$ rpki-client -vvf repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft File: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft (raw, json) Hash identifier: ZKxDRfrt40/kmIaRaSWT+NI3XPOvYii3RJKF5g/Qrsw= Subject key identifier: 00:9E:C7:BB:77:5A:3D:6E:61:31:E3:01:F7:CF:CF:D2:55:D7:11:FB Authority key identifier: C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB Certificate issuer: /CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Certificate serial: 165A7A6D920AB5A1C57E32584005569E5DFFF39F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft Manifest number: 0240 Signing time: Wed 18 Mar 2026 17:32:02 +0000 Manifest this update: Wed 18 Mar 2026 17:27:02 +0000 Manifest next update: Sat 21 Mar 2026 19:20:02 +0000 Files and hashes: 1: C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl (hash: mJW7uDgB2vFAHcavFJ0g3zc7ijotLkbKDL1SiOFc7xk=) 2: 3130332e3135322e39322e302f32332d3234203d3e20313338383630.roa (hash: bltZi0XDvzmwgyzEl66AozT5pKIvx60Z1RNoNEbNdrk=) 3: 323430373a373263303a3a2f33322d3438203d3e203538383230.roa (hash: 1MWdh9/G7GKdCjppGSd2ji+0mFINmD1XWOxoK1Yj1iA=) 4: 323430373a373263303a3a2f33322d3332203d3e203538383230.roa (hash: Uxuob34lJgOCFn3rUm77IOpVd7DaLceyCMpWeS74nuM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 19:20:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:5a:7a:6d:92:0a:b5:a1:c5:7e:32:58:40:05:56:9e:5d:ff:f3:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1C0233DC07302E86D114AB772AB6566ED7F5FBB Validity Not Before: Mar 18 17:27:02 2026 GMT Not After : Mar 21 19:20:02 2026 GMT Subject: CN=009EC7BB775A3D6E6131E301F7CFCFD255D711FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d5:b0:fc:94:b4:32:17:1c:80:e0:38:f9:da: ac:c7:11:7f:d3:1b:2a:92:3e:b8:e7:31:b9:66:41: fa:99:bc:08:ad:f5:a8:3a:48:dc:f8:66:7f:e5:86: 8b:01:a5:eb:ae:3f:f2:97:15:2b:7a:6d:51:a1:6b: 71:ba:43:aa:dc:0a:be:45:21:e4:34:53:39:44:55: b2:42:a7:bd:8f:3a:b2:86:23:46:45:5b:88:4c:ca: 2b:5b:ae:24:9c:19:49:89:69:51:67:36:72:48:44: 1e:2a:c8:30:84:2e:43:6a:51:dc:c8:5e:bf:2e:0c: f0:52:31:1a:2b:cd:eb:f8:92:eb:99:8f:71:6f:c1: db:4e:d1:e8:49:a5:db:32:9a:81:64:5d:eb:89:8b: 84:06:af:5d:28:14:a4:40:1d:ce:c8:a0:59:3d:06: 01:e8:7e:c1:e2:f8:db:82:9e:af:de:2b:81:a7:23: 76:0b:0e:5c:34:f6:f5:a5:d5:57:b5:7c:cb:49:8d: 48:b7:85:12:62:ec:6c:08:1e:54:a4:21:56:8d:94: e6:50:16:10:b9:3e:fb:b1:bb:92:2a:cf:be:09:21: 97:d8:8e:65:35:65:c2:af:50:b3:ea:f7:c3:5c:f6: 4b:ac:ec:c4:08:42:cc:7d:f5:78:34:ad:91:aa:7c: 20:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:9E:C7:BB:77:5A:3D:6E:61:31:E3:01:F7:CF:CF:D2:55:D7:11:FB X509v3 Authority Key Identifier: keyid:C1:C0:23:3D:C0:73:02:E8:6D:11:4A:B7:72:AB:65:66:ED:7F:5F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38c9c252-f7ca-4dd5-88f6-22addc8934b3/0/C1C0233DC07302E86D114AB772AB6566ED7F5FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:4a:67:74:62:4c:51:84:8a:0f:e7:d6:ed:bd:4b:4a:d5:39: c6:eb:61:3d:b2:ee:28:eb:2b:20:6c:cd:50:21:cc:b1:d6:96: c8:25:7a:c0:45:45:6e:cb:8d:62:ec:50:61:98:a1:74:62:16: c5:9e:f4:58:2e:24:54:71:88:5a:6e:fa:38:4b:8d:f3:06:da: 00:db:22:de:b9:a8:42:05:bb:2f:b7:0a:27:28:62:62:cb:65: 1e:f1:1e:cf:86:3d:96:b7:68:51:7a:26:b9:ba:e3:2f:94:cb: b4:f6:ce:55:b2:33:31:6f:f4:21:8f:61:41:1f:1d:1b:be:d1: c5:a6:8b:9b:43:06:c5:99:45:e9:4e:3f:79:7f:19:b3:5f:51: ec:e6:17:e5:d9:88:16:40:32:be:f5:85:af:63:1f:06:47:18: a7:90:96:de:c4:fc:3a:36:30:90:e6:a5:1f:78:20:48:f9:69: 88:89:97:35:30:ea:12:5d:ba:f0:e3:b1:4a:84:6d:12:05:b2: e5:aa:32:2f:c6:9c:1b:0b:0a:49:12:c7:cc:86:e0:1b:f4:a1: f9:40:63:97:76:a5:6b:f9:77:b9:9b:e4:3b:e7:8f:8a:9d:bd: cf:ca:1f:72:a0:7e:6c:32:a3:c3:dc:5f:5d:7f:c5:7f:2a:fa: b2:f3:ec:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFlp6bZIKtaHFfjJYQAVWnl3/858wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZF RDdGNUZCQjAeFw0yNjAzMTgxNzI3MDJaFw0yNjAzMjExOTIwMDJaMDMxMTAvBgNV BAMTKDAwOUVDN0JCNzc1QTNENkU2MTMxRTMwMUY3Q0ZDRkQyNTVENzExRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD1bD8lLQyFxyA4Dj52qzHEX/T GyqSPrjnMblmQfqZvAit9ag6SNz4Zn/lhosBpeuuP/KXFSt6bVGha3G6Q6rcCr5F IeQ0UzlEVbJCp72POrKGI0ZFW4hMyitbriScGUmJaVFnNnJIRB4qyDCELkNqUdzI Xr8uDPBSMRorzev4kuuZj3FvwdtO0ehJpdsymoFkXeuJi4QGr10oFKRAHc7IoFk9 BgHofsHi+NuCnq/eK4GnI3YLDlw09vWl1Ve1fMtJjUi3hRJi7GwIHlSkIVaNlOZQ FhC5Pvuxu5Iqz74JIZfYjmU1ZcKvULPq98Nc9kus7MQIQsx99Xg0rZGqfCAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAJ7Hu3daPW5hMeMB98/P0lXXEfswHwYDVR0j BBgwFoAUwcAjPcBzAuhtEUq3cqtlZu1/X7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGM5YzI1Mi1mN2NhLTRkZDUtODhmNi0yMmFkZGM4OTM0YjMvMC9DMUMwMjMzREMw NzMwMkU4NkQxMTRBQjc3MkFCNjU2NkVEN0Y1RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1NjZFRDdG NUZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhjOWMyNTItZjdjYS00ZGQ1LTg4 ZjYtMjJhZGRjODkzNGIzLzAvQzFDMDIzM0RDMDczMDJFODZEMTE0QUI3NzJBQjY1 NjZFRDdGNUZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIFKZ3RiTFGEig/n1u29S0rVOcbrYT2y7ijr KyBszVAhzLHWlsglesBFRW7LjWLsUGGYoXRiFsWe9FguJFRxiFpu+jhLjfMG2gDb It65qEIFuy+3CicoYmLLZR7xHs+GPZa3aFF6Jrm64y+Uy7T2zlWyMzFv9CGPYUEf HRu+0cWmi5tDBsWZRelOP3l/GbNfUezmF+XZiBZAMr71ha9jHwZHGKeQlt7E/Do2 MJDmpR94IEj5aYiJlzUw6hJduvDjsUqEbRIFsuWqMi/GnBsLCkkSx8yG4Bv0oflA Y5d2pWv5d7mb5Dvnj4qdvc/KH3Kgfmwyo8PcX11/xX8q+rLz7G8= -----END CERTIFICATE-----Generated at Thu Mar 19 09:59:01 2026 by rpki-client