$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft File: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft (raw, json) Hash identifier: nyuQ9/RCheFI4W5uSUh6qYpfX8PJl0jZ9rJ4KgyLoAE= Subject key identifier: 13:C2:D7:3A:4E:43:9E:B9:26:9E:42:6A:3C:06:3C:6F:F2:5F:12:C9 Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C Certificate issuer: /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Certificate serial: 750087EDC2D29FC1E8BCF02CF1FF7181C7F690EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft Manifest number: 0242 Signing time: Thu 19 Mar 2026 07:50:41 +0000 Manifest this update: Thu 19 Mar 2026 07:45:41 +0000 Manifest next update: Sun 22 Mar 2026 17:17:41 +0000 Files and hashes: 1: 3130332e3138332e35362e302f32342d3234203d3e203438343635.roa (hash: 9/+sbuomRYkbpuZkgeXYn2wYKrH6jZB0uQ6CyyEN0fI=) 2: 3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (hash: /nEcTC5QsPT94UNynHuxNo5heYOYhbTbt0590F0PjQ8=) 3: 2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl (hash: YywfY46i+eFLcOSB0urc7XoSSLf7wM20z3BThH/uZ/4=) 4: 3130332e3138332e35362e302f32342d3234203d3e20333938373730.roa (hash: 6mPOu8i0ZNMpERixSEWj+YT5W5q+bEUWd8MdCrMm+DU=) 5: 3130332e3138332e35372e302f32342d3234203d3e203438343635.roa (hash: ih19KYxvAXsTsnPq7aFCmnb58F9kPF7YQb52MN4zD5E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 17:17:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:00:87:ed:c2:d2:9f:c1:e8:bc:f0:2c:f1:ff:71:81:c7:f6:90:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C Validity Not Before: Mar 19 07:45:41 2026 GMT Not After : Mar 22 17:17:41 2026 GMT Subject: CN=13C2D73A4E439EB9269E426A3C063C6FF25F12C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7c:5f:26:74:30:06:06:c0:4c:d4:a8:40:71: 4c:09:08:68:29:8e:65:3a:79:a0:77:8c:21:6a:a3: 58:36:90:86:5e:fe:81:b7:0e:8f:2c:e3:db:fe:42: 01:58:4d:e0:10:ab:d5:46:26:f4:f9:2c:fb:1f:15: be:c1:4d:b0:4f:5b:8a:82:b8:23:b4:4a:58:6d:61: 14:5d:bb:4f:1f:4d:99:cd:87:99:79:f6:61:c9:6c: 72:3b:5f:03:59:b7:7c:71:3b:5d:b3:d4:09:04:f2: 38:64:a1:e7:68:4d:b9:e3:30:56:21:c9:31:1e:20: 85:77:4f:c6:e9:cb:5e:f9:97:d8:5b:a1:0e:37:3a: 43:d2:8b:d9:2a:a8:6d:e8:5e:f1:63:3b:0f:4b:0f: 25:2f:e4:66:11:d6:fd:71:cb:c2:cd:b7:50:f0:a4: 91:b0:99:69:0f:84:1b:96:a6:ba:cb:38:38:15:52: 91:d5:ed:de:32:1d:08:e3:a4:65:6e:c4:f0:25:de: 0f:0d:15:8a:2f:10:ed:46:87:a7:14:44:32:4c:7a: b0:91:23:5e:7d:2f:86:66:8f:d7:f1:97:25:e7:0d: 63:e5:e3:44:45:ac:20:78:f5:ba:fe:db:ad:8a:6a: a9:a2:ac:ab:44:87:4b:08:0a:43:ef:86:44:7a:2d: fb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:C2:D7:3A:4E:43:9E:B9:26:9E:42:6A:3C:06:3C:6F:F2:5F:12:C9 X509v3 Authority Key Identifier: keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:7a:5a:7c:68:c3:94:ba:de:0b:d8:73:e8:56:f0:ab:51:92: e9:96:06:bd:9d:33:25:82:56:e7:b2:6b:ed:08:cd:9a:f5:41: a2:0e:0b:6c:0a:29:9a:14:f9:fd:9c:90:7e:52:b1:98:e1:62: 66:f1:5a:db:04:f2:f7:dd:40:07:73:9e:75:79:68:89:75:94: 88:5c:ed:8b:7e:ed:a2:24:07:4a:8b:79:0b:d4:40:ee:c7:e1: a0:e0:48:ba:6b:f1:17:ec:37:62:28:be:87:ca:e5:dc:e9:2a: a1:77:bd:a9:9b:c2:65:f8:02:5c:40:e0:5f:48:d5:89:c9:ea: 1c:b6:ec:b5:d7:08:04:f2:ce:cd:5f:1c:a9:11:b5:bf:ce:5e: 80:9a:f4:b1:58:91:af:d5:96:19:0f:c0:ef:09:14:9e:d0:d7: 8a:1f:c6:cf:e6:4b:fe:67:46:7e:7a:c7:37:c1:d2:f3:bc:3c: 7e:37:90:5d:af:68:c3:84:2b:a7:ae:d7:9c:a3:3e:2d:09:20: 5a:e1:a7:fd:a3:ef:3f:78:1b:ca:2f:54:f6:67:eb:b4:90:37: e0:9b:39:3b:07:95:e7:74:72:71:5b:6a:dc:02:c3:c8:7e:df: 85:e9:32:ad:28:0b:5e:4d:94:7c:78:0a:a1:6d:01:52:94:84: fd:5a:f1:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdQCH7cLSn8HovPAs8f9xgcf2kOwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgx MUIxNjY2QzAeFw0yNjAzMTkwNzQ1NDFaFw0yNjAzMjIxNzE3NDFaMDMxMTAvBgNV BAMTKDEzQzJENzNBNEU0MzlFQjkyNjlFNDI2QTNDMDYzQzZGRjI1RjEyQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfF8mdDAGBsBM1KhAcUwJCGgp jmU6eaB3jCFqo1g2kIZe/oG3Do8s49v+QgFYTeAQq9VGJvT5LPsfFb7BTbBPW4qC uCO0SlhtYRRdu08fTZnNh5l59mHJbHI7XwNZt3xxO12z1AkE8jhkoedoTbnjMFYh yTEeIIV3T8bpy175l9hboQ43OkPSi9kqqG3oXvFjOw9LDyUv5GYR1v1xy8LNt1Dw pJGwmWkPhBuWprrLODgVUpHV7d4yHQjjpGVuxPAl3g8NFYovEO1Gh6cURDJMerCR I159L4Zmj9fxlyXnDWPl40RFrCB49br+262KaqmirKtEh0sICkPvhkR6LfuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE8LXOk5DnrkmnkJqPAY8b/JfEskwHwYDVR0j BBgwFoAUKGPA9Q4O5Q2ozfsu8S1LWBGxZmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NTRkZGM2NS02MWMxLTQ5ZTEtYTg5NS0zYzAzZjU4N2EyN2IvMC8yODYzQzBGNTBF MEVFNTBEQThDREZCMkVGMTJENEI1ODExQjE2NjZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRCNTgxMUIx NjY2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjU0ZGRjNjUtNjFjMS00OWUxLWE4 OTUtM2MwM2Y1ODdhMjdiLzAvMjg2M0MwRjUwRTBFRTUwREE4Q0RGQjJFRjEyRDRC NTgxMUIxNjY2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABh6Wnxow5S63gvYc+hW8KtRkumWBr2dMyWC Vueya+0IzZr1QaIOC2wKKZoU+f2ckH5SsZjhYmbxWtsE8vfdQAdznnV5aIl1lIhc 7Yt+7aIkB0qLeQvUQO7H4aDgSLpr8RfsN2IovofK5dzpKqF3vambwmX4AlxA4F9I 1YnJ6hy27LXXCATyzs1fHKkRtb/OXoCa9LFYka/VlhkPwO8JFJ7Q14ofxs/mS/5n Rn56xzfB0vO8PH43kF2vaMOEK6eu15yjPi0JIFrhp/2j7z94G8ovVPZn67SQN+Cb OTsHled0cnFbatwCw8h+34XpMq0oC15NlHx4CqFtAVKUhP1a8Yc= -----END CERTIFICATE-----Generated at Sat Mar 21 01:33:26 2026 by rpki-client