$ rpki-client -vvf repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft File: 1C49A098778B751B36DDC816E9E5106C08F3E99E.mft (raw, json) Hash identifier: aQ644iI21pCeVadD9p5BhJ7zpWvQhK5DvURvClz5GgY= Subject key identifier: 05:84:79:21:E0:A3:6A:6C:FB:5E:F1:50:55:C7:3C:2F:3B:0E:75:CC Authority key identifier: 1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E Certificate issuer: /CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Certificate serial: 71691B6DB4D29A6143A3C81CA495AA1034FB9447 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft Manifest number: 026A Signing time: Tue 24 Mar 2026 21:00:46 +0000 Manifest this update: Tue 24 Mar 2026 20:55:46 +0000 Manifest next update: Sat 28 Mar 2026 02:04:46 +0000 Files and hashes: 1: 1C49A098778B751B36DDC816E9E5106C08F3E99E.crl (hash: Y4eM9tNhS0tD6spEH/KyBOzKQ6/bnFCjSbRr1x0+gDk=) 2: 3130332e3137372e3138382e302f32342d3234203d3e20313439333533.roa (hash: tnbiCaMjB/wcfly5HgYg5Hs8RqnmeGK4G33+Ng72LlI=) 3: 3130332e3137372e3138392e302f32342d3234203d3e20313439333533.roa (hash: puq2H8zvnhoSbMetrd+BHkvHPZyYcgU1qmlh4ZB0qEo=) 4: 3130332e3137372e3138382e302f32332d3233203d3e20313439333533.roa (hash: Rc2DErsyjigrY0WguoKyWlWN27lUZbqBBcHG2nvqvJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:04:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:69:1b:6d:b4:d2:9a:61:43:a3:c8:1c:a4:95:aa:10:34:fb:94:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C49A098778B751B36DDC816E9E5106C08F3E99E Validity Not Before: Mar 24 20:55:46 2026 GMT Not After : Mar 28 02:04:46 2026 GMT Subject: CN=05847921E0A36A6CFB5EF15055C73C2F3B0E75CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:1f:9f:71:33:4b:08:7b:09:9c:c3:52:39:f1: 20:d2:88:e7:ab:28:47:e6:0a:68:db:54:fb:04:45: 46:8b:b1:43:5e:ae:b4:71:75:8f:55:f9:f9:02:51: 3d:67:63:59:0f:39:65:bb:89:e1:fe:41:4a:78:f8: b3:e5:15:f5:cd:8c:8f:37:3b:c8:99:15:38:78:78: 0b:2e:81:1a:9b:78:49:19:99:56:43:15:99:0e:74: 72:5d:dc:87:c1:4f:2f:ca:1d:ce:c0:1a:a1:4e:8c: b8:44:e5:ac:64:23:b9:92:57:18:0e:bd:4f:85:20: 8a:46:4a:05:6b:1e:7d:6d:6e:5d:63:3c:07:e3:38: 15:c4:19:03:10:ea:c9:47:8f:4a:49:65:fa:ab:fa: 50:c8:ae:14:b5:f0:ce:86:6c:32:2e:a5:7c:e8:59: e7:9c:44:9b:15:8e:74:6c:d5:97:c0:bb:e9:64:66: 00:1e:28:3c:1e:10:f6:07:86:cb:28:b8:60:e7:d3: be:17:65:c9:da:6f:22:dd:cd:04:0d:b9:0d:82:90: 33:6d:e8:74:a5:59:d9:e7:97:80:a4:ae:ba:44:99: d6:0d:05:63:f2:98:6e:af:84:72:3f:44:6b:58:8e: 2d:f0:69:3c:c3:c8:38:ae:10:9c:5b:c1:97:a2:00: 70:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:84:79:21:E0:A3:6A:6C:FB:5E:F1:50:55:C7:3C:2F:3B:0E:75:CC X509v3 Authority Key Identifier: keyid:1C:49:A0:98:77:8B:75:1B:36:DD:C8:16:E9:E5:10:6C:08:F3:E9:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C49A098778B751B36DDC816E9E5106C08F3E99E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8392f899-e83c-4706-a9a1-82256bd48236/0/1C49A098778B751B36DDC816E9E5106C08F3E99E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:48:4a:c6:da:af:71:bc:a5:fe:9f:8c:50:fc:68:1a:e0:31: 05:47:c4:0f:70:0c:52:12:0d:14:02:5c:b9:fe:06:b4:18:58: 27:8f:6f:4a:a4:e3:aa:4f:2c:02:a6:6c:bb:61:dd:42:3b:ea: 43:f9:80:50:60:88:73:f9:b0:f0:31:b1:23:59:53:2d:57:47: f2:84:1a:b6:7f:72:0d:92:89:0f:dc:ed:2f:9e:1e:36:d5:89: 1b:29:38:45:16:1b:eb:60:45:8c:bc:4e:1b:ee:c5:c0:f8:bb: b2:46:9a:47:9f:15:9c:a5:77:98:1b:8e:6d:a1:ce:01:d3:86: e1:c2:79:5c:18:54:3d:e8:bf:ab:bd:78:46:2f:4f:37:e3:25: 3d:e7:cc:a6:f3:a1:b7:ff:cb:9d:bb:f0:ea:3c:7e:4d:38:92: 66:71:41:c6:23:4a:8b:8c:0c:fb:a5:af:2b:be:29:6b:3d:59: 6c:a9:79:f9:bd:b5:9b:26:75:0f:23:22:d7:79:73:91:dd:7f: 6d:5c:b5:bc:73:c6:8e:6c:76:0d:25:5f:d6:2b:ee:7e:21:c0: d1:65:31:b6:93:64:bc:cf:69:61:f3:e0:11:12:d9:26:82:17: d5:6b:b9:38:a0:27:09:f4:fe:52:54:b1:27:c1:92:c3:0d:88: c4:cf:cd:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcWkbbbTSmmFDo8gcpJWqEDT7lEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMw OEYzRTk5RTAeFw0yNjAzMjQyMDU1NDZaFw0yNjAzMjgwMjA0NDZaMDMxMTAvBgNV BAMTKDA1ODQ3OTIxRTBBMzZBNkNGQjVFRjE1MDU1QzczQzJGM0IwRTc1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLH59xM0sIewmcw1I58SDSiOer KEfmCmjbVPsERUaLsUNerrRxdY9V+fkCUT1nY1kPOWW7ieH+QUp4+LPlFfXNjI83 O8iZFTh4eAsugRqbeEkZmVZDFZkOdHJd3IfBTy/KHc7AGqFOjLhE5axkI7mSVxgO vU+FIIpGSgVrHn1tbl1jPAfjOBXEGQMQ6slHj0pJZfqr+lDIrhS18M6GbDIupXzo WeecRJsVjnRs1ZfAu+lkZgAeKDweEPYHhssouGDn074XZcnabyLdzQQNuQ2CkDNt 6HSlWdnnl4CkrrpEmdYNBWPymG6vhHI/RGtYji3waTzDyDiuEJxbwZeiAHBVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYR5IeCjamz7XvFQVcc8LzsOdcwwHwYDVR0j BBgwFoAUHEmgmHeLdRs23cgW6eUQbAjz6Z4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzkyZjg5OS1lODNjLTQ3MDYtYTlhMS04MjI1NmJkNDgyMzYvMC8xQzQ5QTA5ODc3 OEI3NTFCMzZEREM4MTZFOUU1MTA2QzA4RjNFOTlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEwNkMwOEYz RTk5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM5MmY4OTktZTgzYy00NzA2LWE5 YTEtODIyNTZiZDQ4MjM2LzAvMUM0OUEwOTg3NzhCNzUxQjM2RERDODE2RTlFNTEw NkMwOEYzRTk5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxISsbar3G8pf6fjFD8aBrgMQVHxA9wDFIS DRQCXLn+BrQYWCePb0qk46pPLAKmbLth3UI76kP5gFBgiHP5sPAxsSNZUy1XR/KE GrZ/cg2SiQ/c7S+eHjbViRspOEUWG+tgRYy8ThvuxcD4u7JGmkefFZyld5gbjm2h zgHThuHCeVwYVD3ov6u9eEYvTzfjJT3nzKbzobf/y5278Oo8fk04kmZxQcYjSouM DPulryu+KWs9WWypefm9tZsmdQ8jItd5c5Hdf21ctbxzxo5sdg0lX9Yr7n4hwNFl MbaTZLzPaWHz4BES2SaCF9VruTigJwn0/lJUsSfBksMNiMTPzVw= -----END CERTIFICATE-----Generated at Thu Mar 26 17:25:59 2026 by rpki-client