$ rpki-client -vvf repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft File: B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft (raw, json) Hash identifier: fi8S6Xk1ufYbpulduNF5XMvdVtS6jvfNLoOGHWNzZyo= Subject key identifier: 71:F9:DE:9D:A4:6E:6E:5B:D0:D5:71:F7:A0:4B:E9:06:E0:35:78:05 Authority key identifier: B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 Certificate issuer: /CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Certificate serial: 5192B2CBFD87D71A6513E21526F02FFC012144C9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft Manifest number: 011D Signing time: Sat 07 Mar 2026 07:42:30 +0000 Manifest this update: Sat 07 Mar 2026 07:37:30 +0000 Manifest next update: Tue 10 Mar 2026 14:10:30 +0000 Files and hashes: 1: 3136302e32322e32382e302f32332d3234203d3e20313532383031.roa (hash: k1BTnGnPNw0i2wtiBbJt3qzZFQFL5+IIGvpK+mUck6M=) 2: B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl (hash: rNNdWkI9g4tP6s6mj5JXPBm9Fx1eQDqGunAbYpIWMTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:92:b2:cb:fd:87:d7:1a:65:13:e2:15:26:f0:2f:fc:01:21:44:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B14E4E1C1AA1291BA83356968F8AE48E844359A9 Validity Not Before: Mar 7 07:37:30 2026 GMT Not After : Mar 10 14:10:30 2026 GMT Subject: CN=71F9DE9DA46E6E5BD0D571F7A04BE906E0357805 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d3:18:bb:46:b6:bb:29:b7:1e:24:7f:ff:c5: a2:a3:a5:f6:42:31:43:07:af:cd:96:56:65:01:d7: 69:11:ce:8b:a3:30:ed:0c:93:fa:ab:90:ae:d7:c5: b3:5b:8c:35:b8:86:98:ad:84:8e:e1:8f:33:35:3a: 57:c4:b9:e0:d8:94:2d:72:20:33:08:a1:99:59:3c: bb:8e:dc:22:99:84:8c:58:ca:07:c7:4c:9f:65:d4: 5f:84:60:f4:9d:d3:3f:4c:2c:af:c5:46:23:f3:d3: 05:88:e2:a6:b7:5f:93:8b:4b:3b:a2:ef:42:92:b1: fc:06:01:19:b4:1e:d1:93:3f:aa:87:57:f6:c7:fd: 5a:e3:5e:b2:c9:27:50:b6:6b:92:1c:6c:6a:89:9b: d2:73:7a:95:a3:62:e6:3c:7f:07:92:e6:8c:18:33: 1a:8e:a8:dd:75:96:f4:3e:30:d0:d2:6d:ab:28:8f: c2:c9:d3:d0:59:1d:8a:21:7b:8f:a2:52:d0:d0:51: 50:48:2c:af:a9:62:7f:42:d4:5a:a7:42:67:df:76: 03:a1:2e:e3:64:0f:8e:02:b4:0b:37:c4:80:3b:63: 96:fa:4d:04:7b:0e:70:9d:d1:98:39:8a:65:55:d2: e6:7c:c5:c5:b8:7f:65:17:9d:5b:67:67:11:a5:8a: 1d:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F9:DE:9D:A4:6E:6E:5B:D0:D5:71:F7:A0:4B:E9:06:E0:35:78:05 X509v3 Authority Key Identifier: keyid:B1:4E:4E:1C:1A:A1:29:1B:A8:33:56:96:8F:8A:E4:8E:84:43:59:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/B14E4E1C1AA1291BA83356968F8AE48E844359A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09142c82-b043-46eb-b0a1-8e15fd5daa79/0/B14E4E1C1AA1291BA83356968F8AE48E844359A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:e7:65:45:e8:a7:27:1a:46:b9:06:ae:00:9e:e4:aa:aa:04: 7b:4a:bd:b1:6d:8a:51:27:a0:9f:84:8a:ab:cb:fa:f6:fd:9f: cb:54:f0:e1:bc:1a:8f:ac:83:ac:25:9b:19:bb:cc:72:00:63: b6:9f:5a:d7:c1:b1:f5:f5:55:74:1a:9f:51:18:21:fb:fd:e2: dd:42:3b:b0:af:fc:9b:9e:81:fc:d1:d5:20:99:a6:26:d8:dc: 75:cb:76:ce:8f:94:da:97:1a:f9:7c:a4:2d:0e:14:b3:98:c6: 72:ef:eb:8e:d2:35:87:58:80:64:97:11:6b:d5:ac:e7:3a:79: fd:20:77:05:a7:dc:a0:c3:2c:00:7f:e0:d7:01:03:c2:d0:1a: 4c:9f:43:3c:17:f5:0d:2b:51:ea:30:1d:3a:f7:90:42:0c:4d: 99:9d:36:7f:58:fd:6d:49:4d:97:95:b5:ce:a9:1c:ca:f2:04: 4d:c1:07:7c:7c:ad:dc:29:1b:a5:25:56:e1:06:10:a9:b0:7f: 9b:cf:ff:a2:d5:03:d0:0c:21:4d:96:7e:93:d8:bf:75:6e:72: 74:57:64:a4:7c:7e:32:5c:c2:2c:7a:1d:aa:92:df:f5:56:54: c4:c9:5e:17:0d:5d:9a:bd:ea:02:4c:a2:2f:18:4d:9e:c9:cf: c0:fc:0a:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZKyy/2H1xplE+IVJvAv/AEhRMkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4 NDQzNTlBOTAeFw0yNjAzMDcwNzM3MzBaFw0yNjAzMTAxNDEwMzBaMDMxMTAvBgNV BAMTKDcxRjlERTlEQTQ2RTZFNUJEMEQ1NzFGN0EwNEJFOTA2RTAzNTc4MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa0xi7Rra7KbceJH//xaKjpfZC MUMHr82WVmUB12kRzoujMO0Mk/qrkK7XxbNbjDW4hpithI7hjzM1OlfEueDYlC1y IDMIoZlZPLuO3CKZhIxYygfHTJ9l1F+EYPSd0z9MLK/FRiPz0wWI4qa3X5OLSzui 70KSsfwGARm0HtGTP6qHV/bH/VrjXrLJJ1C2a5IcbGqJm9JzepWjYuY8fweS5owY MxqOqN11lvQ+MNDSbasoj8LJ09BZHYohe4+iUtDQUVBILK+pYn9C1FqnQmffdgOh LuNkD44CtAs3xIA7Y5b6TQR7DnCd0Zg5imVV0uZ8xcW4f2UXnVtnZxGlih0JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcfnenaRublvQ1XH3oEvpBuA1eAUwHwYDVR0j BBgwFoAUsU5OHBqhKRuoM1aWj4rkjoRDWakwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OTE0MmM4Mi1iMDQzLTQ2ZWItYjBhMS04ZTE1ZmQ1ZGFhNzkvMC9CMTRFNEUxQzFB QTEyOTFCQTgzMzU2OTY4RjhBRTQ4RTg0NDM1OUE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0OEU4NDQz NTlBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDkxNDJjODItYjA0My00NmViLWIw YTEtOGUxNWZkNWRhYTc5LzAvQjE0RTRFMUMxQUExMjkxQkE4MzM1Njk2OEY4QUU0 OEU4NDQzNTlBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKbnZUXopycaRrkGrgCe5KqqBHtKvbFtilEn oJ+EiqvL+vb9n8tU8OG8Go+sg6wlmxm7zHIAY7afWtfBsfX1VXQan1EYIfv94t1C O7Cv/JuegfzR1SCZpibY3HXLds6PlNqXGvl8pC0OFLOYxnLv647SNYdYgGSXEWvV rOc6ef0gdwWn3KDDLAB/4NcBA8LQGkyfQzwX9Q0rUeowHTr3kEIMTZmdNn9Y/W1J TZeVtc6pHMryBE3BB3x8rdwpG6UlVuEGEKmwf5vP/6LVA9AMIU2WfpPYv3VucnRX ZKR8fjJcwix6HaqS3/VWVMTJXhcNXZq96gJMoi8YTZ7Jz8D8CrA= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:42 2026 by rpki-client