$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: NAzfoxtrmiAULlCLa2nmWXm32/HEuhVSQJGTzhJnAr4= Subject key identifier: F6:09:DE:BF:06:84:92:0C:59:F4:FD:8B:4D:07:67:73:5A:21:84:55 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 54ED9BE8D2DC02155C6A70DE82941AEBBC73C26B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 012D Signing time: Wed 25 Mar 2026 19:50:04 +0000 Manifest this update: Wed 25 Mar 2026 19:45:04 +0000 Manifest next update: Sat 28 Mar 2026 21:10:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: 9NTBw9ppG5dqiZKinN9KzUB0iLm9stkbWJQ8+b+2ZNs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:10:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:ed:9b:e8:d2:dc:02:15:5c:6a:70:de:82:94:1a:eb:bc:73:c2:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Mar 25 19:45:04 2026 GMT Not After : Mar 28 21:10:04 2026 GMT Subject: CN=F609DEBF0684920C59F4FD8B4D0767735A218455 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d4:93:3c:d3:9b:c0:94:0a:35:6f:de:3f:90: 4d:51:d1:bb:dc:a5:e5:8d:98:3d:8c:85:db:fb:66: 85:43:da:3c:25:45:d5:4e:f0:5a:55:73:25:d8:a8: 3a:9c:78:1c:72:2a:3c:ee:dd:63:c1:29:c1:87:ad: 88:97:f2:d5:09:d6:9c:d7:19:74:91:b7:f2:a6:d5: d4:b9:19:d7:01:6b:4a:ee:2f:c9:f1:ab:07:28:1a: 2f:bb:b9:56:ac:6b:73:4e:0a:fd:43:35:cb:83:1b: e7:12:84:be:e3:a6:38:50:a6:26:27:e9:1e:d3:33: 45:1a:7d:9d:9b:b7:38:ce:d1:9a:fc:75:d0:50:2c: f4:40:e3:89:2a:98:0b:a1:18:3b:bf:2f:12:67:26: 98:61:70:56:ba:9d:7f:24:9e:97:bf:51:ec:a6:e9: a8:59:fa:ff:e2:23:55:b9:74:d2:d0:0f:98:be:c8: bd:a2:d5:34:39:97:60:21:f4:71:0a:5b:19:b7:44: 29:f7:2d:75:28:4e:1e:1f:57:f4:12:6d:f1:14:23: 36:cb:82:8b:8c:6c:9d:1d:f8:aa:6f:22:0c:9b:81: ca:e4:ab:38:16:bd:07:fb:ab:7b:b2:4d:15:e0:3c: 9e:82:56:b0:34:63:8b:09:06:b6:03:c6:b8:a9:66: c8:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:09:DE:BF:06:84:92:0C:59:F4:FD:8B:4D:07:67:73:5A:21:84:55 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:08:64:22:a5:90:6f:bc:54:be:c7:5d:3b:a7:6d:0c:dd:fb: fe:f6:54:1f:9c:86:b7:f3:87:33:4e:9a:37:d7:e5:f2:52:97: c9:28:c3:3a:5a:4f:4e:eb:d4:46:a2:1c:36:7a:e5:7a:9c:84: 7f:6d:68:ae:2f:f5:35:22:db:96:83:92:0c:bb:f9:ae:fc:94: 1b:93:2e:07:7a:a0:01:25:a1:5b:cc:09:b2:e6:7f:b2:a5:02: 0b:d4:77:18:79:f9:63:68:33:5e:dc:65:03:5c:3b:0c:f3:c5: a9:a4:61:28:6a:ab:40:3c:91:c7:5d:69:b2:14:a8:27:b1:0f: fc:2f:03:a4:96:a3:cd:cd:0f:06:a1:80:eb:c9:d7:a2:4c:a5: 43:19:b3:ec:6a:b8:48:47:8d:58:89:37:65:db:f6:04:26:5d: 63:af:37:ee:7c:2d:e1:6e:93:7e:00:7f:78:ec:8c:a3:d9:57: 20:8e:4e:6e:a7:27:6e:27:19:b4:b0:06:a9:98:02:36:98:99: a4:d1:a5:c6:16:6b:d1:cb:a3:f9:9d:44:46:aa:50:d9:cd:74: 3c:67:0e:f5:dd:ca:18:62:1b:8c:bc:b3:7a:94:c1:3c:0c:79: 15:75:d2:c5:db:46:40:54:8e:59:03:16:c2:be:e0:c0:d7:c8: 34:46:20:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVO2b6NLcAhVcanDegpQa67xzwmswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNjAzMjUxOTQ1MDRaFw0yNjAzMjgyMTEwMDRaMDMxMTAvBgNV BAMTKEY2MDlERUJGMDY4NDkyMEM1OUY0RkQ4QjREMDc2NzczNUEyMTg0NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1JM805vAlAo1b94/kE1R0bvc peWNmD2Mhdv7ZoVD2jwlRdVO8FpVcyXYqDqceBxyKjzu3WPBKcGHrYiX8tUJ1pzX GXSRt/Km1dS5GdcBa0ruL8nxqwcoGi+7uVasa3NOCv1DNcuDG+cShL7jpjhQpiYn 6R7TM0UafZ2btzjO0Zr8ddBQLPRA44kqmAuhGDu/LxJnJphhcFa6nX8knpe/Ueym 6ahZ+v/iI1W5dNLQD5i+yL2i1TQ5l2Ah9HEKWxm3RCn3LXUoTh4fV/QSbfEUIzbL gouMbJ0d+KpvIgybgcrkqzgWvQf7q3uyTRXgPJ6CVrA0Y4sJBrYDxripZsg3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9gnevwaEkgxZ9P2LTQdnc1ohhFUwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUIZCKlkG+8VL7HXTunbQzd+/72VB+chrfz hzNOmjfX5fJSl8kowzpaT07r1EaiHDZ65XqchH9taK4v9TUi25aDkgy7+a78lBuT Lgd6oAEloVvMCbLmf7KlAgvUdxh5+WNoM17cZQNcOwzzxamkYShqq0A8kcddabIU qCexD/wvA6SWo83NDwahgOvJ16JMpUMZs+xquEhHjViJN2Xb9gQmXWOvN+58LeFu k34Af3jsjKPZVyCOTm6nJ24nGbSwBqmYAjaYmaTRpcYWa9HLo/mdREaqUNnNdDxn DvXdyhhiG4y8s3qUwTwMeRV10sXbRkBUjlkDFsK+4MDXyDRGIJ8= -----END CERTIFICATE-----Generated at Thu Mar 26 14:24:35 2026 by rpki-client