$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: MBn8NvGJI2XN2FoCL9RlX82hmcSqrDTzg+QK3/shkmA= Subject key identifier: F7:C7:6C:40:94:79:94:00:D0:FB:A5:C0:B4:57:FA:92:99:C4:2D:87 Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 4142061DE96E58EE19A46C608239C9A289DDC33F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: DF Signing time: Thu 26 Mar 2026 10:41:22 +0000 Manifest this update: Thu 26 Mar 2026 10:36:22 +0000 Manifest next update: Sun 29 Mar 2026 16:21:22 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI=) 2: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: ULPKP+GhGcLYhXqzlH5Fn1beYonc+lWvr/5FoFbxfkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:42:06:1d:e9:6e:58:ee:19:a4:6c:60:82:39:c9:a2:89:dd:c3:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Mar 26 10:36:22 2026 GMT Not After : Mar 29 16:21:22 2026 GMT Subject: CN=F7C76C4094799400D0FBA5C0B457FA9299C42D87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:86:bc:92:87:fe:2c:02:b5:79:11:0a:83:0a: 71:47:95:44:aa:7f:55:ca:08:30:cb:13:10:54:e4: be:5a:92:c1:89:e8:e0:3c:d1:13:3c:a1:76:4a:2e: 76:d3:b8:26:90:69:4d:68:92:89:83:7c:e7:20:1d: db:82:be:21:04:14:b2:7b:32:70:6e:ff:b0:03:72: 2e:ad:ff:ca:27:76:70:c9:ba:4a:a6:7b:14:11:b4: 62:26:e7:f3:46:c3:f4:0e:1b:96:77:97:06:ad:b7: e3:29:74:24:35:48:6f:43:75:5a:20:9b:27:e6:26: 68:8e:f4:3b:5c:52:0b:99:da:6d:e7:92:92:84:3a: c0:a0:f1:b8:f5:18:3e:0f:52:f1:e6:41:8a:38:2b: 7f:44:a4:27:87:aa:62:22:85:4a:a4:a5:77:be:b2: 18:85:c3:ed:a3:0b:44:20:4b:5f:54:6e:38:b3:36: cb:df:e0:30:f5:8b:b1:20:96:a6:1c:d3:67:c9:fd: ac:32:cd:f1:87:2e:d8:c4:ae:70:8b:65:06:8a:71: b3:59:bf:45:78:be:54:5b:01:4d:ad:0f:15:68:bd: 38:c8:06:49:e6:50:7c:e5:28:93:dd:00:ef:45:87: a0:1f:19:e1:75:63:1a:18:03:53:c9:25:5c:27:36: f6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:C7:6C:40:94:79:94:00:D0:FB:A5:C0:B4:57:FA:92:99:C4:2D:87 X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:7e:96:30:80:a8:de:cf:c8:11:59:90:f8:1a:00:72:e2:31: a3:c8:56:c5:03:96:37:23:75:fb:42:eb:47:e9:bc:67:e8:e8: 4e:a9:0f:8e:99:58:f4:50:55:50:94:64:ce:f2:70:99:75:77: 92:fd:28:ca:b0:c2:61:b1:bd:e1:e3:7f:96:b5:4c:6e:8e:e4: 6f:43:26:a8:43:5a:cc:c9:da:a9:fc:9f:13:90:40:83:95:9e: 23:e8:d6:9d:e1:82:dd:9e:07:28:47:02:58:d3:a4:0f:0c:b7: 7e:d8:e1:0c:e1:d9:40:03:59:6b:aa:71:d0:e7:1c:cf:7d:c2: bc:45:49:ad:6e:16:82:ea:66:af:7b:71:d7:c1:ac:8f:e1:72: 37:ef:3d:8a:44:e6:d3:d3:ad:08:5c:51:e4:41:6a:05:03:35: f3:98:35:a0:1c:14:75:a2:6f:66:7f:3f:c5:05:11:96:f3:4e: 7c:49:3f:90:37:8d:e3:d4:e3:04:2c:6b:d1:ee:29:58:75:32: 1a:d1:5c:f6:ea:1a:9b:83:22:97:53:33:47:da:ca:f6:4c:89: c5:58:31:69:ee:fb:d3:02:7e:13:c5:de:23:24:53:97:1b:85: 72:7e:fe:d6:0d:7e:61:9b:eb:a2:94:41:0c:fa:7e:12:e6:ed: 74:14:ff:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQUIGHeluWO4ZpGxggjnJoondwz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNjAzMjYxMDM2MjJaFw0yNjAzMjkxNjIxMjJaMDMxMTAvBgNV BAMTKEY3Qzc2QzQwOTQ3OTk0MDBEMEZCQTVDMEI0NTdGQTkyOTlDNDJEODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkhrySh/4sArV5EQqDCnFHlUSq f1XKCDDLExBU5L5aksGJ6OA80RM8oXZKLnbTuCaQaU1okomDfOcgHduCviEEFLJ7 MnBu/7ADci6t/8ondnDJukqmexQRtGIm5/NGw/QOG5Z3lwatt+MpdCQ1SG9DdVog myfmJmiO9DtcUguZ2m3nkpKEOsCg8bj1GD4PUvHmQYo4K39EpCeHqmIihUqkpXe+ shiFw+2jC0QgS19UbjizNsvf4DD1i7EglqYc02fJ/awyzfGHLtjErnCLZQaKcbNZ v0V4vlRbAU2tDxVovTjIBknmUHzlKJPdAO9Fh6AfGeF1YxoYA1PJJVwnNvarAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU98dsQJR5lADQ+6XAtFf6kpnELYcwHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5+ljCAqN7PyBFZkPgaAHLiMaPIVsUDljcj dftC60fpvGfo6E6pD46ZWPRQVVCUZM7ycJl1d5L9KMqwwmGxveHjf5a1TG6O5G9D JqhDWszJ2qn8nxOQQIOVniPo1p3hgt2eByhHAljTpA8Mt37Y4Qzh2UADWWuqcdDn HM99wrxFSa1uFoLqZq97cdfBrI/hcjfvPYpE5tPTrQhcUeRBagUDNfOYNaAcFHWi b2Z/P8UFEZbzTnxJP5A3jePU4wQsa9HuKVh1MhrRXPbqGpuDIpdTM0fayvZMicVY MWnu+9MCfhPF3iMkU5cbhXJ+/tYNfmGb66KUQQz6fhLm7XQU/y8= -----END CERTIFICATE-----Generated at Thu Mar 26 23:46:42 2026 by rpki-client