$ rpki-client -vvf repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft File: C43D9C91D389ADDD2039882757F731CAFAAC740F.mft (raw, json) Hash identifier: pIe2JtjvbNIm/FU9dOFeeyTU6d2TDBQYfKlU+65K+VM= Subject key identifier: 08:9E:E0:CF:C0:59:15:BE:EE:7D:51:85:40:3D:78:4B:13:52:2B:06 Authority key identifier: C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F Certificate issuer: /CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Certificate serial: 19771953738FAEE1F8FC68EFE2B5E4B9A8CBB371 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft Manifest number: 0277 Signing time: Mon 30 Mar 2026 12:10:59 +0000 Manifest this update: Mon 30 Mar 2026 12:05:59 +0000 Manifest next update: Thu 02 Apr 2026 14:25:59 +0000 Files and hashes: 1: C43D9C91D389ADDD2039882757F731CAFAAC740F.crl (hash: 4pWT21s6FfqUGK/OGbpQoTiBbnpLfJ2JSE63DFE1fN8=) 2: 3130332e3134322e3139352e302f32342d3234203d3e20313339333737.roa (hash: xXmPg+qv24jKz/eXwVHYUpUxLnyd59IGPLP0enb+4aQ=) 3: 323030313a6466313a353438303a3a2f34382d3438203d3e20313339333737.roa (hash: L5SSKiEo+E6kMD2pTjeK2EegAPOEaiDjUkwPgfIZ0H0=) 4: 3130332e3134322e3139342e302f32342d3234203d3e20313338383636.roa (hash: O208rGlxXsDRg5ZQgFSHuXQXt753cTvrXuKq5DJTaZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 02 Apr 2026 14:25:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:77:19:53:73:8f:ae:e1:f8:fc:68:ef:e2:b5:e4:b9:a8:cb:b3:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C43D9C91D389ADDD2039882757F731CAFAAC740F Validity Not Before: Mar 30 12:05:59 2026 GMT Not After : Apr 2 14:25:59 2026 GMT Subject: CN=089EE0CFC05915BEEE7D5185403D784B13522B06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f1:c2:75:85:34:71:e0:a5:90:bf:f7:66:67: de:87:60:18:b8:c5:98:48:af:0e:ab:4d:94:ce:89: 71:21:db:56:03:50:25:11:92:c4:6e:96:e5:18:43: 34:d2:50:30:2d:76:b4:f4:d2:50:3c:26:37:e1:12: ce:b9:db:bd:97:1e:2b:cd:9f:63:99:30:b1:be:21: bc:54:62:cd:76:f9:0e:de:5a:47:e8:3d:60:16:77: 42:26:76:79:c6:ad:57:d9:94:c1:fc:80:37:09:24: 34:83:53:fd:0a:5d:d3:f4:41:28:fa:37:29:9f:e1: e9:c3:92:de:d3:6c:3f:10:08:1c:56:25:2a:25:2b: 41:8d:82:03:36:1e:0d:0a:66:15:2f:63:4e:42:99: fe:b5:92:5a:ac:95:44:21:17:5d:3c:30:e6:29:9a: 42:78:a1:cc:cd:51:bc:84:2f:36:fb:21:84:a5:78: a7:6f:5c:89:d7:cb:bd:46:6a:d8:3d:0c:b6:57:41: 7e:fb:17:67:3a:a5:da:f6:05:98:30:da:6c:f6:55: 55:cf:94:ee:12:8a:1e:6a:41:26:cf:55:ba:6a:5c: ab:a3:20:a6:0c:83:e2:d0:7a:11:22:ee:cb:ea:c5: 19:ec:d7:f9:fe:6c:99:d1:c9:fd:58:ce:59:79:9f: af:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:9E:E0:CF:C0:59:15:BE:EE:7D:51:85:40:3D:78:4B:13:52:2B:06 X509v3 Authority Key Identifier: keyid:C4:3D:9C:91:D3:89:AD:DD:20:39:88:27:57:F7:31:CA:FA:AC:74:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C43D9C91D389ADDD2039882757F731CAFAAC740F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2aa2d10-3faa-4272-be1f-8102957b65e6/0/C43D9C91D389ADDD2039882757F731CAFAAC740F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:51:db:a5:e0:22:90:4a:f2:3c:96:09:a1:b6:ec:48:2d:d9: ec:c3:a4:31:0d:71:ca:4e:8f:b2:5f:77:9f:70:d9:91:04:61: c1:bf:9c:97:1a:09:ff:38:6f:e9:22:da:ca:63:bf:30:7c:31: 8f:73:03:c1:01:a4:e6:2e:31:68:b7:6b:60:d7:83:d7:be:b9: 72:33:f6:12:4f:ae:51:82:86:57:bd:53:e3:5d:fc:86:7c:76: e6:0c:1c:c2:a2:a7:6b:34:e3:0f:6c:0c:0d:8a:c6:cd:f6:40: 4d:17:0e:80:9f:53:13:6e:eb:01:2b:6e:4b:2e:40:cf:7e:c4: 84:94:e4:06:b5:f6:f3:ef:da:72:8e:e1:a9:3f:c2:cf:bb:ea: 8c:38:dd:0b:c5:cc:1e:d2:89:f2:1c:f5:15:ba:c7:a6:cc:8b: ba:d6:e2:35:91:2a:31:4e:10:09:21:ab:99:fb:7d:8f:d5:49: db:fd:20:e0:04:f2:0f:66:ab:e4:79:1f:4b:7e:32:a7:82:d1: 7d:0a:b4:f2:6b:eb:5a:47:9b:eb:89:de:46:0e:99:af:34:8b: f7:6a:91:6f:44:71:a0:b8:86:bb:60:c6:73:60:9b:f4:11:e8: b4:a2:2a:bb:d3:2d:92:bd:ca:f6:66:51:15:99:7c:8b:b8:0e: b4:63:5a:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXcZU3OPruH4/Gjv4rXkuajLs3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FG QUFDNzQwRjAeFw0yNjAzMzAxMjA1NTlaFw0yNjA0MDIxNDI1NTlaMDMxMTAvBgNV BAMTKDA4OUVFMENGQzA1OTE1QkVFRTdENTE4NTQwM0Q3ODRCMTM1MjJCMDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR8cJ1hTRx4KWQv/dmZ96HYBi4 xZhIrw6rTZTOiXEh21YDUCURksRuluUYQzTSUDAtdrT00lA8JjfhEs65272XHivN n2OZMLG+IbxUYs12+Q7eWkfoPWAWd0ImdnnGrVfZlMH8gDcJJDSDU/0KXdP0QSj6 Nymf4enDkt7TbD8QCBxWJSolK0GNggM2Hg0KZhUvY05Cmf61klqslUQhF108MOYp mkJ4oczNUbyELzb7IYSleKdvXInXy71Gatg9DLZXQX77F2c6pdr2BZgw2mz2VVXP lO4Sih5qQSbPVbpqXKujIKYMg+LQehEi7svqxRns1/n+bJnRyf1Yzll5n6+DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCJ7gz8BZFb7ufVGFQD14SxNSKwYwHwYDVR0j BBgwFoAUxD2ckdOJrd0gOYgnV/cxyvqsdA8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmFhMmQxMC0zZmFhLTQyNzItYmUxZi04MTAyOTU3YjY1ZTYvMC9DNDNEOUM5MUQz ODlBREREMjAzOTg4Mjc1N0Y3MzFDQUZBQUM3NDBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMxQ0FGQUFD NzQwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJhYTJkMTAtM2ZhYS00MjcyLWJl MWYtODEwMjk1N2I2NWU2LzAvQzQzRDlDOTFEMzg5QURERDIwMzk4ODI3NTdGNzMx Q0FGQUFDNzQwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHZR26XgIpBK8jyWCaG27Egt2ezDpDENccpO j7Jfd59w2ZEEYcG/nJcaCf84b+ki2spjvzB8MY9zA8EBpOYuMWi3a2DXg9e+uXIz 9hJPrlGChle9U+Nd/IZ8duYMHMKip2s04w9sDA2Kxs32QE0XDoCfUxNu6wErbksu QM9+xISU5Aa19vPv2nKO4ak/ws+76ow43QvFzB7SifIc9RW6x6bMi7rW4jWRKjFO EAkhq5n7fY/VSdv9IOAE8g9mq+R5H0t+MqeC0X0KtPJr61pHm+uJ3kYOma80i/dq kW9EcaC4hrtgxnNgm/QR6LSiKrvTLZK9yvZmURWZfIu4DrRjWkY= -----END CERTIFICATE-----Generated at Wed Apr 1 06:44:13 2026 by rpki-client