$ rpki-client -vvf repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft File: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft (raw, json) Hash identifier: di1sktLc1tEBsj76HQJJawOfVNbJDaDphLn9hQxTZMA= Subject key identifier: B5:3D:2A:3A:89:08:53:32:99:81:1B:7B:9C:2A:B3:61:C8:69:0D:D7 Authority key identifier: CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 Certificate issuer: /CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Certificate serial: 497BB9D85EAA81B3DE8C1088A5D691494B86BE2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft Manifest number: 03E8 Signing time: Thu 26 Mar 2026 03:42:34 +0000 Manifest this update: Thu 26 Mar 2026 03:37:34 +0000 Manifest next update: Sun 29 Mar 2026 04:56:34 +0000 Files and hashes: 1: 3130332e32302e3136362e302f32332d3234203d3e203538353531.roa (hash: p2Xq5/VYbOTwjzQywO418W+YLBKjJs6gWl03kGOWuS4=) 2: 3130332e382e37382e302f32332d3234203d3e203538353531.roa (hash: G4F23K8qwxwyWwNzus2Sh8ZRaXdpmK9jowgJ/MI7Q3k=) 3: 3130332e382e37382e302f32332d3233203d3e20313534343130.roa (hash: jZK9k98AlCB7IeKPrcNsRZGYReSOBY8W5eiR7hAaCNM=) 4: CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl (hash: 6dIIB7u0VkYzAHuXTRgzEAd32RTVL2Qq71QyFZT9TXE=) 5: 3130332e32302e3136362e302f32332d3233203d3e20313534343130.roa (hash: kVYwlcJZR8W55NmkmDJoTC0oljnilr0TMye4DCdLuLs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:56:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:7b:b9:d8:5e:aa:81:b3:de:8c:10:88:a5:d6:91:49:4b:86:be:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CDC085E3D4D75439AE1BB6CB68F180E81AAD2450 Validity Not Before: Mar 26 03:37:34 2026 GMT Not After : Mar 29 04:56:34 2026 GMT Subject: CN=B53D2A3A8908533299811B7B9C2AB361C8690DD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:91:84:59:c8:87:57:e3:47:83:01:29:52:49: dc:9a:9a:3f:27:27:89:bb:01:fe:55:68:73:a9:85: 8d:90:0a:0d:0d:85:66:99:80:26:78:2d:43:cb:76: 63:8c:2b:cc:92:28:77:cb:8f:26:6c:fa:8f:fd:2d: 77:f9:79:57:61:9f:ef:d4:a6:96:06:ce:70:b7:b2: 83:cb:78:0f:b5:f5:7c:d8:29:b0:fe:49:10:96:30: 3d:93:5c:ac:41:72:c1:a1:44:66:2f:95:2a:3c:61: ac:1f:2c:68:9c:66:a6:cc:1c:fa:89:8e:ae:cc:b3: 80:2d:df:b9:e4:68:fe:4a:d8:91:b0:24:4a:55:02: 07:a5:a8:83:9d:22:39:68:c0:dc:74:65:53:5a:02: 0f:60:d7:46:d8:46:3a:0b:2f:ef:a6:60:a3:50:22: e7:a8:e0:59:9a:2b:76:85:ab:da:58:1d:f0:8d:51: 60:1a:72:af:18:41:57:6e:84:68:c7:d7:ae:1b:30: f1:95:87:4f:71:a2:da:1b:6d:c4:e2:bd:b5:a4:c6: 83:24:08:ce:e7:3f:08:e8:e3:fc:77:8e:2e:ae:33: e2:0c:a8:ac:87:74:7d:f4:88:14:f6:6d:a6:b9:46: cb:01:0b:e7:34:a8:eb:56:17:d8:22:9a:8c:2e:92: 7c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:3D:2A:3A:89:08:53:32:99:81:1B:7B:9C:2A:B3:61:C8:69:0D:D7 X509v3 Authority Key Identifier: keyid:CD:C0:85:E3:D4:D7:54:39:AE:1B:B6:CB:68:F1:80:E8:1A:AD:24:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd0e0dea-5f9b-425c-82ce-30a865007c35/0/CDC085E3D4D75439AE1BB6CB68F180E81AAD2450.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:2f:28:31:79:00:9f:d0:10:72:4f:5e:8e:13:97:92:cb:c0: b9:d2:65:3c:d1:87:fe:75:b3:0d:38:f8:59:b8:9f:0d:2b:27: d1:9a:14:ca:85:2f:94:c1:45:3b:ff:ea:9e:5b:5a:7a:10:0f: e7:c4:24:11:20:f6:16:31:84:09:86:84:7a:8d:b1:15:4c:fd: b2:e5:6d:63:df:70:30:bd:e9:2f:a7:c4:05:a2:bb:ad:17:70: 81:2d:a8:fd:08:67:ec:b4:e0:12:00:a5:ee:d4:8e:9e:1e:ea: c8:f6:96:97:58:e7:9e:c2:fd:b7:8a:35:37:b9:18:8e:8b:24: 95:b2:f4:5c:ff:3f:eb:ac:67:b5:46:a8:a5:99:a0:e0:7d:42: 2e:c1:fd:4a:aa:54:60:be:e0:da:74:5f:19:68:bc:de:e1:85: be:0b:0f:c5:17:61:e1:08:b6:2d:3c:d6:9c:62:ab:b8:6b:cf: 43:84:8c:3c:d8:61:ff:9f:4a:8c:62:16:9e:ca:d6:4e:b2:14: 0d:06:b1:9f:b9:38:77:8f:b2:03:4b:98:cf:f3:c7:ef:81:76: a7:2b:b7:4d:2c:8f:18:0a:a6:63:f6:91:99:58:8b:79:d5:a0: d4:ea:a3:d8:a3:ad:7e:67:f4:93:6b:5b:0a:86:84:17:9a:6f: b2:03:36:07 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSXu52F6qgbPejBCIpdaRSUuGviowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgx QUFEMjQ1MDAeFw0yNjAzMjYwMzM3MzRaFw0yNjAzMjkwNDU2MzRaMDMxMTAvBgNV BAMTKEI1M0QyQTNBODkwODUzMzI5OTgxMUI3QjlDMkFCMzYxQzg2OTBERDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQkYRZyIdX40eDASlSSdyamj8n J4m7Af5VaHOphY2QCg0NhWaZgCZ4LUPLdmOMK8ySKHfLjyZs+o/9LXf5eVdhn+/U ppYGznC3soPLeA+19XzYKbD+SRCWMD2TXKxBcsGhRGYvlSo8YawfLGicZqbMHPqJ jq7Ms4At37nkaP5K2JGwJEpVAgelqIOdIjlowNx0ZVNaAg9g10bYRjoLL++mYKNQ Iueo4FmaK3aFq9pYHfCNUWAacq8YQVduhGjH164bMPGVh09xotobbcTivbWkxoMk CM7nPwjo4/x3ji6uM+IMqKyHdH30iBT2baa5RssBC+c0qOtWF9gimowuknxlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtT0qOokIUzKZgRt7nCqzYchpDdcwHwYDVR0j BBgwFoAUzcCF49TXVDmuG7bLaPGA6BqtJFAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDBlMGRlYS01ZjliLTQyNWMtODJjZS0zMGE4NjUwMDdjMzUvMC9DREMwODVFM0Q0 RDc1NDM5QUUxQkI2Q0I2OEYxODBFODFBQUQyNDUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgwRTgxQUFE MjQ1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQwZTBkZWEtNWY5Yi00MjVjLTgy Y2UtMzBhODY1MDA3YzM1LzAvQ0RDMDg1RTNENEQ3NTQzOUFFMUJCNkNCNjhGMTgw RTgxQUFEMjQ1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUvKDF5AJ/QEHJPXo4Tl5LLwLnSZTzRh/51 sw04+Fm4nw0rJ9GaFMqFL5TBRTv/6p5bWnoQD+fEJBEg9hYxhAmGhHqNsRVM/bLl bWPfcDC96S+nxAWiu60XcIEtqP0IZ+y04BIApe7Ujp4e6sj2lpdY557C/beKNTe5 GI6LJJWy9Fz/P+usZ7VGqKWZoOB9Qi7B/UqqVGC+4Np0XxlovN7hhb4LD8UXYeEI ti081pxiq7hrz0OEjDzYYf+fSoxiFp7K1k6yFA0GsZ+5OHePsgNLmM/zx++Bdqcr t00sjxgKpmP2kZlYi3nVoNTqo9ijrX5n9JNrWwqGhBeab7IDNgc= -----END CERTIFICATE-----Generated at Thu Mar 26 19:45:29 2026 by rpki-client