$ rpki-client -vvf repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft File: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft (raw, json) Hash identifier: xchGiqwtyYNQVDERZCefASkYiqfJ9iHP4YbElNAeqNo= Subject key identifier: 87:5D:4B:5E:DE:82:72:AF:B1:91:1A:D6:47:28:DD:1C:FE:47:D8:59 Authority key identifier: C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 Certificate issuer: /CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Certificate serial: 53BEF25B057EC6D7F4F275355340E72F92895F9A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject info access: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft Manifest number: 0280 Signing time: Tue 17 Mar 2026 09:42:41 +0000 Manifest this update: Tue 17 Mar 2026 09:37:41 +0000 Manifest next update: Fri 20 Mar 2026 10:13:41 +0000 Files and hashes: 1: C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl (hash: Eeq0I2EXStzvILV4WxzrH4XWgQvJd+7bwki5ZpoR4TE=) 2: 3130332e38312e36302e302f32322d3234203d3e20313336303630.roa (hash: 1HQUgBaMMc8FXO2SWeKN9gV36q4emO7zTpOs+ZYJF8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 10:13:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:be:f2:5b:05:7e:c6:d7:f4:f2:75:35:53:40:e7:2f:92:89:5f:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2CA98CA4DD88D73DB67A24173E29FFA5D116402 Validity Not Before: Mar 17 09:37:41 2026 GMT Not After : Mar 20 10:13:41 2026 GMT Subject: CN=875D4B5EDE8272AFB1911AD64728DD1CFE47D859 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:92:4a:9a:a8:cc:1d:cf:3c:66:a3:ad:40:89: 08:a2:b9:72:08:aa:d3:e8:4e:62:80:94:17:12:01: d3:c3:70:02:8d:9d:6b:b9:d4:fd:b1:2b:53:9e:8c: 7e:0f:93:78:bf:15:de:41:3d:c6:4b:e0:35:dd:47: e5:b5:24:96:3e:25:3b:12:19:47:cb:f4:cd:5e:4b: c6:bc:a4:5a:3a:9e:5b:88:7b:85:5b:5d:3a:18:5a: f2:20:c0:65:2a:bd:5e:73:60:95:0e:7d:f8:ad:29: d4:cf:8b:6e:20:c4:54:bc:5a:57:52:39:5c:a5:fc: 58:ff:86:b1:cd:36:75:9b:d7:29:4c:ed:7f:50:fe: 64:da:e3:7d:3e:f1:e2:85:61:e7:05:b3:e3:0e:b3: 3d:b8:f9:bf:54:d4:f4:b7:53:e6:7f:e9:f4:86:80: 2b:21:92:27:f8:a8:04:eb:d9:01:3c:09:53:fc:aa: 67:b0:54:e9:dd:d4:9c:7c:06:21:53:fb:37:9b:ce: e5:50:96:fb:bd:a9:a9:b7:0a:68:36:00:2a:9b:a3: dd:35:01:2e:e9:84:97:a9:83:30:09:24:62:bf:86: 44:b4:93:1a:51:d6:59:b6:2f:23:ba:02:f3:ad:6f: a9:da:0b:ee:e9:ed:54:13:72:54:70:00:ec:5d:c7: 88:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:5D:4B:5E:DE:82:72:AF:B1:91:1A:D6:47:28:DD:1C:FE:47:D8:59 X509v3 Authority Key Identifier: keyid:C2:CA:98:CA:4D:D8:8D:73:DB:67:A2:41:73:E2:9F:FA:5D:11:64:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/01576d4c-1745-4a16-8eef-cec081c82043/0/C2CA98CA4DD88D73DB67A24173E29FFA5D116402.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d7:8d:bc:90:d7:ed:c7:57:65:03:85:0f:79:62:a7:b6:74: ec:7c:66:70:64:0e:a7:f5:8c:e8:8e:21:cd:a1:3c:09:01:43: 1c:15:05:3e:6b:56:d7:04:79:41:6c:91:8c:aa:79:64:9f:14: 02:94:0b:c0:66:d4:ad:f1:32:17:bb:12:35:99:ae:f2:91:6b: e3:14:50:3b:5c:a8:1c:29:45:a1:09:05:d5:61:ff:6f:2d:70: 27:a9:0c:3d:21:2d:c0:0d:64:05:e8:ad:0a:7f:89:3a:24:3a: 6e:67:f3:97:55:50:ae:f7:5a:ab:25:93:cb:b6:71:7d:3b:12: 03:d5:8f:bf:27:ab:d5:8f:3a:64:0b:29:e2:20:41:53:b0:2b: 12:6a:6d:c2:0a:ec:43:b0:67:85:07:b7:85:5d:b0:50:59:40: b8:cf:43:8d:9e:69:fd:d6:09:77:a1:06:74:8a:4d:6e:e9:15: 1f:65:1f:bd:62:e3:e1:ba:62:0d:88:22:04:f9:e3:d5:03:d6: 8e:51:15:fe:d0:3b:e3:46:83:b5:c9:e6:5b:b6:3b:95:95:bf: ab:74:8f:0c:9c:bb:93:05:ef:c8:c4:62:1c:7d:ab:bf:4b:ec: 00:6d:19:13:15:2c:58:f6:cf:8b:05:40:7f:d7:dd:d3:54:1f: 91:1a:f3:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU77yWwV+xtf08nU1U0DnL5KJX5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1 RDExNjQwMjAeFw0yNjAzMTcwOTM3NDFaFw0yNjAzMjAxMDEzNDFaMDMxMTAvBgNV BAMTKDg3NUQ0QjVFREU4MjcyQUZCMTkxMUFENjQ3MjhERDFDRkU0N0Q4NTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChkkqaqMwdzzxmo61AiQiiuXII qtPoTmKAlBcSAdPDcAKNnWu51P2xK1OejH4Pk3i/Fd5BPcZL4DXdR+W1JJY+JTsS GUfL9M1eS8a8pFo6nluIe4VbXToYWvIgwGUqvV5zYJUOffitKdTPi24gxFS8WldS OVyl/Fj/hrHNNnWb1ylM7X9Q/mTa430+8eKFYecFs+MOsz24+b9U1PS3U+Z/6fSG gCshkif4qATr2QE8CVP8qmewVOnd1Jx8BiFT+zebzuVQlvu9qam3Cmg2ACqbo901 AS7phJepgzAJJGK/hkS0kxpR1lm2LyO6AvOtb6naC+7p7VQTclRwAOxdx4ixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh11LXt6Ccq+xkRrWRyjdHP5H2FkwHwYDVR0j BBgwFoAUwsqYyk3YjXPbZ6JBc+Kf+l0RZAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MTU3NmQ0Yy0xNzQ1LTRhMTYtOGVlZi1jZWMwODFjODIwNDMvMC9DMkNBOThDQTRE RDg4RDczREI2N0EyNDE3M0UyOUZGQTVEMTE2NDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlGRkE1RDEx NjQwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDE1NzZkNGMtMTc0NS00YTE2LThl ZWYtY2VjMDgxYzgyMDQzLzAvQzJDQTk4Q0E0REQ4OEQ3M0RCNjdBMjQxNzNFMjlG RkE1RDExNjQwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/XjbyQ1+3HV2UDhQ95Yqe2dOx8ZnBkDqf1 jOiOIc2hPAkBQxwVBT5rVtcEeUFskYyqeWSfFAKUC8Bm1K3xMhe7EjWZrvKRa+MU UDtcqBwpRaEJBdVh/28tcCepDD0hLcANZAXorQp/iTokOm5n85dVUK73Wqslk8u2 cX07EgPVj78nq9WPOmQLKeIgQVOwKxJqbcIK7EOwZ4UHt4VdsFBZQLjPQ42eaf3W CXehBnSKTW7pFR9lH71i4+G6Yg2IIgT549UD1o5RFf7QO+NGg7XJ5lu2O5WVv6t0 jwycu5MF78jEYhx9q79L7ABtGRMVLFj2z4sFQH/X3dNUH5Ea83M= -----END CERTIFICATE-----Generated at Thu Mar 19 09:25:07 2026 by rpki-client