$ rpki-client -vvf repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft File: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft (raw, json) Hash identifier: gT2F7odtEFh+2n8a+bG+NfPE0Zd+RnYpL+yBf5LwDEc= Subject key identifier: FC:8F:ED:38:4F:86:CB:86:52:41:E8:2F:34:60:55:8E:72:F3:47:FA Authority key identifier: 14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 Certificate issuer: /CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Certificate serial: 5F863398BCD6E50AEABCE2E2D40EB23787130B71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft Manifest number: 0277 Signing time: Fri 20 Mar 2026 08:02:23 +0000 Manifest this update: Fri 20 Mar 2026 07:57:23 +0000 Manifest next update: Mon 23 Mar 2026 12:31:23 +0000 Files and hashes: 1: 3130332e3134342e34372e302f32342d3234203d3e20313339343136.roa (hash: E1kQE2e1Jz0FLO/8+ZiSnjrQF2squetUiZDgfoCFU8I=) 2: 3130332e3134342e34362e302f32342d3234203d3e20313339343136.roa (hash: w3A96htgR2DAx/wXPEj5k5aZAXFHON8x+UxzzWvE0sg=) 3: 14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl (hash: IdMif3NuhhmqjtS/n74qW5h4TyfwmFcvHQR71yUdM6Y=) 4: 323430353a363634303a3a2f33322d3332203d3e20313430343732.roa (hash: X8hR3thvqZy6mM594ndtS5j2dc58JdVkYob1Y5yWLOg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 12:31:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:86:33:98:bc:d6:e5:0a:ea:bc:e2:e2:d4:0e:b2:37:87:13:0b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14C8CB97FD381190392EF58B2A9CD8D566A51FD6 Validity Not Before: Mar 20 07:57:23 2026 GMT Not After : Mar 23 12:31:23 2026 GMT Subject: CN=FC8FED384F86CB865241E82F3460558E72F347FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:11:f7:05:1f:d8:70:86:13:10:1f:0b:87:5b: 24:06:db:76:3d:ed:3e:a3:88:6f:5c:ef:f2:8e:75: 5f:09:57:22:d6:9e:e7:81:f2:26:95:22:e1:16:68: 30:26:1b:c2:d5:48:34:92:26:90:6a:d8:3e:b0:e0: e5:8b:46:0b:59:f6:32:78:22:70:c8:05:e8:5d:0e: 99:87:77:15:fc:3b:8f:85:62:36:fb:32:0c:20:88: 7d:72:e4:99:f6:cc:f8:06:1a:88:84:97:0b:7e:b2: 3d:43:3c:8e:c0:45:f5:b5:e1:00:7b:6c:bf:a8:a9: 24:c1:eb:f9:98:41:4a:61:22:3b:b9:99:2f:98:a6: ba:d5:39:da:71:a2:39:bf:b5:23:9c:e7:b8:82:d0: 4e:bb:fc:7a:36:1c:0a:5a:75:b3:37:f9:16:e3:53: 2f:e1:97:32:f4:08:30:03:90:6c:47:8c:6c:e9:96: 88:4f:bd:2b:58:13:49:ca:89:de:42:68:34:82:45: 83:a0:3e:96:ef:82:69:1f:19:0b:c6:f2:33:4f:74: f1:0d:5c:b5:13:50:89:0e:6e:c9:50:00:10:6b:41: fa:1b:cf:e9:e0:fb:fd:38:18:71:aa:a4:4e:36:db: 75:93:e8:f6:10:c0:47:e4:40:cc:5e:08:50:ed:45: 39:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:8F:ED:38:4F:86:CB:86:52:41:E8:2F:34:60:55:8E:72:F3:47:FA X509v3 Authority Key Identifier: keyid:14:C8:CB:97:FD:38:11:90:39:2E:F5:8B:2A:9C:D8:D5:66:A5:1F:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edaec66c-9e1d-4321-b069-eeab4793a00b/0/14C8CB97FD381190392EF58B2A9CD8D566A51FD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ab:79:21:c9:d9:88:a0:b3:5b:45:e5:f2:cf:70:ad:c3:0a: 7d:3e:20:67:82:1d:58:91:77:70:bb:8d:6a:5c:c0:26:a3:7e: a5:49:4d:7f:c9:53:d6:ae:33:d9:0f:cb:ff:5e:c6:fa:2e:1b: fc:e8:97:d6:db:bf:65:fa:c1:b2:34:d6:7e:30:50:e1:83:f0: e6:6e:b4:f2:34:47:77:94:d3:63:2a:6a:a6:93:5c:87:05:f1: 67:49:7a:83:de:77:79:16:e5:f8:63:e3:f2:98:85:1c:a4:20: a3:24:4b:40:27:d3:77:63:9c:47:f1:5f:53:2a:40:ea:7b:55: 65:67:b6:2e:20:a9:9e:c1:89:9f:fc:ee:73:eb:8e:2d:ee:77: d7:0e:36:95:60:61:5d:c0:b5:94:30:e6:64:b6:57:14:97:c2: e6:93:95:2b:06:76:f9:c2:57:de:2d:0f:58:2a:ca:16:d0:bc: 64:42:91:f9:45:07:b5:b5:92:65:84:91:91:90:39:67:7a:db: 09:2a:a4:bc:4c:12:ed:e1:71:20:01:e0:83:e4:f7:f0:ec:34: d6:ee:4f:c3:06:e6:96:92:a1:57:16:37:61:9a:58:d5:d7:0a: aa:a6:ab:f1:61:00:9d:3e:88:7c:45:8c:50:dc:82:ae:4a:be: aa:9f:75:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX4YzmLzW5QrqvOLi1A6yN4cTC3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2 NkE1MUZENjAeFw0yNjAzMjAwNzU3MjNaFw0yNjAzMjMxMjMxMjNaMDMxMTAvBgNV BAMTKEZDOEZFRDM4NEY4NkNCODY1MjQxRTgyRjM0NjA1NThFNzJGMzQ3RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKEfcFH9hwhhMQHwuHWyQG23Y9 7T6jiG9c7/KOdV8JVyLWnueB8iaVIuEWaDAmG8LVSDSSJpBq2D6w4OWLRgtZ9jJ4 InDIBehdDpmHdxX8O4+FYjb7MgwgiH1y5Jn2zPgGGoiElwt+sj1DPI7ARfW14QB7 bL+oqSTB6/mYQUphIju5mS+YprrVOdpxojm/tSOc57iC0E67/Ho2HApadbM3+Rbj Uy/hlzL0CDADkGxHjGzplohPvStYE0nKid5CaDSCRYOgPpbvgmkfGQvG8jNPdPEN XLUTUIkObslQABBrQfobz+ng+/04GHGqpE4223WT6PYQwEfkQMxeCFDtRTk/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/I/tOE+Gy4ZSQegvNGBVjnLzR/owHwYDVR0j BBgwFoAUFMjLl/04EZA5LvWLKpzY1WalH9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGFlYzY2Yy05ZTFkLTQzMjEtYjA2OS1lZWFiNDc5M2EwMGIvMC8xNEM4Q0I5N0ZE MzgxMTkwMzkyRUY1OEIyQTlDRDhENTY2QTUxRkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4RDU2NkE1 MUZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRhZWM2NmMtOWUxZC00MzIxLWIw NjktZWVhYjQ3OTNhMDBiLzAvMTRDOENCOTdGRDM4MTE5MDM5MkVGNThCMkE5Q0Q4 RDU2NkE1MUZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGereSHJ2Yigs1tF5fLPcK3DCn0+IGeCHViR d3C7jWpcwCajfqVJTX/JU9auM9kPy/9exvouG/zol9bbv2X6wbI01n4wUOGD8OZu tPI0R3eU02MqaqaTXIcF8WdJeoPed3kW5fhj4/KYhRykIKMkS0An03djnEfxX1Mq QOp7VWVnti4gqZ7BiZ/87nPrji3ud9cONpVgYV3AtZQw5mS2VxSXwuaTlSsGdvnC V94tD1gqyhbQvGRCkflFB7W1kmWEkZGQOWd62wkqpLxMEu3hcSAB4IPk9/DsNNbu T8MG5paSoVcWN2GaWNXXCqqmq/FhAJ0+iHxFjFDcgq5KvqqfdaI= -----END CERTIFICATE-----Generated at Sat Mar 21 15:30:27 2026 by rpki-client