$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: CgpfOI8C8Q98qtMnH/PtpeUceV1epEvcbhXqpI8MyH4= Subject key identifier: 2C:5C:C6:77:54:32:86:73:1A:84:53:9E:AC:2C:EA:1C:53:55:A6:D3 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 6FAA00D3F870F3029320103E477E4C29AB505F5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 04CE Signing time: Wed 25 Mar 2026 01:12:34 +0000 Manifest this update: Wed 25 Mar 2026 01:07:34 +0000 Manifest next update: Sat 28 Mar 2026 06:50:34 +0000 Files and hashes: 1: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: albvQXpSAgyr8DJciJUYST74w0445MU5NPBHUgeUUrw=) 2: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: Puzw6btCdPQ2KOCDFFaL2opEFaU1YVpimShuXfVUo3Y=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: 5tvhyREjxfe/DJlZ9wBpFrEXCdu8eQWjVSLlHduznyg=) 4: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: ygjycUROLuuycgQmlGFdBviRnTHP36unF91EN7REwu4=) 5: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: 52WZwGRv+Wo5hswd/uRmdKS5RbkBGKSp3qw8Zcv5xAA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:50:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:aa:00:d3:f8:70:f3:02:93:20:10:3e:47:7e:4c:29:ab:50:5f:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Mar 25 01:07:34 2026 GMT Not After : Mar 28 06:50:34 2026 GMT Subject: CN=2C5CC677543286731A84539EAC2CEA1C5355A6D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:75:da:2b:c9:4f:38:ae:f7:7c:a6:a7:48:50: 34:59:fe:19:47:f6:aa:f1:ac:5c:85:45:35:ee:a0: ca:32:14:1a:30:b9:52:b8:43:e4:ed:77:a6:15:f0: 93:39:09:ad:a7:6e:8e:bf:ef:30:a1:15:66:f9:fc: 47:59:75:5d:64:0f:51:bc:e8:3d:88:8f:51:09:88: 91:72:ef:1e:61:41:94:28:bb:cb:c2:0a:72:1e:16: 88:c7:03:e3:f4:b1:cc:4f:74:3f:8f:53:13:c7:6c: 65:a5:d0:80:bb:72:f2:79:af:ba:93:02:ea:2f:9c: 33:24:f4:c4:c2:f3:88:64:1d:f8:86:0d:8f:37:f4: 7c:63:c8:e3:3c:87:f6:55:6a:b6:13:31:6c:b3:49: 23:4f:0a:28:17:5a:e0:78:5b:90:54:78:d9:fc:7f: 72:5b:79:5c:8a:ae:64:af:d4:34:02:72:ee:c5:2f: 0b:02:cf:fe:40:d6:23:18:a0:44:bd:5f:2c:7e:74: 82:c7:e3:00:1a:d2:0b:63:0c:15:41:6c:b9:73:c7: 56:a3:66:a5:e4:de:67:27:18:5c:95:6e:b3:62:0e: 04:0e:cc:4b:6d:98:f4:1b:23:30:84:98:2b:7b:7e: 02:00:45:46:2f:39:d1:41:1f:c4:8b:e9:5a:2e:2a: 01:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:5C:C6:77:54:32:86:73:1A:84:53:9E:AC:2C:EA:1C:53:55:A6:D3 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:6c:59:e0:c7:e8:ff:24:fd:a2:23:91:16:67:46:a6:94:ca: 8f:09:19:a0:d3:1c:1b:a9:a9:e8:dd:d7:5a:e9:68:23:99:fa: cb:fb:53:f0:75:cb:8e:95:e9:d0:09:df:1c:31:fa:92:24:62: fa:e7:a1:cd:fa:e1:b1:b9:3c:97:c6:ff:2f:e2:92:8d:1a:98: df:fd:9f:49:68:a2:de:a6:eb:01:d3:3d:3a:cd:3b:7b:9a:ea: 33:dd:13:5d:41:b7:de:9f:44:17:31:6b:4d:0d:ce:2f:68:85: da:b4:e5:17:ec:60:21:56:63:d4:c1:33:23:2f:89:36:25:d1: 92:e9:8b:36:a1:fe:1a:2d:08:69:23:37:0c:ff:54:02:40:8b: 58:33:18:be:4d:14:35:67:fa:bb:04:79:24:f9:f9:24:6f:3a: ad:ff:3d:70:fa:2b:f5:a1:6a:57:60:bb:38:9b:87:94:f3:ce: f2:16:9f:5d:28:dd:a8:76:f7:c8:2b:0d:6a:8d:71:de:7e:80: 77:e0:c2:c1:6d:17:11:0a:aa:cd:7b:53:5b:81:ee:9e:32:2a: a4:f4:90:4d:1e:44:21:db:63:6f:f7:c2:91:31:b9:31:8f:c2: ca:94:a7:f6:3f:c9:93:86:7c:6a:28:18:1a:17:d8:f4:f2:17: 83:1e:04:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb6oA0/hw8wKTIBA+R35MKatQX18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNjAzMjUwMTA3MzRaFw0yNjAzMjgwNjUwMzRaMDMxMTAvBgNV BAMTKDJDNUNDNjc3NTQzMjg2NzMxQTg0NTM5RUFDMkNFQTFDNTM1NUE2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpddoryU84rvd8pqdIUDRZ/hlH 9qrxrFyFRTXuoMoyFBowuVK4Q+Ttd6YV8JM5Ca2nbo6/7zChFWb5/EdZdV1kD1G8 6D2Ij1EJiJFy7x5hQZQou8vCCnIeFojHA+P0scxPdD+PUxPHbGWl0IC7cvJ5r7qT AuovnDMk9MTC84hkHfiGDY839HxjyOM8h/ZVarYTMWyzSSNPCigXWuB4W5BUeNn8 f3JbeVyKrmSv1DQCcu7FLwsCz/5A1iMYoES9Xyx+dILH4wAa0gtjDBVBbLlzx1aj ZqXk3mcnGFyVbrNiDgQOzEttmPQbIzCEmCt7fgIARUYvOdFBH8SL6VouKgGNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULFzGd1QyhnMahFOerCzqHFNVptMwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBsWeDH6P8k/aIjkRZnRqaUyo8JGaDTHBup qejd11rpaCOZ+sv7U/B1y46V6dAJ3xwx+pIkYvrnoc364bG5PJfG/y/iko0amN/9 n0loot6m6wHTPTrNO3ua6jPdE11Bt96fRBcxa00Nzi9ohdq05RfsYCFWY9TBMyMv iTYl0ZLpizah/hotCGkjNwz/VAJAi1gzGL5NFDVn+rsEeST5+SRvOq3/PXD6K/Wh aldguzibh5TzzvIWn10o3ah298grDWqNcd5+gHfgwsFtFxEKqs17U1uB7p4yKqT0 kE0eRCHbY2/3wpExuTGPwsqUp/Y/yZOGfGooGBoX2PTyF4MeBOk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:37:06 2026 by rpki-client