$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft File: 1160709118182E564A6D9E250FF5000EFA5166A5.mft (raw, json) Hash identifier: KTGN+NKICOCFGaSkz3gnXFCxg5b3nbVnFtOvExj8qrY= Subject key identifier: DE:D3:F8:1F:CF:C6:EF:FB:1E:92:F2:0D:DD:A5:C4:E1:FA:76:4A:4A Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 Certificate issuer: /CN=1160709118182E564A6D9E250FF5000EFA5166A5 Certificate serial: 1DD81E6C23C16FEB5EFC806341E1CC97A701AB29 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft Manifest number: 01EC Signing time: Wed 25 Mar 2026 03:11:30 +0000 Manifest this update: Wed 25 Mar 2026 03:06:30 +0000 Manifest next update: Sat 28 Mar 2026 13:38:30 +0000 Files and hashes: 1: 3130332e38362e3131362e302f32332d3233203d3e20313530353532.roa (hash: gK1xwa1IRVWzH9jnWujpMkoyIuM1Zd6H+mqdxxClcIU=) 2: 3130332e38362e3131362e302f32342d3234203d3e20313530353532.roa (hash: /s0/dWuKDJ5KcMV4TcCY6m4gQJ9kiuXe231l853zFcE=) 3: 1160709118182E564A6D9E250FF5000EFA5166A5.crl (hash: ipLv/upzTPudqTMc4ljLk0IbDzZlvPw6gvvU859Sfrc=) 4: 3130332e38362e3131372e302f32342d3234203d3e20313530353532.roa (hash: BXImbGD0gQ/N6bJsY3EceoekzYvvly2E1FsJUbVpe+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:38:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:d8:1e:6c:23:c1:6f:eb:5e:fc:80:63:41:e1:cc:97:a7:01:ab:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5 Validity Not Before: Mar 25 03:06:30 2026 GMT Not After : Mar 28 13:38:30 2026 GMT Subject: CN=DED3F81FCFC6EFFB1E92F20DDDA5C4E1FA764A4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:3e:fb:c8:57:38:f5:68:8f:cb:59:d9:c6:39: 1d:df:f0:5f:cd:c3:89:70:fe:61:33:f3:cb:a8:e8: 9f:a4:e4:4c:98:3b:3d:a7:5e:b0:99:80:34:09:29: 52:90:df:50:df:3e:37:b3:47:5e:65:79:1e:bf:a6: 6a:16:7e:6e:57:79:22:08:b3:62:23:a6:ee:2c:fa: 29:10:fd:7c:a0:8c:4c:7a:b1:5f:df:89:8d:92:22: 98:6f:4a:fe:b2:8e:1d:43:d0:25:c5:01:f1:89:27: 2b:fa:83:95:33:77:05:97:94:86:19:8e:20:c2:cc: cf:9b:f2:0f:11:87:d7:b3:6b:9d:56:7c:68:6f:63: 0f:6e:89:d4:21:e3:6b:cb:b0:cc:a6:bf:c9:b3:e1: a2:91:f4:12:2b:b8:51:9d:13:ac:64:bb:e1:35:19: 32:85:59:92:24:cb:4b:6a:e8:89:a0:8e:c1:33:4c: 7a:7d:97:1b:05:ad:c3:29:b4:d7:5b:21:c1:50:18: dc:88:03:05:11:47:22:04:f1:c5:31:2a:d4:4f:a4: 3c:0e:31:93:b6:ef:04:ad:47:5a:9c:a0:ea:a3:b1: 95:54:a7:7e:c0:c3:c9:d5:c0:12:2d:19:12:a8:2d: c9:46:7c:72:f8:6f:01:4b:da:92:81:bf:4b:97:83: 4b:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:D3:F8:1F:CF:C6:EF:FB:1E:92:F2:0D:DD:A5:C4:E1:FA:76:4A:4A X509v3 Authority Key Identifier: keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:4d:7a:b9:53:fb:b8:6d:25:0d:14:08:68:4b:9f:60:6e:e8: 1b:76:96:0a:61:5b:54:ca:5f:a8:02:9b:51:ed:2d:df:88:5e: c4:76:b5:82:19:1b:b7:85:7c:e3:12:3e:e1:6d:b9:3c:55:22: 9f:6e:15:6b:76:f5:ec:01:1c:0b:f4:04:a7:b3:f7:f8:64:b3: 53:1c:7b:33:ec:d2:ec:ff:9d:79:9a:ef:45:e4:32:76:44:d4: 06:e4:5e:93:f7:92:17:d6:e9:77:17:d5:65:53:63:f0:a9:b0: 6a:18:e9:31:3c:13:67:5a:fb:d1:b4:70:e2:5f:6d:41:d4:ac: 0e:79:ef:4f:1c:f0:f4:94:c2:24:57:b8:23:ed:06:7e:e1:e3: ce:f2:4e:10:6e:46:bd:c9:c6:f8:ad:16:73:cd:b0:66:86:83: e9:fb:3d:40:f6:3e:a6:9a:9b:37:1d:36:6c:13:76:b4:5a:53: 88:bf:a4:9a:29:35:49:c5:52:fe:62:f3:6d:91:53:a7:de:5f: d8:81:6e:1e:9e:b0:db:88:ce:6c:96:8c:49:7c:9f:4e:e1:84: 33:2e:ac:63:50:3b:b4:9a:7d:be:20:79:1a:63:2a:a9:95:11: dd:1c:65:19:3e:4e:dc:98:7e:d2:17:61:0d:ee:f4:40:9a:c0: d4:9f:2c:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdgebCPBb+te/IBjQeHMl6cBqykwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVG QTUxNjZBNTAeFw0yNjAzMjUwMzA2MzBaFw0yNjAzMjgxMzM4MzBaMDMxMTAvBgNV BAMTKERFRDNGODFGQ0ZDNkVGRkIxRTkyRjIwREREQTVDNEUxRkE3NjRBNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsPvvIVzj1aI/LWdnGOR3f8F/N w4lw/mEz88uo6J+k5EyYOz2nXrCZgDQJKVKQ31DfPjezR15leR6/pmoWfm5XeSII s2Ijpu4s+ikQ/XygjEx6sV/fiY2SIphvSv6yjh1D0CXFAfGJJyv6g5UzdwWXlIYZ jiDCzM+b8g8Rh9eza51WfGhvYw9uidQh42vLsMymv8mz4aKR9BIruFGdE6xku+E1 GTKFWZIky0tq6ImgjsEzTHp9lxsFrcMptNdbIcFQGNyIAwURRyIE8cUxKtRPpDwO MZO27wStR1qcoOqjsZVUp37Aw8nVwBItGRKoLclGfHL4bwFL2pKBv0uXg0sHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3tP4H8/G7/sekvIN3aXE4fp2SkowHwYDVR0j BBgwFoAUEWBwkRgYLlZKbZ4lD/UADvpRZqUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTcxOGY2Yi1iNTE2LTQzYWUtYjU4OS04M2EyNWZhYTMwYmUvMC8xMTYwNzA5MTE4 MTgyRTU2NEE2RDlFMjUwRkY1MDAwRUZBNTE2NkE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAwMEVGQTUx NjZBNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODk3MThmNmItYjUxNi00M2FlLWI1 ODktODNhMjVmYWEzMGJlLzAvMTE2MDcwOTExODE4MkU1NjRBNkQ5RTI1MEZGNTAw MEVGQTUxNjZBNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADZNerlT+7htJQ0UCGhLn2Bu6Bt2lgphW1TK X6gCm1HtLd+IXsR2tYIZG7eFfOMSPuFtuTxVIp9uFWt29ewBHAv0BKez9/hks1Mc ezPs0uz/nXma70XkMnZE1AbkXpP3khfW6XcX1WVTY/CpsGoY6TE8E2da+9G0cOJf bUHUrA55708c8PSUwiRXuCPtBn7h487yThBuRr3JxvitFnPNsGaGg+n7PUD2Pqaa mzcdNmwTdrRaU4i/pJopNUnFUv5i822RU6feX9iBbh6esNuIzmyWjEl8n07hhDMu rGNQO7Safb4geRpjKqmVEd0cZRk+TtyYftIXYQ3u9ECawNSfLHI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:55:29 2026 by rpki-client