$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft File: 1F969EE9B0838D22156118A888B81BF27B859BD5.mft (raw, json) Hash identifier: TwfJXbwZAoS9aDw2xTWOvOCYfSs0vEnmBdAMc29wLb4= Subject key identifier: 4A:77:6D:7A:A2:09:E2:BD:E2:BB:4F:2F:E7:03:8A:EF:41:16:6B:56 Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Certificate serial: 612D8DA4914475CC3DD245ECE48C3FFF91B1B60E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft Manifest number: 02BB Signing time: Wed 25 Mar 2026 20:52:08 +0000 Manifest this update: Wed 25 Mar 2026 20:47:08 +0000 Manifest next update: Sun 29 Mar 2026 02:13:08 +0000 Files and hashes: 1: 3230322e35372e32342e302f32342d3234203d3e20313430343639.roa (hash: s1oc4oY30dv4ZziJEtii0WqAjWHN4yIZ+Wcll5R6Lx0=) 2: 3230322e35372e32302e302f32342d3234203d3e20313431363733.roa (hash: 1S76/HrjUbBiAn5ZM34FLqmHD8p3H4UjIcnlsDjI5eo=) 3: 3230322e35372e32362e302f32332d3233203d3e20313430343639.roa (hash: i0qXLSeEhZMkdN2DfH6rqQw93/yoa+3wg07gaHoYz0k=) 4: 3230322e35372e32352e302f32342d3234203d3e20313430343639.roa (hash: N2Cye2k2ArU32sR4BIWlxYfXaoMWkhmX2inof4bL/qc=) 5: 3230322e35372e31392e302f32342d3234203d3e20313339393831.roa (hash: Sm/MByCUVOhu6ULq3sIzfHgpRtekl1ETdukmwPQMprw=) 6: 3230322e35372e32362e302f32342d3234203d3e20313430343639.roa (hash: pyK+jcOUykm+t8TqsiBiASQSX3weZBQz2lnXkKpEWw8=) 7: 3230322e35372e32302e302f32332d3233203d3e20313431363733.roa (hash: HB4BEaVD5xfGQGvt67YetoiSjWiGFie2TAF+weL5UPc=) 8: 3230322e35372e32372e302f32342d3234203d3e20313430343639.roa (hash: jfT+fFK9MuHkEFZ88hcVlJwwMYmz7o5P6pVJldda2zA=) 9: 3230322e35372e32312e302f32342d3234203d3e20313431363733.roa (hash: bCrGS2h+/zPAS+2DepWngEarE7NIIMpAdATexMqAfyQ=) 10: 1F969EE9B0838D22156118A888B81BF27B859BD5.crl (hash: degmlpAX82qWtN9FOQQH43QLxBe7j6irM9JgzVIWsl8=) 11: 3230322e35372e32342e302f32332d3233203d3e20313430343639.roa (hash: 0bz9arJVEpW8niw69al2HqlLatQbtnCd6cPuE1FtiQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:13:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:2d:8d:a4:91:44:75:cc:3d:d2:45:ec:e4:8c:3f:ff:91:b1:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5 Validity Not Before: Mar 25 20:47:08 2026 GMT Not After : Mar 29 02:13:08 2026 GMT Subject: CN=4A776D7AA209E2BDE2BB4F2FE7038AEF41166B56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:f4:a0:39:b1:a7:56:e5:f5:3e:f3:80:a9:65: 28:fc:29:c8:ad:5b:fc:05:f0:dc:b5:11:90:a7:88: 84:0b:c6:08:c0:40:1e:45:61:fa:b2:78:85:c8:e7: 81:f5:57:56:09:6f:de:3c:b5:a6:72:c3:e9:23:ed: a1:9d:14:8f:73:9f:0c:24:8a:f4:97:42:fd:18:b3: dd:cd:0c:cd:5b:bc:1f:a6:fb:f7:4f:5c:32:63:de: 28:5f:ab:96:de:da:13:03:ba:50:16:76:03:e5:8f: 96:ba:b8:c8:c2:3c:89:72:ef:23:4c:f4:e9:08:b5: 2b:3e:76:f5:72:ac:e1:e3:f3:e7:84:0f:52:e4:a0: a1:05:4e:93:d7:51:48:d9:25:7a:be:b4:41:c5:0c: 61:de:bf:e1:44:28:da:b7:a4:27:67:73:a9:f1:e4: a9:81:99:3d:1b:5e:63:14:e8:0f:3c:64:f2:37:26: 41:1a:38:f8:61:52:43:8d:01:02:62:fe:69:1a:2f: ea:ea:9d:39:61:bd:1b:31:69:08:2f:8d:8e:a1:54: ca:1f:31:1e:8c:95:c7:ba:a4:43:27:5b:9e:57:a4: 1e:16:f6:ac:9f:bc:10:12:11:a0:9c:89:a3:2c:1d: 69:73:37:d8:5c:38:50:4c:93:70:16:4e:94:60:f0: d7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:77:6D:7A:A2:09:E2:BD:E2:BB:4F:2F:E7:03:8A:EF:41:16:6B:56 X509v3 Authority Key Identifier: keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:52:0e:03:ce:03:bb:ba:ed:7b:ef:e8:d3:ec:e6:07:5a:29: a4:1a:f6:73:d2:cc:f8:fa:7d:1a:33:91:97:12:40:66:a5:c1: 1a:27:2b:4a:dd:c2:c5:5c:bf:f9:4a:5b:61:47:df:72:7b:c9: 84:6f:18:c9:4e:96:6f:df:eb:03:e2:ff:45:bb:df:30:46:5b: 4a:f7:96:80:ee:c6:d5:8f:3a:45:6e:8b:05:8b:79:4a:eb:9f: 74:a0:58:e4:e7:17:b7:89:33:6c:2c:cc:6a:56:73:a0:5d:81: d8:c4:8e:02:04:d8:9d:76:54:bb:0c:ab:4f:a8:91:81:d0:7f: ed:86:74:7a:ee:3b:a5:1e:bf:a0:2f:2f:ab:75:fc:0c:05:5b: df:fd:d1:c0:65:70:08:01:44:69:7b:f3:14:86:48:84:56:f3: 5f:b1:06:a1:32:08:e7:90:f6:7d:50:68:79:fb:5a:2b:81:90: ee:bd:62:7c:8c:12:46:3d:de:6b:70:13:5f:38:88:fb:98:33: 3f:ac:a6:d0:e2:cf:0d:c8:78:bf:0e:e9:2d:4d:8e:5f:2a:9f: c1:d1:9c:80:4c:03:54:67:86:c7:fc:fc:09:7d:41:75:b6:99: 73:e1:0e:62:4a:d6:d1:f7:2b:10:1e:2c:00:6a:ac:15:4a:80: 36:a8:f8:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYS2NpJFEdcw90kXs5Iw//5Gxtg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3 Qjg1OUJENTAeFw0yNjAzMjUyMDQ3MDhaFw0yNjAzMjkwMjEzMDhaMDMxMTAvBgNV BAMTKDRBNzc2RDdBQTIwOUUyQkRFMkJCNEYyRkU3MDM4QUVGNDExNjZCNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC19KA5sadW5fU+84CpZSj8Kcit W/wF8Ny1EZCniIQLxgjAQB5FYfqyeIXI54H1V1YJb948taZyw+kj7aGdFI9znwwk ivSXQv0Ys93NDM1bvB+m+/dPXDJj3ihfq5be2hMDulAWdgPlj5a6uMjCPIly7yNM 9OkItSs+dvVyrOHj8+eED1LkoKEFTpPXUUjZJXq+tEHFDGHev+FEKNq3pCdnc6nx 5KmBmT0bXmMU6A88ZPI3JkEaOPhhUkONAQJi/mkaL+rqnTlhvRsxaQgvjY6hVMof MR6Mlce6pEMnW55XpB4W9qyfvBASEaCciaMsHWlzN9hcOFBMk3AWTpRg8NcjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSndteqIJ4r3iu08v5wOK70EWa1YwHwYDVR0j BBgwFoAUH5ae6bCDjSIVYRioiLgb8nuFm9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZDNmMDk1Yi03MTMwLTQxMjItYWYyNS03ZDJlN2ExMWIxYjEvMC8xRjk2OUVFOUIw ODM4RDIyMTU2MTE4QTg4OEI4MUJGMjdCODU5QkQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFCRjI3Qjg1 OUJENS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGQzZjA5NWItNzEzMC00MTIyLWFm MjUtN2QyZTdhMTFiMWIxLzAvMUY5NjlFRTlCMDgzOEQyMjE1NjExOEE4ODhCODFC RjI3Qjg1OUJENS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBSDgPOA7u67Xvv6NPs5gdaKaQa9nPSzPj6 fRozkZcSQGalwRonK0rdwsVcv/lKW2FH33J7yYRvGMlOlm/f6wPi/0W73zBGW0r3 loDuxtWPOkVuiwWLeUrrn3SgWOTnF7eJM2wszGpWc6BdgdjEjgIE2J12VLsMq0+o kYHQf+2GdHruO6Uev6AvL6t1/AwFW9/90cBlcAgBRGl78xSGSIRW81+xBqEyCOeQ 9n1QaHn7WiuBkO69YnyMEkY93mtwE184iPuYMz+sptDizw3IeL8O6S1Njl8qn8HR nIBMA1Rnhsf8/Al9QXW2mXPhDmJK1tH3KxAeLABqrBVKgDao+I0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:12:59 2026 by rpki-client