$ rpki-client -vvf repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft File: C0CDF72A73FE200131853E0EE6A9B33708242F09.mft (raw, json) Hash identifier: XXp+AL6Vslw4Z1lrD5Q1rNPFABJDiRwheQOftUK9B+w= Subject key identifier: 0D:A1:09:F9:84:E5:BF:54:4E:F4:6B:3E:D6:F6:F5:89:0E:50:22:EF Authority key identifier: C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 Certificate issuer: /CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Certificate serial: 518BBE01B77CE87C406B7916404740D2A51E6977 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft Manifest number: BC Signing time: Wed 25 Mar 2026 15:01:24 +0000 Manifest this update: Wed 25 Mar 2026 14:56:24 +0000 Manifest next update: Sat 28 Mar 2026 22:17:24 +0000 Files and hashes: 1: 3130332e39302e36332e302f32342d3234203d3e203633353038.roa (hash: 3AL9wnFX7NUdd15jINa43wjhnEOlPugDH4MAafaXB/A=) 2: C0CDF72A73FE200131853E0EE6A9B33708242F09.crl (hash: HXe7q2/ulpqlBIa8P6Fdu9kuRUH8vL8SzAhZm+iLZrM=) 3: 3130332e39302e36322e302f32342d3234203d3e203633353038.roa (hash: Jj55Qdcw1HHwbpz0sfyPn4cWawaNftCV5QpF5pCd8+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:17:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:8b:be:01:b7:7c:e8:7c:40:6b:79:16:40:47:40:d2:a5:1e:69:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C0CDF72A73FE200131853E0EE6A9B33708242F09 Validity Not Before: Mar 25 14:56:24 2026 GMT Not After : Mar 28 22:17:24 2026 GMT Subject: CN=0DA109F984E5BF544EF46B3ED6F6F5890E5022EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:3c:cc:56:d3:33:f0:40:3d:3b:3f:be:fb:13: 72:d0:6c:bc:6f:4a:30:74:f0:55:29:70:0d:c5:b2: 49:e5:66:4f:bd:80:1f:6d:48:b6:46:d4:99:9b:4b: 05:dc:37:d5:8e:b4:a8:4d:fc:73:a7:40:93:7c:79: 73:29:6f:e3:0c:c0:b4:60:e2:13:e6:9f:fa:b3:ad: dc:ed:5b:c4:be:a1:38:61:67:95:c2:7b:fc:e2:f0: 54:3e:09:c8:8e:c8:5f:c0:47:8b:25:6e:fd:ea:3e: 37:89:a5:19:68:af:1c:b9:09:ae:8a:6d:27:1a:88: 8e:0d:22:06:3b:7f:a7:c6:58:a0:32:b2:d1:1b:32: d8:87:9a:aa:56:ab:4c:ce:dc:a8:9d:b2:d3:4b:6c: 39:01:66:a8:2a:1a:9e:46:82:13:58:38:a1:ee:fb: 09:f2:68:9a:24:bc:9a:51:55:aa:bc:7e:90:d4:30: 35:80:a1:d2:ec:ee:bc:b7:b4:f5:e8:d9:52:6c:0b: 20:01:18:17:dd:af:96:97:35:2e:eb:fc:05:67:84: 28:32:25:97:ed:5c:e4:e3:1b:c8:98:cf:64:3c:f6: 6e:77:38:87:fc:b3:e7:00:99:64:23:35:ea:10:73: 5f:9f:be:f6:d2:e2:3a:44:cd:b3:c4:c7:a6:7a:d9: ca:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:A1:09:F9:84:E5:BF:54:4E:F4:6B:3E:D6:F6:F5:89:0E:50:22:EF X509v3 Authority Key Identifier: keyid:C0:CD:F7:2A:73:FE:20:01:31:85:3E:0E:E6:A9:B3:37:08:24:2F:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C0CDF72A73FE200131853E0EE6A9B33708242F09.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fc7547fc-48d4-4169-ae33-cb454d6d8b92/0/C0CDF72A73FE200131853E0EE6A9B33708242F09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:6a:4b:b7:a0:72:88:d0:df:81:2e:15:fe:c4:40:f3:49:79: 16:ee:8d:f3:f6:55:67:bb:7f:18:bb:96:a1:ae:83:37:01:be: 60:d4:31:46:8e:79:30:b9:10:8e:8b:eb:7b:7b:73:ff:01:cd: 96:5c:7f:b3:f4:e8:23:9c:ff:ef:3f:f8:4b:c5:13:cb:77:72: a2:5f:67:32:29:fa:f5:71:e0:db:08:2e:2c:89:40:41:d6:4b: a8:e2:05:21:8e:81:c3:b5:fb:53:e4:98:98:72:a8:b7:b2:6d: e9:d3:d6:15:02:c8:b7:e1:d3:31:54:7b:9d:d1:b7:46:77:1d: 70:5b:b3:44:fd:b1:42:dd:45:d9:d5:00:65:dd:0d:e4:21:26: 2d:39:db:74:13:fe:a2:94:e6:81:71:4e:b4:72:67:57:cf:be: ef:c1:01:e0:88:c9:1a:8a:0c:27:4e:09:a8:64:7d:95:e8:47: 0f:09:59:45:6b:ff:7d:d5:68:1b:16:25:1e:3f:49:b2:b9:1d: 8d:90:a0:2a:2c:e9:d0:88:cc:68:d6:74:91:22:e9:d8:9d:36: bc:d3:56:07:d9:eb:25:9c:fc:f1:83:82:c1:d2:be:f2:3f:e1: 09:e5:a7:64:5d:47:04:6b:0b:7c:67:46:30:38:3a:94:27:1c: f7:6e:e0:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUYu+Abd86HxAa3kWQEdA0qUeaXcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcw ODI0MkYwOTAeFw0yNjAzMjUxNDU2MjRaFw0yNjAzMjgyMjE3MjRaMDMxMTAvBgNV BAMTKDBEQTEwOUY5ODRFNUJGNTQ0RUY0NkIzRUQ2RjZGNTg5MEU1MDIyRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTPMxW0zPwQD07P777E3LQbLxv SjB08FUpcA3FsknlZk+9gB9tSLZG1JmbSwXcN9WOtKhN/HOnQJN8eXMpb+MMwLRg 4hPmn/qzrdztW8S+oThhZ5XCe/zi8FQ+CciOyF/AR4slbv3qPjeJpRlorxy5Ca6K bScaiI4NIgY7f6fGWKAystEbMtiHmqpWq0zO3KidstNLbDkBZqgqGp5GghNYOKHu +wnyaJokvJpRVaq8fpDUMDWAodLs7ry3tPXo2VJsCyABGBfdr5aXNS7r/AVnhCgy JZftXOTjG8iYz2Q89m53OIf8s+cAmWQjNeoQc1+fvvbS4jpEzbPEx6Z62corAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDaEJ+YTlv1RO9Gs+1vb1iQ5QIu8wHwYDVR0j BBgwFoAUwM33KnP+IAExhT4O5qmzNwgkLwkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Yzc1NDdmYy00OGQ0LTQxNjktYWUzMy1jYjQ1NGQ2ZDhiOTIvMC9DMENERjcyQTcz RkUyMDAxMzE4NTNFMEVFNkE5QjMzNzA4MjQyRjA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIzMzcwODI0 MkYwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmM3NTQ3ZmMtNDhkNC00MTY5LWFl MzMtY2I0NTRkNmQ4YjkyLzAvQzBDREY3MkE3M0ZFMjAwMTMxODUzRTBFRTZBOUIz MzcwODI0MkYwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpqS7egcojQ34EuFf7EQPNJeRbujfP2VWe7 fxi7lqGugzcBvmDUMUaOeTC5EI6L63t7c/8BzZZcf7P06COc/+8/+EvFE8t3cqJf ZzIp+vVx4NsILiyJQEHWS6jiBSGOgcO1+1PkmJhyqLeybenT1hUCyLfh0zFUe53R t0Z3HXBbs0T9sULdRdnVAGXdDeQhJi0523QT/qKU5oFxTrRyZ1fPvu/BAeCIyRqK DCdOCahkfZXoRw8JWUVr/33VaBsWJR4/SbK5HY2QoCos6dCIzGjWdJEi6didNrzT VgfZ6yWc/PGDgsHSvvI/4Qnlp2RdRwRrC3xnRjA4OpQnHPdu4Kk= -----END CERTIFICATE-----Generated at Thu Mar 26 15:19:02 2026 by rpki-client