$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: di9IejgCruVg2etdVmd8TPkSdZgKppoDjI0Gzu3tc+o= Subject key identifier: 7B:43:CD:30:1C:00:5B:6C:1C:30:B0:F6:1D:8E:05:B1:FC:77:DF:FE Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 5574C9DA9D410FE9AF62D60C8058585DDF6F7185 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 0122 Signing time: Tue 24 Mar 2026 09:44:29 +0000 Manifest this update: Tue 24 Mar 2026 09:39:29 +0000 Manifest next update: Fri 27 Mar 2026 20:13:29 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: 3cO3jFlR1C/kKIJbYo+B3OddJnNU2SlIAfLOX17vTZ0=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 20:13:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:74:c9:da:9d:41:0f:e9:af:62:d6:0c:80:58:58:5d:df:6f:71:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Mar 24 09:39:29 2026 GMT Not After : Mar 27 20:13:29 2026 GMT Subject: CN=7B43CD301C005B6C1C30B0F61D8E05B1FC77DFFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:df:70:c6:56:0d:ad:21:32:b4:60:33:60:0a: c5:dd:dd:5c:cf:52:44:e6:95:53:7d:6e:87:bf:fa: 61:78:7c:b0:4a:ab:03:76:9c:3a:30:15:23:51:ea: b6:e9:f1:14:2f:70:d8:a5:32:8c:e8:89:a1:f0:7c: c5:63:1e:fd:fc:12:f4:6f:5a:e8:64:8a:1f:91:ec: 8f:64:c3:3a:a3:5e:fa:02:b4:b8:c8:c0:14:9d:e7: d9:fb:cc:fc:f8:20:b6:e9:c4:03:f2:b5:74:d5:bd: 81:11:61:03:cf:2d:66:68:e8:26:34:2b:65:5d:f1: b3:1c:0b:b2:4b:62:83:1a:4e:5a:19:22:6b:08:73: a1:d2:16:ef:86:87:a9:c4:ba:f4:84:eb:c9:f6:68: 96:b8:f2:ea:17:b2:73:25:f5:94:9c:14:93:c9:29: b8:08:20:d6:ae:d6:94:c4:f6:f6:12:27:18:15:b7: de:ba:82:7e:0e:1a:e3:90:f0:7d:e2:8b:3f:09:d7: 48:06:78:07:58:fa:2d:bc:88:51:90:99:57:a8:80: e9:e3:d6:a2:90:3a:b8:2f:19:eb:48:53:b4:6a:09: 06:8a:83:0d:29:fe:e0:42:89:95:20:12:cd:65:b6: 70:1f:28:2f:45:59:5e:de:e8:22:0c:51:af:8d:5d: 7f:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:43:CD:30:1C:00:5B:6C:1C:30:B0:F6:1D:8E:05:B1:FC:77:DF:FE X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:70:dd:50:77:5b:ac:eb:30:13:ea:ff:52:64:d6:22:00:b9: 11:25:b2:79:a2:b3:3f:76:16:e2:9f:30:f9:df:cf:c6:54:61: 1f:eb:33:94:48:ff:e8:8b:04:eb:7d:2b:eb:40:52:a6:70:e9: d8:43:77:85:9a:dc:53:5c:5a:f6:62:8b:f6:ff:2b:b2:48:38: 3c:41:aa:ec:e5:18:5b:eb:67:04:6e:46:90:56:4a:95:5f:f7: a7:7a:e2:64:20:51:20:a2:3e:17:ec:a8:c8:d1:cf:ac:5f:69: 00:66:b2:d4:37:16:08:61:c9:17:cd:db:35:be:46:f2:99:f5: 69:dc:b2:61:a9:08:99:37:b7:1e:88:c6:1a:a3:4e:d3:0b:56: a6:3b:20:bc:79:e9:c0:ad:17:f2:ad:01:d7:2b:3d:5a:a1:a0: 77:25:0c:0e:d0:af:a0:72:68:fe:d6:82:bd:1d:fe:db:7f:4c: 4e:3a:eb:56:a6:cf:16:b2:c1:58:1c:1c:ce:f8:87:8c:e3:5b: f0:dc:d1:48:3d:9d:1a:a8:11:72:02:29:f3:67:47:53:09:eb: 99:ea:4a:1b:18:fe:4e:b4:fc:25:9a:bf:d8:22:01:e3:bf:15: a2:54:32:fc:5c:a7:85:8b:31:71:08:6a:4d:60:a3:4a:af:a4: 68:73:f2:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVXTJ2p1BD+mvYtYMgFhYXd9vcYUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNjAzMjQwOTM5MjlaFw0yNjAzMjcyMDEzMjlaMDMxMTAvBgNV BAMTKDdCNDNDRDMwMUMwMDVCNkMxQzMwQjBGNjFEOEUwNUIxRkM3N0RGRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe33DGVg2tITK0YDNgCsXd3VzP UkTmlVN9boe/+mF4fLBKqwN2nDowFSNR6rbp8RQvcNilMozoiaHwfMVjHv38EvRv Wuhkih+R7I9kwzqjXvoCtLjIwBSd59n7zPz4ILbpxAPytXTVvYERYQPPLWZo6CY0 K2Vd8bMcC7JLYoMaTloZImsIc6HSFu+Gh6nEuvSE68n2aJa48uoXsnMl9ZScFJPJ KbgIINau1pTE9vYSJxgVt966gn4OGuOQ8H3iiz8J10gGeAdY+i28iFGQmVeogOnj 1qKQOrgvGetIU7RqCQaKgw0p/uBCiZUgEs1ltnAfKC9FWV7e6CIMUa+NXX8dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe0PNMBwAW2wcMLD2HY4Fsfx33/4wHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA9w3VB3W6zrMBPq/1Jk1iIAuRElsnmisz92 FuKfMPnfz8ZUYR/rM5RI/+iLBOt9K+tAUqZw6dhDd4Wa3FNcWvZii/b/K7JIODxB quzlGFvrZwRuRpBWSpVf96d64mQgUSCiPhfsqMjRz6xfaQBmstQ3FghhyRfN2zW+ RvKZ9WncsmGpCJk3tx6IxhqjTtMLVqY7ILx56cCtF/KtAdcrPVqhoHclDA7Qr6By aP7Wgr0d/tt/TE4661amzxaywVgcHM74h4zjW/Dc0Ug9nRqoEXICKfNnR1MJ65nq ShsY/k60/CWav9giAeO/FaJUMvxcp4WLMXEIak1go0qvpGhz8oQ= -----END CERTIFICATE-----Generated at Thu Mar 26 16:45:08 2026 by rpki-client