$ rpki-client -vvf repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft File: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft (raw, json) Hash identifier: kDlU2/N78db42W+4EqiIAlL142AgTnSZTjkgz4enEVU= Subject key identifier: AF:E1:CA:D7:A1:D8:2C:A9:31:FA:07:75:80:8C:90:2E:F1:BF:6E:5F Authority key identifier: 1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE Certificate issuer: /CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Certificate serial: 61D6E99F2DA09399B0373537436528FC8563CE9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft Manifest number: 42 Signing time: Wed 25 Mar 2026 17:02:27 +0000 Manifest this update: Wed 25 Mar 2026 16:57:27 +0000 Manifest next update: Sun 29 Mar 2026 04:47:27 +0000 Files and hashes: 1: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl (hash: HJAmQw/cT4Ef6YOZAh8gtLEb3ZX5EUFoJwozpu97ByA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 04:47:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:d6:e9:9f:2d:a0:93:99:b0:37:35:37:43:65:28:fc:85:63:ce:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Validity Not Before: Mar 25 16:57:27 2026 GMT Not After : Mar 29 04:47:27 2026 GMT Subject: CN=AFE1CAD7A1D82CA931FA0775808C902EF1BF6E5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:00:de:be:02:8f:4c:26:5b:68:d0:70:87:46: ce:45:c3:0a:65:8a:fe:53:d2:bf:45:f4:53:1c:ee: 8c:39:94:b9:78:67:04:ca:92:53:b9:2d:dc:22:4b: e1:69:70:a9:b9:ed:e0:0c:34:a6:a4:92:ac:b4:e1: 7a:d1:95:63:eb:76:fa:58:32:4d:c6:b8:aa:0e:61: 04:8d:1b:18:3a:ae:87:1a:05:8e:56:ae:cb:42:50: fe:f3:fe:7a:28:46:1b:0f:8c:c6:10:ef:71:1e:c4: 86:b9:60:d6:8f:55:d3:7e:1f:be:5e:dc:70:d5:da: 99:3d:f3:d8:02:a5:92:77:d9:e6:53:38:cc:21:3a: 42:c8:ec:d8:2e:0f:d6:ae:94:b8:21:2e:fe:6b:b6: 90:5c:a3:34:5b:04:45:73:41:b8:7a:cf:6b:56:47: fa:8d:5d:cb:e0:31:5b:3b:c9:e6:f6:a5:5e:29:d8: 5d:2a:7c:14:7e:5a:6c:56:b4:89:59:2a:52:50:a9: b3:5b:90:9e:96:ff:c2:34:6a:0a:0f:e1:a2:ab:b0: 17:c5:5f:c9:3b:36:dc:a3:cb:c2:12:50:7c:69:8c: 4c:d6:10:1b:d3:df:54:f1:14:e2:0c:23:cc:e7:72: f0:42:2b:79:28:a3:a1:e9:d6:a4:6f:b3:e6:c9:97: 07:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:E1:CA:D7:A1:D8:2C:A9:31:FA:07:75:80:8C:90:2E:F1:BF:6E:5F X509v3 Authority Key Identifier: keyid:1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:62:c7:1f:e1:94:28:12:1a:cf:d1:61:8c:17:17:8f:ba:6c: 40:39:c7:6c:be:f3:65:34:fd:10:86:2c:6f:bd:0f:c5:af:78: 85:35:60:32:de:39:ff:20:d1:e8:dd:4c:56:c0:e7:50:07:ce: f3:d4:6e:32:3c:1a:e4:5c:4b:76:60:93:96:67:2c:5f:aa:84: d2:d5:c2:85:49:f6:bf:a4:f3:5a:53:32:d6:3b:82:04:da:da: be:10:b0:15:c3:20:14:e8:64:02:f1:6a:5f:2e:02:89:f6:59: 9a:10:8f:b4:06:6b:7c:69:d5:92:85:dc:6b:d1:00:74:6f:69: 2b:76:ca:bf:2e:2b:80:0c:30:fb:e9:f2:80:1c:82:d4:30:6b: bf:8b:a6:d9:54:69:65:83:4e:59:fb:8d:f8:b4:cb:da:b6:87: ce:42:54:a8:f1:67:95:68:b4:c9:14:61:08:88:bf:c2:88:96: 15:3b:a2:a1:a5:15:a4:ef:2f:e0:44:99:a7:9b:3f:0d:32:04: 04:23:4e:66:44:9b:82:86:69:e3:75:42:9a:87:63:4e:c7:bc: 29:91:83:46:44:ac:a1:19:55:3f:9d:d0:5a:db:0a:8d:a6:7c: ec:ad:2e:b8:0a:97:a3:c1:93:d6:0e:e8:ac:cb:a9:21:d8:da: 36:39:ad:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYdbpny2gk5mwNzU3Q2Uo/IVjzpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNF NkZDM0FBRTAeFw0yNjAzMjUxNjU3MjdaFw0yNjAzMjkwNDQ3MjdaMDMxMTAvBgNV BAMTKEFGRTFDQUQ3QTFEODJDQTkzMUZBMDc3NTgwOEM5MDJFRjFCRjZFNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDAN6+Ao9MJlto0HCHRs5Fwwpl iv5T0r9F9FMc7ow5lLl4ZwTKklO5LdwiS+FpcKm57eAMNKakkqy04XrRlWPrdvpY Mk3GuKoOYQSNGxg6rocaBY5WrstCUP7z/nooRhsPjMYQ73EexIa5YNaPVdN+H75e 3HDV2pk989gCpZJ32eZTOMwhOkLI7NguD9aulLghLv5rtpBcozRbBEVzQbh6z2tW R/qNXcvgMVs7yeb2pV4p2F0qfBR+WmxWtIlZKlJQqbNbkJ6W/8I0agoP4aKrsBfF X8k7Ntyjy8ISUHxpjEzWEBvT31TxFOIMI8zncvBCK3koo6Hp1qRvs+bJlwe1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr+HK16HYLKkx+gd1gIyQLvG/bl8wHwYDVR0j BBgwFoAUHAXHnHdUSi4/VCkOYAfKA+b8Oq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjYyNWJmMi1mM2I2LTRlOWMtODViMC01NWUzYzU0NjdmOWMvMC8xQzA1Qzc5Qzc3 NTQ0QTJFM0Y1NDI5MEU2MDA3Q0EwM0U2RkMzQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNFNkZD M0FBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NB MDNFNkZDM0FBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlixx/hlCgSGs/RYYwXF4+6bEA5x2y+82U0 /RCGLG+9D8WveIU1YDLeOf8g0ejdTFbA51AHzvPUbjI8GuRcS3Zgk5ZnLF+qhNLV woVJ9r+k81pTMtY7ggTa2r4QsBXDIBToZALxal8uAon2WZoQj7QGa3xp1ZKF3GvR AHRvaSt2yr8uK4AMMPvp8oAcgtQwa7+LptlUaWWDTln7jfi0y9q2h85CVKjxZ5Vo tMkUYQiIv8KIlhU7oqGlFaTvL+BEmaebPw0yBAQjTmZEm4KGaeN1QpqHY07HvCmR g0ZErKEZVT+d0FrbCo2mfOytLrgKl6PBk9YO6KzLqSHY2jY5rdk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:09:23 2026 by rpki-client