$ rpki-client -vvf repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft File: C08E65A250AEDC93967004D660D25DB8293AB419.mft (raw, json) Hash identifier: OKn3HCzDwA2wARQnogk28p4xBSmWGNT/Me6FxAya/DY= Subject key identifier: 57:C4:22:FF:90:3E:DC:65:97:F1:26:9A:40:9E:C5:50:40:3F:36:62 Authority key identifier: C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 Certificate issuer: /CN=C08E65A250AEDC93967004D660D25DB8293AB419 Certificate serial: 0CB1354A9AA4EF992C26DC1F88E0B9A832360F2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft Manifest number: DF Signing time: Thu 05 Mar 2026 12:51:30 +0000 Manifest this update: Thu 05 Mar 2026 12:46:30 +0000 Manifest next update: Sun 08 Mar 2026 21:39:30 +0000 Files and hashes: 1: 3136302e3138372e3231382e302f32332d3233203d3e20313533313332.roa (hash: xQqvUTJq/TqdKwLf4G80fezav1LupyUO9lDHs53vxIs=) 2: C08E65A250AEDC93967004D660D25DB8293AB419.crl (hash: pctrMmKdUx3kh6MGnkG01elBF7v5k/vnQpPET+dNWLk=) 3: 3136302e3138372e3231382e302f32342d3234203d3e20313533313332.roa (hash: 2o2jdCVbNyj/6dX+oq2zQPU0J+pHhSRrwsuCtvlNp9A=) 4: 3136302e3138372e3231392e302f32342d3234203d3e20313533313332.roa (hash: VI5amVZMC5v2utwkbkM6uux1JOpkEgEOw5W8n9olw68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 21:39:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:b1:35:4a:9a:a4:ef:99:2c:26:dc:1f:88:e0:b9:a8:32:36:0f:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C08E65A250AEDC93967004D660D25DB8293AB419 Validity Not Before: Mar 5 12:46:30 2026 GMT Not After : Mar 8 21:39:30 2026 GMT Subject: CN=57C422FF903EDC6597F1269A409EC550403F3662 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:e5:cf:f5:18:4b:7b:e7:41:f5:bc:8f:7a:77: fe:5b:6c:19:f3:c6:5a:cf:c5:f0:8e:4c:b0:e0:04: f9:99:b1:99:2b:7f:72:4e:9c:5d:08:96:56:bd:09: 43:3f:a8:2e:36:83:aa:91:7d:c3:74:6b:fd:5c:fa: 74:91:0f:00:a3:85:2e:52:3f:76:5e:02:6e:17:8f: 0c:b2:95:68:05:3e:46:36:34:40:4c:e0:f7:9a:c1: 60:b9:9a:6b:3c:55:92:40:5a:6b:fd:7e:d6:b8:90: 97:4f:4f:dd:6d:de:1a:43:6b:dc:0e:64:dc:20:80: f5:d4:0f:f4:9e:81:7d:ac:ea:7d:c2:5f:59:ac:4c: 4a:c6:4d:21:13:9c:1b:e9:5e:a3:4d:9d:6e:45:37: 53:a8:5e:49:01:56:96:8a:56:de:10:68:62:b3:98: 5f:42:03:f5:d1:1f:0f:8e:64:a2:d0:f8:a2:36:fd: 61:48:c1:ae:97:32:35:f2:57:c2:21:a4:3b:af:97: 86:40:00:7e:28:88:ac:bf:52:06:f2:72:15:f2:e8: 90:86:c7:9d:34:75:22:24:0a:41:3c:18:9d:08:24: 96:4a:de:97:fb:dc:a3:e9:d9:48:2b:e9:ab:06:7c: 09:5b:40:47:82:8e:62:57:53:80:1b:f2:09:02:92: 33:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:C4:22:FF:90:3E:DC:65:97:F1:26:9A:40:9E:C5:50:40:3F:36:62 X509v3 Authority Key Identifier: keyid:C0:8E:65:A2:50:AE:DC:93:96:70:04:D6:60:D2:5D:B8:29:3A:B4:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C08E65A250AEDC93967004D660D25DB8293AB419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/481d54cb-57a9-4a16-a70e-c5f6024e139d/0/C08E65A250AEDC93967004D660D25DB8293AB419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:ac:82:13:5d:87:5a:bc:2c:39:e7:f7:09:9e:f0:f5:03:28: 0b:81:36:03:fb:7a:07:83:f2:d8:bb:7b:7a:2c:35:44:94:1f: dd:b2:16:1c:6f:66:96:94:6a:c0:aa:f9:1c:88:df:be:a6:85: 41:d9:5d:b1:ce:dc:62:44:73:57:69:46:0d:86:a1:e7:ea:64: 32:13:29:30:f4:e1:bb:37:f1:aa:fa:c7:af:8a:0f:97:80:d8: 60:bc:1b:6b:65:5e:c9:ce:54:68:97:0c:f1:83:43:f1:73:fa: ea:75:17:fa:29:f6:41:64:5c:c9:8f:38:e3:8a:03:6b:6c:5b: f2:ec:c9:15:5a:9b:ef:1e:4f:e7:80:83:ac:9b:e4:10:66:2f: 1b:23:3f:01:80:2b:88:4c:13:42:d6:29:6b:22:cf:84:37:42: 67:c6:93:3f:b3:59:c2:6f:56:ad:f6:29:4a:da:02:9a:1d:90: 44:53:21:1f:44:37:d8:c9:39:96:83:47:3a:05:bc:49:e4:6a: b0:91:8a:af:df:c0:1b:fd:26:41:37:ad:63:77:bd:8f:3a:1c: 2c:26:28:f0:46:c4:85:b7:21:b6:6b:29:37:62:21:72:66:61: 59:31:3e:e0:99:0b:d4:27:ec:fc:58:26:63:d6:c1:e9:40:90: 2c:f4:fe:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDLE1Spqk75ksJtwfiOC5qDI2Dy4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgy OTNBQjQxOTAeFw0yNjAzMDUxMjQ2MzBaFw0yNjAzMDgyMTM5MzBaMDMxMTAvBgNV BAMTKDU3QzQyMkZGOTAzRURDNjU5N0YxMjY5QTQwOUVDNTUwNDAzRjM2NjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt5c/1GEt750H1vI96d/5bbBnz xlrPxfCOTLDgBPmZsZkrf3JOnF0Illa9CUM/qC42g6qRfcN0a/1c+nSRDwCjhS5S P3ZeAm4XjwyylWgFPkY2NEBM4PeawWC5mms8VZJAWmv9fta4kJdPT91t3hpDa9wO ZNwggPXUD/SegX2s6n3CX1msTErGTSETnBvpXqNNnW5FN1OoXkkBVpaKVt4QaGKz mF9CA/XRHw+OZKLQ+KI2/WFIwa6XMjXyV8IhpDuvl4ZAAH4oiKy/UgbychXy6JCG x500dSIkCkE8GJ0IJJZK3pf73KPp2Ugr6asGfAlbQEeCjmJXU4Ab8gkCkjPpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV8Qi/5A+3GWX8SaaQJ7FUEA/NmIwHwYDVR0j BBgwFoAUwI5lolCu3JOWcATWYNJduCk6tBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ODFkNTRjYi01N2E5LTRhMTYtYTcwZS1jNWY2MDI0ZTEzOWQvMC9DMDhFNjVBMjUw QUVEQzkzOTY3MDA0RDY2MEQyNURCODI5M0FCNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVEQjgyOTNB QjQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDgxZDU0Y2ItNTdhOS00YTE2LWE3 MGUtYzVmNjAyNGUxMzlkLzAvQzA4RTY1QTI1MEFFREM5Mzk2NzAwNEQ2NjBEMjVE QjgyOTNBQjQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFusghNdh1q8LDnn9wme8PUDKAuBNgP7egeD 8ti7e3osNUSUH92yFhxvZpaUasCq+RyI376mhUHZXbHO3GJEc1dpRg2GoefqZDIT KTD04bs38ar6x6+KD5eA2GC8G2tlXsnOVGiXDPGDQ/Fz+up1F/op9kFkXMmPOOOK A2tsW/LsyRVam+8eT+eAg6yb5BBmLxsjPwGAK4hME0LWKWsiz4Q3QmfGkz+zWcJv Vq32KUraApodkERTIR9EN9jJOZaDRzoFvEnkarCRiq/fwBv9JkE3rWN3vY86HCwm KPBGxIW3IbZrKTdiIXJmYVkxPuCZC9Qn7PxYJmPWwelAkCz0/jc= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:39 2026 by rpki-client