$ rpki-client -vvf repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft File: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft (raw, json) Hash identifier: m7SzjTK64sYxB8Y3FXkq0zL307azrU8zUVphglToFjg= Subject key identifier: C4:24:48:07:C4:1C:39:EA:77:04:5C:E1:B7:38:58:1D:01:D0:0A:4A Authority key identifier: C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F Certificate issuer: /CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Certificate serial: 228DC7C99103C93A705954EB7C71BC1390E4E56B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft Manifest number: 05A8 Signing time: Fri 20 Mar 2026 08:42:42 +0000 Manifest this update: Fri 20 Mar 2026 08:37:42 +0000 Manifest next update: Mon 23 Mar 2026 19:25:42 +0000 Files and hashes: 1: 3131392e3233352e3230382e302f32302d3234203d3e20313331313131.roa (hash: twSGwt6Fotgsl0DbfHgg9x8SNLnHsi/QE3YaQYCzzMs=) 2: 3130332e32322e3235302e302f32342d3234203d3e20313331313131.roa (hash: 516xDtvKLseki+IBX6h+mKjxbuiKgwqfJB4LmOXicXw=) 3: 3230322e34332e3137362e302f32302d3234203d3e20313331313131.roa (hash: EI/U6V5bg24RVZ09I8vLipweFogO+Ea7cNH372pUyZY=) 4: 34332e3234332e3134302e302f32322d3234203d3e20313331313131.roa (hash: Ln/zBXifrR3kRN5QO8V+SWT6tpUWR1WnEob5sCVgP4s=) 5: 3230322e34332e3137362e302f32322d3234203d3e20313331313131.roa (hash: o4EuiIX65DjYa3ywyHTPaQSCo34pp+K8+jEM2BCf1A4=) 6: 3130332e32322e3234382e302f32342d3234203d3e20313331313131.roa (hash: UtJjITDA9JHQ6VJXBVisu99jt556rMiuNEZSGObwvAc=) 7: 3130332e32322e3234382e302f32322d3234203d3e20313331313131.roa (hash: /xCTIh9hwcxKjknnAI3eSpvSHoqSTZNnozfD2XT8CVw=) 8: C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl (hash: bHB18sXnw4ARvHkEpU/qtxgoaYiAwIapRSotngbP8V4=) 9: 32372e35302e31362e302f32302d3234203d3e20313331313131.roa (hash: K0Qyq4TQNm4Gb6O7QApcWBMQFh1hlsrrhE70FrRZJng=) 10: 3130332e32322e3234392e302f32342d3234203d3e20313331313131.roa (hash: aY0anTpEZIat4/VeI01P3kjwTwtzNISJMDgT1crbBNU=) 11: 3130332e32322e3235312e302f32342d3234203d3e20313331313131.roa (hash: FQpoIAC9AkHOj7gF3JsxAlTSaEMd9sYKYRZgoHuK7yw=) 12: 3230332e3137362e3138302e302f32322d3234203d3e20313331313131.roa (hash: VU0ZIZ2pkWLbL/yZX6A7PXJh4wAgz1Lfo/SmUnfVxjs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 19:25:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:8d:c7:c9:91:03:c9:3a:70:59:54:eb:7c:71:bc:13:90:e4:e5:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1AF8C999E9D06DADEBC387D78B305AB8716DC2F Validity Not Before: Mar 20 08:37:42 2026 GMT Not After : Mar 23 19:25:42 2026 GMT Subject: CN=C4244807C41C39EA77045CE1B738581D01D00A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:04:60:d2:0b:f8:1a:b2:80:e7:87:f9:54:c7: e6:15:35:03:e3:0b:31:39:a4:b1:1c:33:42:06:b8: 34:d4:97:2b:5d:93:8b:b0:c6:bd:dc:a4:4b:82:45: 61:c0:ad:22:0f:ed:9d:81:32:4f:79:41:a4:f7:d0: fd:a5:6a:17:66:a3:ba:d1:fe:6b:80:eb:b4:e2:02: a6:12:da:86:d8:ad:af:8e:d9:27:b8:f7:b6:d2:9e: 5e:b6:32:2e:c6:b1:24:a0:ba:4b:77:88:41:c5:0e: 6e:f4:fc:cd:49:78:3a:f9:47:75:c7:68:51:5e:2a: b5:46:e7:f4:a6:63:18:ac:9f:04:68:8d:f6:41:ff: 42:20:c9:8a:23:71:5a:f7:6f:0a:3c:f9:de:b5:93: 18:fa:ab:dd:8d:c2:8b:b2:0f:51:23:10:b8:40:49: e5:4b:41:01:ff:ec:fa:13:04:cb:8b:88:94:f5:07: 47:25:b1:75:19:44:c3:9a:5f:ae:b1:68:30:52:a3: b9:17:b3:43:bd:f9:04:eb:7d:18:f6:64:4c:21:e2: f0:ad:5d:47:2f:7c:f7:08:9a:10:44:f8:6f:aa:12: 66:af:c4:77:23:ef:ca:42:29:d2:c7:28:75:3e:76: 3f:38:6c:39:f4:cb:3c:18:64:fc:c2:78:0d:b6:6a: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:24:48:07:C4:1C:39:EA:77:04:5C:E1:B7:38:58:1D:01:D0:0A:4A X509v3 Authority Key Identifier: keyid:C1:AF:8C:99:9E:9D:06:DA:DE:BC:38:7D:78:B3:05:AB:87:16:DC:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19205e7c-a881-4873-9188-e521b6af529c/0/C1AF8C999E9D06DADEBC387D78B305AB8716DC2F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:61:47:eb:89:9f:08:a0:a5:a1:56:2f:db:7d:5d:0c:80:09: c6:4b:90:73:42:78:97:ce:9e:73:fa:35:2c:46:18:f8:c4:84: 07:cf:e7:42:e7:ae:09:fd:30:3e:53:62:0a:fe:a6:fb:82:ae: d1:12:74:50:c7:b7:05:b3:1a:f8:50:66:01:42:a5:56:0b:9b: 11:46:62:89:a5:1e:22:af:48:54:a9:25:1b:d0:74:5d:66:e5: b9:f3:d2:fe:2f:62:b0:96:12:1c:69:24:fb:61:4f:71:0e:20: c9:06:f5:93:0c:ca:de:51:7b:ec:66:17:d9:2f:ae:f1:16:fd: 7f:87:4c:f1:91:47:ad:ed:40:1c:f3:06:15:5c:87:da:63:ea: 82:f8:ae:b6:92:da:ed:42:df:f1:33:dc:c1:33:ce:48:57:63: 0a:6c:ad:55:56:c1:bd:a0:12:a4:5e:b1:10:c0:7d:25:5b:07: 96:e3:8b:ac:99:e0:20:0e:c5:81:17:f6:1f:f0:22:26:6c:3a: 9c:e8:4c:ab:84:b9:82:0e:27:0a:be:db:59:2b:73:e7:0c:34: 0b:be:49:17:e6:71:6b:46:3c:1f:6d:25:f1:83:5c:59:cb:80: 87:48:7a:1d:7e:d3:01:3a:1a:e0:8e:1e:5b:da:a3:6f:f9:86: d5:c6:a8:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIo3HyZEDyTpwWVTrfHG8E5Dk5WswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4 NzE2REMyRjAeFw0yNjAzMjAwODM3NDJaFw0yNjAzMjMxOTI1NDJaMDMxMTAvBgNV BAMTKEM0MjQ0ODA3QzQxQzM5RUE3NzA0NUNFMUI3Mzg1ODFEMDFEMDBBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvBGDSC/gasoDnh/lUx+YVNQPj CzE5pLEcM0IGuDTUlytdk4uwxr3cpEuCRWHArSIP7Z2BMk95QaT30P2lahdmo7rR /muA67TiAqYS2obYra+O2Se497bSnl62Mi7GsSSgukt3iEHFDm70/M1JeDr5R3XH aFFeKrVG5/SmYxisnwRojfZB/0IgyYojcVr3bwo8+d61kxj6q92NwouyD1EjELhA SeVLQQH/7PoTBMuLiJT1B0clsXUZRMOaX66xaDBSo7kXs0O9+QTrfRj2ZEwh4vCt XUcvfPcImhBE+G+qEmavxHcj78pCKdLHKHU+dj84bDn0yzwYZPzCeA22amX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCRIB8QcOep3BFzhtzhYHQHQCkowHwYDVR0j BBgwFoAUwa+MmZ6dBtrevDh9eLMFq4cW3C8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OTIwNWU3Yy1hODgxLTQ4NzMtOTE4OC1lNTIxYjZhZjUyOWMvMC9DMUFGOEM5OTlF OUQwNkRBREVCQzM4N0Q3OEIzMDVBQjg3MTZEQzJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1QUI4NzE2 REMyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTkyMDVlN2MtYTg4MS00ODczLTkx ODgtZTUyMWI2YWY1MjljLzAvQzFBRjhDOTk5RTlEMDZEQURFQkMzODdENzhCMzA1 QUI4NzE2REMyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIJhR+uJnwigpaFWL9t9XQyACcZLkHNCeJfO nnP6NSxGGPjEhAfP50Lnrgn9MD5TYgr+pvuCrtESdFDHtwWzGvhQZgFCpVYLmxFG YomlHiKvSFSpJRvQdF1m5bnz0v4vYrCWEhxpJPthT3EOIMkG9ZMMyt5Re+xmF9kv rvEW/X+HTPGRR63tQBzzBhVch9pj6oL4rraS2u1C3/Ez3MEzzkhXYwpsrVVWwb2g EqResRDAfSVbB5bji6yZ4CAOxYEX9h/wIiZsOpzoTKuEuYIOJwq+21krc+cMNAu+ SRfmcWtGPB9tJfGDXFnLgIdIeh1+0wE6GuCOHlvao2/5htXGqA8= -----END CERTIFICATE-----Generated at Fri Mar 20 20:28:29 2026 by rpki-client