$ rpki-client -vvf repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft File: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft (raw, json) Hash identifier: h0rcnDkGEkEtRaXcABoDtMJ8EnXEa/K3nOwoCruRIis= Subject key identifier: 95:BD:8D:72:B8:02:B4:4E:C8:50:2C:D4:FB:3F:1F:E6:8C:FF:65:E6 Authority key identifier: 1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE Certificate issuer: /CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Certificate serial: 1E6918C9FF5BB4D5E3FB0C04A3C6A0970FE94D50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft Manifest number: 0281 Signing time: Wed 25 Mar 2026 06:11:42 +0000 Manifest this update: Wed 25 Mar 2026 06:06:42 +0000 Manifest next update: Sat 28 Mar 2026 16:45:42 +0000 Files and hashes: 1: 1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl (hash: tMKh64oDRS40sB5J10juqH6KgBxoGWE69uxoT4svCO4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:45:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:69:18:c9:ff:5b:b4:d5:e3:fb:0c:04:a3:c6:a0:97:0f:e9:4d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD57D4C4226960CE02B7A6E42D882FCB7E460EE Validity Not Before: Mar 25 06:06:42 2026 GMT Not After : Mar 28 16:45:42 2026 GMT Subject: CN=95BD8D72B802B44EC8502CD4FB3F1FE68CFF65E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c4:b8:cc:f7:cf:4b:6e:5d:cc:e8:c6:51:fc: 5c:6e:68:14:6d:38:78:f2:f3:16:e2:68:15:ee:7b: bf:c3:c0:8e:f0:5d:3b:7f:53:f8:f3:07:75:a5:d9: 37:4d:46:17:44:a5:52:13:2f:44:04:08:96:fb:db: 45:bf:5b:40:41:4d:78:d2:f0:01:d6:36:59:13:f5: ac:d1:06:aa:a6:0f:48:86:f4:53:d6:2e:60:5c:c1: 43:ce:f3:ac:ca:b8:30:33:13:34:35:e1:dd:64:c8: b7:54:8d:e5:df:92:a7:9d:39:db:f2:19:c3:9d:92: 86:a0:c8:5a:9e:80:4b:ff:de:e4:4b:8d:69:04:23: 12:dd:e4:fe:38:29:1f:5e:58:04:e1:8c:0a:65:a9: 8e:4b:19:30:49:30:b7:3f:88:1b:e1:10:83:3c:ab: 91:a3:16:1c:06:51:ae:6c:85:b5:07:ff:18:c8:6a: fb:bc:68:43:6f:89:b6:eb:e4:b7:c2:69:b9:dd:7b: 6f:24:b2:bf:c6:37:89:71:f8:c8:00:0c:bb:07:aa: 38:55:63:39:45:ca:8d:01:a2:9d:12:e8:05:38:54: 8e:08:db:69:d6:73:7a:65:f2:dd:23:cf:95:83:22: c2:fb:e6:29:a6:42:b2:39:b7:71:1d:36:39:57:58: fd:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:BD:8D:72:B8:02:B4:4E:C8:50:2C:D4:FB:3F:1F:E6:8C:FF:65:E6 X509v3 Authority Key Identifier: keyid:1F:D5:7D:4C:42:26:96:0C:E0:2B:7A:6E:42:D8:82:FC:B7:E4:60:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1134bb48-8a65-428b-94f1-995aed72ecb5/0/1FD57D4C4226960CE02B7A6E42D882FCB7E460EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:69:6a:de:c0:b1:d6:a6:c3:70:a4:5b:04:7e:9d:91:72:4b: 4b:5d:f9:31:a0:49:f5:25:43:f9:11:08:3b:d4:ea:0e:20:29: d4:dc:3e:e9:3d:4d:90:3f:fc:3a:76:05:43:15:6e:47:aa:79: 86:7a:88:c5:2f:d4:d4:6b:dc:c8:24:c8:f0:a5:97:2c:d8:7e: 59:9f:07:0f:ce:17:1a:73:99:ed:01:f4:e7:a2:ad:f1:cb:90: a9:d0:53:e3:08:41:52:63:60:f7:df:ee:19:73:38:d7:32:da: 4b:64:cc:36:0d:ad:9a:e8:a1:b9:f1:5b:50:ab:10:bd:46:dd: 94:c7:12:c9:3d:51:cb:a4:44:bd:c8:d5:8c:46:85:7c:67:7b: 5f:4f:95:a8:ba:26:e6:3a:5b:2b:84:a7:e4:31:15:4c:f0:54: 98:05:27:b3:a5:a9:20:83:8e:0c:69:af:b5:d1:86:c0:d1:52: 95:c2:3a:d3:5e:e3:36:49:46:77:4d:fd:30:70:17:1d:1a:0f: a3:49:2f:ba:02:58:45:28:24:69:58:3b:c5:31:19:27:e8:7b: 1b:cf:a5:a4:82:b3:79:00:e1:e8:d6:04:a7:e7:b0:55:f6:9c: 67:c8:53:50:8b:d2:2e:9e:19:09:0b:e6:00:85:a2:dc:76:48: 8c:63:be:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHmkYyf9btNXj+wwEo8aglw/pTVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNC N0U0NjBFRTAeFw0yNjAzMjUwNjA2NDJaFw0yNjAzMjgxNjQ1NDJaMDMxMTAvBgNV BAMTKDk1QkQ4RDcyQjgwMkI0NEVDODUwMkNENEZCM0YxRkU2OENGRjY1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xLjM989Lbl3M6MZR/FxuaBRt OHjy8xbiaBXue7/DwI7wXTt/U/jzB3Wl2TdNRhdEpVITL0QECJb720W/W0BBTXjS 8AHWNlkT9azRBqqmD0iG9FPWLmBcwUPO86zKuDAzEzQ14d1kyLdUjeXfkqedOdvy GcOdkoagyFqegEv/3uRLjWkEIxLd5P44KR9eWAThjAplqY5LGTBJMLc/iBvhEIM8 q5GjFhwGUa5shbUH/xjIavu8aENvibbr5LfCabnde28ksr/GN4lx+MgADLsHqjhV YzlFyo0Bop0S6AU4VI4I22nWc3pl8t0jz5WDIsL75immQrI5t3EdNjlXWP11AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlb2NcrgCtE7IUCzU+z8f5oz/ZeYwHwYDVR0j BBgwFoAUH9V9TEImlgzgK3puQtiC/LfkYO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MTM0YmI0OC04YTY1LTQyOGItOTRmMS05OTVhZWQ3MmVjYjUvMC8xRkQ1N0Q0QzQy MjY5NjBDRTAyQjdBNkU0MkQ4ODJGQ0I3RTQ2MEVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgyRkNCN0U0 NjBFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTEzNGJiNDgtOGE2NS00MjhiLTk0 ZjEtOTk1YWVkNzJlY2I1LzAvMUZENTdENEM0MjI2OTYwQ0UwMkI3QTZFNDJEODgy RkNCN0U0NjBFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFlpat7Asdamw3CkWwR+nZFyS0td+TGgSfUl Q/kRCDvU6g4gKdTcPuk9TZA//Dp2BUMVbkeqeYZ6iMUv1NRr3MgkyPCllyzYflmf Bw/OFxpzme0B9OeirfHLkKnQU+MIQVJjYPff7hlzONcy2ktkzDYNrZroobnxW1Cr EL1G3ZTHEsk9UcukRL3I1YxGhXxne19Plai6JuY6WyuEp+QxFUzwVJgFJ7OlqSCD jgxpr7XRhsDRUpXCOtNe4zZJRndN/TBwFx0aD6NJL7oCWEUoJGlYO8UxGSfoexvP paSCs3kA4ejWBKfnsFX2nGfIU1CL0i6eGQkL5gCFotx2SIxjvro= -----END CERTIFICATE-----Generated at Thu Mar 26 14:37:44 2026 by rpki-client