$ rpki-client -vvf repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft File: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft (raw, json) Hash identifier: xM40jXoVQ+AD9VW8ZzwCDJJtJL2H1ylVgL/Xf3cptjs= Subject key identifier: D9:44:63:A9:C0:A6:A4:7D:CA:08:B2:03:B0:15:CB:79:EE:22:22:CB Authority key identifier: 2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E Certificate issuer: /CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Certificate serial: 47E4364747ECCEF41228079A24A5539D5D0C9DB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft Manifest number: 0154 Signing time: Thu 26 Mar 2026 03:31:30 +0000 Manifest this update: Thu 26 Mar 2026 03:26:30 +0000 Manifest next update: Sun 29 Mar 2026 15:19:30 +0000 Files and hashes: 1: 3130332e3133312e35312e302f32342d3234203d3e20313331373735.roa (hash: CcRb5LGBAMt+/VJUtbZ5PslhgE9y9IJGFz9zfz6NHW0=) 2: 2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl (hash: sslpCVvPlUMn3PjaCgarjmxumFLXsVjNC3t4u0u13mU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:19:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:e4:36:47:47:ec:ce:f4:12:28:07:9a:24:a5:53:9d:5d:0c:9d:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E Validity Not Before: Mar 26 03:26:30 2026 GMT Not After : Mar 29 15:19:30 2026 GMT Subject: CN=D94463A9C0A6A47DCA08B203B015CB79EE2222CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:9b:4b:c8:ba:63:a9:e9:3b:3c:2e:eb:ac:3e: 20:e4:bc:ad:98:aa:d5:c1:8c:c7:e9:b9:99:32:9e: 5a:ba:31:bf:39:89:e5:fe:61:9a:13:50:b8:d4:c5: 97:a9:4d:7b:76:f4:58:79:6e:e7:d8:d0:e5:5d:9b: 40:a3:ca:fc:44:dd:18:2d:44:55:88:a3:db:2d:4b: 4d:90:2d:21:15:61:e0:bc:ca:f6:51:61:d7:2e:a2: 77:32:b9:c4:d5:8f:0d:c3:0c:63:f0:31:eb:3a:89: a6:18:41:b1:52:21:b9:5a:cc:0b:15:e0:07:b6:09: 5a:f1:14:10:49:97:76:58:76:72:d4:d8:c4:41:d0: 7c:57:c7:7c:48:00:0c:64:26:85:ad:5f:9e:e5:c1: fc:da:c8:1b:62:05:9b:bd:76:8b:ea:e6:1a:2f:86: de:84:2d:4e:94:dc:48:b2:25:57:d9:26:47:00:cf: 9e:58:e7:50:4b:07:61:c4:4d:a1:f2:1b:7a:54:af: 57:27:2b:5a:b1:ab:66:30:e5:76:74:ff:38:e1:a3: ec:99:71:8f:c3:70:ef:72:90:06:df:54:45:f8:8f: ff:a7:33:90:72:e8:f1:90:37:35:c8:b8:b5:3c:2b: 91:82:83:3e:82:79:6e:9f:c7:dd:4e:4a:46:59:dc: 3e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:44:63:A9:C0:A6:A4:7D:CA:08:B2:03:B0:15:CB:79:EE:22:22:CB X509v3 Authority Key Identifier: keyid:2C:83:67:04:27:BB:EA:5D:CC:6E:4F:5F:7E:E2:34:2D:B5:DC:2B:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f4b4ec98-4d1f-4e6f-a768-026894202223/0/2C83670427BBEA5DCC6E4F5F7EE2342DB5DC2B2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:e6:a0:b0:19:39:f5:26:a6:17:f9:f6:e9:00:d3:ad:3c:16: d6:b9:a6:1e:c7:de:05:29:37:89:bf:29:d6:51:61:75:b7:93: 2f:7f:bc:64:99:af:3d:13:06:a7:5a:cd:24:80:c6:ab:21:0a: 78:83:7c:ca:6f:80:bf:f9:f2:46:39:e8:92:01:97:74:b4:3a: 7b:32:4b:3a:e0:78:ac:3b:d2:4d:11:1b:dd:35:08:50:aa:af: 9a:a1:d9:74:6c:b8:dd:53:75:9b:96:55:2f:74:c5:6b:5b:d7: 34:05:24:bf:75:3e:38:82:80:5b:db:fe:1c:b9:16:2a:a5:20: 82:e5:2a:4a:22:5e:cc:56:a3:69:4f:eb:a2:05:5f:02:1c:6e: b6:eb:5e:d8:57:54:b0:80:6e:40:82:c3:93:c8:57:7f:c3:ef: 5c:33:47:7d:16:e4:de:74:93:5e:6e:fb:81:de:06:a7:ad:20: 1f:22:70:fd:c4:43:d1:49:6e:ab:75:1b:16:6b:88:ec:e8:8a: ca:99:47:ff:e6:d3:43:ff:e3:99:34:bf:59:87:ee:18:e7:27: e5:de:41:e3:b2:c7:79:24:d6:3e:fc:88:8c:ce:27:27:bf:d8: f9:0a:dc:e1:71:69:18:12:bc:2e:89:fc:f0:ad:b1:e4:8e:da: 1d:4d:ad:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR+Q2R0fszvQSKAeaJKVTnV0MnbUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRC NURDMkIyRTAeFw0yNjAzMjYwMzI2MzBaFw0yNjAzMjkxNTE5MzBaMDMxMTAvBgNV BAMTKEQ5NDQ2M0E5QzBBNkE0N0RDQTA4QjIwM0IwMTVDQjc5RUUyMjIyQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjm0vIumOp6Ts8LuusPiDkvK2Y qtXBjMfpuZkynlq6Mb85ieX+YZoTULjUxZepTXt29Fh5bufY0OVdm0CjyvxE3Rgt RFWIo9stS02QLSEVYeC8yvZRYdcuoncyucTVjw3DDGPwMes6iaYYQbFSIblazAsV 4Ae2CVrxFBBJl3ZYdnLU2MRB0HxXx3xIAAxkJoWtX57lwfzayBtiBZu9dovq5hov ht6ELU6U3EiyJVfZJkcAz55Y51BLB2HETaHyG3pUr1cnK1qxq2Yw5XZ0/zjho+yZ cY/DcO9ykAbfVEX4j/+nM5By6PGQNzXIuLU8K5GCgz6CeW6fx91OSkZZ3D49AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2URjqcCmpH3KCLIDsBXLee4iIsswHwYDVR0j BBgwFoAULINnBCe76l3Mbk9ffuI0LbXcKy4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NGI0ZWM5OC00ZDFmLTRlNmYtYTc2OC0wMjY4OTQyMDIyMjMvMC8yQzgzNjcwNDI3 QkJFQTVEQ0M2RTRGNUY3RUUyMzQyREI1REMyQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0MkRCNURD MkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjRiNGVjOTgtNGQxZi00ZTZmLWE3 NjgtMDI2ODk0MjAyMjIzLzAvMkM4MzY3MDQyN0JCRUE1RENDNkU0RjVGN0VFMjM0 MkRCNURDMkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXmoLAZOfUmphf59ukA0608Fta5ph7H3gUp N4m/KdZRYXW3ky9/vGSZrz0TBqdazSSAxqshCniDfMpvgL/58kY56JIBl3S0Onsy SzrgeKw70k0RG901CFCqr5qh2XRsuN1TdZuWVS90xWtb1zQFJL91PjiCgFvb/hy5 FiqlIILlKkoiXsxWo2lP66IFXwIcbrbrXthXVLCAbkCCw5PIV3/D71wzR30W5N50 k15u+4HeBqetIB8icP3EQ9FJbqt1GxZriOzoisqZR//m00P/45k0v1mH7hjnJ+Xe QeOyx3kk1j78iIzOJye/2PkK3OFxaRgSvC6J/PCtseSO2h1NreM= -----END CERTIFICATE-----Generated at Thu Mar 26 10:06:27 2026 by rpki-client