$ rpki-client -vvf repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft File: C85C49978E8023F2D58521524D4EC616244CDC14.mft (raw, json) Hash identifier: BowwcSxe+CVbB8h4dq8nVx0EZkcmQZJ0pCQBVdncs10= Subject key identifier: EC:E7:0C:4B:20:3C:56:4E:29:61:69:07:F8:EB:B3:5B:66:7E:14:56 Authority key identifier: C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 Certificate issuer: /CN=C85C49978E8023F2D58521524D4EC616244CDC14 Certificate serial: 7E4EAA7A7781FC5C6FEABC0081373D9B8B92A58E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft Manifest number: 0248 Signing time: Tue 21 Apr 2026 10:12:33 +0000 Manifest this update: Tue 21 Apr 2026 10:07:33 +0000 Manifest next update: Fri 24 Apr 2026 14:06:33 +0000 Files and hashes: 1: C85C49978E8023F2D58521524D4EC616244CDC14.crl (hash: WsU4RZ+Avt5Xlh+lQvWiZ8SWmNz9YJfuBDbl+28FJF4=) 2: 3130332e3233392e3231342e302f32332d3234203d3e2034383030.roa (hash: X2QeWvWwuvgIs5+TAK0HDLr7Wz+zJj0bCxQNhzyEI7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 14:06:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:4e:aa:7a:77:81:fc:5c:6f:ea:bc:00:81:37:3d:9b:8b:92:a5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C85C49978E8023F2D58521524D4EC616244CDC14 Validity Not Before: Apr 21 10:07:33 2026 GMT Not After : Apr 24 14:06:33 2026 GMT Subject: CN=ECE70C4B203C564E29616907F8EBB35B667E1456 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1c:d5:56:ec:d6:35:40:26:47:4c:f3:d0:f0: 3a:4d:ab:d1:76:db:ed:1f:b4:f9:d2:5c:61:38:17: 79:70:8e:a2:27:ed:35:4b:bb:29:33:55:d6:8c:45: 07:5c:2d:99:dc:39:3e:c7:86:73:ab:b8:17:15:c4: 39:f8:c2:cb:48:e5:48:fd:93:8f:e8:d3:74:00:ec: bc:eb:26:dc:55:a6:3f:24:af:20:24:1e:b9:1d:c4: 58:a9:86:c7:4d:89:08:33:3a:fd:d8:f0:8a:e7:e0: c5:08:68:65:19:e6:53:d0:9e:51:39:3f:11:69:86: 1d:42:47:07:56:39:e0:9d:3d:c4:06:08:28:ad:0d: 72:75:3c:97:d2:d4:a3:a9:0d:da:df:3c:ae:83:07: 2e:80:00:43:11:a9:78:1d:e7:86:82:21:6d:c5:c0: bc:59:9d:d8:d7:28:67:13:b4:f9:9f:d4:e5:6f:69: 72:a5:27:55:e0:6a:42:c1:4e:94:2c:a0:ba:af:ec: d5:a1:2f:16:56:d1:d5:b2:bb:95:a1:ba:57:d5:7e: 68:be:8f:5e:34:65:5a:5b:24:81:63:30:a6:58:e5: d0:f8:d7:12:9f:c8:a1:35:14:36:74:17:a6:a7:ee: 48:2a:b5:ec:79:1c:79:c8:ed:58:34:9b:22:b0:29: 59:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:E7:0C:4B:20:3C:56:4E:29:61:69:07:F8:EB:B3:5B:66:7E:14:56 X509v3 Authority Key Identifier: keyid:C8:5C:49:97:8E:80:23:F2:D5:85:21:52:4D:4E:C6:16:24:4C:DC:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C85C49978E8023F2D58521524D4EC616244CDC14.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e516e6e-c679-4e50-b7ab-1e40679125cd/0/C85C49978E8023F2D58521524D4EC616244CDC14.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:3e:70:67:59:6f:94:71:3b:72:bc:d3:bb:47:9e:a8:2a:a8: 8b:c9:54:ce:1d:9a:a3:76:0f:7a:47:3c:30:c1:f6:2f:4f:5e: c1:46:35:0a:02:34:2c:7b:f9:c6:55:0b:b7:6e:d0:40:67:b5: eb:d6:ce:7d:79:c1:3c:6f:fe:e5:d3:0d:10:0d:8f:db:c2:65: 32:1a:dc:3a:7e:cc:69:ec:4f:b6:6b:87:08:85:f5:5e:50:fd: f1:be:7d:9e:fc:76:69:5d:4e:8d:0b:1c:f6:99:d9:3e:29:ff: da:bc:87:20:81:88:63:c6:29:a9:53:ae:ef:12:15:bf:fc:fa: cf:11:cc:33:56:3d:ed:7e:c4:0f:bb:64:82:4a:82:c9:fc:a1: 82:f5:db:11:a8:e5:ab:88:df:11:6e:b2:cf:76:3d:01:0d:e9: 10:cc:d8:ed:69:fe:f5:6b:b3:5c:76:48:3d:66:25:cf:be:04: b8:a0:5f:fb:47:1e:9d:5a:c5:13:83:e7:20:6c:99:c6:85:aa: 66:c6:35:69:00:89:5c:cf:c0:4b:22:69:a0:0f:4e:28:68:c7: 15:df:5a:d3:f1:8d:d9:0c:a9:2c:80:c9:f1:fc:6c:b4:d2:dd: f6:8b:7e:e8:5d:a8:4e:0d:41:db:29:23:90:09:fc:1d:49:cb: 1f:d2:81:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfk6qeneB/Fxv6rwAgTc9m4uSpY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYy NDRDREMxNDAeFw0yNjA0MjExMDA3MzNaFw0yNjA0MjQxNDA2MzNaMDMxMTAvBgNV BAMTKEVDRTcwQzRCMjAzQzU2NEUyOTYxNjkwN0Y4RUJCMzVCNjY3RTE0NTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4HNVW7NY1QCZHTPPQ8DpNq9F2 2+0ftPnSXGE4F3lwjqIn7TVLuykzVdaMRQdcLZncOT7HhnOruBcVxDn4wstI5Uj9 k4/o03QA7LzrJtxVpj8kryAkHrkdxFiphsdNiQgzOv3Y8Irn4MUIaGUZ5lPQnlE5 PxFphh1CRwdWOeCdPcQGCCitDXJ1PJfS1KOpDdrfPK6DBy6AAEMRqXgd54aCIW3F wLxZndjXKGcTtPmf1OVvaXKlJ1XgakLBTpQsoLqv7NWhLxZW0dWyu5WhulfVfmi+ j140ZVpbJIFjMKZY5dD41xKfyKE1FDZ0F6an7kgqtex5HHnI7Vg0myKwKVlPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7OcMSyA8Vk4pYWkH+OuzW2Z+FFYwHwYDVR0j BBgwFoAUyFxJl46AI/LVhSFSTU7GFiRM3BQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTUxNmU2ZS1jNjc5LTRlNTAtYjdhYi0xZTQwNjc5MTI1Y2QvMC9DODVDNDk5NzhF ODAyM0YyRDU4NTIxNTI0RDRFQzYxNjI0NENEQzE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2MTYyNDRD REMxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U1MTZlNmUtYzY3OS00ZTUwLWI3 YWItMWU0MDY3OTEyNWNkLzAvQzg1QzQ5OTc4RTgwMjNGMkQ1ODUyMTUyNEQ0RUM2 MTYyNDRDREMxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs+cGdZb5RxO3K807tHnqgqqIvJVM4dmqN2 D3pHPDDB9i9PXsFGNQoCNCx7+cZVC7du0EBntevWzn15wTxv/uXTDRANj9vCZTIa 3Dp+zGnsT7ZrhwiF9V5Q/fG+fZ78dmldTo0LHPaZ2T4p/9q8hyCBiGPGKalTru8S Fb/8+s8RzDNWPe1+xA+7ZIJKgsn8oYL12xGo5auI3xFuss92PQEN6RDM2O1p/vVr s1x2SD1mJc++BLigX/tHHp1axROD5yBsmcaFqmbGNWkAiVzPwEsiaaAPTihoxxXf WtPxjdkMqSyAyfH8bLTS3faLfuhdqE4NQdspI5AJ/B1Jyx/SgXA= -----END CERTIFICATE-----Generated at Wed Apr 22 07:25:50 2026 by rpki-client