$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: 2RivldItl+vGpS+HNURJB/9iK0qFM1r5pfuC1PuT0IM= Subject key identifier: 42:0E:82:17:72:B2:67:FD:5E:55:92:9B:52:A9:23:4A:C5:46:24:4D Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 3D6AF99F9D660EADD390BBB0A76B21A87B279445 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 0529 Signing time: Wed 25 Mar 2026 19:40:47 +0000 Manifest this update: Wed 25 Mar 2026 19:35:47 +0000 Manifest next update: Sun 29 Mar 2026 03:57:47 +0000 Files and hashes: 1: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 2: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 4: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: OV9jpilN4pCruIselR2O+WzQl3JizAFIoAvozqIBWCk=) 5: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:6a:f9:9f:9d:66:0e:ad:d3:90:bb:b0:a7:6b:21:a8:7b:27:94:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Mar 25 19:35:47 2026 GMT Not After : Mar 29 03:57:47 2026 GMT Subject: CN=420E821772B267FD5E55929B52A9234AC546244D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:51:49:8f:22:d7:1f:21:46:7a:25:de:9d:4f: d6:85:75:b7:3f:85:a2:77:2d:80:08:dd:83:00:5d: db:79:9c:90:4e:92:88:e5:a8:1e:a1:af:42:d8:93: f6:54:b4:85:f4:8f:cd:a5:fe:c5:8b:06:43:ee:7d: c9:51:ec:ba:75:c9:a7:84:6e:0d:45:ce:72:59:4b: ac:b4:73:53:e5:c6:86:25:48:f7:7b:4b:89:78:94: 15:f4:ce:6e:f7:b4:d2:28:a1:34:17:8f:56:5a:da: 66:6c:76:0d:91:8c:a0:89:19:87:a1:08:a0:34:64: 27:21:1f:d1:a7:4b:a5:e0:55:d0:51:70:59:bc:e4: b6:32:2e:ae:f5:8f:bf:8c:b5:c8:1b:13:24:27:28: c5:2e:84:b8:a4:55:a2:f4:c4:11:f6:4f:9d:5b:7d: c6:10:48:11:52:6f:52:43:28:a3:93:d9:d4:e9:24: fe:c7:eb:98:f4:2d:a0:b1:97:f0:4a:6d:8f:b5:be: 01:26:9f:ae:2f:b8:bd:ab:0b:91:37:5a:d8:56:47: 1d:bb:e5:fd:b9:db:3f:39:eb:63:5c:53:8a:60:fb: 90:c9:e6:28:44:e9:e1:f8:0d:3d:a0:90:da:68:79: e0:1d:b4:89:f9:23:c9:f8:51:b7:f4:89:2d:7e:49: 8f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:0E:82:17:72:B2:67:FD:5E:55:92:9B:52:A9:23:4A:C5:46:24:4D X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:d1:c4:e8:bf:ae:d4:5b:e5:79:fb:d7:fd:39:e6:e4:e5:ec: 58:6f:51:1b:10:36:16:c2:e0:30:21:aa:a6:12:8c:84:c2:48: 48:e7:01:ae:f7:d9:10:b3:28:e1:88:1c:9c:9b:94:9e:29:8f: f9:d0:2b:fe:09:97:00:00:f0:b3:00:4f:29:05:d6:25:3c:f6: f7:32:24:1e:dd:d4:d8:be:7b:5b:14:f0:f8:86:6a:f9:4e:3b: 0e:0a:df:36:d3:6a:d7:cd:f5:bd:ba:b0:b2:83:73:30:9c:06: 50:24:e6:af:52:5d:2b:57:af:97:b7:e1:f0:b7:a7:63:9f:a2: da:52:1c:9b:37:99:b5:d2:56:11:4b:f3:a4:14:13:8e:b1:37: 2e:06:ce:69:86:69:e1:89:ac:4e:b9:41:ff:04:27:5d:36:70: 3d:6e:e8:0d:27:30:da:3d:c2:55:53:6e:70:e0:c7:a6:e4:6c: c5:49:db:c3:b4:0b:87:1d:31:22:56:3e:cf:f1:cb:5c:48:c6: d5:eb:30:2a:e4:2d:e0:4e:46:23:3d:8c:6e:26:9b:66:9a:a2: 4e:1d:c1:7f:62:b2:62:06:1c:8d:70:25:ad:25:50:51:49:76: ba:5a:48:be:51:3d:39:09:91:8c:1e:99:b3:86:8f:05:23:45: fa:1b:94:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPWr5n51mDq3TkLuwp2shqHsnlEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNjAzMjUxOTM1NDdaFw0yNjAzMjkwMzU3NDdaMDMxMTAvBgNV BAMTKDQyMEU4MjE3NzJCMjY3RkQ1RTU1OTI5QjUyQTkyMzRBQzU0NjI0NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcUUmPItcfIUZ6Jd6dT9aFdbc/ haJ3LYAI3YMAXdt5nJBOkojlqB6hr0LYk/ZUtIX0j82l/sWLBkPufclR7Lp1yaeE bg1FznJZS6y0c1PlxoYlSPd7S4l4lBX0zm73tNIooTQXj1Za2mZsdg2RjKCJGYeh CKA0ZCchH9GnS6XgVdBRcFm85LYyLq71j7+MtcgbEyQnKMUuhLikVaL0xBH2T51b fcYQSBFSb1JDKKOT2dTpJP7H65j0LaCxl/BKbY+1vgEmn64vuL2rC5E3WthWRx27 5f252z8562NcU4pg+5DJ5ihE6eH4DT2gkNpoeeAdtIn5I8n4Ubf0iS1+SY9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQg6CF3KyZ/1eVZKbUqkjSsVGJE0wHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJXRxOi/rtRb5Xn71/055uTl7FhvURsQNhbC 4DAhqqYSjITCSEjnAa732RCzKOGIHJyblJ4pj/nQK/4JlwAA8LMATykF1iU89vcy JB7d1Ni+e1sU8PiGavlOOw4K3zbTatfN9b26sLKDczCcBlAk5q9SXStXr5e34fC3 p2OfotpSHJs3mbXSVhFL86QUE46xNy4GzmmGaeGJrE65Qf8EJ102cD1u6A0nMNo9 wlVTbnDgx6bkbMVJ28O0C4cdMSJWPs/xy1xIxtXrMCrkLeBORiM9jG4mm2aaok4d wX9ismIGHI1wJa0lUFFJdrpaSL5RPTkJkYwembOGjwUjRfoblFo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:55:29 2026 by rpki-client