$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: eJktQmJphhX68a/NT6LiVcq9HLOpuy2FnbidjK6vXZ8= Subject key identifier: CF:DD:3A:94:2B:73:D6:D0:D9:B1:29:ED:A2:22:BD:B4:49:C1:0D:60 Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 0CC8F2E6E2D31276BACE394ACC63FACD8B9F8B75 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 76 Signing time: Wed 25 Mar 2026 09:22:19 +0000 Manifest this update: Wed 25 Mar 2026 09:17:19 +0000 Manifest next update: Sat 28 Mar 2026 17:15:19 +0000 Files and hashes: 1: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: Jt7dqsj1FXPHJ/LLRr6sk3RuMbkHelFR1HodZ+GTEys=) 2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:15:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c8:f2:e6:e2:d3:12:76:ba:ce:39:4a:cc:63:fa:cd:8b:9f:8b:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Mar 25 09:17:19 2026 GMT Not After : Mar 28 17:15:19 2026 GMT Subject: CN=CFDD3A942B73D6D0D9B129EDA222BDB449C10D60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:2f:16:0b:73:2b:ff:da:9e:42:87:98:f2:50: 12:a7:34:2b:b6:42:36:5b:43:6e:59:40:6b:7c:33: 87:f3:60:c1:3d:2a:15:8a:47:d1:72:1d:c6:c2:12: ff:79:ef:d4:58:c2:0c:98:6f:5d:39:23:2e:89:85: 00:5e:e7:ea:93:64:1f:52:28:d7:ee:d2:90:9b:7d: 04:ec:ce:2d:15:e7:32:36:0c:53:9b:7b:2c:28:68: 11:16:63:b6:ac:c8:b8:84:56:ab:2e:a9:a3:18:53: 2b:18:28:02:3a:5b:8e:91:ad:99:ef:7a:79:d5:84: 89:16:9f:c4:a4:8a:fe:84:5e:77:3f:76:8b:2d:03: fe:c6:e4:8b:28:fb:c6:b1:b4:c1:0a:da:e3:7b:1f: f1:09:e7:98:c2:9f:62:65:14:0d:11:2b:6e:a0:cc: 5f:b2:09:8a:38:69:a5:ad:e9:96:e4:0e:8f:9d:75: 62:66:be:9e:b9:77:4b:85:9f:b8:11:fd:25:c6:68: b0:56:15:2f:f1:a5:ae:f2:39:c6:4b:18:6a:9d:06: f8:ad:73:a7:81:8f:f6:48:25:7f:b7:9c:3d:cf:50: fe:4f:62:34:9a:14:a4:64:19:8e:48:bd:cc:bc:bd: 47:81:8d:a4:64:42:cf:93:4d:1e:76:1b:e9:75:f0: bc:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:DD:3A:94:2B:73:D6:D0:D9:B1:29:ED:A2:22:BD:B4:49:C1:0D:60 X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:6f:a7:97:fd:8d:42:44:36:ef:1b:cb:e6:48:fb:04:11:1d: a0:3e:ac:73:3d:63:67:02:66:d2:d6:c3:09:ed:b5:43:fa:5e: ae:b7:2c:b8:46:be:6b:2b:c8:b5:f6:be:61:cb:12:09:36:23: 37:b0:05:e7:15:e1:90:c0:e7:e3:b7:84:b9:35:84:18:6f:f7: c0:c0:f5:98:e3:7e:a9:b0:25:2c:bf:cc:ae:af:f1:07:98:0e: da:10:f9:0d:50:a3:d4:db:38:b7:a5:8d:ab:85:12:52:29:bb: 92:f9:65:4c:0f:4d:ed:50:80:97:38:f7:2a:90:94:07:8a:cb: 72:c8:2c:21:f3:7c:41:fd:48:cc:d7:8e:fb:9c:a7:26:d9:98: 36:1e:3a:13:f4:ab:10:4c:36:df:b2:cc:43:a3:b4:99:2d:2f: 8c:46:f3:03:29:79:3b:69:d1:1f:d6:e9:12:a3:64:16:f6:7e: f4:94:ea:e6:85:c6:27:e1:9d:55:77:32:5a:16:05:03:63:82: a7:2a:fd:e0:28:56:df:d7:e0:9a:69:74:36:4a:5a:5a:36:e0: ef:02:09:74:cd:2b:e3:17:b8:b2:dc:fb:57:1f:51:88:ce:b2: 32:01:45:09:6d:17:f8:4a:00:5c:20:7f:94:ea:b0:6b:03:27: ee:e2:9f:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMjy5uLTEna6zjlKzGP6zYufi3UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNjAzMjUwOTE3MTlaFw0yNjAzMjgxNzE1MTlaMDMxMTAvBgNV BAMTKENGREQzQTk0MkI3M0Q2RDBEOUIxMjlFREEyMjJCREI0NDlDMTBENjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLLxYLcyv/2p5Ch5jyUBKnNCu2 QjZbQ25ZQGt8M4fzYME9KhWKR9FyHcbCEv9579RYwgyYb105Iy6JhQBe5+qTZB9S KNfu0pCbfQTszi0V5zI2DFObeywoaBEWY7asyLiEVqsuqaMYUysYKAI6W46RrZnv ennVhIkWn8Skiv6EXnc/dostA/7G5Iso+8axtMEK2uN7H/EJ55jCn2JlFA0RK26g zF+yCYo4aaWt6ZbkDo+ddWJmvp65d0uFn7gR/SXGaLBWFS/xpa7yOcZLGGqdBvit c6eBj/ZIJX+3nD3PUP5PYjSaFKRkGY5Ivcy8vUeBjaRkQs+TTR52G+l18LzvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz906lCtz1tDZsSntoiK9tEnBDWAwHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANNvp5f9jUJENu8by+ZI+wQRHaA+rHM9Y2cC ZtLWwwnttUP6Xq63LLhGvmsryLX2vmHLEgk2IzewBecV4ZDA5+O3hLk1hBhv98DA 9ZjjfqmwJSy/zK6v8QeYDtoQ+Q1Qo9TbOLeljauFElIpu5L5ZUwPTe1QgJc49yqQ lAeKy3LILCHzfEH9SMzXjvucpybZmDYeOhP0qxBMNt+yzEOjtJktL4xG8wMpeTtp 0R/W6RKjZBb2fvSU6uaFxifhnVV3MloWBQNjgqcq/eAoVt/X4JppdDZKWlo24O8C CXTNK+MXuLLc+1cfUYjOsjIBRQltF/hKAFwgf5TqsGsDJ+7in38= -----END CERTIFICATE-----Generated at Thu Mar 26 10:14:20 2026 by rpki-client