$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: ogKUD4dQKGUR2tdDJ4ZI/HMrPZJzyACpQS8D7ePBfGg= Subject key identifier: 34:24:1D:EC:25:F0:85:9D:DA:1F:7F:F7:CF:5A:CE:16:A1:E6:20:0C Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 5F0ED204993241BFF9BB1238427925148468268D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: EC Signing time: Wed 25 Mar 2026 23:22:43 +0000 Manifest this update: Wed 25 Mar 2026 23:17:43 +0000 Manifest next update: Sun 29 Mar 2026 04:13:43 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: Ki6Ey12rOYEQzvKNaHRdbHXtK1BXI8VSkvX14eBPetk=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:13:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:0e:d2:04:99:32:41:bf:f9:bb:12:38:42:79:25:14:84:68:26:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Mar 25 23:17:43 2026 GMT Not After : Mar 29 04:13:43 2026 GMT Subject: CN=34241DEC25F0859DDA1F7FF7CF5ACE16A1E6200C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:95:ca:34:55:27:87:9c:54:29:95:e9:66:7e: 05:9e:0b:60:3e:ff:08:f6:06:70:4f:ca:23:17:84: ef:6d:f2:ee:4d:85:00:ea:dc:19:23:15:a1:ef:9a: 98:60:3d:c0:48:42:07:2e:b5:a8:df:eb:60:30:d8: 69:aa:58:51:76:80:e7:2b:66:b3:56:97:fb:83:27: 4f:6d:09:4e:9b:cc:ca:15:38:67:d7:e8:21:32:c8: d6:6d:b1:64:c1:6e:57:18:b7:a5:22:df:77:95:cd: 3c:66:bc:d4:7f:58:7e:ac:97:1e:75:7c:85:1c:85: 72:2c:a3:d4:3f:19:3a:3f:2e:39:05:6e:df:f8:39: 7f:88:4a:3f:65:07:f0:a6:43:1f:77:4d:8f:e0:8b: 9b:6d:b6:77:55:e4:c7:8b:01:5a:31:52:f4:2d:07: 91:1a:6e:13:36:af:87:36:fd:95:35:c7:52:75:c9: cd:1c:8f:77:f8:a8:d7:a4:7b:d6:ca:fc:96:d8:0a: 4c:c0:43:37:5a:9a:90:a3:d9:c1:dd:1d:0b:81:da: 3e:63:ed:93:1a:4c:ff:eb:06:46:2d:e7:e3:b8:2c: b8:53:e5:19:6b:98:31:2c:d5:40:9c:c3:0c:ee:1e: a6:43:f5:85:58:d4:41:73:4f:85:36:50:30:fb:73: dc:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:24:1D:EC:25:F0:85:9D:DA:1F:7F:F7:CF:5A:CE:16:A1:E6:20:0C X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:45:b0:7e:33:73:09:25:32:7a:84:6e:e8:af:e6:83:1b:49: cd:7f:f6:8d:c4:b2:ce:1f:88:bd:44:29:15:36:7d:36:8b:26: 5f:f4:2e:4c:f1:64:34:cf:ec:4d:75:0b:52:03:4c:d3:5a:71: 84:fb:d7:bd:ca:70:75:4e:55:ea:46:0a:3c:8d:15:40:b0:51: 0e:16:95:99:b7:71:d6:6c:a6:84:6d:84:31:a5:47:27:aa:c2: bb:5f:8c:fa:48:34:49:37:e5:d7:4a:8e:ba:0e:27:2b:bd:b7: 46:d8:f0:76:f0:e9:97:61:55:22:23:87:f8:ed:c5:dd:6c:f9: 62:f0:aa:f9:43:7a:1d:95:1d:c6:76:af:47:99:66:2c:f1:b8: d2:c1:02:a5:d6:4f:9f:29:88:24:06:0c:01:82:e2:c8:1e:62: 7c:f3:5c:e5:88:c7:2b:b2:e1:c2:5e:7d:e8:95:e2:db:68:f6: ed:09:c9:c8:11:9d:90:b0:16:17:9d:7b:47:b4:e5:58:a1:b2: 02:aa:fe:f8:8b:8a:c6:94:3a:d9:a4:73:7a:73:e8:fa:d9:fa: 5d:cb:e8:28:45:af:36:04:bc:6d:e5:16:41:df:d5:2b:9c:37: b4:a6:be:6b:ca:45:bf:23:29:e7:8e:18:8c:b6:f6:89:74:f0: a0:3d:98:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXw7SBJkyQb/5uxI4QnklFIRoJo0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNjAzMjUyMzE3NDNaFw0yNjAzMjkwNDEzNDNaMDMxMTAvBgNV BAMTKDM0MjQxREVDMjVGMDg1OUREQTFGN0ZGN0NGNUFDRTE2QTFFNjIwMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCylco0VSeHnFQplelmfgWeC2A+ /wj2BnBPyiMXhO9t8u5NhQDq3BkjFaHvmphgPcBIQgcutajf62Aw2GmqWFF2gOcr ZrNWl/uDJ09tCU6bzMoVOGfX6CEyyNZtsWTBblcYt6Ui33eVzTxmvNR/WH6slx51 fIUchXIso9Q/GTo/LjkFbt/4OX+ISj9lB/CmQx93TY/gi5tttndV5MeLAVoxUvQt B5EabhM2r4c2/ZU1x1J1yc0cj3f4qNeke9bK/JbYCkzAQzdampCj2cHdHQuB2j5j 7ZMaTP/rBkYt5+O4LLhT5RlrmDEs1UCcwwzuHqZD9YVY1EFzT4U2UDD7c9y7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNCQd7CXwhZ3aH3/3z1rOFqHmIAwwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKtFsH4zcwklMnqEbuiv5oMbSc1/9o3Ess4f iL1EKRU2fTaLJl/0LkzxZDTP7E11C1IDTNNacYT7173KcHVOVepGCjyNFUCwUQ4W lZm3cdZspoRthDGlRyeqwrtfjPpINEk35ddKjroOJyu9t0bY8Hbw6ZdhVSIjh/jt xd1s+WLwqvlDeh2VHcZ2r0eZZizxuNLBAqXWT58piCQGDAGC4sgeYnzzXOWIxyuy 4cJefeiV4tto9u0JycgRnZCwFhede0e05VihsgKq/viLisaUOtmkc3pz6PrZ+l3L 6ChFrzYEvG3lFkHf1SucN7SmvmvKRb8jKeeOGIy29ol08KA9mNY= -----END CERTIFICATE-----Generated at Thu Mar 26 12:59:54 2026 by rpki-client