$ rpki-client -vvf repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft File: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft (raw, json) Hash identifier: +CH/lPM4wS/JTxbdREFXxLlcVwOidYWftP3o6b721b0= Subject key identifier: CB:B4:E2:4C:99:40:E3:1D:9E:CC:E9:F3:A9:8D:B2:64:0A:54:D8:08 Authority key identifier: 1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F Certificate issuer: /CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Certificate serial: 7A200D387D97A767E93C8625E46E5503187F7DA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft Manifest number: 0148 Signing time: Tue 24 Mar 2026 20:20:46 +0000 Manifest this update: Tue 24 Mar 2026 20:15:46 +0000 Manifest next update: Sat 28 Mar 2026 02:47:46 +0000 Files and hashes: 1: 1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl (hash: AMbCg4Imu+/O+i86SEJzD6D5IKktCoDUZ+NKj/iv1TM=) 2: 323030313a6466333a373263303a3a2f34382d3438203d3e20313532333733.roa (hash: 942czowzjJh0U0LSw2/9UwfW1RkF7wxSGzzd06JKS0Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:47:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:20:0d:38:7d:97:a7:67:e9:3c:86:25:e4:6e:55:03:18:7f:7d:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F Validity Not Before: Mar 24 20:15:46 2026 GMT Not After : Mar 28 02:47:46 2026 GMT Subject: CN=CBB4E24C9940E31D9ECCE9F3A98DB2640A54D808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:dd:00:ae:13:bd:c4:41:0c:49:a8:8d:4a:f7: 13:9a:bf:5f:b8:05:40:f6:96:8a:3f:22:76:a6:ed: 29:75:11:c5:79:b4:42:71:d8:d8:77:0d:17:5d:04: b0:0f:72:ba:bf:8b:08:bd:9e:98:33:1d:8e:77:96: 7d:10:9d:86:e5:b6:a6:3a:2d:05:64:b5:1c:47:66: cd:c1:b4:7d:d3:20:25:e8:86:68:54:bc:41:26:a0: 6f:d8:e6:7e:40:a9:65:5b:7c:58:42:6d:9f:4d:fb: 14:41:70:db:2b:78:ac:00:6e:76:04:e5:01:92:b0: 06:9b:88:fe:c9:bf:6f:96:da:17:36:1f:a0:74:4f: 9d:a8:7f:fb:c1:c0:f9:64:9d:e1:33:e7:b5:61:d3: dd:ce:2f:54:0a:7f:5e:f4:5c:cc:1d:2d:ee:b9:78: ce:ce:d3:2c:cd:dd:65:70:fd:e7:c1:44:06:53:52: 2c:85:f5:c3:0c:81:25:7b:f0:f5:6a:fa:a7:a2:0f: 93:49:5d:af:0b:49:c1:a1:be:39:22:b1:ad:5f:e4: 13:e5:16:b3:85:6e:9f:11:53:47:22:f8:68:38:0b: 25:de:de:ca:a0:31:a3:85:4b:ad:69:81:7e:43:e2: e2:be:1a:54:8a:31:b4:e4:36:db:f6:c5:01:52:b3: 04:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:B4:E2:4C:99:40:E3:1D:9E:CC:E9:F3:A9:8D:B2:64:0A:54:D8:08 X509v3 Authority Key Identifier: keyid:1A:C4:9A:EA:F4:8C:92:51:C7:91:3E:A3:8C:F4:BA:F8:E4:0B:7E:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51234c4a-a8ff-4036-8420-da8162111806/1/1AC49AEAF48C9251C7913EA38CF4BAF8E40B7E4F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:ef:4b:3b:e0:d6:b5:89:f9:d3:e9:13:fa:ce:88:47:c4:12: 68:fa:91:25:a1:f8:23:a1:77:c8:15:b1:9a:ec:44:19:30:4a: 66:14:7b:b0:96:c3:3f:74:62:b7:4a:50:43:5b:4b:d5:1b:f6: a7:9d:ed:4e:ec:4c:79:ea:e1:35:69:b1:92:15:46:48:56:70: 86:76:70:a6:89:d6:de:62:2e:21:75:77:b3:f8:58:db:a6:4d: 78:60:1d:cc:be:2a:64:9f:84:33:b5:f1:87:84:7f:60:06:37: d2:a6:ba:7f:8d:e3:24:b1:08:25:e7:89:2e:e3:f5:bb:0e:df: d0:b4:ad:70:d8:f7:5e:ea:a4:d4:69:0f:57:9e:2b:ea:1d:96: 1f:c8:8b:ee:d0:eb:b1:88:55:b1:f8:60:4b:d7:d5:86:f5:76: 4f:72:c6:5e:76:2d:eb:65:a0:78:cc:6e:31:29:04:7b:8f:e6: 6f:35:78:37:00:d9:f1:05:08:51:a4:29:2d:98:0f:57:69:0c: 7d:4e:e4:00:6b:4a:4e:b8:cc:e3:54:d6:6a:35:34:f2:72:5b: 69:df:8a:e6:f8:73:20:26:9c:6f:5e:52:c5:04:a8:92:53:74: 4b:0a:da:f0:77:22:c7:a0:e7:bd:4f:bc:4d:9f:0f:3c:3a:87: 57:f9:35:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeiANOH2Xp2fpPIYl5G5VAxh/fagwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhF NDBCN0U0RjAeFw0yNjAzMjQyMDE1NDZaFw0yNjAzMjgwMjQ3NDZaMDMxMTAvBgNV BAMTKENCQjRFMjRDOTk0MEUzMUQ5RUNDRTlGM0E5OERCMjY0MEE1NEQ4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy3QCuE73EQQxJqI1K9xOav1+4 BUD2loo/Inam7Sl1EcV5tEJx2Nh3DRddBLAPcrq/iwi9npgzHY53ln0QnYbltqY6 LQVktRxHZs3BtH3TICXohmhUvEEmoG/Y5n5AqWVbfFhCbZ9N+xRBcNsreKwAbnYE 5QGSsAabiP7Jv2+W2hc2H6B0T52of/vBwPlkneEz57Vh093OL1QKf170XMwdLe65 eM7O0yzN3WVw/efBRAZTUiyF9cMMgSV78PVq+qeiD5NJXa8LScGhvjkisa1f5BPl FrOFbp8RU0ci+Gg4CyXe3sqgMaOFS61pgX5D4uK+GlSKMbTkNtv2xQFSswQZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUy7TiTJlA4x2ezOnzqY2yZApU2AgwHwYDVR0j BBgwFoAUGsSa6vSMklHHkT6jjPS6+OQLfk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTIzNGM0YS1hOGZmLTQwMzYtODQyMC1kYTgxNjIxMTE4MDYvMS8xQUM0OUFFQUY0 OEM5MjUxQzc5MTNFQTM4Q0Y0QkFGOEU0MEI3RTRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJBRjhFNDBC N0U0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTEyMzRjNGEtYThmZi00MDM2LTg0 MjAtZGE4MTYyMTExODA2LzEvMUFDNDlBRUFGNDhDOTI1MUM3OTEzRUEzOENGNEJB RjhFNDBCN0U0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE3vSzvg1rWJ+dPpE/rOiEfEEmj6kSWh+COh d8gVsZrsRBkwSmYUe7CWwz90YrdKUENbS9Ub9qed7U7sTHnq4TVpsZIVRkhWcIZ2 cKaJ1t5iLiF1d7P4WNumTXhgHcy+KmSfhDO18YeEf2AGN9Kmun+N4ySxCCXniS7j 9bsO39C0rXDY917qpNRpD1eeK+odlh/Ii+7Q67GIVbH4YEvX1Yb1dk9yxl52Letl oHjMbjEpBHuP5m81eDcA2fEFCFGkKS2YD1dpDH1O5ABrSk64zONU1mo1NPJyW2nf iub4cyAmnG9eUsUEqJJTdEsK2vB3Iseg571PvE2fDzw6h1f5NSE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:55:42 2026 by rpki-client