$ rpki-client -vvf repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft File: 1A88815F25C9ADC8E68E2145CC20A00096657347.mft (raw, json) Hash identifier: DTkXQl4UAb8l6MYp3ValXPC7vyepF6Qs0bYa0XvNmYw= Subject key identifier: E5:1F:BD:A6:FA:05:48:D8:A4:C6:02:3C:79:F2:FB:61:71:5A:87:8A Authority key identifier: 1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 Certificate issuer: /CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Certificate serial: 4421BEAA46056297DA6DB7A2EA3D30B67CFCCD31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft Manifest number: 02BE Signing time: Wed 25 Mar 2026 13:51:53 +0000 Manifest this update: Wed 25 Mar 2026 13:46:53 +0000 Manifest next update: Sat 28 Mar 2026 18:40:53 +0000 Files and hashes: 1: 1A88815F25C9ADC8E68E2145CC20A00096657347.crl (hash: Yp5/61Y+HJxjFe3KdEloE595X5IDlqxjKQRXlwOGseU=) 2: 3130332e3137352e38342e302f32342d3234203d3e20313437313137.roa (hash: X7jlC8806cONOESjfeaSOO4BlCs60fPKPrtTWgAwSss=) 3: 3130332e3137352e38352e302f32342d3234203d3e20313437313137.roa (hash: dQkihMhWzN2ARo3TbtERAeJ3TdDzeXt9eRFpYMTxe1s=) 4: 3130332e3137352e38342e302f32332d3234203d3e20313437313137.roa (hash: sYuoPIutBM6UsTB74BSY1gl4de6W9HHMo31g7KdPOkQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:21:be:aa:46:05:62:97:da:6d:b7:a2:ea:3d:30:b6:7c:fc:cd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A88815F25C9ADC8E68E2145CC20A00096657347 Validity Not Before: Mar 25 13:46:53 2026 GMT Not After : Mar 28 18:40:53 2026 GMT Subject: CN=E51FBDA6FA0548D8A4C6023C79F2FB61715A878A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ff:57:f8:82:6e:d3:10:2b:f1:95:00:e6:aa: ab:4c:ab:da:11:55:35:5c:12:a9:1f:49:6a:8b:54: 9c:71:8f:f2:de:60:ed:03:2b:06:5b:ef:4f:9c:65: 84:89:46:ad:7d:db:53:bc:69:c1:b0:87:2a:89:bb: bb:e9:95:f1:b0:a5:17:32:64:66:70:1a:c5:f2:11: 66:4b:e5:bd:95:53:e5:75:03:74:36:ed:74:53:9c: fe:b8:5a:ae:2b:47:29:70:e3:b5:70:8e:5d:20:d1: e4:0f:b0:dd:3f:d1:3a:4a:4f:93:55:07:93:4b:2d: eb:e6:76:50:41:b7:d5:00:71:7a:a5:bc:69:85:bf: f7:7e:8f:fb:2e:be:05:0b:bc:19:34:3b:58:40:11: 0d:f3:ba:07:80:91:e4:9c:7c:02:93:1e:f3:0d:60: a4:a0:93:8a:80:69:be:c0:3f:06:3a:4f:63:73:eb: fc:f0:30:21:de:5b:53:6f:fe:5e:c7:9b:5a:27:0f: db:fd:96:31:2e:e8:bf:8a:d3:c7:bf:a9:e6:e1:d6: 96:fe:9a:7d:8d:1d:18:d3:90:e7:7f:74:17:6f:fd: da:93:1a:28:97:cc:d6:63:27:bc:15:fb:6c:ac:bc: 77:f0:08:a3:0a:7c:e0:54:76:b7:68:40:55:45:73: 29:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:1F:BD:A6:FA:05:48:D8:A4:C6:02:3C:79:F2:FB:61:71:5A:87:8A X509v3 Authority Key Identifier: keyid:1A:88:81:5F:25:C9:AD:C8:E6:8E:21:45:CC:20:A0:00:96:65:73:47 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A88815F25C9ADC8E68E2145CC20A00096657347.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54c77666-4c74-440d-9167-af63faa6eb9e/0/1A88815F25C9ADC8E68E2145CC20A00096657347.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:44:6c:6a:ca:9c:1d:dd:b6:62:30:d1:ce:49:71:43:17:0a: fb:c6:5c:4a:71:d6:7b:9f:b1:96:0f:49:21:8d:6d:0d:2b:55: 12:55:0a:92:6b:d5:08:02:bd:b4:32:bc:b6:52:fc:b4:f1:6a: 2b:ff:d0:05:95:9a:67:2e:e2:80:f7:20:40:56:5d:62:8b:51: ed:a5:60:64:35:57:92:2f:4a:ef:90:ae:e1:af:86:95:7f:60: 32:e6:11:f3:09:4a:fa:62:00:b6:14:6b:e3:91:db:7c:dc:fa: 8c:38:3f:1c:62:a5:75:bb:9f:3e:d1:5c:5e:74:ad:3b:96:88: 25:98:59:13:80:40:7d:88:54:20:ef:d0:53:4b:b7:f3:04:44: 42:f3:5a:0b:65:e3:65:19:6d:1e:92:30:85:56:7d:65:f1:30: 95:20:c1:3d:82:27:60:2d:ff:11:b9:2b:61:76:dc:17:71:c6: 20:3a:e6:e9:6d:02:41:8d:91:6e:2d:4f:9b:c4:54:e6:68:6e: 7b:36:7c:35:52:84:26:81:00:ca:e2:2a:84:be:67:e7:ba:6c: 8d:f5:cc:ef:9f:7b:3d:7b:5a:ce:63:7b:a5:af:24:51:cc:e7: cf:11:0d:a3:66:1f:44:2e:bd:50:35:79:33:84:da:26:34:7d: 3e:bc:ef:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURCG+qkYFYpfabbei6j0wtnz8zTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5 NjY1NzM0NzAeFw0yNjAzMjUxMzQ2NTNaFw0yNjAzMjgxODQwNTNaMDMxMTAvBgNV BAMTKEU1MUZCREE2RkEwNTQ4RDhBNEM2MDIzQzc5RjJGQjYxNzE1QTg3OEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+/1f4gm7TECvxlQDmqqtMq9oR VTVcEqkfSWqLVJxxj/LeYO0DKwZb70+cZYSJRq1921O8acGwhyqJu7vplfGwpRcy ZGZwGsXyEWZL5b2VU+V1A3Q27XRTnP64Wq4rRylw47Vwjl0g0eQPsN0/0TpKT5NV B5NLLevmdlBBt9UAcXqlvGmFv/d+j/suvgULvBk0O1hAEQ3zugeAkeScfAKTHvMN YKSgk4qAab7APwY6T2Nz6/zwMCHeW1Nv/l7Hm1onD9v9ljEu6L+K08e/qebh1pb+ mn2NHRjTkOd/dBdv/dqTGiiXzNZjJ7wV+2ysvHfwCKMKfOBUdrdoQFVFcyl1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5R+9pvoFSNikxgI8efL7YXFah4owHwYDVR0j BBgwFoAUGoiBXyXJrcjmjiFFzCCgAJZlc0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGM3NzY2Ni00Yzc0LTQ0MGQtOTE2Ny1hZjYzZmFhNmViOWUvMC8xQTg4ODE1RjI1 QzlBREM4RTY4RTIxNDVDQzIwQTAwMDk2NjU3MzQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEwMDA5NjY1 NzM0Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRjNzc2NjYtNGM3NC00NDBkLTkx NjctYWY2M2ZhYTZlYjllLzAvMUE4ODgxNUYyNUM5QURDOEU2OEUyMTQ1Q0MyMEEw MDA5NjY1NzM0Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5EbGrKnB3dtmIw0c5JcUMXCvvGXEpx1nuf sZYPSSGNbQ0rVRJVCpJr1QgCvbQyvLZS/LTxaiv/0AWVmmcu4oD3IEBWXWKLUe2l YGQ1V5IvSu+QruGvhpV/YDLmEfMJSvpiALYUa+OR23zc+ow4PxxipXW7nz7RXF50 rTuWiCWYWROAQH2IVCDv0FNLt/MERELzWgtl42UZbR6SMIVWfWXxMJUgwT2CJ2At /xG5K2F23BdxxiA65ultAkGNkW4tT5vEVOZobns2fDVShCaBAMriKoS+Z+e6bI31 zO+fez17Ws5je6WvJFHM588RDaNmH0QuvVA1eTOE2iY0fT6877o= -----END CERTIFICATE-----Generated at Thu Mar 26 20:43:36 2026 by rpki-client