$ rpki-client -vvf repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft File: 295131167768CC78482F796BB58CF5A01A014393.mft (raw, json) Hash identifier: zXTBGFeXNoVYjmZCmHQu42EyO3wMPi4MpK1RJkeXwmw= Subject key identifier: 8C:4B:A0:18:3E:7C:7E:B5:CD:3E:35:B0:38:9C:D1:8D:B3:68:F7:D7 Authority key identifier: 29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 Certificate issuer: /CN=295131167768CC78482F796BB58CF5A01A014393 Certificate serial: 719BD9438C713EE468FF15AAC0AA1E5BEAE75DB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft Manifest number: 010B Signing time: Sat 07 Mar 2026 11:51:38 +0000 Manifest this update: Sat 07 Mar 2026 11:46:38 +0000 Manifest next update: Tue 10 Mar 2026 17:00:38 +0000 Files and hashes: 1: 3136302e32352e35302e302f32332d3234203d3e20313533303831.roa (hash: Jp+xzrLLFcNcdbgFIyqYkAF5UwOiimjyD2ApcObjIzI=) 2: 3136302e32352e35312e302f32342d3234203d3e20313439373436.roa (hash: aIfX6W1wJsuWGyj92Zq4X0k5Z/7Dz5tO4tJOY1Wnlo8=) 3: 3136302e32352e35302e302f32332d3233203d3e20313439373436.roa (hash: ItdPic80wypsThSkca8xGdGFm8YCN4V6loLuyuZH6qY=) 4: 3136302e32352e35302e302f32342d3234203d3e20313439373436.roa (hash: 0V0z+LtHyEetsdKzNz3fDG9TWng43zw65Ia1bT84+ig=) 5: 3136302e32352e35302e302f32342d3234203d3e20313533303831.roa (hash: AX0lDEH6VgInN8VNyEQZ1Bf7VJ5RuPZOiclQbBxraVk=) 6: 295131167768CC78482F796BB58CF5A01A014393.crl (hash: TyNyrRg4XgF24VLUIFnpDidrOfBudftIupXrjR/0FV4=) 7: 3136302e32352e35312e302f32342d3234203d3e20313533303831.roa (hash: uRuK1ozamqcEn31L5IIaIYVkb8/xiqqqwMGA40t+cIA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9b:d9:43:8c:71:3e:e4:68:ff:15:aa:c0:aa:1e:5b:ea:e7:5d:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=295131167768CC78482F796BB58CF5A01A014393 Validity Not Before: Mar 7 11:46:38 2026 GMT Not After : Mar 10 17:00:38 2026 GMT Subject: CN=8C4BA0183E7C7EB5CD3E35B0389CD18DB368F7D7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:08:7a:e5:ce:6e:55:d0:1f:4a:95:16:61:a8: d3:1a:4e:80:db:af:9d:36:34:c1:1a:a0:52:fe:57: 40:9f:96:ef:73:90:07:b1:89:d1:d5:68:9b:c6:7d: cb:14:b4:59:a3:56:40:01:bd:33:97:28:d8:97:4c: d3:af:dd:d6:35:bc:ff:46:a7:06:3a:c8:b1:62:a0: 23:46:51:79:71:0c:51:ce:d9:d4:a3:1e:31:28:3d: 60:8b:a2:e7:69:9f:c2:57:8f:81:04:70:d0:14:e4: 63:0c:30:4e:0a:6c:59:75:32:1a:81:f2:97:50:71: 5b:09:bc:87:7a:26:e4:75:42:b0:43:bd:d6:7e:3a: e2:c1:39:d8:d7:5b:b9:df:70:39:c4:32:68:c0:8c: ba:47:b6:d3:75:d2:52:e1:03:a7:55:d2:7e:50:40: d2:48:dc:4f:1b:e9:7f:d4:57:ce:12:1d:bc:cd:df: 5c:69:8c:e2:ac:1b:10:83:aa:a8:8b:56:84:d4:a3: 3a:b2:88:5a:d8:f3:fa:4a:18:a6:a9:42:9f:d6:6a: 5c:77:4a:24:2c:21:ff:d9:d7:bf:2c:61:b0:bf:63: dc:be:eb:5e:09:98:a4:a7:b9:4d:2b:40:eb:02:b2: d7:34:14:07:09:00:3a:e0:e9:c7:3a:8f:7a:5f:5c: cc:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:4B:A0:18:3E:7C:7E:B5:CD:3E:35:B0:38:9C:D1:8D:B3:68:F7:D7 X509v3 Authority Key Identifier: keyid:29:51:31:16:77:68:CC:78:48:2F:79:6B:B5:8C:F5:A0:1A:01:43:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/295131167768CC78482F796BB58CF5A01A014393.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49eca50b-5722-4918-8314-859d3c1f55a2/0/295131167768CC78482F796BB58CF5A01A014393.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:d2:64:f5:cb:74:a0:1c:84:b9:2b:d3:10:be:76:5b:c5:e4: 64:22:34:3b:6c:75:fb:1a:f1:f2:47:23:10:cf:ba:8b:e6:99: d3:15:f9:ba:45:07:f4:8c:66:7b:9d:ed:ce:8a:a4:bf:37:91: f3:d7:7e:c5:d3:7d:5c:7f:d0:f8:5e:8d:f6:ce:51:59:21:d1: b2:df:fe:94:66:5f:1b:a5:c4:10:ad:5d:cc:48:c5:9d:ff:b9: 86:0f:f0:92:63:60:48:2a:b5:08:f9:bf:bb:b7:8c:9e:3f:c3: 04:9d:36:e6:8c:28:9a:82:ab:72:97:7a:0d:6c:e4:ed:12:30: 96:05:b5:0e:bc:c2:fb:bd:10:46:b0:d3:96:29:d5:db:b1:9d: 6c:d4:b4:c9:25:1b:f7:93:db:57:ce:b4:bb:f5:b1:30:8d:1b: dc:5c:f5:4a:0d:7b:45:cc:ea:c9:2e:e8:9e:11:80:5c:29:04: 85:08:94:fc:47:bc:3a:68:0b:4c:40:6a:d7:b4:f3:27:6a:6f: 2f:f6:3f:3f:d5:e5:0a:7a:52:bf:0a:4a:07:2e:b6:51:1f:b9: 2b:60:33:6d:ef:e3:a0:61:64:d8:a9:d9:8a:36:5a:a7:e0:c4: f2:ac:6b:f0:e8:68:b2:d9:9f:d7:70:aa:95:0f:be:36:7a:c6: 39:6c:71:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZvZQ4xxPuRo/xWqwKoeW+rnXbYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAx QTAxNDM5MzAeFw0yNjAzMDcxMTQ2MzhaFw0yNjAzMTAxNzAwMzhaMDMxMTAvBgNV BAMTKDhDNEJBMDE4M0U3QzdFQjVDRDNFMzVCMDM4OUNEMThEQjM2OEY3RDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpCHrlzm5V0B9KlRZhqNMaToDb r502NMEaoFL+V0Cflu9zkAexidHVaJvGfcsUtFmjVkABvTOXKNiXTNOv3dY1vP9G pwY6yLFioCNGUXlxDFHO2dSjHjEoPWCLoudpn8JXj4EEcNAU5GMMME4KbFl1MhqB 8pdQcVsJvId6JuR1QrBDvdZ+OuLBOdjXW7nfcDnEMmjAjLpHttN10lLhA6dV0n5Q QNJI3E8b6X/UV84SHbzN31xpjOKsGxCDqqiLVoTUozqyiFrY8/pKGKapQp/Walx3 SiQsIf/Z178sYbC/Y9y+614JmKSnuU0rQOsCstc0FAcJADrg6cc6j3pfXMxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjEugGD58frXNPjWwOJzRjbNo99cwHwYDVR0j BBgwFoAUKVExFndozHhIL3lrtYz1oBoBQ5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWVjYTUwYi01NzIyLTQ5MTgtODMxNC04NTlkM2MxZjU1YTIvMC8yOTUxMzExNjc3 NjhDQzc4NDgyRjc5NkJCNThDRjVBMDFBMDE0MzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1QTAxQTAx NDM5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDllY2E1MGItNTcyMi00OTE4LTgz MTQtODU5ZDNjMWY1NWEyLzAvMjk1MTMxMTY3NzY4Q0M3ODQ4MkY3OTZCQjU4Q0Y1 QTAxQTAxNDM5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA7SZPXLdKAchLkr0xC+dlvF5GQiNDtsdfsa 8fJHIxDPuovmmdMV+bpFB/SMZnud7c6KpL83kfPXfsXTfVx/0PhejfbOUVkh0bLf /pRmXxulxBCtXcxIxZ3/uYYP8JJjYEgqtQj5v7u3jJ4/wwSdNuaMKJqCq3KXeg1s 5O0SMJYFtQ68wvu9EEaw05Yp1duxnWzUtMklG/eT21fOtLv1sTCNG9xc9UoNe0XM 6sku6J4RgFwpBIUIlPxHvDpoC0xAate08ydqby/2Pz/V5Qp6Ur8KSgcutlEfuStg M23v46BhZNip2Yo2WqfgxPKsa/DoaLLZn9dwqpUPvjZ6xjlscbs= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:05 2026 by rpki-client