$ rpki-client -vvf repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft File: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft (raw, json) Hash identifier: WJqZIvjC3P0UQIoB/xWXJqKp2hvnZxAcMlg1QEpx2ZU= Subject key identifier: 41:A7:0F:FA:3C:56:86:1C:A3:72:DF:5C:C8:01:3F:04:D8:12:7A:2A Authority key identifier: 61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 Certificate issuer: /CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Certificate serial: 6568E3323BD22E92B9C0563EA3842396162D85B3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft Manifest number: E3 Signing time: Tue 17 Mar 2026 02:42:11 +0000 Manifest this update: Tue 17 Mar 2026 02:37:11 +0000 Manifest next update: Fri 20 Mar 2026 08:36:11 +0000 Files and hashes: 1: 3130332e3230342e34362e302f32332d3233203d3e20313531353835.roa (hash: ioN63y/a6zMhso1bZx+bq+twKG/bpFqGK3I7L7XEk5w=) 2: 614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl (hash: 6SiE7bF3KjI+lvPk3FxqHAnssywkPQvg2UOcq56lXhI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Mar 2026 08:36:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:68:e3:32:3b:d2:2e:92:b9:c0:56:3e:a3:84:23:96:16:2d:85:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=614F5C6E09B1E05A7C0054E62A0CD67BCC61B698 Validity Not Before: Mar 17 02:37:11 2026 GMT Not After : Mar 20 08:36:11 2026 GMT Subject: CN=41A70FFA3C56861CA372DF5CC8013F04D8127A2A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:7d:88:a4:e2:40:f5:ad:84:09:6e:bf:7c:1d: c1:5e:35:19:97:f7:dc:b0:d4:e0:a1:13:e5:03:76: 9d:65:e8:ad:eb:05:ea:ec:1f:65:da:07:4b:0a:5a: 8e:09:10:6b:bb:c9:03:66:1d:47:41:4a:b1:fa:b3: e2:72:23:50:ca:cb:b5:56:e7:c2:7b:54:46:3c:15: bd:1d:87:04:8b:98:d4:05:a9:fc:73:82:d4:e9:63: e5:4e:a7:d3:dc:98:7e:c6:06:87:f2:15:f1:8b:ac: 63:59:ff:f5:cf:4e:91:08:e1:05:04:02:e3:d9:ec: 73:0e:46:2c:5b:aa:0c:17:35:e5:89:53:89:9c:59: 04:d1:76:69:fb:02:fd:ea:35:f8:b8:de:71:3c:ff: 67:0b:94:23:bb:14:a9:ae:48:74:cc:ae:fa:d0:78: a1:67:1c:ae:88:7f:9a:ce:ff:20:33:c7:44:a1:fe: 78:a2:57:ba:d6:c6:e6:b6:e4:fe:6e:c3:f9:0c:e3: 22:1b:2b:d6:64:a9:cc:d2:c0:a7:da:7c:32:92:f0: db:1d:8c:eb:dd:2d:96:15:a5:a7:d5:be:24:d0:22: 1f:0f:f8:b5:48:18:42:c2:d0:4a:8d:6f:36:17:8e: 50:73:60:15:fd:18:7d:2d:ce:a9:6d:59:1d:1b:61: 36:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A7:0F:FA:3C:56:86:1C:A3:72:DF:5C:C8:01:3F:04:D8:12:7A:2A X509v3 Authority Key Identifier: keyid:61:4F:5C:6E:09:B1:E0:5A:7C:00:54:E6:2A:0C:D6:7B:CC:61:B6:98 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e660e758-f65b-469a-8a1c-fb01984343b1/0/614F5C6E09B1E05A7C0054E62A0CD67BCC61B698.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:2a:26:c9:95:0a:3f:8c:40:98:72:fd:a9:e7:23:ee:b4:c2: 93:ca:8f:20:aa:d2:ac:a7:ff:76:7e:6b:ae:75:70:a5:79:d9: 8d:cf:b3:3d:89:5a:47:a8:16:30:1b:d4:4f:9c:7f:50:1c:f3: 41:16:9b:bc:0b:60:1e:72:f3:99:00:f4:d0:48:d9:fb:32:a2: 5c:82:03:d3:dc:ad:88:d1:17:ed:d2:38:ac:f5:5e:40:20:6a: c3:a6:ef:8d:89:38:20:f5:17:3a:2a:27:5e:8f:ad:fc:65:98: 84:1f:6e:40:47:22:c2:07:c7:15:19:4f:cc:68:ee:da:1d:aa: bf:7d:0c:09:e1:91:66:d1:2a:da:d2:41:11:e5:6b:1b:03:02: 48:ad:d8:84:28:63:18:a5:ca:d2:53:f5:ec:d4:1c:c8:22:4f: e5:b6:ed:80:d2:af:80:25:4e:3f:57:30:64:3c:07:02:8a:f6: 50:97:9d:5e:78:8e:d3:1d:d5:08:f2:1f:a2:93:7e:18:da:fb: c2:79:59:33:20:98:e8:d6:1d:78:9b:4a:96:6e:cb:47:bf:66: e6:7e:15:04:e3:90:90:af:36:e7:d3:09:cc:91:f0:39:c3:1c: f6:8a:ff:a8:a8:7d:0c:62:df:0c:81:16:94:89:46:ff:51:17: 44:da:35:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZWjjMjvSLpK5wFY+o4QjlhYthbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JD QzYxQjY5ODAeFw0yNjAzMTcwMjM3MTFaFw0yNjAzMjAwODM2MTFaMDMxMTAvBgNV BAMTKDQxQTcwRkZBM0M1Njg2MUNBMzcyREY1Q0M4MDEzRjA0RDgxMjdBMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNfYik4kD1rYQJbr98HcFeNRmX 99yw1OChE+UDdp1l6K3rBersH2XaB0sKWo4JEGu7yQNmHUdBSrH6s+JyI1DKy7VW 58J7VEY8Fb0dhwSLmNQFqfxzgtTpY+VOp9PcmH7GBofyFfGLrGNZ//XPTpEI4QUE AuPZ7HMORixbqgwXNeWJU4mcWQTRdmn7Av3qNfi43nE8/2cLlCO7FKmuSHTMrvrQ eKFnHK6If5rO/yAzx0Sh/niiV7rWxua25P5uw/kM4yIbK9ZkqczSwKfafDKS8Nsd jOvdLZYVpafVviTQIh8P+LVIGELC0EqNbzYXjlBzYBX9GH0tzqltWR0bYTZTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQacP+jxWhhyjct9cyAE/BNgSeiowHwYDVR0j BBgwFoAUYU9cbgmx4Fp8AFTmKgzWe8xhtpgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NjYwZTc1OC1mNjViLTQ2OWEtOGExYy1mYjAxOTg0MzQzYjEvMC82MTRGNUM2RTA5 QjFFMDVBN0MwMDU0RTYyQTBDRDY3QkNDNjFCNjk4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2N0JDQzYx QjY5OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTY2MGU3NTgtZjY1Yi00NjlhLThh MWMtZmIwMTk4NDM0M2IxLzAvNjE0RjVDNkUwOUIxRTA1QTdDMDA1NEU2MkEwQ0Q2 N0JDQzYxQjY5OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkqJsmVCj+MQJhy/annI+60wpPKjyCq0qyn /3Z+a651cKV52Y3Psz2JWkeoFjAb1E+cf1Ac80EWm7wLYB5y85kA9NBI2fsyolyC A9PcrYjRF+3SOKz1XkAgasOm742JOCD1FzoqJ16PrfxlmIQfbkBHIsIHxxUZT8xo 7todqr99DAnhkWbRKtrSQRHlaxsDAkit2IQoYxilytJT9ezUHMgiT+W27YDSr4Al Tj9XMGQ8BwKK9lCXnV54jtMd1QjyH6KTfhja+8J5WTMgmOjWHXibSpZuy0e/ZuZ+ FQTjkJCvNufTCcyR8DnDHPaK/6iofQxi3wyBFpSJRv9RF0TaNbo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:53 2026 by rpki-client