$ rpki-client -vvf repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft File: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft (raw, json) Hash identifier: qLBzpZ/mvS18OKmNYtQwluMvLJJBTsY3cQQl3eM43bc= Subject key identifier: 0A:C0:91:51:15:06:CD:21:9F:A3:A2:EE:31:83:0E:DA:AF:7D:80:FB Authority key identifier: C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 Certificate issuer: /CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Certificate serial: 49DFB615B6328F0F24EBA8FF0BF6197E07DC3BE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft Manifest number: 024C Signing time: Tue 24 Mar 2026 16:31:56 +0000 Manifest this update: Tue 24 Mar 2026 16:26:56 +0000 Manifest next update: Sat 28 Mar 2026 03:30:56 +0000 Files and hashes: 1: 3130332e3139312e3132362e302f32342d3234203d3e203233393534.roa (hash: udVekUn4TWBKeQkQYpGcF2rohkU6UK3TsyCyh6Sm1SQ=) 2: C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl (hash: Enlk02xtUsPZziZKbOXDJmjr57McL6zUboz5a0OcYC4=) 3: 3130332e3139312e3132372e302f32342d3234203d3e203233393534.roa (hash: VTTQAgRENeOwajLS/6KGqVtYtu8gKZsiy/3ONlUdfPM=) 4: 3130332e3139312e3132362e302f32332d3234203d3e203233393534.roa (hash: tBWugiwQMjtC5piuUMK7QRT4X1helIOcbLU7F6gO8Ao=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:df:b6:15:b6:32:8f:0f:24:eb:a8:ff:0b:f6:19:7e:07:dc:3b:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4 Validity Not Before: Mar 24 16:26:56 2026 GMT Not After : Mar 28 03:30:56 2026 GMT Subject: CN=0AC091511506CD219FA3A2EE31830EDAAF7D80FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:6e:0e:3c:c1:d6:82:0b:a6:39:57:77:88:22: 03:3f:ac:6d:ba:31:9c:65:8f:e3:f1:ae:ce:4d:9f: 9f:8f:8e:e6:c8:a1:ce:f9:e9:8f:99:e3:0e:41:de: ef:4c:7b:00:23:1b:4c:cd:7f:f9:8f:1c:41:c9:40: d2:7b:f4:ac:0e:ed:21:89:8f:d7:20:91:46:79:18: 30:15:ce:45:d7:4f:b9:53:35:09:da:17:7d:24:58: 69:18:f5:0f:6b:05:4b:14:77:cc:e2:bd:cb:70:04: de:06:3a:b5:4a:61:78:77:7c:68:e9:6d:cd:db:fc: 7a:10:d6:d9:46:d5:38:53:02:bd:e9:09:eb:e6:43: 7e:b4:bc:ee:2d:15:f1:6a:b4:72:dd:06:c9:34:46: 99:97:af:e3:2f:c7:d4:31:e9:fe:b6:50:24:da:76: 45:b1:21:9e:76:44:c5:8f:a8:57:52:a5:0a:91:36: f6:07:c2:e7:20:c8:42:42:ff:6a:b7:e6:71:c0:bc: b6:09:91:3e:6c:28:2b:91:ba:ee:72:d5:ca:1c:0a: 42:7e:c1:f7:7d:55:2f:fc:22:17:38:07:76:92:b4: 32:85:f5:fc:73:c5:51:79:42:4d:76:88:c6:db:73: 74:c2:3b:c7:db:a3:13:20:d4:b6:7d:46:48:5a:6a: a9:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:C0:91:51:15:06:CD:21:9F:A3:A2:EE:31:83:0E:DA:AF:7D:80:FB X509v3 Authority Key Identifier: keyid:C9:8D:64:A8:C5:83:48:DE:9C:5F:8D:92:13:E7:97:EE:3B:D3:9D:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fb0074cf-76dd-4097-a19b-e37e62858b24/0/C98D64A8C58348DE9C5F8D9213E797EE3BD39DA4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:c5:ca:75:f5:23:29:cd:a2:22:7e:c3:2c:18:a3:92:e1:60: fa:a1:81:ec:45:44:78:21:36:83:8c:38:e9:03:1f:c9:1c:da: 2d:d8:a1:c1:fc:42:54:45:02:0a:6d:9b:65:49:5b:c3:77:7d: 00:95:a7:29:01:88:74:fe:48:ca:fe:88:fd:30:f4:44:91:19: e3:27:d2:77:24:03:a6:51:f7:dc:ff:13:61:41:f8:a9:68:f4: 3e:66:09:35:cf:ad:ce:d6:8f:3e:2b:3c:dc:63:73:cd:c1:4c: ab:7c:3f:ec:c6:13:99:54:96:95:f8:15:75:f4:50:f4:83:d9: 37:35:b6:33:d9:be:a6:57:65:7a:bc:5c:09:24:ed:6e:b1:ca: 93:94:63:7b:d2:69:3a:06:d6:24:be:15:ec:6c:be:0d:e0:ec: af:94:4f:c9:2f:6d:05:dc:39:a3:03:bf:c7:3a:75:b3:40:36: 0b:24:97:b4:74:53:e6:70:4e:f7:36:83:90:54:4a:3c:00:10: da:fa:6e:60:14:9c:d2:82:80:02:07:2b:70:7f:bc:22:c2:4c: 2e:e6:53:02:fa:f9:28:99:c9:51:af:ff:84:1f:9c:40:c1:14: e1:31:3c:7a:3c:5a:8a:d6:1b:f8:7d:f7:5b:0f:a8:cd:5f:8f: 95:29:71:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSd+2FbYyjw8k66j/C/YZfgfcO+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUz QkQzOURBNDAeFw0yNjAzMjQxNjI2NTZaFw0yNjAzMjgwMzMwNTZaMDMxMTAvBgNV BAMTKDBBQzA5MTUxMTUwNkNEMjE5RkEzQTJFRTMxODMwRURBQUY3RDgwRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVbg48wdaCC6Y5V3eIIgM/rG26 MZxlj+Pxrs5Nn5+PjubIoc756Y+Z4w5B3u9MewAjG0zNf/mPHEHJQNJ79KwO7SGJ j9cgkUZ5GDAVzkXXT7lTNQnaF30kWGkY9Q9rBUsUd8zivctwBN4GOrVKYXh3fGjp bc3b/HoQ1tlG1ThTAr3pCevmQ360vO4tFfFqtHLdBsk0RpmXr+Mvx9Qx6f62UCTa dkWxIZ52RMWPqFdSpQqRNvYHwucgyEJC/2q35nHAvLYJkT5sKCuRuu5y1cocCkJ+ wfd9VS/8Ihc4B3aStDKF9fxzxVF5Qk12iMbbc3TCO8fboxMg1LZ9RkhaaqllAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCsCRURUGzSGfo6LuMYMO2q99gPswHwYDVR0j BBgwFoAUyY1kqMWDSN6cX42SE+eX7jvTnaQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YjAwNzRjZi03NmRkLTQwOTctYTE5Yi1lMzdlNjI4NThiMjQvMC9DOThENjRBOEM1 ODM0OERFOUM1RjhEOTIxM0U3OTdFRTNCRDM5REE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3RUUzQkQz OURBNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmIwMDc0Y2YtNzZkZC00MDk3LWEx OWItZTM3ZTYyODU4YjI0LzAvQzk4RDY0QThDNTgzNDhERTlDNUY4RDkyMTNFNzk3 RUUzQkQzOURBNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE7FynX1IynNoiJ+wywYo5LhYPqhgexFRHgh NoOMOOkDH8kc2i3YocH8QlRFAgptm2VJW8N3fQCVpykBiHT+SMr+iP0w9ESRGeMn 0nckA6ZR99z/E2FB+Klo9D5mCTXPrc7Wjz4rPNxjc83BTKt8P+zGE5lUlpX4FXX0 UPSD2Tc1tjPZvqZXZXq8XAkk7W6xypOUY3vSaToG1iS+Fexsvg3g7K+UT8kvbQXc OaMDv8c6dbNANgskl7R0U+ZwTvc2g5BUSjwAENr6bmAUnNKCgAIHK3B/vCLCTC7m UwL6+SiZyVGv/4QfnEDBFOExPHo8WorWG/h991sPqM1fj5Upcc4= -----END CERTIFICATE-----Generated at Thu Mar 26 10:37:27 2026 by rpki-client