$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: zicWyJJV0YTNJ9CS/2IDuTWr1eNQN0aapyVaU4gbd88= Subject key identifier: E7:16:DB:B1:12:0F:C4:E5:1B:A4:00:7F:CB:76:E6:FA:9B:68:23:94 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 2C151CF2C24DD99398C707BE49A2684711043E65 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 0227 Signing time: Tue 24 Mar 2026 16:22:13 +0000 Manifest this update: Tue 24 Mar 2026 16:17:13 +0000 Manifest next update: Fri 27 Mar 2026 17:26:13 +0000 Files and hashes: 1: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) 2: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: CPwZie/D4MoDPhOqKp+Y6rB8MKAK60pQN+XyVImV9Us=) 3: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) 4: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:26:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:15:1c:f2:c2:4d:d9:93:98:c7:07:be:49:a2:68:47:11:04:3e:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Mar 24 16:17:13 2026 GMT Not After : Mar 27 17:26:13 2026 GMT Subject: CN=E716DBB1120FC4E51BA4007FCB76E6FA9B682394 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:a6:18:5e:56:f4:0e:e2:03:dd:b0:ed:d3:78: 5f:ee:9b:40:12:4a:a2:ba:ec:dd:a8:2d:69:b3:92: 00:5e:0f:cd:90:5c:c6:47:23:73:f5:42:23:8e:4a: 2b:38:32:11:20:6c:eb:05:b3:a5:25:8c:f2:90:1c: 19:b2:83:56:85:ac:95:a4:d2:a6:71:86:17:69:49: ce:83:d1:95:19:0b:53:bc:6b:dc:48:da:5a:57:1a: 3a:43:9d:c5:53:c9:65:28:35:cc:c3:e5:d6:f6:0b: 0f:86:18:be:4b:c3:96:08:48:5b:5b:db:17:89:d5: 03:ce:83:b4:11:45:65:71:22:2b:43:e6:c2:1d:a7: c7:e3:bf:46:ce:e8:7d:cd:34:8c:d7:08:03:38:fb: 20:3e:89:3d:8f:5d:2b:ea:2d:0b:9a:c9:28:60:7c: cb:32:9c:63:22:fb:9f:3b:5e:8a:f0:37:fd:5e:38: 08:bb:9e:c2:59:a9:2c:0d:45:cc:d9:b7:74:73:e9: dc:b7:d5:5c:ba:d1:a1:1e:41:ca:b0:db:02:16:8f: 7e:6a:98:6d:f0:76:ba:26:72:3d:aa:e3:67:b1:07: 3b:c0:9a:47:df:c6:0f:eb:11:30:f5:ca:9e:dd:5f: 9e:bd:24:07:7f:72:95:e6:60:fd:df:52:d0:df:6e: 1f:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:16:DB:B1:12:0F:C4:E5:1B:A4:00:7F:CB:76:E6:FA:9B:68:23:94 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:69:aa:80:b3:e7:40:e4:6c:9e:e1:19:36:0c:85:f1:66:a4: 6b:6e:a4:ac:b1:17:3b:5f:e4:07:a7:27:ca:dd:a9:e7:15:7a: 54:ce:a7:dc:0e:c3:ff:35:de:13:ff:ef:9b:70:a5:78:73:ce: cd:f8:ae:49:4e:19:bc:40:0b:4c:d4:bb:07:c8:3d:38:30:67: 4b:cb:17:3a:5d:0f:bf:39:59:0b:e2:d5:2b:89:bd:ba:4e:ec: 68:f2:1c:c2:cd:ff:cc:9a:aa:7a:b1:a0:2f:d0:2f:69:4f:26: c9:24:40:5e:08:ef:9a:0e:b8:04:f9:ae:48:37:81:20:8b:c0: 0d:5f:b6:a6:d8:22:6c:e3:e2:72:75:b8:35:a0:63:c1:5f:5a: 2d:85:b0:c3:95:30:b1:01:77:72:ed:33:a2:89:8a:9d:1f:51: 2a:9e:81:ba:9f:c9:15:24:a5:a3:88:8f:07:aa:40:bf:46:25: 90:36:a4:b6:30:e2:c4:1c:18:f1:35:6a:52:1e:30:48:35:58: 8a:e4:61:0d:fb:2a:26:b7:e5:86:ca:74:19:6f:7c:11:b2:c6: e0:81:97:7a:e3:42:d7:20:aa:33:35:8a:2e:30:ab:a3:d8:f7: a7:91:4b:80:15:db:b7:b8:9c:cc:4d:6c:8b:85:1e:34:9a:2c: d7:2a:23:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULBUc8sJN2ZOYxwe+SaJoRxEEPmUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNjAzMjQxNjE3MTNaFw0yNjAzMjcxNzI2MTNaMDMxMTAvBgNV BAMTKEU3MTZEQkIxMTIwRkM0RTUxQkE0MDA3RkNCNzZFNkZBOUI2ODIzOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2phheVvQO4gPdsO3TeF/um0AS SqK67N2oLWmzkgBeD82QXMZHI3P1QiOOSis4MhEgbOsFs6UljPKQHBmyg1aFrJWk 0qZxhhdpSc6D0ZUZC1O8a9xI2lpXGjpDncVTyWUoNczD5db2Cw+GGL5Lw5YISFtb 2xeJ1QPOg7QRRWVxIitD5sIdp8fjv0bO6H3NNIzXCAM4+yA+iT2PXSvqLQuayShg fMsynGMi+587XorwN/1eOAi7nsJZqSwNRczZt3Rz6dy31Vy60aEeQcqw2wIWj35q mG3wdromcj2q42exBzvAmkffxg/rETD1yp7dX569JAd/cpXmYP3fUtDfbh+1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5xbbsRIPxOUbpAB/y3bm+ptoI5QwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlpqoCz50DkbJ7hGTYMhfFmpGtupKyxFztf 5AenJ8rdqecVelTOp9wOw/813hP/75twpXhzzs34rklOGbxAC0zUuwfIPTgwZ0vL FzpdD785WQvi1SuJvbpO7GjyHMLN/8yaqnqxoC/QL2lPJskkQF4I75oOuAT5rkg3 gSCLwA1ftqbYImzj4nJ1uDWgY8FfWi2FsMOVMLEBd3LtM6KJip0fUSqegbqfyRUk paOIjweqQL9GJZA2pLYw4sQcGPE1alIeMEg1WIrkYQ37Kia35YbKdBlvfBGyxuCB l3rjQtcgqjM1ii4wq6PY96eRS4AV27e4nMxNbIuFHjSaLNcqI3M= -----END CERTIFICATE-----Generated at Thu Mar 26 13:40:53 2026 by rpki-client