$ rpki-client -vvf repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft File: C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft (raw, json) Hash identifier: gbaWlUS9w+Y7Qz5pPUUA9vIGxFp3tnwhz9ZIBKNpZ14= Subject key identifier: 97:0F:C5:14:2D:21:34:9F:29:24:CB:63:EC:5D:F6:C2:2D:9F:8E:71 Authority key identifier: C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A Certificate issuer: /CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Certificate serial: 12675AEE4E6D16BC3BFD975AF786A0ACE93ED4E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft Manifest number: 04F6 Signing time: Wed 18 Mar 2026 21:51:44 +0000 Manifest this update: Wed 18 Mar 2026 21:46:44 +0000 Manifest next update: Sun 22 Mar 2026 05:27:44 +0000 Files and hashes: 1: 34332e3235322e3133382e302f32342d3234203d3e203538343034.roa (hash: 7tgGUn+YrUZ/MWVDGtrerXtqbOMhyZDoTldLslkYYTI=) 2: 3130332e32382e31322e302f32322d3233203d3e203538343034.roa (hash: Ffjrt07F64qfTUTQRM4q8gB9QS8eehDO7qAs3NtubXM=) 3: 34332e3235322e3133392e302f32342d3234203d3e203538343034.roa (hash: ZQ63p3M+wzXAXpgNpBD0Iq30pmnSOSGVBCaMjIYT+N8=) 4: C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl (hash: 2nQl6K1rkrIk66M09M/4My6InA0i7PUEsCs2z3PRMjk=) 5: 34332e3235322e3133362e302f32322d3233203d3e203538343034.roa (hash: m0WKFr7Q9JfSEuoay78BCi3cNgU52tNMlZWVG7Fhi1s=) 6: 323030313a6466303a3266633a3a2f34382d3438203d3e203538343034.roa (hash: 8zY41tTngWvKTe/HAKHtyytdzc6XdijkL5LcFd6Ewbk=) 7: 34332e3235322e3133372e302f32342d3234203d3e203538343034.roa (hash: yxV12cP+17+f4nsu4Qt/0TyM0Yc+PlYZYCbNR6RBl54=) 8: 3130332e32382e31322e302f32332d3234203d3e203538343034.roa (hash: EXp3RCNwYXOW99lPgPgoT2jmWozp8DenSjKe6GpVx0A=) 9: 3130332e32382e31342e302f32332d3234203d3e203538343034.roa (hash: GMDlJkIYSBbaiHdAVmprXvGw9l46ixxNam2eRH2A4Uo=) 10: 34332e3235322e3133362e302f32342d3234203d3e203538343034.roa (hash: VElKMVk3iPulNjS9HeHc93PPFZl5g9fy4/nN9cMU7rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:27:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:67:5a:ee:4e:6d:16:bc:3b:fd:97:5a:f7:86:a0:ac:e9:3e:d4:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2544A0C1EE8ABF9DA0614500930012FFB48871A Validity Not Before: Mar 18 21:46:44 2026 GMT Not After : Mar 22 05:27:44 2026 GMT Subject: CN=970FC5142D21349F2924CB63EC5DF6C22D9F8E71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:44:a2:d6:b1:fd:65:ce:c5:55:15:92:2f:b6: 56:95:e0:9c:82:a4:fc:f1:e5:28:f6:da:74:83:48: 1d:60:94:28:dc:4d:d6:25:60:3b:5a:af:58:f5:a3: 6c:6f:f4:11:68:dc:90:39:8b:65:cd:8e:0d:e6:82: 75:02:29:4b:3a:53:a6:95:0e:e7:4f:36:70:8e:7f: 03:47:40:a2:2a:f3:da:56:70:7e:30:80:96:63:f4: 5c:1e:46:d7:82:53:84:23:c6:9f:89:93:d4:1a:2e: 54:b6:de:13:24:1d:fb:29:ec:2d:a2:54:b3:89:d6: 0b:90:09:68:09:3b:5e:7d:25:c1:7e:f9:49:a2:6a: 71:34:28:8b:fc:e9:54:6f:d8:7c:70:83:83:0f:7d: ec:f0:64:f7:76:34:3b:79:40:91:2c:53:cc:39:4a: 61:8c:37:9a:9b:e9:3a:a3:54:d3:e9:2a:85:1d:c1: a0:5b:5a:30:03:68:c3:1f:64:59:66:00:54:24:1f: c1:80:ec:53:89:64:2b:9d:ed:e0:fb:67:f2:5b:f1: 54:a0:d1:51:89:93:80:63:82:4f:34:ca:1c:b8:4d: a1:43:d4:2d:b0:99:10:10:f8:96:43:f8:4f:1c:2b: e7:9e:c5:15:31:2c:ac:45:68:19:09:d7:2d:c3:31: 37:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:0F:C5:14:2D:21:34:9F:29:24:CB:63:EC:5D:F6:C2:2D:9F:8E:71 X509v3 Authority Key Identifier: keyid:C2:54:4A:0C:1E:E8:AB:F9:DA:06:14:50:09:30:01:2F:FB:48:87:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2544A0C1EE8ABF9DA0614500930012FFB48871A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e0f9163-3e5a-4efa-8bd9-4ac4bc630414/0/C2544A0C1EE8ABF9DA0614500930012FFB48871A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:21:3c:14:fa:47:a1:25:5e:26:1a:3b:ea:eb:20:80:44:05: 0b:d5:73:20:54:13:b8:be:a1:5d:eb:27:d7:b0:8c:a2:44:75: 9a:2b:ef:94:ff:c9:ab:1b:3d:06:38:11:4a:1a:0b:4b:ae:2d: b3:b2:47:e1:2c:59:c2:33:23:35:d0:c4:6b:33:58:0b:61:12: 32:54:f1:a9:9e:d0:2b:13:13:6e:4c:21:61:5c:9e:9d:18:2b: d4:26:c5:32:fd:8a:6f:1c:f7:ba:bd:b9:d6:ab:0d:df:ac:20: b0:bd:d5:39:b2:00:93:cd:eb:a2:0a:3b:dc:a4:99:dc:f4:61: 53:3a:30:48:c8:2b:c4:f4:49:70:f5:fe:cd:79:f7:04:ca:a4: 5d:d4:ff:41:32:93:5f:ac:f9:e5:37:21:5f:89:bd:bf:57:9c: 16:d1:44:54:ed:38:4f:a8:a8:34:87:f8:06:06:7c:d1:61:20: 34:1b:24:2e:3a:7d:18:30:3b:44:11:8d:4f:41:62:7a:29:14: 59:79:1f:13:65:ad:22:83:b2:52:d4:8a:9e:33:e8:e4:1f:d0: ae:80:c3:ce:96:1c:97:2f:0f:43:98:d8:73:95:ad:ad:87:d1: fc:bf:1b:47:40:9d:50:d0:75:87:4b:7a:b0:cb:09:a8:0c:d7: 09:1f:cd:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEmda7k5tFrw7/Zda94agrOk+1OgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZG QjQ4ODcxQTAeFw0yNjAzMTgyMTQ2NDRaFw0yNjAzMjIwNTI3NDRaMDMxMTAvBgNV BAMTKDk3MEZDNTE0MkQyMTM0OUYyOTI0Q0I2M0VDNURGNkMyMkQ5RjhFNzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHRKLWsf1lzsVVFZIvtlaV4JyC pPzx5Sj22nSDSB1glCjcTdYlYDtar1j1o2xv9BFo3JA5i2XNjg3mgnUCKUs6U6aV DudPNnCOfwNHQKIq89pWcH4wgJZj9FweRteCU4Qjxp+Jk9QaLlS23hMkHfsp7C2i VLOJ1guQCWgJO159JcF++UmianE0KIv86VRv2Hxwg4MPfezwZPd2NDt5QJEsU8w5 SmGMN5qb6TqjVNPpKoUdwaBbWjADaMMfZFlmAFQkH8GA7FOJZCud7eD7Z/Jb8VSg 0VGJk4Bjgk80yhy4TaFD1C2wmRAQ+JZD+E8cK+eexRUxLKxFaBkJ1y3DMTfZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlw/FFC0hNJ8pJMtj7F32wi2fjnEwHwYDVR0j BBgwFoAUwlRKDB7oq/naBhRQCTABL/tIhxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZTBmOTE2My0zZTVhLTRlZmEtOGJkOS00YWM0YmM2MzA0MTQvMC9DMjU0NEEwQzFF RThBQkY5REEwNjE0NTAwOTMwMDEyRkZCNDg4NzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAxMkZGQjQ4 ODcxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmUwZjkxNjMtM2U1YS00ZWZhLThi ZDktNGFjNGJjNjMwNDE0LzAvQzI1NDRBMEMxRUU4QUJGOURBMDYxNDUwMDkzMDAx MkZGQjQ4ODcxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMhPBT6R6ElXiYaO+rrIIBEBQvVcyBUE7i+ oV3rJ9ewjKJEdZor75T/yasbPQY4EUoaC0uuLbOyR+EsWcIzIzXQxGszWAthEjJU 8ame0CsTE25MIWFcnp0YK9QmxTL9im8c97q9udarDd+sILC91TmyAJPN66IKO9yk mdz0YVM6MEjIK8T0SXD1/s159wTKpF3U/0Eyk1+s+eU3IV+Jvb9XnBbRRFTtOE+o qDSH+AYGfNFhIDQbJC46fRgwO0QRjU9BYnopFFl5HxNlrSKDslLUip4z6OQf0K6A w86WHJcvD0OY2HOVra2H0fy/G0dAnVDQdYdLerDLCagM1wkfzR4= -----END CERTIFICATE-----Generated at Thu Mar 19 09:39:44 2026 by rpki-client