$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft File: 19D983F92968E71520E086B32ACAFEFB5BF04943.mft (raw, json) Hash identifier: iQmtISgJL8wlL+Di9FtUpyXC3+26MJy79PY5KrdBVHw= Subject key identifier: C4:B4:4D:43:29:F0:C1:D5:7C:61:D4:3C:DB:1B:DC:DB:BF:4E:0E:50 Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 Certificate issuer: /CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Certificate serial: 0C75A1598FBBAF54E25E4986C11F55DA9D01693F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 12:42:42 +0000 Manifest this update: Wed 25 Mar 2026 12:37:42 +0000 Manifest next update: Sat 28 Mar 2026 15:30:42 +0000 Files and hashes: 1: 3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (hash: 5e8rSnnuFx8UzgnzTqPOgNkN7iU6KGmkspkL1P/ryrM=) 2: 19D983F92968E71520E086B32ACAFEFB5BF04943.crl (hash: JHsHDzS6nfqWkNeLN4ygxcv8hd5wKl2izBuez0lHtoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:30:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:75:a1:59:8f:bb:af:54:e2:5e:49:86:c1:1f:55:da:9d:01:69:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943 Validity Not Before: Mar 25 12:37:42 2026 GMT Not After : Mar 28 15:30:42 2026 GMT Subject: CN=C4B44D4329F0C1D57C61D43CDB1BDCDBBF4E0E50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:6d:92:94:fc:b2:cb:16:8c:a2:88:a3:2b:16: b0:19:21:4b:13:47:6e:4f:12:b7:69:88:7e:27:0d: 15:ab:b7:24:53:1c:fa:9d:d0:18:b0:9a:a2:62:8c: f6:1f:a7:fa:ea:a0:4e:6d:39:db:0f:46:e1:c3:f7: d8:c2:f6:ef:8c:99:85:37:e4:dd:81:64:6e:81:69: 28:18:ce:a3:9d:5d:c3:23:90:60:0a:55:2b:a8:4b: e8:28:84:52:ac:03:c1:ef:de:0a:bf:5e:fa:70:fa: 13:ce:20:3b:87:b8:39:99:a8:8e:81:c9:77:7c:af: 3e:6d:2f:ec:46:e8:1f:c8:11:d5:4a:59:ee:b1:2a: 55:35:46:bf:45:b4:03:2c:ad:7d:96:69:ef:8a:a0: 59:81:5b:d2:22:0c:07:e0:fb:94:26:a6:7e:b3:c4: c5:ae:76:a8:5e:93:5b:88:e8:b1:1a:d4:9c:9d:6d: d2:14:8e:34:9e:94:fa:8c:3b:0c:0c:66:d9:f8:fd: dc:1e:4d:f2:e3:50:e8:37:ad:3f:e1:81:a6:d9:a3: 37:29:63:d4:35:d9:e2:33:f8:42:5e:a3:9a:74:2a: 94:f1:7a:49:55:7b:dd:6a:75:61:dc:92:9a:7c:82: f0:d9:f6:16:f7:f8:83:88:9e:31:60:a6:0f:56:bd: c9:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B4:4D:43:29:F0:C1:D5:7C:61:D4:3C:DB:1B:DC:DB:BF:4E:0E:50 X509v3 Authority Key Identifier: keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption eb:31:a2:25:3f:37:16:8f:dd:50:46:f6:05:6a:d0:1c:d5:5e: 0d:d2:06:3c:b6:ee:b9:cd:20:c6:4a:6d:69:97:1a:a3:30:7d: 0b:c5:60:49:75:ab:32:c4:8e:c5:34:1b:6e:59:8c:f3:b0:f5: aa:76:ab:8d:24:ef:9c:13:24:52:82:1a:14:c9:22:9d:a4:f0: a2:3e:60:8f:e6:86:05:27:21:20:b2:eb:36:39:2f:e3:4f:fd: 2f:e3:bf:2f:24:5d:cd:97:36:e2:da:43:ea:a6:17:2f:e6:9f: 0c:c9:4e:64:74:99:2f:d8:23:3d:61:46:82:3e:d8:a8:9c:e3: cd:37:f5:47:70:a8:9a:df:44:ca:4e:e2:5d:f2:2e:1b:65:52: 49:51:85:b2:f1:2e:e1:f5:e9:fe:a7:48:ad:9e:03:8f:73:99: a4:d9:a3:87:ba:71:6b:80:32:ea:f8:e5:41:f0:64:eb:08:7e: 45:2d:bd:70:b5:97:1c:64:07:a0:e8:51:0b:95:e4:3c:29:50: 16:ed:2d:39:fd:41:b7:1f:86:cd:3b:40:60:31:9d:c8:36:27: 96:c3:c0:d8:af:01:fc:b1:ef:d9:af:f1:46:ed:bd:0e:98:98: 4f:01:96:0e:27:67:39:f6:2f:0b:60:36:2f:7f:95:5c:ea:64: e9:bc:73:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDHWhWY+7r1TiXkmGwR9V2p0BaT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1 QkYwNDk0MzAeFw0yNjAzMjUxMjM3NDJaFw0yNjAzMjgxNTMwNDJaMDMxMTAvBgNV BAMTKEM0QjQ0RDQzMjlGMEMxRDU3QzYxRDQzQ0RCMUJEQ0RCQkY0RTBFNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgbZKU/LLLFoyiiKMrFrAZIUsT R25PErdpiH4nDRWrtyRTHPqd0BiwmqJijPYfp/rqoE5tOdsPRuHD99jC9u+MmYU3 5N2BZG6BaSgYzqOdXcMjkGAKVSuoS+gohFKsA8Hv3gq/Xvpw+hPOIDuHuDmZqI6B yXd8rz5tL+xG6B/IEdVKWe6xKlU1Rr9FtAMsrX2Wae+KoFmBW9IiDAfg+5Qmpn6z xMWudqhek1uI6LEa1JydbdIUjjSelPqMOwwMZtn4/dweTfLjUOg3rT/hgabZozcp Y9Q12eIz+EJeo5p0KpTxeklVe91qdWHckpp8gvDZ9hb3+IOInjFgpg9WvclBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxLRNQynwwdV8YdQ82xvc279ODlAwHwYDVR0j BBgwFoAUGdmD+Slo5xUg4IazKsr++1vwSUMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2IxZjEwOS1iOWZlLTQzMjMtODRlMy1iNjBiYjRkYzFlY2MvMC8xOUQ5ODNGOTI5 NjhFNzE1MjBFMDg2QjMyQUNBRkVGQjVCRjA0OTQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZFRkI1QkYw NDk0My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNiMWYxMDktYjlmZS00MzIzLTg0 ZTMtYjYwYmI0ZGMxZWNjLzAvMTlEOTgzRjkyOTY4RTcxNTIwRTA4NkIzMkFDQUZF RkI1QkYwNDk0My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOsxoiU/NxaP3VBG9gVq0BzVXg3SBjy27rnN IMZKbWmXGqMwfQvFYEl1qzLEjsU0G25ZjPOw9ap2q40k75wTJFKCGhTJIp2k8KI+ YI/mhgUnISCy6zY5L+NP/S/jvy8kXc2XNuLaQ+qmFy/mnwzJTmR0mS/YIz1hRoI+ 2Kic48039UdwqJrfRMpO4l3yLhtlUklRhbLxLuH16f6nSK2eA49zmaTZo4e6cWuA Mur45UHwZOsIfkUtvXC1lxxkB6DoUQuV5DwpUBbtLTn9Qbcfhs07QGAxncg2J5bD wNivAfyx79mv8UbtvQ6YmE8Blg4nZzn2LwtgNi9/lVzqZOm8c/w= -----END CERTIFICATE-----Generated at Thu Mar 26 11:40:09 2026 by rpki-client