$ rpki-client -vvf repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft File: C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft (raw, json) Hash identifier: b951zQZweY2xyGda+tFCqdDog5QHt4lqTun6B4lsmrQ= Subject key identifier: F6:9C:BD:6B:B8:28:A4:D8:DD:47:C2:CF:92:42:70:81:47:5E:C2:EA Authority key identifier: C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 Certificate issuer: /CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Certificate serial: 10482EBA06D9440B74275847847380ADFFE62E9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft Manifest number: 03E0 Signing time: Wed 18 Mar 2026 22:51:15 +0000 Manifest this update: Wed 18 Mar 2026 22:46:15 +0000 Manifest next update: Sun 22 Mar 2026 08:15:15 +0000 Files and hashes: 1: C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl (hash: SPNYbbDTa+6LwNh/ZwAubydu4elJ4sTrMs3VW0I+b/Y=) 2: 3130332e3136392e3231302e302f32332d3234203d3e203538383230.roa (hash: 8OOCI6MYgwDKy2D6iLKIw3baH7QyXO8lUlRmAjt+heI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 08:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:48:2e:ba:06:d9:44:0b:74:27:58:47:84:73:80:ad:ff:e6:2e:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C14E4896FB7528EE44295A138CBF1B65D94B02A7 Validity Not Before: Mar 18 22:46:15 2026 GMT Not After : Mar 22 08:15:15 2026 GMT Subject: CN=F69CBD6BB828A4D8DD47C2CF92427081475EC2EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:65:6d:e0:f0:48:a4:a2:6a:3a:a3:3c:d7:e5: 09:ff:6c:e0:f3:c4:75:aa:af:c9:b1:e8:22:0c:ed: 14:42:e1:bd:40:3b:b3:db:41:84:92:e0:7f:54:61: 6a:d8:56:9d:0b:70:01:2e:cf:1a:23:ce:87:00:c1: c5:ef:b3:28:40:aa:76:8a:7f:ac:50:d7:70:64:38: bc:3a:30:7c:0d:df:2d:bb:15:4c:0f:c8:19:fa:e9: 04:1d:a2:60:e5:0b:84:55:85:62:17:bd:78:1c:5c: e2:71:db:e9:0d:28:0a:1f:0c:a4:da:2f:e1:31:b5: b1:7e:54:15:39:66:b7:21:4a:f0:32:68:bf:76:20: bd:a5:08:5a:d7:a9:73:3d:bb:0f:2e:5b:1b:10:f8: a4:ed:65:a2:d9:86:58:b5:1d:e0:c1:56:f9:2e:de: 9b:6a:ad:0d:a6:0f:d0:70:59:38:c0:3a:c7:1d:ad: b7:6d:9d:f8:59:12:dc:d0:a2:ed:a1:e1:b3:a8:c4: c3:ae:d9:67:eb:74:e2:29:71:17:29:20:51:f2:5e: dd:8e:0c:1d:a1:8c:04:6b:b0:f1:00:70:7c:53:8a: 25:df:8f:48:6a:e4:b0:31:37:96:39:66:6e:bf:52: 8b:1b:51:cc:3c:d8:e3:b5:6f:8b:d4:83:91:81:92: ae:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:9C:BD:6B:B8:28:A4:D8:DD:47:C2:CF:92:42:70:81:47:5E:C2:EA X509v3 Authority Key Identifier: keyid:C1:4E:48:96:FB:75:28:EE:44:29:5A:13:8C:BF:1B:65:D9:4B:02:A7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C14E4896FB7528EE44295A138CBF1B65D94B02A7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ffa0dded-1acf-442d-9659-95aecd8f8ea9/0/C14E4896FB7528EE44295A138CBF1B65D94B02A7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:1f:a9:7e:8a:f5:e2:70:b9:1e:8c:fa:cb:82:1f:64:a0:f3: ff:b0:54:ad:12:86:4a:12:68:a4:b4:2a:c2:ae:7d:2b:27:07: 61:c9:84:29:75:65:80:90:a1:30:c0:bb:6f:a4:59:6a:dc:ea: c1:16:d5:33:e6:5a:77:4c:9c:21:cc:12:02:18:3d:fd:8a:77: 5a:7f:1d:98:6c:77:10:cd:b6:90:18:5f:3d:ae:4d:8c:82:15: 50:16:7e:92:58:41:fe:65:6d:9a:3c:79:e9:f1:73:44:2a:31: 5c:a4:0b:f6:e3:14:f5:29:6d:8e:04:55:e1:66:7b:d9:16:cb: a0:02:f1:63:69:07:da:ff:1d:8f:40:b9:b5:4a:f0:15:6d:70: de:5c:6f:c3:e6:a1:d6:e4:67:51:ff:81:72:cf:07:57:e9:17: 1f:94:16:9a:f9:78:f3:88:4e:30:be:59:48:cb:17:e9:45:94: 68:58:7a:ac:76:4a:0e:28:ee:c3:5b:ca:fd:32:5d:50:b9:ce: 05:8b:7c:37:b6:91:4f:b2:0d:bc:8b:53:73:29:cb:76:51:ab: 3a:3d:38:7c:e7:08:ba:39:99:67:0f:46:f0:17:ba:0c:a5:85: 9e:65:a1:bc:70:0f:8a:69:7e:2c:2c:7b:00:03:89:94:17:76: d2:12:8b:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEguugbZRAt0J1hHhHOArf/mLp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVE OTRCMDJBNzAeFw0yNjAzMTgyMjQ2MTVaFw0yNjAzMjIwODE1MTVaMDMxMTAvBgNV BAMTKEY2OUNCRDZCQjgyOEE0RDhERDQ3QzJDRjkyNDI3MDgxNDc1RUMyRUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJZW3g8Eikomo6ozzX5Qn/bODz xHWqr8mx6CIM7RRC4b1AO7PbQYSS4H9UYWrYVp0LcAEuzxojzocAwcXvsyhAqnaK f6xQ13BkOLw6MHwN3y27FUwPyBn66QQdomDlC4RVhWIXvXgcXOJx2+kNKAofDKTa L+ExtbF+VBU5ZrchSvAyaL92IL2lCFrXqXM9uw8uWxsQ+KTtZaLZhli1HeDBVvku 3ptqrQ2mD9BwWTjAOscdrbdtnfhZEtzQou2h4bOoxMOu2WfrdOIpcRcpIFHyXt2O DB2hjARrsPEAcHxTiiXfj0hq5LAxN5Y5Zm6/UosbUcw82OO1b4vUg5GBkq7tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9py9a7gopNjdR8LPkkJwgUdewuowHwYDVR0j BBgwFoAUwU5Ilvt1KO5EKVoTjL8bZdlLAqcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZmEwZGRlZC0xYWNmLTQ0MmQtOTY1OS05NWFlY2Q4ZjhlYTkvMC9DMTRFNDg5NkZC NzUyOEVFNDQyOTVBMTM4Q0JGMUI2NUQ5NEIwMkE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFCNjVEOTRC MDJBNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmZhMGRkZWQtMWFjZi00NDJkLTk2 NTktOTVhZWNkOGY4ZWE5LzAvQzE0RTQ4OTZGQjc1MjhFRTQ0Mjk1QTEzOENCRjFC NjVEOTRCMDJBNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgfqX6K9eJwuR6M+suCH2Sg8/+wVK0ShkoS aKS0KsKufSsnB2HJhCl1ZYCQoTDAu2+kWWrc6sEW1TPmWndMnCHMEgIYPf2Kd1p/ HZhsdxDNtpAYXz2uTYyCFVAWfpJYQf5lbZo8eenxc0QqMVykC/bjFPUpbY4EVeFm e9kWy6AC8WNpB9r/HY9AubVK8BVtcN5cb8PmodbkZ1H/gXLPB1fpFx+UFpr5ePOI TjC+WUjLF+lFlGhYeqx2Sg4o7sNbyv0yXVC5zgWLfDe2kU+yDbyLU3Mpy3ZRqzo9 OHznCLo5mWcPRvAXugylhZ5lobxwD4ppfiwsewADiZQXdtISi4g= -----END CERTIFICATE-----Generated at Thu Mar 19 09:59:58 2026 by rpki-client