$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: vlvFATf2mW3ow125OsgKQuIWo956ol6kIhgoHZGA6tc= Subject key identifier: B8:AD:45:05:B9:A4:FB:48:A6:93:B5:EA:3C:FC:08:C2:78:E9:78:B0 Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 34E6A8F0BA1B5E66CD5531781F4A0B0F6D58105D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 01C3 Signing time: Wed 25 Mar 2026 22:51:48 +0000 Manifest this update: Wed 25 Mar 2026 22:46:48 +0000 Manifest next update: Sun 29 Mar 2026 02:10:48 +0000 Files and hashes: 1: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: VFnGcwXnn3tti+vlo8m4O6CxL10SN/lYRQn96AGG1uY=) 2: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: QTYZMnwghFNHa1aQd9N+8qyC9Gvq+zTwaSpUCC7zHNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 02:10:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:e6:a8:f0:ba:1b:5e:66:cd:55:31:78:1f:4a:0b:0f:6d:58:10:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Mar 25 22:46:48 2026 GMT Not After : Mar 29 02:10:48 2026 GMT Subject: CN=B8AD4505B9A4FB48A693B5EA3CFC08C278E978B0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:eb:20:61:47:ea:91:f2:7b:ea:ae:6f:f1:3e: d7:9b:a4:37:b7:e7:a3:06:90:a4:03:ac:e9:79:60: f8:e8:58:25:b0:74:4c:3a:ab:ae:26:64:ed:f8:48: d2:21:2c:e2:58:ce:e2:86:a5:3d:51:e1:05:5b:88: 79:49:ec:8a:ac:c9:fb:7c:2d:9c:e5:e5:7e:0c:ed: e6:a1:05:dc:56:0a:b0:1a:79:58:7f:63:5d:f6:c5: 52:e9:10:3e:5e:f3:1e:49:8a:86:a0:9e:9e:99:0a: 1f:2c:92:d6:9b:25:4a:2e:00:02:3a:eb:93:b7:82: 15:2d:f0:ea:57:16:0f:c7:42:87:49:56:c0:d7:64: b0:ca:b4:c9:eb:73:2b:25:78:d3:6a:3e:5a:ec:f8: aa:00:19:87:76:9d:08:ae:8d:52:fd:26:2a:4d:3a: 83:05:1d:a6:d7:b7:8e:8f:77:9d:ee:3f:f7:b1:90: 79:4f:d3:dc:9a:45:30:04:ac:70:08:5b:82:0d:4c: e5:f0:6c:2d:28:7d:27:56:a9:29:82:5e:de:14:4b: f0:25:fc:99:73:4d:13:0a:b9:2a:da:cf:68:cf:87: 5d:ac:ad:83:57:68:93:d3:c2:ac:9a:e1:25:d0:b0: 0f:46:ee:a9:45:5a:dd:d4:71:83:2d:18:b6:28:eb: b4:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:AD:45:05:B9:A4:FB:48:A6:93:B5:EA:3C:FC:08:C2:78:E9:78:B0 X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:58:18:53:79:43:f8:7a:13:c3:d1:06:af:cf:fb:0a:3d:95: 36:4a:67:a1:62:5c:00:95:5f:1a:a4:1e:b7:16:a0:b2:ec:f3: f9:1e:e5:a0:f1:ce:28:95:70:b2:51:45:4c:c4:72:67:54:3a: d1:9c:be:4e:07:ba:f0:2f:39:48:c9:2a:d2:24:9d:1b:8e:fb: 16:3b:f3:0a:a5:49:7e:2f:92:45:2c:50:00:7d:d4:b9:53:12: 13:ae:40:36:8b:0b:92:c2:7b:7b:ac:a6:59:61:d8:e7:43:fb: 1d:54:9d:14:c2:64:d1:4e:d8:3d:96:2f:58:a2:c6:2f:e1:99: 46:6e:84:eb:d8:07:75:a7:8f:be:05:d0:82:1c:ec:6c:77:12: f7:35:da:69:2c:ee:cb:da:7b:27:78:e9:4f:4e:e7:81:53:19: fd:51:27:49:24:2e:51:38:7a:7e:a9:9d:f2:4e:17:bb:30:98: b4:53:10:f4:48:84:16:f8:ed:b3:14:80:b8:13:3f:78:03:26: fd:8f:39:e7:a2:d2:b9:3a:2b:57:8c:c7:4e:1b:23:19:09:09: 26:de:31:c8:5e:70:e6:67:b9:3d:96:01:ca:49:3d:d2:23:fd: 8f:e8:a1:d1:03:88:19:7a:06:5d:77:29:37:f7:f4:38:23:8b: 58:27:cc:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNOao8LobXmbNVTF4H0oLD21YEF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNjAzMjUyMjQ2NDhaFw0yNjAzMjkwMjEwNDhaMDMxMTAvBgNV BAMTKEI4QUQ0NTA1QjlBNEZCNDhBNjkzQjVFQTNDRkMwOEMyNzhFOTc4QjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6yBhR+qR8nvqrm/xPtebpDe3 56MGkKQDrOl5YPjoWCWwdEw6q64mZO34SNIhLOJYzuKGpT1R4QVbiHlJ7Iqsyft8 LZzl5X4M7eahBdxWCrAaeVh/Y132xVLpED5e8x5Jioagnp6ZCh8sktabJUouAAI6 65O3ghUt8OpXFg/HQodJVsDXZLDKtMnrcysleNNqPlrs+KoAGYd2nQiujVL9JipN OoMFHabXt46Pd53uP/exkHlP09yaRTAErHAIW4INTOXwbC0ofSdWqSmCXt4US/Al /JlzTRMKuSraz2jPh12srYNXaJPTwqya4SXQsA9G7qlFWt3UcYMtGLYo67QJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuK1FBbmk+0imk7XqPPwIwnjpeLAwHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJxYGFN5Q/h6E8PRBq/P+wo9lTZKZ6FiXACV XxqkHrcWoLLs8/ke5aDxziiVcLJRRUzEcmdUOtGcvk4HuvAvOUjJKtIknRuO+xY7 8wqlSX4vkkUsUAB91LlTEhOuQDaLC5LCe3uspllh2OdD+x1UnRTCZNFO2D2WL1ii xi/hmUZuhOvYB3Wnj74F0IIc7Gx3Evc12mks7svaeyd46U9O54FTGf1RJ0kkLlE4 en6pnfJOF7swmLRTEPRIhBb47bMUgLgTP3gDJv2POeei0rk6K1eMx04bIxkJCSbe MchecOZnuT2WAcpJPdIj/Y/oodEDiBl6Bl13KTf39Dgji1gnzJs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:25:45 2026 by rpki-client