$ rpki-client -vvf repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft File: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft (raw, json) Hash identifier: QNKmu8aU8uC7fwHCYhH186jKrxLJXm35bA/JM+dbEWM= Subject key identifier: 4A:49:08:35:8A:C0:27:FB:27:84:FE:27:BB:7D:D7:40:14:DD:FC:9C Authority key identifier: CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 Certificate issuer: /CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Certificate serial: 3C0893B788F154D4D898534428810624559EF992 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft Manifest number: 01DF Signing time: Wed 18 Mar 2026 22:41:16 +0000 Manifest this update: Wed 18 Mar 2026 22:36:16 +0000 Manifest next update: Sun 22 Mar 2026 03:45:16 +0000 Files and hashes: 1: CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl (hash: J1g4Zc9226o7SG1NGOxuIW3bYLgFwpwRuRUetmX0Mwk=) 2: 3130332e3133322e34312e302f32342d3234203d3e20313530393730.roa (hash: CRwU0L1ssLkMhvFPkriFbIaLrVr0CAOnZXuoJx/zYFU=) 3: 3130332e3133322e34302e302f32342d3234203d3e20313530393730.roa (hash: qHXQ3QdEStqD3uKNvFn/PgcoJYTH2F/sc5gVhh/RXSU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 03:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:08:93:b7:88:f1:54:d4:d8:98:53:44:28:81:06:24:55:9e:f9:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CB9662733153C02E4C411B7D2F2B9E22D2F0EB85 Validity Not Before: Mar 18 22:36:16 2026 GMT Not After : Mar 22 03:45:16 2026 GMT Subject: CN=4A4908358AC027FB2784FE27BB7DD74014DDFC9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:0d:a7:9a:3b:23:40:27:29:76:f3:93:f0:4b: dd:2b:ad:b6:fd:60:70:4b:e5:fd:82:2e:b9:1b:c3: 13:5a:5c:7f:9c:0f:f5:5b:1a:81:0c:2b:d4:b4:27: 47:2c:2e:b0:cd:43:e2:a1:b0:ee:9b:ee:a9:13:bb: 16:de:19:4f:ab:05:94:d1:2a:1c:14:cc:51:12:a1: 17:7b:69:3a:30:c5:b8:39:33:0c:bc:50:d4:d5:cf: 1d:df:91:ea:19:67:ca:90:2f:60:50:a5:b9:be:0a: 90:44:3e:2e:17:40:c2:56:d7:af:09:e0:aa:11:96: db:ec:ec:1c:c4:b2:0c:cc:62:98:00:21:9d:2a:9b: 07:5d:f8:7c:ec:c8:9c:11:fd:7f:80:34:89:89:6c: cb:b8:8c:f2:6c:c6:ab:d9:66:40:c0:29:94:a2:67: 02:ed:1a:02:d5:5e:8d:fe:13:64:ef:64:0d:89:a4: df:8d:38:81:2f:f4:ea:f3:dd:04:a3:df:00:d8:49: e6:ad:02:46:ee:d5:d0:25:9f:09:ae:1b:e8:8d:0d: 04:ad:3e:af:16:03:cb:8c:97:83:07:c6:9d:94:a0: 8f:05:65:0d:0f:83:f3:9c:89:1b:4a:14:cc:45:4d: 8a:35:24:e8:8b:fd:f6:b4:eb:75:d2:43:93:f0:3b: cb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:49:08:35:8A:C0:27:FB:27:84:FE:27:BB:7D:D7:40:14:DD:FC:9C X509v3 Authority Key Identifier: keyid:CB:96:62:73:31:53:C0:2E:4C:41:1B:7D:2F:2B:9E:22:D2:F0:EB:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddf2ffda-05d1-4085-a135-03987a07f39e/0/CB9662733153C02E4C411B7D2F2B9E22D2F0EB85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:13:1c:50:5f:a7:39:80:4f:65:6b:fa:8d:81:05:f6:a1:33: d4:ba:17:31:8c:5b:6d:b3:a8:4b:9a:d9:c9:50:e4:fc:1b:b7: c1:9d:67:a3:7e:aa:b2:85:47:f9:d5:c2:5e:74:d0:27:6c:51: c3:04:7e:e6:c3:9d:0a:47:d5:a9:6b:8e:d8:07:6e:08:38:c1: 2e:3a:c0:d6:25:05:86:90:36:ab:db:b1:7d:49:02:ec:bd:90: da:b6:a2:53:38:e2:6f:95:52:84:09:d6:f6:83:75:27:f6:47: 9a:82:ef:7d:47:7c:bc:d7:4c:32:47:69:f9:53:44:cb:ff:26: 1f:01:ba:eb:83:7e:46:96:29:40:b1:fc:a5:71:f4:0b:5d:1d: 75:c2:67:6f:fb:57:9f:a4:0c:fb:62:59:93:56:9a:ec:fc:48: d5:e8:22:07:c6:6e:0e:8a:b0:9c:73:98:6d:e2:01:6f:4c:28: 34:9c:5c:69:ff:a5:0e:c7:38:96:5d:ad:94:04:f4:91:76:a0: de:f4:3c:a8:53:a9:b8:b3:18:81:f0:b2:65:de:20:72:0a:52: e6:26:62:52:74:cc:10:b0:c1:58:e4:c1:b8:35:75:94:c6:3e: 8d:cc:ab:5f:fd:d7:48:75:9f:c7:b8:92:2d:1e:32:d7:99:08: ae:05:05:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPAiTt4jxVNTYmFNEKIEGJFWe+ZIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJE MkYwRUI4NTAeFw0yNjAzMTgyMjM2MTZaFw0yNjAzMjIwMzQ1MTZaMDMxMTAvBgNV BAMTKDRBNDkwODM1OEFDMDI3RkIyNzg0RkUyN0JCN0RENzQwMTREREZDOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdDaeaOyNAJyl285PwS90rrbb9 YHBL5f2CLrkbwxNaXH+cD/VbGoEMK9S0J0csLrDNQ+KhsO6b7qkTuxbeGU+rBZTR KhwUzFESoRd7aTowxbg5Mwy8UNTVzx3fkeoZZ8qQL2BQpbm+CpBEPi4XQMJW168J 4KoRltvs7BzEsgzMYpgAIZ0qmwdd+HzsyJwR/X+ANImJbMu4jPJsxqvZZkDAKZSi ZwLtGgLVXo3+E2TvZA2JpN+NOIEv9Orz3QSj3wDYSeatAkbu1dAlnwmuG+iNDQSt Pq8WA8uMl4MHxp2UoI8FZQ0Pg/OciRtKFMxFTYo1JOiL/fa063XSQ5PwO8tnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSkkINYrAJ/snhP4nu33XQBTd/JwwHwYDVR0j BBgwFoAUy5ZiczFTwC5MQRt9LyueItLw64UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGYyZmZkYS0wNWQxLTQwODUtYTEzNS0wMzk4N2EwN2YzOWUvMC9DQjk2NjI3MzMx NTNDMDJFNEM0MTFCN0QyRjJCOUUyMkQyRjBFQjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlFMjJEMkYw RUI4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRmMmZmZGEtMDVkMS00MDg1LWEx MzUtMDM5ODdhMDdmMzllLzAvQ0I5NjYyNzMzMTUzQzAyRTRDNDExQjdEMkYyQjlF MjJEMkYwRUI4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI4THFBfpzmAT2Vr+o2BBfahM9S6FzGMW22z qEua2clQ5Pwbt8GdZ6N+qrKFR/nVwl500CdsUcMEfubDnQpH1alrjtgHbgg4wS46 wNYlBYaQNqvbsX1JAuy9kNq2olM44m+VUoQJ1vaDdSf2R5qC731HfLzXTDJHaflT RMv/Jh8BuuuDfkaWKUCx/KVx9AtdHXXCZ2/7V5+kDPtiWZNWmuz8SNXoIgfGbg6K sJxzmG3iAW9MKDScXGn/pQ7HOJZdrZQE9JF2oN70PKhTqbizGIHwsmXeIHIKUuYm YlJ0zBCwwVjkwbg1dZTGPo3Mq1/910h1n8e4ki0eMteZCK4FBR0= -----END CERTIFICATE-----Generated at Thu Mar 19 09:29:32 2026 by rpki-client