$ rpki-client -vvf repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft File: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft (raw, json) Hash identifier: /UjcE+aR/EBGwsozw01de3nOW9jDCpxLHKsaIJoWO2U= Subject key identifier: A1:3E:0D:01:5B:68:D7:6F:56:98:CC:47:50:48:1A:BF:81:1B:6F:A6 Authority key identifier: 1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 Certificate issuer: /CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Certificate serial: 2BDA651AEE222C7A20D08EC25F02FB2EF678D5DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject info access: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft Manifest number: 0183 Signing time: Thu 26 Mar 2026 02:00:04 +0000 Manifest this update: Thu 26 Mar 2026 01:55:04 +0000 Manifest next update: Sun 29 Mar 2026 03:22:04 +0000 Files and hashes: 1: 3130332e3136332e31332e302f32342d3234203d3e20313431383839.roa (hash: c6uY286NAKl6e1+QUCIAnDozTBVcXw8V9RD5Jtc/nw8=) 2: 1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl (hash: FKe++QyXElkwRXqr7IZY3evmKRH8mImP3U3+EM4hMFU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:22:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:da:65:1a:ee:22:2c:7a:20:d0:8e:c2:5f:02:fb:2e:f6:78:d5:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CC4D0E2E2BC8B0060718A857657AA82D20E5974 Validity Not Before: Mar 26 01:55:04 2026 GMT Not After : Mar 29 03:22:04 2026 GMT Subject: CN=A13E0D015B68D76F5698CC4750481ABF811B6FA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:47:aa:08:cd:99:46:bc:21:16:0b:8b:d7:20: f3:63:19:4a:8c:bd:a6:9d:49:25:24:b6:b4:bf:56: fd:88:ce:cb:bc:1e:ce:03:70:88:5f:7a:fb:b0:2f: 50:4f:b4:84:dd:e1:a0:7d:76:4c:03:55:16:62:de: e0:d3:3c:01:92:59:a3:3f:55:1b:55:3f:03:14:6b: 31:98:44:9c:dd:aa:06:ed:62:eb:1c:05:88:f7:f2: 18:c6:07:6c:0f:4b:f0:ae:3a:d6:78:f6:7d:af:ee: c3:26:ed:bc:1d:fc:03:58:f4:f2:bf:97:27:3b:cd: 74:2e:b8:aa:18:f9:65:b6:f5:c2:93:a9:5b:e3:4a: e0:56:16:da:ab:55:1c:3f:44:fe:76:bb:04:a0:94: 6b:b5:a7:fe:d6:dd:ba:7f:10:2b:67:88:39:0a:2b: 43:66:ed:75:3d:e2:cb:be:6c:b2:89:28:05:0d:a3: 49:cd:f7:41:f7:50:4c:ab:c9:4e:41:1e:e3:64:19: cb:49:06:07:02:dc:95:58:e3:84:fa:3c:c7:b1:08: 57:fa:37:e6:79:2d:70:ef:d4:8f:a9:a6:5b:62:81: cb:01:64:52:17:34:a5:43:b8:f6:6b:a9:4f:a3:85: 44:4f:f6:29:37:c4:60:a4:f2:30:ad:5c:12:61:18: 3c:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3E:0D:01:5B:68:D7:6F:56:98:CC:47:50:48:1A:BF:81:1B:6F:A6 X509v3 Authority Key Identifier: keyid:1C:C4:D0:E2:E2:BC:8B:00:60:71:8A:85:76:57:AA:82:D2:0E:59:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95df512f-0d1a-4b09-b9a4-a9c525ec2817/0/1CC4D0E2E2BC8B0060718A857657AA82D20E5974.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:f4:53:69:01:99:25:21:6f:66:9f:3a:9d:16:ea:fa:9f:54: 1a:62:97:ff:b6:5c:de:56:32:a6:57:54:11:b1:9e:fa:cd:3f: f0:e8:d9:7b:fb:02:d5:a2:91:f9:79:6c:c7:fe:0d:be:af:37: 84:d0:bc:9e:34:f1:fe:4a:45:0f:3d:54:0c:f5:90:32:d5:7f: 20:33:af:6c:fa:78:3d:f1:64:44:7f:53:01:85:54:ea:73:33: 72:95:ef:88:7c:ce:e9:91:be:51:08:5b:e6:d8:2c:9c:84:d8: b5:7a:79:32:06:a6:d8:42:9b:34:97:50:ea:b4:27:1f:31:85: 67:6d:4c:3d:26:55:c2:48:50:3a:2e:bf:3f:74:e3:fe:1a:0f: c8:ff:aa:16:3e:a6:af:b5:4b:88:e2:10:12:5f:af:be:46:43: 4f:83:e9:02:5b:c4:c0:fb:a4:e5:1d:2c:9e:68:f8:51:cd:20: 9a:50:7c:34:dc:5e:81:2c:2c:ff:82:63:70:66:7d:0a:01:4a: cb:41:95:08:9c:85:97:d2:b7:15:1b:09:39:0e:24:89:99:80: 10:dc:dd:f4:86:a4:7b:b5:fd:36:91:92:9a:10:86:8d:a0:6b: 3a:b3:30:cc:b7:e5:0e:07:89:d3:6a:bf:df:14:1e:a3:99:62: 84:64:39:6c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK9plGu4iLHog0I7CXwL7LvZ41d0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJE MjBFNTk3NDAeFw0yNjAzMjYwMTU1MDRaFw0yNjAzMjkwMzIyMDRaMDMxMTAvBgNV BAMTKEExM0UwRDAxNUI2OEQ3NkY1Njk4Q0M0NzUwNDgxQUJGODExQjZGQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4R6oIzZlGvCEWC4vXIPNjGUqM vaadSSUktrS/Vv2Izsu8Hs4DcIhfevuwL1BPtITd4aB9dkwDVRZi3uDTPAGSWaM/ VRtVPwMUazGYRJzdqgbtYuscBYj38hjGB2wPS/CuOtZ49n2v7sMm7bwd/ANY9PK/ lyc7zXQuuKoY+WW29cKTqVvjSuBWFtqrVRw/RP52uwSglGu1p/7W3bp/ECtniDkK K0Nm7XU94su+bLKJKAUNo0nN90H3UEyryU5BHuNkGctJBgcC3JVY44T6PMexCFf6 N+Z5LXDv1I+ppltigcsBZFIXNKVDuPZrqU+jhURP9ik3xGCk8jCtXBJhGDyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoT4NAVto129WmMxHUEgav4Ebb6YwHwYDVR0j BBgwFoAUHMTQ4uK8iwBgcYqFdleqgtIOWXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NWRmNTEyZi0wZDFhLTRiMDktYjlhNC1hOWM1MjVlYzI4MTcvMC8xQ0M0RDBFMkUy QkM4QjAwNjA3MThBODU3NjU3QUE4MkQyMEU1OTc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FBODJEMjBF NTk3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTVkZjUxMmYtMGQxYS00YjA5LWI5 YTQtYTljNTI1ZWMyODE3LzAvMUNDNEQwRTJFMkJDOEIwMDYwNzE4QTg1NzY1N0FB ODJEMjBFNTk3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADL0U2kBmSUhb2afOp0W6vqfVBpil/+2XN5W MqZXVBGxnvrNP/Do2Xv7AtWikfl5bMf+Db6vN4TQvJ408f5KRQ89VAz1kDLVfyAz r2z6eD3xZER/UwGFVOpzM3KV74h8zumRvlEIW+bYLJyE2LV6eTIGpthCmzSXUOq0 Jx8xhWdtTD0mVcJIUDouvz904/4aD8j/qhY+pq+1S4jiEBJfr75GQ0+D6QJbxMD7 pOUdLJ5o+FHNIJpQfDTcXoEsLP+CY3BmfQoBSstBlQichZfStxUbCTkOJImZgBDc 3fSGpHu1/TaRkpoQho2gazqzMMy35Q4HidNqv98UHqOZYoRkOWw= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:24 2026 by rpki-client