$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: rdgHwBkQLhIuhHNoGdWI7LcXwHK1JJVs9VS1P+//LUs= Subject key identifier: B0:CE:2C:C3:EC:EF:31:6F:3F:AF:A9:D3:89:47:98:60:71:3D:93:37 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 10F91EF319FD52EDD1138BEAFB1CB9A9251606F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 022C Signing time: Sat 07 Mar 2026 07:51:54 +0000 Manifest this update: Sat 07 Mar 2026 07:46:54 +0000 Manifest next update: Tue 10 Mar 2026 09:55:54 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: 1udPvVElUUs+0tR9AhsBd5llZr75HV22Bg8GZ+YGq8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f9:1e:f3:19:fd:52:ed:d1:13:8b:ea:fb:1c:b9:a9:25:16:06:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Mar 7 07:46:54 2026 GMT Not After : Mar 10 09:55:54 2026 GMT Subject: CN=B0CE2CC3ECEF316F3FAFA9D389479860713D9337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:50:da:46:ac:47:8c:7d:09:e1:4e:08:97:be: 7b:ae:ee:53:ab:17:28:30:71:f9:4e:b9:b7:34:2a: 6d:b5:55:7a:ad:8d:43:2d:20:b9:e5:40:9d:c2:44: 40:fe:40:65:55:39:0a:91:19:b2:ab:a5:c4:ae:31: e8:d7:2f:92:32:ad:e9:c6:15:8e:b2:a7:0b:14:c3: 6a:d0:24:57:93:87:24:68:c8:e5:fd:7d:d8:13:d8: 74:a7:6c:ae:2b:7d:ca:1d:ab:3f:55:37:5b:6c:1f: ad:e7:2a:af:48:70:1e:a7:a6:6c:b4:2d:b1:d8:49: 6f:85:86:6f:98:54:57:90:e7:a3:4c:ad:2d:68:f4: 1a:a4:b5:7f:7d:0e:8e:68:e5:37:ae:c7:9c:9d:27: a7:d6:76:ae:6a:da:e2:64:c1:1e:c1:d7:81:52:2d: e7:06:e5:3b:c2:79:9a:6b:a9:f2:b7:af:73:84:f9: e7:9f:29:88:4a:1e:87:0b:41:58:dc:b1:64:b5:25: ad:63:95:f8:8d:b4:26:cb:d9:4e:a3:4f:c4:5a:4c: 65:f8:1b:f1:b9:1d:1c:2c:2c:15:55:5f:33:58:d0: ce:38:2d:07:ce:34:90:f4:16:60:09:ad:f6:56:e2: b9:a6:dc:c1:62:c2:96:b1:89:27:93:ea:64:0a:79: 80:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:CE:2C:C3:EC:EF:31:6F:3F:AF:A9:D3:89:47:98:60:71:3D:93:37 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:6f:68:2e:bb:ca:16:09:bc:4e:3c:b4:88:ba:74:5a:92:65: ad:54:23:ef:8a:17:2a:bf:ba:eb:3e:1c:34:50:a5:1b:6f:7d: 32:9e:8e:10:b8:83:dd:9d:4a:9d:52:84:7f:84:d3:ad:8b:56: ae:fc:98:e7:62:7d:1f:7e:62:5f:3f:e3:cf:72:1d:b0:29:50: 58:4c:41:44:82:eb:af:01:ec:8f:6b:af:8d:23:27:f4:f2:e3: 84:b9:23:67:1f:7e:9c:24:0f:65:6b:53:54:76:7d:15:f5:dc: 4a:ba:15:ef:61:c3:02:bc:b7:f5:a2:c2:35:2d:1c:22:83:f6: bd:43:86:e7:23:e6:d4:ff:5c:8c:71:6a:ab:39:e8:79:0f:9f: 6c:20:c4:16:c1:f2:a7:83:f7:c5:d1:f8:c1:b2:b9:76:21:6f: 39:f7:c0:da:4c:67:2b:f5:f2:1e:77:62:72:00:62:6b:e9:55: 25:3b:e4:43:b0:8b:89:9d:57:29:8d:1d:21:44:f0:de:b0:70: 46:93:7e:4a:0a:d4:2e:75:5d:22:b9:18:66:72:45:62:a5:72: 52:2c:1c:71:58:8b:e3:b5:82:9c:9c:1d:46:f5:12:21:68:1d: 20:c5:70:43:ba:e9:6b:72:0c:f0:87:17:cc:b7:66:2b:37:5d: a9:a1:e4:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPke8xn9Uu3RE4vq+xy5qSUWBvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjAzMDcwNzQ2NTRaFw0yNjAzMTAwOTU1NTRaMDMxMTAvBgNV BAMTKEIwQ0UyQ0MzRUNFRjMxNkYzRkFGQTlEMzg5NDc5ODYwNzEzRDkzMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSUNpGrEeMfQnhTgiXvnuu7lOr FygwcflOubc0Km21VXqtjUMtILnlQJ3CRED+QGVVOQqRGbKrpcSuMejXL5IyrenG FY6ypwsUw2rQJFeThyRoyOX9fdgT2HSnbK4rfcodqz9VN1tsH63nKq9IcB6npmy0 LbHYSW+Fhm+YVFeQ56NMrS1o9BqktX99Do5o5Teux5ydJ6fWdq5q2uJkwR7B14FS LecG5TvCeZprqfK3r3OE+eefKYhKHocLQVjcsWS1Ja1jlfiNtCbL2U6jT8RaTGX4 G/G5HRwsLBVVXzNY0M44LQfONJD0FmAJrfZW4rmm3MFiwpaxiSeT6mQKeYDTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsM4sw+zvMW8/r6nTiUeYYHE9kzcwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIRvaC67yhYJvE48tIi6dFqSZa1UI++KFyq/ uus+HDRQpRtvfTKejhC4g92dSp1ShH+E062LVq78mOdifR9+Yl8/489yHbApUFhM QUSC668B7I9rr40jJ/Ty44S5I2cffpwkD2VrU1R2fRX13Eq6Fe9hwwK8t/WiwjUt HCKD9r1Dhucj5tT/XIxxaqs56HkPn2wgxBbB8qeD98XR+MGyuXYhbzn3wNpMZyv1 8h53YnIAYmvpVSU75EOwi4mdVymNHSFE8N6wcEaTfkoK1C51XSK5GGZyRWKlclIs HHFYi+O1gpycHUb1EiFoHSDFcEO66WtyDPCHF8y3Zis3Xamh5Ow= -----END CERTIFICATE-----Generated at Sun Mar 8 00:36:51 2026 by rpki-client