$ rpki-client -vvf repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft File: 919B60E4D7E1171B6624F318ADA1B74502A3A018.mft (raw, json) Hash identifier: Cm01HqHglBl1+HYBYvSQlshlUOLZTBtuwzYsJ9Iz5og= Subject key identifier: B7:98:42:98:BC:2C:7A:0A:D6:7C:BD:A2:09:10:2C:D9:CE:9A:44:68 Authority key identifier: 91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 Certificate issuer: /CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Certificate serial: 2DA53C6C718B006186FE400D6BC8507F4768F68D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject info access: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft Manifest number: 055B Signing time: Wed 25 Mar 2026 15:20:47 +0000 Manifest this update: Wed 25 Mar 2026 15:15:47 +0000 Manifest next update: Sat 28 Mar 2026 22:18:47 +0000 Files and hashes: 1: 3130332e3130362e3131362e302f32342d3234203d3e20313336383836.roa (hash: orZMBlY9QwaffF3Sj5GAYnuUKegFXWi6cel4pBtcO+Y=) 2: 919B60E4D7E1171B6624F318ADA1B74502A3A018.crl (hash: 666mqZci6a7snfcsjPTNXCm4NVmTR52YO5NM9rNXv04=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:18:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:a5:3c:6c:71:8b:00:61:86:fe:40:0d:6b:c8:50:7f:47:68:f6:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=919B60E4D7E1171B6624F318ADA1B74502A3A018 Validity Not Before: Mar 25 15:15:47 2026 GMT Not After : Mar 28 22:18:47 2026 GMT Subject: CN=B7984298BC2C7A0AD67CBDA209102CD9CE9A4468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:75:48:f7:f5:0b:0a:1a:35:2d:14:a4:40:ca: ff:0a:1c:64:31:5d:92:3b:54:47:89:b1:24:c1:00: 17:63:95:8f:c8:53:61:b9:c6:ba:8a:64:5d:2b:4b: 33:20:de:59:96:2b:27:86:90:ad:7c:84:1e:2d:e7: 0e:cd:34:e8:b0:84:d4:75:85:4e:ef:0a:14:12:2f: 16:dd:48:5b:b8:be:f3:0c:8a:24:ca:93:4c:3f:ae: b8:5b:46:d2:fb:28:18:da:11:56:5e:7e:d3:bb:65: ab:1a:ae:2d:54:40:9a:e3:29:b6:72:4b:e5:e3:8a: 2f:a3:07:37:62:75:21:ce:de:7a:e1:73:7d:98:8f: eb:de:08:d5:8a:9e:e3:55:9e:26:8d:92:95:14:2c: 5c:b1:7f:72:7e:3a:9c:12:ca:33:fd:48:38:0d:54: f7:86:a9:76:5c:eb:08:ef:1e:0b:57:65:89:df:1d: 93:95:ea:73:d8:d1:5a:0c:35:3c:0f:ef:21:5c:96: 64:f5:32:0b:e2:7f:3e:63:d0:99:bf:0b:28:17:ff: 7f:42:57:db:39:53:71:69:79:ec:9e:fb:b2:14:a5: 71:fe:88:8a:7f:3a:0a:6e:3d:ec:5f:b3:05:fb:fb: 53:8c:3c:e6:82:a5:a6:67:81:cb:b2:06:2c:72:1a: 29:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:98:42:98:BC:2C:7A:0A:D6:7C:BD:A2:09:10:2C:D9:CE:9A:44:68 X509v3 Authority Key Identifier: keyid:91:9B:60:E4:D7:E1:17:1B:66:24:F3:18:AD:A1:B7:45:02:A3:A0:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/919B60E4D7E1171B6624F318ADA1B74502A3A018.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/700aed1d-94c9-49a6-a609-882e03cd07ba/0/919B60E4D7E1171B6624F318ADA1B74502A3A018.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e5:62:1e:fe:80:1d:7e:51:11:8f:bc:ac:18:ed:8d:b3:38: 5a:90:73:98:fc:9a:4d:b2:1a:f7:99:d6:48:db:49:9b:e6:e0: 5e:42:5e:61:ed:f6:a9:95:06:13:30:4d:09:35:28:d8:e1:99: 81:42:2a:f6:8b:98:94:ef:c2:40:c7:5d:aa:92:00:24:b2:16: de:df:d0:f1:21:d2:e0:90:2f:6e:63:23:99:71:02:19:0a:51: 59:57:43:ef:bd:21:58:27:b2:12:4d:c1:2f:b1:5e:17:c3:28: f4:48:20:93:54:a9:e1:48:74:80:95:8c:47:cc:0c:ff:b7:ce: cf:d0:78:4a:48:ed:36:45:72:a0:14:83:ef:64:bd:04:d7:79: 20:8a:59:15:e5:19:8e:eb:22:fe:88:66:8b:f5:c9:71:87:55: 84:cb:ed:1e:a4:56:14:a7:88:f6:e5:9d:6c:16:60:f3:7f:6c: fe:28:9f:4b:6e:62:71:a4:0d:77:15:9b:fd:50:a5:b6:ab:70: a5:14:43:7e:71:46:09:d0:f5:55:79:10:58:f6:7d:02:7b:22: 90:33:28:7c:e0:17:96:ef:89:0d:b9:bc:b5:b6:ac:e3:3b:f9: dd:71:db:e4:c0:8c:68:54:63:36:a8:80:2b:24:8a:81:98:0e: 91:44:14:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULaU8bHGLAGGG/kANa8hQf0do9o0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUw MkEzQTAxODAeFw0yNjAzMjUxNTE1NDdaFw0yNjAzMjgyMjE4NDdaMDMxMTAvBgNV BAMTKEI3OTg0Mjk4QkMyQzdBMEFENjdDQkRBMjA5MTAyQ0Q5Q0U5QTQ0NjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKdUj39QsKGjUtFKRAyv8KHGQx XZI7VEeJsSTBABdjlY/IU2G5xrqKZF0rSzMg3lmWKyeGkK18hB4t5w7NNOiwhNR1 hU7vChQSLxbdSFu4vvMMiiTKk0w/rrhbRtL7KBjaEVZeftO7Zasari1UQJrjKbZy S+Xjii+jBzdidSHO3nrhc32Yj+veCNWKnuNVniaNkpUULFyxf3J+OpwSyjP9SDgN VPeGqXZc6wjvHgtXZYnfHZOV6nPY0VoMNTwP7yFclmT1Mgvifz5j0Jm/CygX/39C V9s5U3Fpeeye+7IUpXH+iIp/OgpuPexfswX7+1OMPOaCpaZngcuyBixyGinNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt5hCmLwsegrWfL2iCRAs2c6aRGgwHwYDVR0j BBgwFoAUkZtg5NfhFxtmJPMYraG3RQKjoBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MDBhZWQxZC05NGM5LTQ5YTYtYTYwOS04ODJlMDNjZDA3YmEvMC85MTlCNjBFNEQ3 RTExNzFCNjYyNEYzMThBREExQjc0NTAyQTNBMDE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3NDUwMkEz QTAxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzAwYWVkMWQtOTRjOS00OWE2LWE2 MDktODgyZTAzY2QwN2JhLzAvOTE5QjYwRTREN0UxMTcxQjY2MjRGMzE4QURBMUI3 NDUwMkEzQTAxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTlYh7+gB1+URGPvKwY7Y2zOFqQc5j8mk2y GveZ1kjbSZvm4F5CXmHt9qmVBhMwTQk1KNjhmYFCKvaLmJTvwkDHXaqSACSyFt7f 0PEh0uCQL25jI5lxAhkKUVlXQ++9IVgnshJNwS+xXhfDKPRIIJNUqeFIdICVjEfM DP+3zs/QeEpI7TZFcqAUg+9kvQTXeSCKWRXlGY7rIv6IZov1yXGHVYTL7R6kVhSn iPblnWwWYPN/bP4on0tuYnGkDXcVm/1QpbarcKUUQ35xRgnQ9VV5EFj2fQJ7IpAz KHzgF5bviQ25vLW2rOM7+d1x2+TAjGhUYzaogCskioGYDpFEFM0= -----END CERTIFICATE-----Generated at Thu Mar 26 16:25:29 2026 by rpki-client