 Mar 2026 04:31:38 +0000 Manifest this update: Wed 25 Mar 2026 04:26:38 +0000 Manifest next update: Sat 28 Mar 2026 15:10:38 +0000 Files and hashes: 1: 3130332e3233322e33322e302f32332d3233203d3e20313333333534.roa (hash: tfvFAul9pjc/Wi//p7lcXXJokuoGN8UfdeXWsqF8UAA=) 2: 3130332e3233322e33322e302f32342d3234203d3e20313333333534.roa (hash: vaX/n6vc4K9mejYUu1eJI/tNjnfyjVyWN2o5zH8Hflc=) 3: 3130332e3231372e3137332e302f32342d3234203d3e20313333333534.roa (hash: +SLAv/Ao5ipR0W/v6AgPtFrgrn+d0qK7qqbca2xo8WU=) 4: 3130332e3233322e33332e302f32342d3234203d3e20313333333534.roa (hash: L0OHjTLAoKuTGX0pU6SpedvQBvVTanvlgQCeJn9jtow=) 5: C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl (hash: F2l10RXuQd2E8svQPFvcvDV/0RQzABz8GTviXhE2op0=) 6: 3130332e3231372e3137322e302f32342d3234203d3e20313333333534.roa (hash: Jy6L+sGekPMyuMtdpky0D2jRd/OipqZg9C05WnpPS4Y=) 7: 3130332e3231372e3137322e302f32332d3233203d3e20313333333534.roa (hash: zKHXogUEbsyyC8ISVc+ANF+73aCbCi6els1lcd1hD1E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:10:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:55:43:0b:45:22:7e:40:b6:ae:22:b0:e9:af:40:09:b1:f5:45:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6 Validity Not Before: Mar 25 04:26:38 2026 GMT Not After : Mar 28 15:10:38 2026 GMT Subject: CN=D44A3E9304B8B6369746A801882D7069BCD2295A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:71:0a:35:70:ed:33:1d:7b:d8:95:aa:0d:82: b2:f6:ca:e6:c3:e0:5a:f0:14:34:85:3d:26:50:c2: eb:04:21:4b:e6:f0:fe:c6:2e:80:fd:5a:8b:38:4d: e8:f8:76:e6:2b:3b:c0:20:1f:b9:bf:93:79:fd:fa: 01:56:19:b6:4f:61:a4:b4:1a:29:42:19:3a:d6:8e: 61:21:a6:43:7e:b6:68:de:f5:cb:a7:c1:39:80:a9: 85:83:dc:c8:0e:a1:f7:41:5a:11:aa:87:82:8d:d7: 14:de:a1:ff:b8:36:4b:79:0a:6a:ed:d9:9c:4c:e8: 59:ed:8a:39:e4:f5:52:60:57:8f:d5:84:3d:38:d0: ba:37:a6:df:8a:b8:80:14:ab:15:6a:cb:1a:b1:a8: f4:8e:0a:3e:9b:7b:41:25:69:d7:ec:78:79:29:a9: 01:88:db:e2:21:2f:0b:03:64:33:9d:30:99:1f:b1: 77:50:09:40:60:cc:88:87:24:e2:ba:2d:b0:00:c5: 82:55:5a:b1:36:45:f6:7e:2f:5d:25:f5:61:ac:a6: 3e:3b:a5:a4:b6:32:7b:25:9e:5c:cc:b7:a6:7c:f6: 3d:69:07:51:a7:2e:17:33:42:13:e1:07:d6:1c:64: a5:40:e1:2e:0f:11:df:55:2d:35:d1:44:f4:6d:3d: 62:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:4A:3E:93:04:B8:B6:36:97:46:A8:01:88:2D:70:69:BC:D2:29:5A X509v3 Authority Key Identifier: keyid:C0:CB:50:8F:7D:1A:9E:F9:04:9C:CF:9E:BD:05:96:E7:69:3C:2F:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3e45039-6ed0-483d-a1b9-c4f4854c5cf5/0/C0CB508F7D1A9EF9049CCF9EBD0596E7693C2FC6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:41:60:54:81:b1:2b:a9:ec:fc:19:eb:8a:77:72:61:c8:4e: f9:54:12:52:d2:fc:cc:4a:8c:53:28:70:d3:9c:b3:0d:25:4a: b2:80:31:e6:ed:01:03:cb:e2:04:31:ed:78:eb:8f:30:25:23: fa:27:3d:cf:60:ba:1e:9b:a5:54:4c:7a:70:33:ad:8d:4f:33: 9c:e9:de:d4:f3:0a:97:7a:79:99:63:cc:b4:c7:0a:d9:5d:77: 5b:c3:19:30:ef:9f:43:31:f1:2f:3f:4d:ce:5d:33:58:1a:77: 5b:cd:3c:e9:41:4c:5f:eb:96:fa:7e:85:b0:a3:e5:e7:fd:00: be:e9:37:48:38:31:87:be:ea:88:1a:09:0d:75:fc:6f:82:f4: b4:ed:c8:77:86:21:81:4f:c1:1e:3b:6f:42:61:44:dc:1f:2b: c2:22:a6:8b:39:06:6b:d4:5d:cd:c9:61:a8:dc:2b:11:13:77: f8:c3:3c:59:83:93:15:41:bb:64:ab:3e:0d:b2:16:be:23:f8: e3:3e:6c:19:84:70:90:cd:71:39:9b:df:49:94:01:2d:0d:b6: e2:34:b7:1b:31:10:66:c0:70:05:60:a2:8e:df:22:bf:a3:bf: 7b:4d:16:76:be:a1:64:3c:4e:72:da:fa:f7:dd:65:80:b2:6e: 77:a4:c6:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbVVDC0UifkC2riKw6a9ACbH1RZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2 OTNDMkZDNjAeFw0yNjAzMjUwNDI2MzhaFw0yNjAzMjgxNTEwMzhaMDMxMTAvBgNV BAMTKEQ0NEEzRTkzMDRCOEI2MzY5NzQ2QTgwMTg4MkQ3MDY5QkNEMjI5NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1cQo1cO0zHXvYlaoNgrL2yubD 4FrwFDSFPSZQwusEIUvm8P7GLoD9Wos4Tej4duYrO8AgH7m/k3n9+gFWGbZPYaS0 GilCGTrWjmEhpkN+tmje9cunwTmAqYWD3MgOofdBWhGqh4KN1xTeof+4Nkt5Cmrt 2ZxM6Fntijnk9VJgV4/VhD040Lo3pt+KuIAUqxVqyxqxqPSOCj6be0EladfseHkp qQGI2+IhLwsDZDOdMJkfsXdQCUBgzIiHJOK6LbAAxYJVWrE2RfZ+L10l9WGspj47 paS2MnslnlzMt6Z89j1pB1GnLhczQhPhB9YcZKVA4S4PEd9VLTXRRPRtPWLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1Eo+kwS4tjaXRqgBiC1wabzSKVowHwYDVR0j BBgwFoAUwMtQj30anvkEnM+evQWW52k8L8YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2U0NTAzOS02ZWQwLTQ4M2QtYTFiOS1jNGY0ODU0YzVjZjUvMC9DMENCNTA4RjdE MUE5RUY5MDQ5Q0NGOUVCRDA1OTZFNzY5M0MyRkM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2RTc2OTND MkZDNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNlNDUwMzktNmVkMC00ODNkLWEx YjktYzRmNDg1NGM1Y2Y1LzAvQzBDQjUwOEY3RDFBOUVGOTA0OUNDRjlFQkQwNTk2 RTc2OTNDMkZDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHRBYFSBsSup7PwZ64p3cmHITvlUElLS/MxK jFMocNOcsw0lSrKAMebtAQPL4gQx7XjrjzAlI/onPc9guh6bpVRMenAzrY1PM5zp 3tTzCpd6eZljzLTHCtldd1vDGTDvn0Mx8S8/Tc5dM1gad1vNPOlBTF/rlvp+hbCj 5ef9AL7pN0g4MYe+6ogaCQ11/G+C9LTtyHeGIYFPwR47b0JhRNwfK8Iipos5BmvU Xc3JYajcKxETd/jDPFmDkxVBu2SrPg2yFr4j+OM+bBmEcJDNcTmb30mUAS0NtuI0 txsxEGbAcAVgoo7fIr+jv3tNFna+oWQ8TnLa+vfdZYCybnekxgc= -----END CERTIFICATE-----Generated at Thu Mar 26 15:28:59 2026 by rpki-client