$ rpki-client -vvf repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft File: 1154D920B6A4209131871530AEE1F8B8A3D303D6.mft (raw, json) Hash identifier: nOo+2f/W6xqSRVcztEDWg7/E0npIt03iKdyFfafB+4Q= Subject key identifier: 1E:CF:9D:80:E0:4E:7C:80:C8:9E:5D:E2:EF:51:D2:B4:37:4D:F6:01 Authority key identifier: 11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 Certificate issuer: /CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Certificate serial: 54BF88E37992DCD2BC5A2A33EA9B7FC550A0CC74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft Manifest number: 025D Signing time: Wed 25 Mar 2026 04:03:19 +0000 Manifest this update: Wed 25 Mar 2026 03:58:19 +0000 Manifest next update: Sat 28 Mar 2026 04:52:19 +0000 Files and hashes: 1: 1154D920B6A4209131871530AEE1F8B8A3D303D6.crl (hash: r1P4VLsjAulmzfUkn1fmswWh5TpNJrSp9u32hTreDRQ=) 2: 3130332e3138382e3234392e302f32342d3234203d3e20313439393038.roa (hash: xKO2CXnPQI2NViGwkl0YgPqxk11jmuJGUEqkoy47iBc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 04:52:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:bf:88:e3:79:92:dc:d2:bc:5a:2a:33:ea:9b:7f:c5:50:a0:cc:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1154D920B6A4209131871530AEE1F8B8A3D303D6 Validity Not Before: Mar 25 03:58:19 2026 GMT Not After : Mar 28 04:52:19 2026 GMT Subject: CN=1ECF9D80E04E7C80C89E5DE2EF51D2B4374DF601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:17:2d:30:61:86:cc:2d:30:c0:53:dd:f0:06: 10:0a:e4:b4:8f:9a:51:dd:c9:54:19:f2:1a:66:0e: a9:d8:74:0d:d5:9b:44:dc:a3:cc:fa:48:9a:dd:3b: ca:d5:70:46:75:43:3c:b5:3a:10:6d:52:44:94:a5: c2:76:4f:a7:0c:f1:54:9c:dd:69:66:be:e5:7e:34: 70:db:aa:ad:63:87:51:67:89:d0:4b:85:cc:56:e7: 0c:ae:33:39:dd:ce:09:ad:54:36:cf:6b:79:0a:28: a9:0b:ef:5d:13:ae:ca:27:a7:4e:64:44:bb:a6:b6: d6:ee:15:63:d2:c3:96:1a:97:4b:6c:3d:2d:e4:97: 5e:e6:5f:f0:8e:68:69:a3:4b:48:61:94:89:9d:58: 93:94:af:d5:29:24:1e:37:6e:2c:3e:9d:41:c5:92: 0b:18:6f:d4:1b:b3:b0:95:3a:f5:6b:c1:fb:c2:80: 25:c8:3a:7f:3d:c0:0d:e8:a6:d0:13:8b:76:1f:fd: 82:ff:e3:e1:47:5a:0e:e1:4c:8b:d8:06:13:52:87: df:41:51:f8:ec:29:54:09:27:0d:75:42:40:c2:22: 01:f6:de:db:fb:78:a2:e2:80:52:79:87:e2:ec:bc: d0:96:1e:15:ee:8d:3b:c0:7a:83:d1:c1:f9:df:18: 83:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:CF:9D:80:E0:4E:7C:80:C8:9E:5D:E2:EF:51:D2:B4:37:4D:F6:01 X509v3 Authority Key Identifier: keyid:11:54:D9:20:B6:A4:20:91:31:87:15:30:AE:E1:F8:B8:A3:D3:03:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1154D920B6A4209131871530AEE1F8B8A3D303D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7467ec33-5a72-4c65-9fd3-66ef8479394d/0/1154D920B6A4209131871530AEE1F8B8A3D303D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:45:87:3e:03:3c:32:a8:3a:af:5b:ab:b5:a5:b9:a4:81:83: 76:ef:a9:2b:7e:bb:56:c5:c4:4b:0d:4d:2b:da:a7:f6:71:ca: 8d:1d:46:63:07:c9:3c:05:d2:24:be:7e:99:ff:5f:65:21:d3: f0:da:80:32:74:a9:bd:d2:ef:ea:6c:32:97:86:91:43:8e:c0: 06:3b:97:1f:08:9a:b4:b2:aa:ce:ca:38:7f:00:4f:25:b7:cd: d4:be:d4:7f:33:9f:11:ef:c8:ac:25:13:c3:1b:46:20:7f:98: 07:9c:54:1a:93:c7:be:c6:68:29:8d:61:7d:35:16:e2:4b:6a: a4:23:9a:ed:63:77:b1:f9:76:e8:04:57:fc:14:93:1f:e7:54: 87:ab:2b:06:32:e7:94:30:bd:17:26:ef:cf:a3:ea:c5:51:05: 41:ce:9d:fe:8d:22:43:e2:df:f7:e8:42:d5:d3:2a:50:94:f8: 04:c8:8a:0d:44:31:c4:de:6e:32:ad:e3:5a:b2:b4:b7:6f:49: c7:ec:e9:22:e2:b2:54:b9:17:2c:b6:a6:9f:e1:6f:9b:0b:8b: 22:80:3a:82:f0:91:8f:d0:b7:3d:39:fd:68:64:7c:cc:fb:f3: df:b1:89:38:74:4e:a8:f1:f6:4f:b3:dd:be:ed:e5:8a:67:6d: 28:15:cf:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVL+I43mS3NK8Wioz6pt/xVCgzHQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhB M0QzMDNENjAeFw0yNjAzMjUwMzU4MTlaFw0yNjAzMjgwNDUyMTlaMDMxMTAvBgNV BAMTKDFFQ0Y5RDgwRTA0RTdDODBDODlFNURFMkVGNTFEMkI0Mzc0REY2MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnFy0wYYbMLTDAU93wBhAK5LSP mlHdyVQZ8hpmDqnYdA3Vm0Tco8z6SJrdO8rVcEZ1Qzy1OhBtUkSUpcJ2T6cM8VSc 3WlmvuV+NHDbqq1jh1FnidBLhcxW5wyuMzndzgmtVDbPa3kKKKkL710Trsonp05k RLumttbuFWPSw5Yal0tsPS3kl17mX/COaGmjS0hhlImdWJOUr9UpJB43biw+nUHF kgsYb9Qbs7CVOvVrwfvCgCXIOn89wA3optATi3Yf/YL/4+FHWg7hTIvYBhNSh99B UfjsKVQJJw11QkDCIgH23tv7eKLigFJ5h+LsvNCWHhXujTvAeoPRwfnfGINPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHs+dgOBOfIDInl3i71HStDdN9gEwHwYDVR0j BBgwFoAUEVTZILakIJExhxUwruH4uKPTA9YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY3ZWMzMy01YTcyLTRjNjUtOWZkMy02NmVmODQ3OTM5NGQvMC8xMTU0RDkyMEI2 QTQyMDkxMzE4NzE1MzBBRUUxRjhCOEEzRDMwM0Q2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4QjhBM0Qz MDNENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2N2VjMzMtNWE3Mi00YzY1LTlm ZDMtNjZlZjg0NzkzOTRkLzAvMTE1NEQ5MjBCNkE0MjA5MTMxODcxNTMwQUVFMUY4 QjhBM0QzMDNENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlFhz4DPDKoOq9bq7WluaSBg3bvqSt+u1bF xEsNTSvap/Zxyo0dRmMHyTwF0iS+fpn/X2Uh0/DagDJ0qb3S7+psMpeGkUOOwAY7 lx8ImrSyqs7KOH8ATyW3zdS+1H8znxHvyKwlE8MbRiB/mAecVBqTx77GaCmNYX01 FuJLaqQjmu1jd7H5dugEV/wUkx/nVIerKwYy55QwvRcm78+j6sVRBUHOnf6NIkPi 3/foQtXTKlCU+ATIig1EMcTebjKt41qytLdvScfs6SLislS5Fyy2pp/hb5sLiyKA OoLwkY/Qtz05/WhkfMz789+xiTh0Tqjx9k+z3b7t5YpnbSgVzw4= -----END CERTIFICATE-----Generated at Thu Mar 26 18:59:24 2026 by rpki-client