$ rpki-client -vvf repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft File: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft (raw, json) Hash identifier: +Ty5wJeL4DZEuTJDmclLfC/YpzjcI5313api12j0HL8= Subject key identifier: 79:B6:AC:11:6F:29:0A:56:D6:F9:19:E8:8B:8B:E1:0B:B9:0F:23:39 Authority key identifier: 31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 Certificate issuer: /CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Certificate serial: 5AF453FF7782EFAEE42F280DC49F2FE7EEF6D4E0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft Manifest number: 01E1 Signing time: Wed 18 Mar 2026 13:20:41 +0000 Manifest this update: Wed 18 Mar 2026 13:15:41 +0000 Manifest next update: Sat 21 Mar 2026 17:59:41 +0000 Files and hashes: 1: 314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl (hash: 6A/2S13I/+2ivpaDZU5cnUHPqu8TFyELrGH7A0VAGAo=) 2: 323430373a373234303a3a2f33322d3438203d3e203538383230.roa (hash: 1wh8FEeGWVS9WrnN9jZRNRfkzt0zUBWTKFS3jSYx5Ps=) 3: 323430373a373234303a3a2f33322d3332203d3e203538383230.roa (hash: HLX3aFGkhTTF59aMcv9G2ZkMKwAOSmi1mZ83DZAbPPc=) 4: 3130332e3135322e3234322e302f32332d3234203d3e20313339343536.roa (hash: 89pUQxfl5rXIPDrZqajzc7VGVg5FDLEc5hZANvDFm/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 17:59:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:f4:53:ff:77:82:ef:ae:e4:2f:28:0d:c4:9f:2f:e7:ee:f6:d4:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400 Validity Not Before: Mar 18 13:15:41 2026 GMT Not After : Mar 21 17:59:41 2026 GMT Subject: CN=79B6AC116F290A56D6F919E88B8BE10BB90F2339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:46:ed:8c:4c:74:b0:ce:79:ec:9d:02:fb:e0: 78:93:bb:4d:8f:bc:76:a1:32:99:6a:f1:2d:47:50: f7:fe:8a:19:fc:f7:e1:34:43:77:2f:db:d7:1f:fb: 24:75:0e:ce:e7:92:29:f9:ff:f6:f9:8e:95:30:7e: 84:9e:c3:cf:9a:3f:9e:e3:bf:5b:2f:1e:17:55:58: 61:8b:8c:4f:0f:80:57:95:75:98:68:9d:71:72:be: 3d:ba:b4:c5:ac:57:03:e5:47:99:47:68:27:8c:37: b4:de:09:b7:5a:c6:84:62:0a:7e:37:5a:7f:1c:f3: 22:93:b6:c1:24:71:fe:da:ee:e2:cd:f3:24:92:93: 82:84:3c:fc:3d:9e:44:0e:b8:1d:0d:d3:d3:2f:fd: 1d:ff:34:08:8d:87:a4:ce:30:a6:2d:7c:fa:84:0f: 79:51:ce:5f:bc:ba:53:58:1a:5b:0e:cd:da:14:15: d0:46:8b:66:4f:4d:01:6a:4d:b4:ce:40:a0:39:2f: 75:d1:73:fa:44:0a:91:b3:93:e0:ac:8e:36:f0:32: 61:e1:35:f2:f1:c6:df:27:71:1e:72:f0:70:7f:55: 07:7c:59:89:76:ee:04:cc:e8:99:61:50:a3:76:cf: 96:e4:53:96:9c:a0:e3:e5:90:ef:73:55:91:3d:96: 65:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:B6:AC:11:6F:29:0A:56:D6:F9:19:E8:8B:8B:E1:0B:B9:0F:23:39 X509v3 Authority Key Identifier: keyid:31:49:88:A7:9F:2A:52:2D:2E:D1:D4:AC:99:C4:AB:DF:DC:DB:B4:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24ba6778-b16d-4ba8-984f-34e419fc9c49/0/314988A79F2A522D2ED1D4AC99C4ABDFDCDBB400.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:f4:c6:6b:12:aa:d8:49:cc:45:9c:a0:9c:f9:a3:d6:d0:fb: cb:ea:85:fa:8f:ac:65:e5:b9:62:9c:40:58:b0:4e:8f:1d:e9: b5:64:90:50:a6:0d:c2:4f:cc:21:a9:77:3b:9b:14:cf:e5:61: 75:99:cc:c8:1e:74:2f:58:f8:05:11:ac:31:53:db:24:dd:91: b7:72:59:4b:ac:7d:7c:a9:d4:ea:b7:85:4b:e6:0e:77:4c:27: 0b:1a:14:9a:3e:35:f0:27:d8:a9:94:d3:cf:b9:d6:41:34:d9: a1:3e:2c:af:77:ac:4a:c2:67:c9:db:b8:25:18:90:29:91:d3: 50:d2:63:fb:63:f5:e9:ce:36:e1:84:c4:b2:0c:52:d9:aa:b7: 54:ae:35:14:f4:00:10:b5:6b:de:5e:8a:b9:32:85:c8:aa:6b: d0:d9:7c:87:fd:11:c6:76:2c:06:62:53:a4:dc:0d:12:1d:e5: db:fd:4a:ab:f2:62:85:88:5d:1e:3d:01:6a:9c:3a:1f:05:d1: 60:d4:cb:ec:44:37:84:95:42:77:05:40:77:3b:3c:9a:87:f0: a3:19:57:f5:bd:8c:ee:d7:d1:92:88:5d:68:fe:70:8e:2a:0c: 24:bd:38:ff:b5:3f:ad:93:43:e5:88:fb:24:fd:cf:70:68:9f: 5a:5d:03:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWvRT/3eC767kLygNxJ8v5+721OAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZE Q0RCQjQwMDAeFw0yNjAzMTgxMzE1NDFaFw0yNjAzMjExNzU5NDFaMDMxMTAvBgNV BAMTKDc5QjZBQzExNkYyOTBBNTZENkY5MTlFODhCOEJFMTBCQjkwRjIzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRu2MTHSwznnsnQL74HiTu02P vHahMplq8S1HUPf+ihn89+E0Q3cv29cf+yR1Ds7nkin5//b5jpUwfoSew8+aP57j v1svHhdVWGGLjE8PgFeVdZhonXFyvj26tMWsVwPlR5lHaCeMN7TeCbdaxoRiCn43 Wn8c8yKTtsEkcf7a7uLN8ySSk4KEPPw9nkQOuB0N09Mv/R3/NAiNh6TOMKYtfPqE D3lRzl+8ulNYGlsOzdoUFdBGi2ZPTQFqTbTOQKA5L3XRc/pECpGzk+CsjjbwMmHh NfLxxt8ncR5y8HB/VQd8WYl27gTM6JlhUKN2z5bkU5acoOPlkO9zVZE9lmX3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUebasEW8pClbW+Rnoi4vhC7kPIzkwHwYDVR0j BBgwFoAUMUmIp58qUi0u0dSsmcSr39zbtAAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGJhNjc3OC1iMTZkLTRiYTgtOTg0Zi0zNGU0MTlmYzljNDkvMC8zMTQ5ODhBNzlG MkE1MjJEMkVEMUQ0QUM5OUM0QUJERkRDREJCNDAwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFCREZEQ0RC QjQwMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRiYTY3NzgtYjE2ZC00YmE4LTk4 NGYtMzRlNDE5ZmM5YzQ5LzAvMzE0OTg4QTc5RjJBNTIyRDJFRDFENEFDOTlDNEFC REZEQ0RCQjQwMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIL0xmsSqthJzEWcoJz5o9bQ+8vqhfqPrGXl uWKcQFiwTo8d6bVkkFCmDcJPzCGpdzubFM/lYXWZzMgedC9Y+AURrDFT2yTdkbdy WUusfXyp1Oq3hUvmDndMJwsaFJo+NfAn2KmU08+51kE02aE+LK93rErCZ8nbuCUY kCmR01DSY/tj9enONuGExLIMUtmqt1SuNRT0ABC1a95eirkyhciqa9DZfIf9EcZ2 LAZiU6TcDRId5dv9SqvyYoWIXR49AWqcOh8F0WDUy+xEN4SVQncFQHc7PJqH8KMZ V/W9jO7X0ZKIXWj+cI4qDCS9OP+1P62TQ+WI+yT9z3Bon1pdA8M= -----END CERTIFICATE-----Generated at Thu Mar 19 09:38:45 2026 by rpki-client