$ rpki-client -vvf repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft File: 1D5FBED26611C99226941DBD91139C594B399F46.mft (raw, json) Hash identifier: Ag54j5bW7SMXA1jV5ji0+STMq7la2FTGDpYHNERPnf0= Subject key identifier: A6:D4:58:E1:22:5D:3B:D7:E5:48:D0:A3:BB:AC:87:1F:11:91:A2:FC Authority key identifier: 1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 Certificate issuer: /CN=1D5FBED26611C99226941DBD91139C594B399F46 Certificate serial: 021745CC52E990111E291FA2D92924B368520F94 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft Manifest number: 030D Signing time: Wed 25 Mar 2026 23:31:43 +0000 Manifest this update: Wed 25 Mar 2026 23:26:43 +0000 Manifest next update: Sun 29 Mar 2026 05:24:43 +0000 Files and hashes: 1: 1D5FBED26611C99226941DBD91139C594B399F46.crl (hash: OIYGi0qxKV/DcgbYuQt1uIgN1DHe0ICLz8S5DaKJHz4=) 2: 3130332e3137362e3139392e302f32342d3234203d3e20313437313334.roa (hash: UWEmni5SiUDfWBGShl48lbgoCd8oAI+lOk/JRAr7L3s=) 3: 3130332e3137362e3139382e302f32342d3234203d3e20313437313334.roa (hash: 0lcfKrVdmd9kh0sslDDW+5Kmpau5fuDZNnMcPzu+YgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:24:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:17:45:cc:52:e9:90:11:1e:29:1f:a2:d9:29:24:b3:68:52:0f:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D5FBED26611C99226941DBD91139C594B399F46 Validity Not Before: Mar 25 23:26:43 2026 GMT Not After : Mar 29 05:24:43 2026 GMT Subject: CN=A6D458E1225D3BD7E548D0A3BBAC871F1191A2FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:fc:fc:1c:f4:7a:09:a0:1a:90:3f:4f:4a:71: 28:bf:5e:62:3d:6b:6e:3f:c3:b8:40:25:d4:66:9b: 74:0c:16:20:62:65:37:f5:71:db:7d:af:e9:60:bf: 87:c5:16:98:82:c4:11:89:b2:4e:9e:68:5e:54:75: 18:a7:03:9a:b8:ec:00:fd:c9:2e:64:2c:04:fa:b1: a5:38:8d:2d:da:ba:28:02:fe:dd:2b:66:a4:f3:9b: 21:09:90:9b:df:2e:1e:bb:c2:5f:34:24:f4:1f:e2: d8:04:5d:ed:6f:f4:2d:e9:8d:21:9d:ad:b2:c7:42: 24:aa:51:7c:85:b3:73:8f:1e:58:47:fd:01:ec:c3: 3f:38:3e:ef:0e:7f:49:af:d5:f5:fb:b5:e9:8a:a2: b2:b7:40:42:92:dd:a3:19:7d:9e:58:33:0f:1d:8d: dd:d4:6c:3f:f1:64:6f:6b:70:c4:46:d6:70:bd:80: 37:89:91:25:6c:d0:75:69:06:0d:fa:96:9a:f6:3a: 7c:01:f2:48:47:9c:10:df:25:ce:f8:26:d2:a9:74: 24:0a:78:67:ff:33:57:04:90:02:06:f5:96:2d:c8: 2e:ad:c4:f4:3a:9e:fd:89:26:2e:07:b4:20:a7:5a: e9:d8:1d:7e:33:7d:dc:d6:65:17:6b:d2:f1:e5:11: c6:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D4:58:E1:22:5D:3B:D7:E5:48:D0:A3:BB:AC:87:1F:11:91:A2:FC X509v3 Authority Key Identifier: keyid:1D:5F:BE:D2:66:11:C9:92:26:94:1D:BD:91:13:9C:59:4B:39:9F:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D5FBED26611C99226941DBD91139C594B399F46.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0b9e6da4-dc46-470f-b0e9-16e6e57d479a/0/1D5FBED26611C99226941DBD91139C594B399F46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:0a:75:41:58:88:b3:70:99:de:3d:3d:95:eb:1b:8c:b9:c7: ec:68:d0:19:ec:6a:6f:30:97:59:89:b4:8d:9a:ca:ff:75:1e: 20:73:ca:3d:b7:01:a4:88:c1:4e:9c:94:7b:93:e1:df:63:a8: 54:ae:ad:15:9b:bf:25:df:5f:c4:72:2f:4a:d0:28:90:bd:4f: 45:51:4b:0f:44:03:d3:8a:e9:e9:8f:61:b5:ec:d1:0e:53:22: 1e:55:f2:9e:3c:63:13:f6:ad:e1:9b:4f:4f:5a:c4:23:91:40: 6d:69:96:17:0b:f2:7e:fe:90:9d:ea:51:fe:fb:de:9e:3b:af: 9d:93:3d:14:0c:de:16:c2:70:06:dc:45:ce:9d:09:bf:64:37: 3a:f6:3e:a0:6c:01:0d:06:c5:8b:8e:1c:38:25:b7:c8:1c:65: 3d:6c:c1:85:08:57:04:bc:02:4a:78:73:38:24:78:87:ff:c0: 20:73:80:aa:29:0b:5c:96:51:35:38:ba:60:b8:c5:ae:27:44: e7:9b:61:0d:be:f6:70:fe:94:00:43:ce:26:79:3a:8f:d0:f3: de:f9:0a:b7:2c:fe:2e:89:19:54:e6:6b:16:a3:c4:cc:ac:0d: 4a:ca:1f:2c:5a:5a:1e:97:78:e1:19:3e:98:42:00:12:d9:0c: 9c:51:a1:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhdFzFLpkBEeKR+i2Skks2hSD5QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0 QjM5OUY0NjAeFw0yNjAzMjUyMzI2NDNaFw0yNjAzMjkwNTI0NDNaMDMxMTAvBgNV BAMTKEE2RDQ1OEUxMjI1RDNCRDdFNTQ4RDBBM0JCQUM4NzFGMTE5MUEyRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt/Pwc9HoJoBqQP09KcSi/XmI9 a24/w7hAJdRmm3QMFiBiZTf1cdt9r+lgv4fFFpiCxBGJsk6eaF5UdRinA5q47AD9 yS5kLAT6saU4jS3auigC/t0rZqTzmyEJkJvfLh67wl80JPQf4tgEXe1v9C3pjSGd rbLHQiSqUXyFs3OPHlhH/QHswz84Pu8Of0mv1fX7temKorK3QEKS3aMZfZ5YMw8d jd3UbD/xZG9rcMRG1nC9gDeJkSVs0HVpBg36lpr2OnwB8khHnBDfJc74JtKpdCQK eGf/M1cEkAIG9ZYtyC6txPQ6nv2JJi4HtCCnWunYHX4zfdzWZRdr0vHlEcZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptRY4SJdO9flSNCju6yHHxGRovwwHwYDVR0j BBgwFoAUHV++0mYRyZImlB29kROcWUs5n0YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YjllNmRhNC1kYzQ2LTQ3MGYtYjBlOS0xNmU2ZTU3ZDQ3OWEvMC8xRDVGQkVEMjY2 MTFDOTkyMjY5NDFEQkQ5MTEzOUM1OTRCMzk5RjQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlDNTk0QjM5 OUY0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGI5ZTZkYTQtZGM0Ni00NzBmLWIw ZTktMTZlNmU1N2Q0NzlhLzAvMUQ1RkJFRDI2NjExQzk5MjI2OTQxREJEOTExMzlD NTk0QjM5OUY0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADEKdUFYiLNwmd49PZXrG4y5x+xo0Bnsam8w l1mJtI2ayv91HiBzyj23AaSIwU6clHuT4d9jqFSurRWbvyXfX8RyL0rQKJC9T0VR Sw9EA9OK6emPYbXs0Q5TIh5V8p48YxP2reGbT09axCORQG1plhcL8n7+kJ3qUf77 3p47r52TPRQM3hbCcAbcRc6dCb9kNzr2PqBsAQ0GxYuOHDglt8gcZT1swYUIVwS8 Akp4czgkeIf/wCBzgKopC1yWUTU4umC4xa4nROebYQ2+9nD+lABDziZ5Oo/Q8975 Crcs/i6JGVTmaxajxMysDUrKHyxaWh6XeOEZPphCABLZDJxRoRk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:25:47 2026 by rpki-client