$ rpki-client -vvf repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft File: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft (raw, json) Hash identifier: mJFWI/if/LB/TZyiWMhF/vP0u1DJZ7dH8sqebJO2rKs= Subject key identifier: BC:75:AC:94:04:22:34:32:11:7A:38:8A:8D:48:14:A7:A1:7F:EF:99 Authority key identifier: 1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 Certificate issuer: /CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Certificate serial: 7BC54DAAF3B0E972EBC62B5CF1FD093625A8FF04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft Manifest number: 023A Signing time: Mon 23 Mar 2026 17:40:59 +0000 Manifest this update: Mon 23 Mar 2026 17:35:59 +0000 Manifest next update: Fri 27 Mar 2026 04:01:59 +0000 Files and hashes: 1: 3130332e32302e38382e302f32342d3234203d3e20313530313837.roa (hash: Ad9vTNOJwKofaap6S433q9PQ++RzqFFroze72orM9pE=) 2: 1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl (hash: iIJVWVdug3w7ZNPB2ifGY+s86RFr7o7QyLL9XJ36gCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 04:01:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:c5:4d:aa:f3:b0:e9:72:eb:c6:2b:5c:f1:fd:09:36:25:a8:ff:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A8D5C5C95DA1BAB593AA71D0CB6B22684161633 Validity Not Before: Mar 23 17:35:59 2026 GMT Not After : Mar 27 04:01:59 2026 GMT Subject: CN=BC75AC9404223432117A388A8D4814A7A17FEF99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:00:e8:1b:9b:f2:32:b8:b1:89:a4:e8:79:63: 45:b0:0b:ba:58:c5:cd:05:4c:a5:b8:77:84:62:39: 20:50:b1:a7:92:08:45:bb:56:fa:70:04:a9:50:02: 4d:d2:e5:f1:89:6d:3d:cc:6c:9b:b8:7e:71:14:1f: c2:d2:dd:83:ea:1c:e7:fc:cc:11:4d:43:80:19:c5: e1:dd:63:f8:30:15:e7:44:79:c2:d2:a9:48:d9:37: ed:02:56:25:64:f7:75:b0:85:40:f2:f8:8b:07:8e: 69:aa:78:af:5f:28:a7:0c:19:af:c0:3f:64:98:d7: f5:91:1d:6f:be:dd:93:cc:fb:03:e0:f8:42:f7:0e: 46:15:2b:9d:ce:b7:16:70:16:51:39:3b:c8:7b:94: 33:23:f4:a6:e4:cd:2c:b8:1b:c2:56:40:5c:6a:78: 4f:40:1b:d7:f3:1b:11:ee:d6:7d:c7:8f:d6:f6:63: b2:e2:56:28:bd:fd:78:ba:c3:e8:4c:2d:00:11:40: 02:0d:27:cf:bb:70:07:67:23:94:ef:cb:42:30:2f: 7b:54:04:83:5e:23:26:46:c5:48:b6:e5:05:7f:e6: e9:01:90:71:5a:de:f1:17:55:fc:4a:83:b2:d4:cb: 3b:76:18:fb:ce:35:ae:ab:bd:d5:23:2f:3a:6e:87: 00:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:75:AC:94:04:22:34:32:11:7A:38:8A:8D:48:14:A7:A1:7F:EF:99 X509v3 Authority Key Identifier: keyid:1A:8D:5C:5C:95:DA:1B:AB:59:3A:A7:1D:0C:B6:B2:26:84:16:16:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5fcc1ef6-769f-4aaf-9d14-2e5b15a6ff23/0/1A8D5C5C95DA1BAB593AA71D0CB6B22684161633.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:de:54:86:98:34:f0:f7:d3:2c:b6:0f:d0:1a:a9:51:08:9e: 51:f1:53:64:ea:71:3b:db:38:e5:e4:ec:bc:32:0a:c9:af:12: 69:d8:fd:09:f4:97:8f:a7:60:9b:48:d5:38:b7:8d:31:50:70: ce:59:34:17:31:c8:c7:2b:47:02:3f:d3:c5:ce:96:77:99:44: bf:4f:1e:89:87:8f:6a:91:2c:2f:7b:45:99:56:5f:c4:b5:3c: 94:a2:f2:6a:ba:e6:c0:b2:ca:c7:7e:b7:ea:02:1b:b9:55:88: 3d:ce:45:c0:60:28:da:12:7f:f8:6d:61:40:ae:71:da:ea:9b: d6:72:39:75:b4:ce:6f:ed:0d:b3:f7:dc:20:e1:b4:91:f1:e3: 4b:a8:2a:6f:0c:ab:87:3f:25:6c:34:00:60:e3:82:0b:a4:ba: a0:f3:84:da:f4:be:0c:62:6b:86:a3:65:1f:43:b4:4b:09:7b: d0:4e:2c:4c:0a:38:f8:02:6d:c4:5f:17:76:60:30:e8:88:d4: 00:cd:71:63:15:31:f4:8b:96:94:39:c6:c5:ad:e6:93:93:3c: 51:1a:64:69:2b:73:63:83:20:e5:84:d9:92:d0:5c:ba:61:43: 6c:15:71:eb:05:3f:42:fa:5b:3b:94:cd:03:a1:70:33:76:d6: 27:84:74:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe8VNqvOw6XLrxitc8f0JNiWo/wQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4 NDE2MTYzMzAeFw0yNjAzMjMxNzM1NTlaFw0yNjAzMjcwNDAxNTlaMDMxMTAvBgNV BAMTKEJDNzVBQzk0MDQyMjM0MzIxMTdBMzg4QThENDgxNEE3QTE3RkVGOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD5AOgbm/IyuLGJpOh5Y0WwC7pY xc0FTKW4d4RiOSBQsaeSCEW7VvpwBKlQAk3S5fGJbT3MbJu4fnEUH8LS3YPqHOf8 zBFNQ4AZxeHdY/gwFedEecLSqUjZN+0CViVk93WwhUDy+IsHjmmqeK9fKKcMGa/A P2SY1/WRHW++3ZPM+wPg+EL3DkYVK53OtxZwFlE5O8h7lDMj9KbkzSy4G8JWQFxq eE9AG9fzGxHu1n3Hj9b2Y7LiVii9/Xi6w+hMLQARQAINJ8+7cAdnI5Tvy0IwL3tU BINeIyZGxUi25QV/5ukBkHFa3vEXVfxKg7LUyzt2GPvONa6rvdUjLzpuhwCbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvHWslAQiNDIRejiKjUgUp6F/75kwHwYDVR0j BBgwFoAUGo1cXJXaG6tZOqcdDLayJoQWFjMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZmNjMWVmNi03NjlmLTRhYWYtOWQxNC0yZTViMTVhNmZmMjMvMC8xQThENUM1Qzk1 REExQkFCNTkzQUE3MUQwQ0I2QjIyNjg0MTYxNjMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIyMjY4NDE2 MTYzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWZjYzFlZjYtNzY5Zi00YWFmLTlk MTQtMmU1YjE1YTZmZjIzLzAvMUE4RDVDNUM5NURBMUJBQjU5M0FBNzFEMENCNkIy MjY4NDE2MTYzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHveVIaYNPD30yy2D9AaqVEInlHxU2TqcTvb OOXk7LwyCsmvEmnY/Qn0l4+nYJtI1Ti3jTFQcM5ZNBcxyMcrRwI/08XOlneZRL9P HomHj2qRLC97RZlWX8S1PJSi8mq65sCyysd+t+oCG7lViD3ORcBgKNoSf/htYUCu cdrqm9ZyOXW0zm/tDbP33CDhtJHx40uoKm8Mq4c/JWw0AGDjggukuqDzhNr0vgxi a4ajZR9DtEsJe9BOLEwKOPgCbcRfF3ZgMOiI1ADNcWMVMfSLlpQ5xsWt5pOTPFEa ZGkrc2ODIOWE2ZLQXLphQ2wVcesFP0L6WzuUzQOhcDN21ieEdDk= -----END CERTIFICATE-----Generated at Thu Mar 26 05:51:57 2026 by rpki-client