$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: wdUIFf8XF53rpyq4nsc5mFe+G+fCBGE4hQwH7t3RuyY= Subject key identifier: 58:79:3A:01:A9:C6:0E:D5:83:04:15:D7:2B:67:15:1B:F2:17:FE:26 Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 30314E76CA257B0121197ACD85D66273A018ABCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: D7 Signing time: Wed 25 Mar 2026 16:42:17 +0000 Manifest this update: Wed 25 Mar 2026 16:37:17 +0000 Manifest next update: Sun 29 Mar 2026 00:23:17 +0000 Files and hashes: 1: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: GxPwcl3xG0lJtuIsVw/HKN6DPia/mCVf1Me2ZjNBfOc=) 2: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: M3Ryg273RmtzadeEC/6yluYZjrRPhnvWK0D0aQbne/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:23:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:31:4e:76:ca:25:7b:01:21:19:7a:cd:85:d6:62:73:a0:18:ab:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Mar 25 16:37:17 2026 GMT Not After : Mar 29 00:23:17 2026 GMT Subject: CN=58793A01A9C60ED5830415D72B67151BF217FE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:22:07:81:7c:12:2c:18:04:76:13:e6:19: 14:16:c0:49:42:f0:33:c9:06:7a:23:61:5a:28:06: 36:9e:39:2c:5d:40:2f:64:8f:cf:b8:85:68:62:02: a5:ef:9f:62:02:1d:47:b6:4c:0d:ca:b7:a0:ea:18: 8f:ac:cf:75:5f:62:e8:eb:ec:57:92:9e:44:08:14: 42:2a:3b:90:00:85:d0:11:76:51:20:ab:57:15:eb: 3d:c4:f9:31:a0:95:74:44:2b:fb:04:00:e2:71:26: 24:a2:44:60:08:ff:a0:92:69:98:57:c2:5e:d5:5f: 70:78:2a:e8:9a:80:2b:05:d8:54:d9:d4:d3:e5:a5: 0f:27:9d:55:40:ac:99:bf:92:d6:f0:f2:bb:5d:64: 94:72:f7:7d:5b:a4:25:e0:82:64:cc:6a:07:70:5a: ca:a9:48:a0:e1:3e:d9:5b:99:a7:ad:43:2d:1d:fa: 3f:3b:63:43:65:d4:fc:89:68:d3:c5:b8:93:f2:d9: 8b:16:03:6b:49:7d:9a:f8:dc:11:97:bf:16:c0:29: 98:91:ff:cf:3d:f5:2b:1a:f3:7b:a8:ac:4a:90:7a: 41:58:20:5e:da:07:b7:d6:87:fb:14:fb:c9:c1:fa: 42:66:bf:8f:ba:a4:24:99:97:ee:72:32:fb:70:01: a3:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:79:3A:01:A9:C6:0E:D5:83:04:15:D7:2B:67:15:1B:F2:17:FE:26 X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:b6:73:33:50:e2:7a:71:3b:76:7f:ee:05:5b:fb:06:1d:96: 15:ce:d4:85:93:7a:8d:63:22:66:1f:90:cb:16:c9:96:ed:fc: 90:16:84:c0:ed:d4:e6:ef:d0:6e:38:27:97:49:9f:c3:15:00: ac:f5:d3:ce:6e:cb:91:73:97:72:22:09:9e:45:7a:43:aa:94: 35:13:97:51:b0:ed:4a:e2:28:8a:9c:5b:eb:a6:92:11:9e:9b: fa:30:f1:4f:af:14:e7:54:8b:7c:70:63:f9:9f:44:dd:e6:4b: 83:a1:35:60:aa:9e:9e:f6:c4:0f:1c:75:da:95:59:5b:db:9c: 5d:b0:f5:b7:37:70:8f:73:28:85:5e:fc:6e:6d:9c:cb:29:5b: 21:e2:ec:bf:34:52:2e:f5:16:7b:06:29:c9:42:fa:b0:b5:9d: 6a:62:f2:b7:eb:2e:56:09:28:52:ba:6f:1d:01:54:6e:e4:b1: af:78:5f:a4:82:39:71:79:65:67:33:76:26:e2:8d:ec:4e:14: d2:1b:e1:4f:05:87:56:f1:dc:b8:13:7c:1f:c8:32:02:e1:c7: 03:93:de:9c:3e:d1:5a:0c:3d:28:21:f6:0e:ba:7c:18:7e:94: e8:c8:80:66:8f:e5:c0:64:7d:9c:53:45:87:19:27:61:3d:77: c2:94:26:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDFOdsolewEhGXrNhdZic6AYq8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNjAzMjUxNjM3MTdaFw0yNjAzMjkwMDIzMTdaMDMxMTAvBgNV BAMTKDU4NzkzQTAxQTlDNjBFRDU4MzA0MTVENzJCNjcxNTFCRjIxN0ZFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLCIHgXwSLBgEdhPmGRQWwElC 8DPJBnojYVooBjaeOSxdQC9kj8+4hWhiAqXvn2ICHUe2TA3Kt6DqGI+sz3VfYujr 7FeSnkQIFEIqO5AAhdARdlEgq1cV6z3E+TGglXREK/sEAOJxJiSiRGAI/6CSaZhX wl7VX3B4KuiagCsF2FTZ1NPlpQ8nnVVArJm/ktbw8rtdZJRy931bpCXggmTMagdw WsqpSKDhPtlbmaetQy0d+j87Y0Nl1PyJaNPFuJPy2YsWA2tJfZr43BGXvxbAKZiR /8899Ssa83uorEqQekFYIF7aB7fWh/sU+8nB+kJmv4+6pCSZl+5yMvtwAaMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWHk6AanGDtWDBBXXK2cVG/IX/iYwHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHa2czNQ4npxO3Z/7gVb+wYdlhXO1IWTeo1j ImYfkMsWyZbt/JAWhMDt1Obv0G44J5dJn8MVAKz1085uy5Fzl3IiCZ5FekOqlDUT l1Gw7UriKIqcW+umkhGem/ow8U+vFOdUi3xwY/mfRN3mS4OhNWCqnp72xA8cddqV WVvbnF2w9bc3cI9zKIVe/G5tnMspWyHi7L80Ui71FnsGKclC+rC1nWpi8rfrLlYJ KFK6bx0BVG7ksa94X6SCOXF5ZWczdibijexOFNIb4U8Fh1bx3LgTfB/IMgLhxwOT 3pw+0VoMPSgh9g66fBh+lOjIgGaP5cBkfZxTRYcZJ2E9d8KUJss= -----END CERTIFICATE-----Generated at Fri Mar 27 03:09:42 2026 by rpki-client