$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: qwxtiFPgARqpukkJu8rnHqZsEjYfvrTZfAEoL4OW8+k= Subject key identifier: 86:44:B9:4F:7C:5E:44:E1:4F:0B:65:B7:7B:C6:50:A1:D0:EA:FA:02 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 24E69C7489B5F8DC7FF2CFC56DB84865228C4164 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: D3 Signing time: Fri 20 Mar 2026 16:11:57 +0000 Manifest this update: Fri 20 Mar 2026 16:06:57 +0000 Manifest next update: Mon 23 Mar 2026 16:17:57 +0000 Files and hashes: 1: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: 1PoLuSeXuA+snqdaEX6MoacSybgC79SD1C2IQnlxTCY=) 2: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 16:17:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:e6:9c:74:89:b5:f8:dc:7f:f2:cf:c5:6d:b8:48:65:22:8c:41:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Mar 20 16:06:57 2026 GMT Not After : Mar 23 16:17:57 2026 GMT Subject: CN=8644B94F7C5E44E14F0B65B77BC650A1D0EAFA02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:bc:89:6c:af:e9:e7:d3:ff:97:ef:a9:1c:19: 97:35:21:16:c4:81:2c:bb:24:0f:13:0a:75:02:62: 1e:33:5f:15:15:54:21:62:88:96:6e:f9:d3:a4:62: d7:7d:b8:5b:7d:44:a1:2d:d4:64:c8:a8:2e:cb:56: 35:8e:81:f5:09:9b:d1:f6:e3:9f:f8:78:8f:35:7b: 8a:21:ba:25:64:3f:c7:be:1e:c8:54:9f:04:69:7a: 6e:8f:cb:3a:5c:1d:84:11:72:89:83:b3:48:69:d6: a3:6d:3c:d4:50:18:29:a1:a6:27:9a:24:9f:4e:0c: 71:b3:d7:10:e5:4d:d1:17:49:20:48:98:9c:2f:92: ac:23:52:49:4c:df:7a:e0:c9:75:08:ed:9d:ca:fe: 32:cc:64:b7:d1:b2:2e:24:9b:c7:11:80:37:31:0f: e7:a5:11:25:8e:0c:a9:b6:22:dd:25:bc:52:35:7b: b5:77:a5:c6:d7:0f:79:e6:34:06:2c:27:bb:e8:60: e2:be:e3:57:b8:1d:5d:10:cc:09:7f:fc:37:fd:09: 04:e1:52:dd:30:61:ef:73:b7:ff:d7:ca:bb:8b:aa: 41:a3:08:96:ba:54:c5:42:4a:ec:47:89:44:94:52: 3d:da:aa:20:bb:92:88:dd:bd:ca:cd:9f:1a:d7:ef: 39:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:44:B9:4F:7C:5E:44:E1:4F:0B:65:B7:7B:C6:50:A1:D0:EA:FA:02 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:ef:89:25:33:d3:c7:ba:aa:8b:f2:a2:bf:37:de:11:08:7d: 48:8f:40:20:79:98:ed:d6:1d:b6:eb:30:8c:50:f2:ad:bb:cb: 08:a9:e2:ee:80:64:90:2f:fa:74:f1:69:c4:0f:f4:ba:13:0d: 90:6b:63:8b:39:09:25:a3:f6:fe:ab:45:5b:0c:8a:d9:83:9d: e5:eb:aa:2f:dc:6e:32:97:a6:0c:4b:63:88:b4:6f:5a:13:cb: f7:53:0a:5f:16:19:b4:ce:db:49:6c:b2:29:d2:ef:40:b8:37: 78:c6:e7:b2:67:9f:0b:94:2a:24:66:bc:17:75:c0:a0:05:d1: 46:04:9c:de:5d:28:08:d2:0e:cf:f4:05:2d:2a:6f:30:86:bd: e8:4e:7a:d9:9b:77:d7:7b:fa:2c:df:13:f3:37:d1:2a:eb:63: 04:42:c7:94:1e:13:0c:5e:4d:ff:39:99:1f:db:a4:84:70:a2: 9c:d7:61:01:ea:66:95:75:a4:d5:28:ec:5e:2b:dc:6a:7d:0d: 04:a2:88:b4:3f:0e:d6:1c:4d:03:27:44:fe:40:7f:6e:a5:e0: 0e:50:a4:9b:bc:ac:c2:e6:c5:f6:a8:01:60:99:0d:c5:14:8e: 99:62:0f:fb:3d:97:15:a5:d6:0b:6b:81:9b:c8:82:6d:d2:0b: 16:9f:18:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJOacdIm1+Nx/8s/FbbhIZSKMQWQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNjAzMjAxNjA2NTdaFw0yNjAzMjMxNjE3NTdaMDMxMTAvBgNV BAMTKDg2NDRCOTRGN0M1RTQ0RTE0RjBCNjVCNzdCQzY1MEExRDBFQUZBMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovIlsr+nn0/+X76kcGZc1IRbE gSy7JA8TCnUCYh4zXxUVVCFiiJZu+dOkYtd9uFt9RKEt1GTIqC7LVjWOgfUJm9H2 45/4eI81e4ohuiVkP8e+HshUnwRpem6PyzpcHYQRcomDs0hp1qNtPNRQGCmhpiea JJ9ODHGz1xDlTdEXSSBImJwvkqwjUklM33rgyXUI7Z3K/jLMZLfRsi4km8cRgDcx D+elESWODKm2It0lvFI1e7V3pcbXD3nmNAYsJ7voYOK+41e4HV0QzAl//Df9CQTh Ut0wYe9zt//XyruLqkGjCJa6VMVCSuxHiUSUUj3aqiC7kojdvcrNnxrX7zmZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhkS5T3xeROFPC2W3e8ZQodDq+gIwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGrviSUz08e6qovyor833hEIfUiPQCB5mO3W HbbrMIxQ8q27ywip4u6AZJAv+nTxacQP9LoTDZBrY4s5CSWj9v6rRVsMitmDneXr qi/cbjKXpgxLY4i0b1oTy/dTCl8WGbTO20lssinS70C4N3jG57JnnwuUKiRmvBd1 wKAF0UYEnN5dKAjSDs/0BS0qbzCGvehOetmbd9d7+izfE/M30SrrYwRCx5QeEwxe Tf85mR/bpIRwopzXYQHqZpV1pNUo7F4r3Gp9DQSiiLQ/DtYcTQMnRP5Af26l4A5Q pJu8rMLmxfaoAWCZDcUUjpliD/s9lxWl1gtrgZvIgm3SCxafGJE= -----END CERTIFICATE-----Generated at Sat Mar 21 00:16:51 2026 by rpki-client