$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: czOjsleA4bTnjcoWFVN6JhuVqMG3D/Vvrx+CL6WBd0A= Subject key identifier: BD:04:EE:B2:5D:BB:52:77:7C:43:93:83:6D:DA:28:97:86:17:7C:E8 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 05E85581D86B1C6FB32E78A4E080B62C8E61AC4A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: 012B Signing time: Sat 07 Mar 2026 05:01:14 +0000 Manifest this update: Sat 07 Mar 2026 04:56:14 +0000 Manifest next update: Tue 10 Mar 2026 16:20:14 +0000 Files and hashes: 1: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: 5QnTSlvCk726GieVYJxHVbjFxqMGOnNRBgYZOV3yvc0=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: 3018KqaCeIgQPe+mGEUAX9QQkpcPilw0dwx6vwsisv4=) 3: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: Ls1FBSvXXV6d6q+oAzXdSr1Yel+NmlcpRjL1rfdAQJs=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 5HrjYhzGl966YcRXgphYt2j/Sbh0/oaXfGdM2Fz9Phg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:e8:55:81:d8:6b:1c:6f:b3:2e:78:a4:e0:80:b6:2c:8e:61:ac:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Mar 7 04:56:14 2026 GMT Not After : Mar 10 16:20:14 2026 GMT Subject: CN=BD04EEB25DBB52777C4393836DDA289786177CE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:81:15:dc:1d:2d:05:a0:bb:11:6a:e8:11:64: fc:e0:f0:67:07:df:41:c3:dc:d3:37:ae:fc:e4:f0: ca:19:9c:49:76:6a:60:c3:d0:c0:42:b4:ba:29:84: c9:93:b8:52:25:c8:12:fb:5f:b4:be:d2:88:63:e4: ee:e7:1a:80:30:54:3b:db:5e:09:81:2b:7e:ae:ba: f0:fb:1f:69:4d:2c:2d:a3:6e:30:5b:22:9a:c5:72: 0d:96:7e:bf:a5:4c:07:b5:54:56:96:28:94:69:9e: 12:03:28:2a:be:6d:61:3d:02:f5:2a:12:02:9d:53: 6c:d0:6d:63:8f:9a:65:92:5c:9f:5e:00:0a:3f:0c: c0:91:82:b8:eb:18:1f:7d:61:4d:42:0d:07:d9:a9: 43:1f:b6:b6:e2:53:2b:88:12:61:2b:87:38:21:77: a0:a6:84:ef:97:32:75:76:c2:d7:6b:85:15:00:91: 62:a9:4a:19:f8:ea:7a:38:f3:82:e3:39:6b:76:5e: 1e:be:b9:ac:a9:47:6f:66:89:aa:f2:8a:31:80:a8: b3:29:9b:25:2d:12:40:63:c9:a4:77:9f:01:4a:fb: 19:b6:12:32:f1:87:c2:60:3c:59:17:11:b2:74:46: 6e:f7:6b:99:ce:00:1a:de:8b:93:5f:60:ac:71:31: 8d:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:04:EE:B2:5D:BB:52:77:7C:43:93:83:6D:DA:28:97:86:17:7C:E8 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:f8:df:6a:ec:e6:bf:b3:9d:cf:b9:cd:60:ad:aa:a6:53:af: a8:89:16:9c:c7:ad:62:33:76:31:e9:e8:f1:7c:48:8e:98:aa: 58:3f:1c:ec:e0:25:4d:2b:5c:e2:dd:4e:84:93:d2:25:3d:3a: fc:b1:80:02:e7:09:8a:7a:cf:70:3b:78:ea:81:c7:25:c4:18: f1:15:f0:2a:a6:43:bd:4e:45:dc:28:28:93:85:66:78:3b:7c: 2d:f4:1c:e2:2e:8b:dc:f1:2c:af:5f:ad:d8:44:f1:77:e3:13: 65:7d:30:a1:35:0c:d9:71:28:b4:0a:24:50:89:68:08:88:22: 87:b1:e8:7e:40:5a:80:f6:b2:04:e5:9d:62:ba:5f:41:45:bb: 86:69:d6:c8:8f:22:e7:0b:7d:53:c1:b8:50:e9:e6:a3:c0:0c: f7:0e:65:d9:ad:c8:87:9f:ec:fa:73:ff:cd:20:b9:4e:69:4a: 40:13:8b:20:f4:4c:4d:2e:b6:ce:22:0b:7a:9d:da:95:6a:a6: 1d:ba:35:af:d6:ff:bb:7d:08:75:71:36:bc:91:4d:01:f7:07: 4a:45:57:c0:a7:c2:92:7e:5a:b2:86:48:f2:c3:0b:6b:33:da: d4:cc:06:6c:8d:8c:f9:6e:b8:c0:78:24:6c:f4:69:05:50:00: d4:29:24:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBehVgdhrHG+zLnik4IC2LI5hrEowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNjAzMDcwNDU2MTRaFw0yNjAzMTAxNjIwMTRaMDMxMTAvBgNV BAMTKEJEMDRFRUIyNURCQjUyNzc3QzQzOTM4MzZEREEyODk3ODYxNzdDRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgRXcHS0FoLsRaugRZPzg8GcH 30HD3NM3rvzk8MoZnEl2amDD0MBCtLophMmTuFIlyBL7X7S+0ohj5O7nGoAwVDvb XgmBK36uuvD7H2lNLC2jbjBbIprFcg2Wfr+lTAe1VFaWKJRpnhIDKCq+bWE9AvUq EgKdU2zQbWOPmmWSXJ9eAAo/DMCRgrjrGB99YU1CDQfZqUMftrbiUyuIEmErhzgh d6CmhO+XMnV2wtdrhRUAkWKpShn46no484LjOWt2Xh6+uaypR29miaryijGAqLMp myUtEkBjyaR3nwFK+xm2EjLxh8JgPFkXEbJ0Rm73a5nOABrei5NfYKxxMY3vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvQTusl27Und8Q5ODbdool4YXfOgwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMb432rs5r+znc+5zWCtqqZTr6iJFpzHrWIz djHp6PF8SI6Yqlg/HOzgJU0rXOLdToST0iU9OvyxgALnCYp6z3A7eOqBxyXEGPEV 8CqmQ71ORdwoKJOFZng7fC30HOIui9zxLK9frdhE8XfjE2V9MKE1DNlxKLQKJFCJ aAiIIoex6H5AWoD2sgTlnWK6X0FFu4Zp1siPIucLfVPBuFDp5qPADPcOZdmtyIef 7Ppz/80guU5pSkATiyD0TE0uts4iC3qd2pVqph26Na/W/7t9CHVxNryRTQH3B0pF V8CnwpJ+WrKGSPLDC2sz2tTMBmyNjPluuMB4JGz0aQVQANQpJD8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:51:56 2026 by rpki-client