$ rpki-client -vvf repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft File: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft (raw, json) Hash identifier: 43pfBlKPF3C5hJQhS/VLmUDgs7xvcl2KfeFTdxJS97w= Subject key identifier: E5:60:51:3A:96:42:96:BC:04:7F:6C:28:E5:84:7A:1D:21:3E:8F:49 Authority key identifier: 1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 Certificate issuer: /CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Certificate serial: 069FA5CEFAC2522CBCFFF60E300B8FE9D1742AA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject info access: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft Manifest number: 02BC Signing time: Tue 24 Mar 2026 16:12:18 +0000 Manifest this update: Tue 24 Mar 2026 16:07:18 +0000 Manifest next update: Sat 28 Mar 2026 00:34:18 +0000 Files and hashes: 1: 1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl (hash: 52JYen9bypwTZLckDAsXuqWQ0LnnBIbSS7yjG7wu6yg=) 2: 3130332e3137362e3138322e302f32332d3234203d3e20313437313332.roa (hash: 3b02tyVyXZeMs6y0uPPq0P29J4NxhIV9FAqBTSQpOwg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 00:34:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:9f:a5:ce:fa:c2:52:2c:bc:ff:f6:0e:30:0b:8f:e9:d1:74:2a:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BD753D8CEFFB0C4CBB19A2E15765EC32333A873 Validity Not Before: Mar 24 16:07:18 2026 GMT Not After : Mar 28 00:34:18 2026 GMT Subject: CN=E560513A964296BC047F6C28E5847A1D213E8F49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:7e:fb:40:5c:1f:99:4f:82:69:1a:69:49:da: 57:ff:09:3b:b5:a9:d5:1c:93:ee:8f:4a:ba:00:05: d0:89:0c:ff:e8:40:1d:a7:35:32:b8:c1:f1:b8:47: 64:6e:2c:98:cb:df:7e:4b:5e:54:c5:00:e9:dd:cf: e4:21:df:98:d9:e3:0a:f1:90:0c:82:03:d2:d1:22: 84:4e:20:1a:46:fb:ea:2d:9e:0d:ba:e4:f2:71:53: 91:80:87:b5:73:cc:63:2f:82:23:b0:77:1d:9c:7f: 35:fe:7f:1d:72:e2:6f:88:f3:99:0a:02:0a:d6:bc: c9:4e:12:b4:9f:57:c0:9c:35:a9:7c:27:f1:b3:20: fc:78:15:d7:d1:f4:aa:64:74:6c:34:b8:cb:00:a0: b5:51:17:09:74:0b:7a:0e:ae:da:0f:ec:0c:31:7d: 1b:09:44:3c:7b:25:a2:8b:15:e8:06:e1:28:ef:a5: 82:58:c3:11:c9:7a:24:2d:e7:d1:d1:1d:18:f4:7a: 59:8e:9b:12:9f:50:5a:ee:16:d1:41:67:6f:f0:15: 64:e4:a0:e9:e1:a2:67:e2:98:08:63:e6:4a:36:fc: ed:69:dd:8c:5d:13:5a:8c:6b:1f:b0:40:84:ff:3e: ef:72:a3:33:31:57:97:e4:fb:2e:42:69:ed:c4:72: 6e:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:60:51:3A:96:42:96:BC:04:7F:6C:28:E5:84:7A:1D:21:3E:8F:49 X509v3 Authority Key Identifier: keyid:1B:D7:53:D8:CE:FF:B0:C4:CB:B1:9A:2E:15:76:5E:C3:23:33:A8:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/70e6fd81-b877-4f7c-abc6-082fcbea189f/0/1BD753D8CEFFB0C4CBB19A2E15765EC32333A873.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:fd:c8:d7:82:af:30:ec:ba:3d:97:fe:5e:98:02:d9:d7:91: 03:39:ed:80:a4:ef:a7:74:03:c4:a1:1a:e5:7b:e7:49:b0:08: 7c:60:9e:21:f1:02:97:86:9e:c7:12:37:a7:68:3e:08:9b:72: 92:0a:64:0a:96:a2:18:b2:50:82:2f:a0:c1:00:97:82:62:e4: aa:46:b7:04:07:fb:10:1d:a2:8c:95:a3:b0:b1:bd:48:a0:83: c7:ab:06:ca:c2:0b:7f:7b:ca:43:3a:2b:6c:8e:bd:aa:d0:8c: 09:ec:8a:40:22:11:4d:ef:7c:05:f3:e8:14:fd:be:9a:a3:be: c8:aa:4e:d0:c1:fd:9b:7d:df:4b:39:4e:a3:bd:df:ea:d7:67: 9e:6d:e3:ca:1c:17:c4:16:49:01:32:63:65:27:a5:0b:82:72: d3:b5:cf:4e:98:33:b7:73:97:88:63:ee:04:a8:6c:46:8a:cf: 1d:e8:18:33:36:cf:0d:b0:1f:56:3b:ab:00:ae:67:2f:70:15: d9:4f:94:f3:51:af:27:d7:8c:54:79:2f:6c:9f:05:7b:65:a5: 5c:db:c9:a3:6b:17:b5:d5:37:a6:01:cf:f5:d0:cc:09:13:78: 24:b3:4f:8d:3f:b6:b7:2a:ac:66:b9:04:55:97:8b:77:1f:95: 95:eb:f6:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBp+lzvrCUiy8//YOMAuP6dF0KqYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMy MzMzQTg3MzAeFw0yNjAzMjQxNjA3MThaFw0yNjAzMjgwMDM0MThaMDMxMTAvBgNV BAMTKEU1NjA1MTNBOTY0Mjk2QkMwNDdGNkMyOEU1ODQ3QTFEMjEzRThGNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrfvtAXB+ZT4JpGmlJ2lf/CTu1 qdUck+6PSroABdCJDP/oQB2nNTK4wfG4R2RuLJjL335LXlTFAOndz+Qh35jZ4wrx kAyCA9LRIoROIBpG++otng265PJxU5GAh7VzzGMvgiOwdx2cfzX+fx1y4m+I85kK AgrWvMlOErSfV8CcNal8J/GzIPx4FdfR9KpkdGw0uMsAoLVRFwl0C3oOrtoP7Awx fRsJRDx7JaKLFegG4SjvpYJYwxHJeiQt59HRHRj0elmOmxKfUFruFtFBZ2/wFWTk oOnhomfimAhj5ko2/O1p3YxdE1qMax+wQIT/Pu9yozMxV5fk+y5Cae3Ecm4bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WBROpZClrwEf2wo5YR6HSE+j0kwHwYDVR0j BBgwFoAUG9dT2M7/sMTLsZouFXZewyMzqHMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MGU2ZmQ4MS1iODc3LTRmN2MtYWJjNi0wODJmY2JlYTE4OWYvMC8xQkQ3NTNEOENF RkZCMEM0Q0JCMTlBMkUxNTc2NUVDMzIzMzNBODczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVFQzMyMzMz QTg3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzBlNmZkODEtYjg3Ny00ZjdjLWFi YzYtMDgyZmNiZWExODlmLzAvMUJENzUzRDhDRUZGQjBDNENCQjE5QTJFMTU3NjVF QzMyMzMzQTg3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJD9yNeCrzDsuj2X/l6YAtnXkQM57YCk76d0 A8ShGuV750mwCHxgniHxApeGnscSN6doPgibcpIKZAqWohiyUIIvoMEAl4Ji5KpG twQH+xAdooyVo7CxvUigg8erBsrCC397ykM6K2yOvarQjAnsikAiEU3vfAXz6BT9 vpqjvsiqTtDB/Zt930s5TqO93+rXZ55t48ocF8QWSQEyY2UnpQuCctO1z06YM7dz l4hj7gSobEaKzx3oGDM2zw2wH1Y7qwCuZy9wFdlPlPNRryfXjFR5L2yfBXtlpVzb yaNrF7XVN6YBz/XQzAkTeCSzT40/trcqrGa5BFWXi3cflZXr9u0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:32:14 2026 by rpki-client