$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: HZcO06RxxQvmHrSuZtra3Tvff5qcWh7kH07XilIxN/g= Subject key identifier: 69:89:53:C9:92:85:70:72:F2:6F:8C:B8:93:86:28:22:63:36:B6:C3 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 17EBB500E15421A88F4D4A986EC9234E9E24CBAB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0296 Signing time: Tue 24 Mar 2026 20:41:54 +0000 Manifest this update: Tue 24 Mar 2026 20:36:54 +0000 Manifest next update: Fri 27 Mar 2026 23:46:54 +0000 Files and hashes: 1: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=) 2: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: LnAu+VdfSAUhESGF/MvDhHHdLNWh+1VRKMrUr7sfVYE=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:46:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:eb:b5:00:e1:54:21:a8:8f:4d:4a:98:6e:c9:23:4e:9e:24:cb:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Mar 24 20:36:54 2026 GMT Not After : Mar 27 23:46:54 2026 GMT Subject: CN=698953C992857072F26F8CB8938628226336B6C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:86:44:fa:30:ae:76:2a:10:15:c4:1e:8a: 98:84:90:d9:d1:11:83:89:be:1e:06:e5:60:27:39: a0:b6:00:89:48:e3:9e:72:72:2a:ef:82:11:4e:3f: 1d:ef:91:31:45:df:30:3d:81:c0:18:bd:b7:99:22: 29:fb:af:03:1e:ee:63:e1:78:96:0c:9e:f9:f8:62: a8:5f:02:7f:5a:6b:c3:70:fe:9a:23:b6:63:df:b4: 98:19:90:25:1d:27:a5:37:5e:30:2c:89:03:1c:53: 52:b4:cd:e5:6c:e9:ae:49:f0:b5:a4:f6:4e:62:78: d3:45:64:dc:86:ab:b0:b1:f0:16:03:57:2d:76:49: c1:48:0d:97:88:23:2e:a6:df:74:61:ed:5d:7a:2a: cd:86:8d:6e:e9:fd:10:57:f3:e7:fb:82:af:d0:aa: 61:9b:65:8c:20:69:ef:31:ff:98:f1:0b:65:47:36: f5:f6:24:97:7b:c4:66:a2:be:ea:d9:f9:68:b9:e8: 69:ec:73:1d:85:01:c3:7f:e5:53:52:0f:8b:76:f0: cd:c0:54:73:c9:33:59:0e:6a:f0:85:1e:09:c3:5b: 5b:c5:30:93:60:54:ab:66:4e:58:e6:ce:4b:6f:94: d3:3a:ac:60:a9:a5:9e:96:81:9f:aa:d5:46:a0:33: 1f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:89:53:C9:92:85:70:72:F2:6F:8C:B8:93:86:28:22:63:36:B6:C3 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:ad:25:dc:3f:34:42:d4:ab:74:ea:1f:65:a1:41:a5:36:60: 16:7f:77:5d:8e:b7:cc:fa:bd:00:ee:8f:05:3a:9a:e0:cb:eb: 9c:86:ba:e9:14:30:1e:76:9c:b0:d0:4d:2f:35:cd:6c:5f:6e: 88:15:e0:09:24:d3:6c:82:3b:02:5d:46:21:af:17:03:83:cd: 68:c7:fd:10:15:ce:ae:d6:e4:c5:0c:8b:6f:38:a2:4d:ac:cc: 5d:3a:a3:a7:01:6f:fd:41:22:5d:77:7a:5d:7b:a9:ad:bd:5f: 46:9c:76:61:76:c5:72:da:20:cd:27:7d:1e:4f:82:23:c6:ad: 0c:d5:5a:bc:d7:48:30:7a:21:18:e7:f3:69:0e:fe:cc:dc:1b: 85:1a:3f:52:22:9f:45:42:b3:94:1b:51:b0:43:ea:69:ca:5e: 8f:6f:3d:eb:6f:3f:8f:03:38:72:e7:60:be:09:b0:26:4f:7a: d3:03:23:3f:de:40:aa:31:16:79:eb:a3:f5:e2:cf:7c:e8:56: c1:84:59:e9:ac:20:60:66:73:fc:b1:9f:ac:81:6e:89:a2:de: e5:bb:7e:e2:e5:fc:22:d6:5e:df:59:9a:c1:38:95:9a:bb:18: de:0b:55:07:af:78:30:24:fa:56:09:05:fd:2f:a6:f9:ad:8e: a1:75:08:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF+u1AOFUIaiPTUqYbskjTp4ky6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNjAzMjQyMDM2NTRaFw0yNjAzMjcyMzQ2NTRaMDMxMTAvBgNV BAMTKDY5ODk1M0M5OTI4NTcwNzJGMjZGOENCODkzODYyODIyNjMzNkI2QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEYZE+jCudioQFcQeipiEkNnR EYOJvh4G5WAnOaC2AIlI455ycirvghFOPx3vkTFF3zA9gcAYvbeZIin7rwMe7mPh eJYMnvn4YqhfAn9aa8Nw/pojtmPftJgZkCUdJ6U3XjAsiQMcU1K0zeVs6a5J8LWk 9k5ieNNFZNyGq7Cx8BYDVy12ScFIDZeIIy6m33Rh7V16Ks2GjW7p/RBX8+f7gq/Q qmGbZYwgae8x/5jxC2VHNvX2JJd7xGaivurZ+Wi56Gnscx2FAcN/5VNSD4t28M3A VHPJM1kOavCFHgnDW1vFMJNgVKtmTljmzktvlNM6rGCppZ6WgZ+q1UagMx9nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYlTyZKFcHLyb4y4k4YoImM2tsMwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAqtJdw/NELUq3TqH2WhQaU2YBZ/d12Ot8z6 vQDujwU6muDL65yGuukUMB52nLDQTS81zWxfbogV4Akk02yCOwJdRiGvFwODzWjH /RAVzq7W5MUMi284ok2szF06o6cBb/1BIl13el17qa29X0acdmF2xXLaIM0nfR5P giPGrQzVWrzXSDB6IRjn82kO/szcG4UaP1Iin0VCs5QbUbBD6mnKXo9vPetvP48D OHLnYL4JsCZPetMDIz/eQKoxFnnro/Xiz3zoVsGEWemsIGBmc/yxn6yBbomi3uW7 fuLl/CLWXt9ZmsE4lZq7GN4LVQeveDAk+lYJBf0vpvmtjqF1CBs= -----END CERTIFICATE-----Generated at Thu Mar 26 21:54:17 2026 by rpki-client