$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft File: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft (raw, json) Hash identifier: Em/cC5YCxUjhvkWwDdy+mPUM6M3H6v+l1WCcir1WPnw= Subject key identifier: 85:BC:59:CD:9F:4F:60:69:3A:73:EB:10:11:48:6E:87:B7:2F:17:6B Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE Certificate issuer: /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Certificate serial: 6D15E2BB21820A844D7DB0728257B34FE55CBB4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 15:52:51 +0000 Manifest this update: Tue 24 Mar 2026 15:47:51 +0000 Manifest next update: Fri 27 Mar 2026 23:55:51 +0000 Files and hashes: 1: 1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl (hash: G/atd8aCxwuiholVJg2VW7fWOo5bLM+ZfG5cTLaavds=) 2: 3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (hash: ivixgTI+bD3oZFKOSl+IC3pWvOMcPxvLBq04R8ayQa4=) 3: 323430353a366134303a3a2f33322d3332203d3e20313339343235.roa (hash: sqlbIIr/3B92d510dnWRSBB/lQtkjQSBObhW88AnQqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:55:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:15:e2:bb:21:82:0a:84:4d:7d:b0:72:82:57:b3:4f:e5:5c:bb:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE Validity Not Before: Mar 24 15:47:51 2026 GMT Not After : Mar 27 23:55:51 2026 GMT Subject: CN=85BC59CD9F4F60693A73EB1011486E87B72F176B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d9:9d:e3:8b:ab:e9:2d:80:6a:f4:93:0b:10: 76:09:67:f5:23:8b:50:6a:96:dc:e0:a5:63:6c:88: e3:99:69:89:30:89:7b:c8:08:09:ca:66:2b:b5:a5: 0c:7e:94:0f:82:81:82:24:2c:05:a1:93:36:f9:b0: 0d:08:ab:cb:5a:fd:52:59:d7:8e:aa:96:b4:f8:05: 1f:c4:0d:27:3d:f7:bd:01:d3:db:e6:65:3a:48:db: b3:05:76:21:cb:d0:94:25:25:f3:bd:47:b7:61:ff: af:e0:9c:76:4d:b8:81:c8:34:d7:7c:49:64:87:42: e4:99:89:7e:58:60:b2:10:a6:a1:3c:93:b7:a3:ae: 02:fa:a5:21:c6:74:a9:b0:a2:7a:5e:64:bc:a8:1a: 63:f7:95:bc:a2:65:db:b4:5c:fe:e7:f4:f1:ba:70: e5:ea:fa:e4:b7:b7:ae:9c:5c:72:ac:3d:89:2d:9f: d6:78:d1:9c:b3:5d:9d:d7:11:d5:8c:0d:ba:0a:bb: 66:8f:04:dd:90:18:64:ac:02:12:b5:cc:41:a5:09: e1:b3:45:3e:89:65:63:87:a1:0d:d6:14:91:38:a0: 11:25:d7:dd:68:8b:09:b8:4f:f6:20:61:a0:77:a5: 79:07:c5:9c:ce:83:aa:4f:c2:40:6b:15:33:b3:a3: e2:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:BC:59:CD:9F:4F:60:69:3A:73:EB:10:11:48:6E:87:B7:2F:17:6B X509v3 Authority Key Identifier: keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d3:24:d8:b4:c6:ee:f1:09:3f:94:d2:6e:ec:8b:14:f1:8b: be:c0:d1:c4:ca:a0:8b:5b:b0:9a:d3:36:9c:dc:28:07:ba:14: 44:11:72:c1:6a:8b:e7:30:5f:7d:97:b1:29:e5:57:bb:86:af: 85:9e:d6:a2:65:ec:34:e4:54:c3:14:ed:8e:18:4d:42:e7:6c: 38:c6:72:59:6d:5b:57:db:d7:ff:38:4c:4f:54:16:5d:94:9e: 91:d8:c6:23:03:6b:ef:21:81:98:a7:85:bd:07:37:1d:94:a4: f4:d8:90:ba:31:3e:04:6c:ca:4e:f3:38:b0:05:7a:61:97:63: 7f:7f:87:f3:a6:3f:d0:67:25:a6:62:c0:ca:6b:14:a5:90:22: 4f:36:e0:d6:63:66:5a:85:4e:f7:9c:e0:1a:2d:23:a3:18:5a: e7:9c:ef:c1:16:37:46:d9:d1:68:b4:f2:ac:cd:15:2d:ae:81: 88:91:d8:d5:2b:5f:13:d1:30:12:42:ac:ea:ac:31:ad:b4:54: 35:39:e2:7c:3f:4a:e1:52:75:3c:87:79:d1:50:2c:b1:31:79: de:d1:c8:25:49:87:6b:6c:23:ef:b1:24:2d:65:4b:53:ca:13: 56:e7:12:da:25:3a:26:55:e5:53:a4:db:54:87:57:7e:eb:f7: 64:69:b5:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRXiuyGCCoRNfbByglezT+Vcu08wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG NDRDNzJBRTAeFw0yNjAzMjQxNTQ3NTFaFw0yNjAzMjcyMzU1NTFaMDMxMTAvBgNV BAMTKDg1QkM1OUNEOUY0RjYwNjkzQTczRUIxMDExNDg2RTg3QjcyRjE3NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz2Z3ji6vpLYBq9JMLEHYJZ/Uj i1BqltzgpWNsiOOZaYkwiXvICAnKZiu1pQx+lA+CgYIkLAWhkzb5sA0Iq8ta/VJZ 146qlrT4BR/EDSc9970B09vmZTpI27MFdiHL0JQlJfO9R7dh/6/gnHZNuIHINNd8 SWSHQuSZiX5YYLIQpqE8k7ejrgL6pSHGdKmwonpeZLyoGmP3lbyiZdu0XP7n9PG6 cOXq+uS3t66cXHKsPYktn9Z40ZyzXZ3XEdWMDboKu2aPBN2QGGSsAhK1zEGlCeGz RT6JZWOHoQ3WFJE4oBEl191oiwm4T/YgYaB3pXkHxZzOg6pPwkBrFTOzo+I3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhbxZzZ9PYGk6c+sQEUhuh7cvF2swHwYDVR0j BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD NzJBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjZlYWQyZjUtOGI2NS00ODI5LTg4 NGItZDdjMDZkZDBmODNhLzAvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVB NkRGNDRDNzJBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXTJNi0xu7xCT+U0m7sixTxi77A0cTKoItb sJrTNpzcKAe6FEQRcsFqi+cwX32XsSnlV7uGr4We1qJl7DTkVMMU7Y4YTULnbDjG clltW1fb1/84TE9UFl2UnpHYxiMDa+8hgZinhb0HNx2UpPTYkLoxPgRsyk7zOLAF emGXY39/h/OmP9BnJaZiwMprFKWQIk824NZjZlqFTvec4BotI6MYWuec78EWN0bZ 0Wi08qzNFS2ugYiR2NUrXxPRMBJCrOqsMa20VDU54nw/SuFSdTyHedFQLLExed7R yCVJh2tsI++xJC1lS1PKE1bnEtolOiZV5VOk21SHV37r92RptRI= -----END CERTIFICATE-----Generated at Thu Mar 26 11:17:23 2026 by rpki-client