$ rpki-client -vvf repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft File: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft (raw, json) Hash identifier: lQovx0cUs+PwnCd5B8LQAgs3029TXMnplhVzHLEK1Uc= Subject key identifier: 1F:32:52:8C:DF:05:38:69:04:71:C7:F9:A1:97:7F:E6:2D:A0:C9:C4 Authority key identifier: 1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A Certificate issuer: /CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Certificate serial: 0C92A294BE4BA836F3E90E7601A68CFF72976E05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft Manifest number: D6 Signing time: Thu 26 Mar 2026 00:04:19 +0000 Manifest this update: Wed 25 Mar 2026 23:59:19 +0000 Manifest next update: Sun 29 Mar 2026 09:03:19 +0000 Files and hashes: 1: 1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl (hash: zqU5TQXOw7nNffudDOg80bNvmL9Q4xJkfsduee0L+0Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:03:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:92:a2:94:be:4b:a8:36:f3:e9:0e:76:01:a6:8c:ff:72:97:6e:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D024B7DF6A4F54213C50C405AE1E37B8521B49A Validity Not Before: Mar 25 23:59:19 2026 GMT Not After : Mar 29 09:03:19 2026 GMT Subject: CN=1F32528CDF0538690471C7F9A1977FE62DA0C9C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:ac:17:45:04:60:ce:9d:cf:22:a3:86:c7:f8: 51:f8:6f:ff:b0:c5:eb:f7:11:46:8f:57:04:46:93: af:b6:90:8f:fb:f0:04:9d:af:69:cd:c3:22:34:9a: 52:e1:fa:75:9c:89:63:45:2c:af:c6:99:a3:ed:79: 66:42:46:89:69:a1:ea:64:86:3a:80:6f:a9:be:44: 11:db:db:fb:96:73:d9:9c:d0:c6:76:27:03:0d:27: a9:9c:98:ce:ee:14:20:36:47:64:4a:51:a3:b0:2a: ad:30:73:1a:45:ae:d1:50:d4:fc:a9:11:fa:ed:ef: fb:a6:9a:82:71:a0:32:8a:19:ba:22:03:7c:a3:1d: ba:10:53:2c:e9:bf:f6:79:bb:df:0c:21:d4:60:89: 6e:89:19:e3:d2:ce:12:86:52:87:dd:cd:a0:fc:8d: 5b:d3:44:a1:23:eb:e7:ed:5c:de:7e:d5:6c:5e:ee: ee:11:37:6c:a4:72:14:8a:4d:fa:4e:83:c6:63:82: 72:ec:fb:96:11:27:14:3b:7d:a6:88:5a:46:4f:36: 6d:0d:d2:fe:64:cd:95:27:3d:8a:fb:9e:98:86:69: 95:3a:69:fb:f6:8d:70:0f:a3:24:34:dd:a6:28:c6: 33:ad:ce:2c:8e:8b:b3:1a:dc:61:f3:29:d2:9c:7f: c1:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:32:52:8C:DF:05:38:69:04:71:C7:F9:A1:97:7F:E6:2D:A0:C9:C4 X509v3 Authority Key Identifier: keyid:1D:02:4B:7D:F6:A4:F5:42:13:C5:0C:40:5A:E1:E3:7B:85:21:B4:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a13de3ec-4d3c-4402-a7b8-8a1b96226e75/1/1D024B7DF6A4F54213C50C405AE1E37B8521B49A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:92:2c:d0:67:15:2d:88:fd:45:15:18:d2:93:dd:dc:32:f6: 5d:1b:9f:6b:c2:7a:1b:24:30:02:3b:ad:10:34:a4:46:b2:a6: 7d:cb:9b:69:31:ec:ab:5c:25:78:53:53:fc:a4:a6:ec:08:67: da:1a:1c:c1:7f:32:5e:64:8f:58:22:12:5e:6e:e0:9a:51:71: 0d:6d:cc:bd:31:46:5c:34:d6:d0:fc:be:73:00:b9:93:c5:7c: d7:20:78:28:f4:c3:65:c8:69:e2:9f:72:20:81:b5:d8:5a:57: 6f:26:0b:49:21:dc:d0:ca:4d:ba:32:85:33:4a:25:6f:b3:90: d4:83:77:a5:c8:dd:7d:63:20:01:3a:7d:ad:f9:be:31:27:f0: c0:7e:58:95:eb:7c:3c:a3:14:d4:3a:e5:fb:42:49:3d:30:49: 7b:42:5e:f1:d2:eb:8d:eb:f4:04:33:28:78:2b:df:54:b1:60: 4c:db:7c:e8:32:1a:27:6a:e8:43:2c:68:60:e2:b4:7f:fc:f9: 9c:a0:21:07:e9:4d:e5:bb:d0:31:62:a9:4e:f4:d4:74:58:a5: f4:0b:3a:22:4d:c5:50:a8:26:14:a6:59:a0:6e:69:df:0e:3e: de:aa:66:f0:51:b9:e4:f3:b8:da:9c:75:a0:95:75:93:f0:05: 0a:d0:c5:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDJKilL5LqDbz6Q52AaaM/3KXbgUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4 NTIxQjQ5QTAeFw0yNjAzMjUyMzU5MTlaFw0yNjAzMjkwOTAzMTlaMDMxMTAvBgNV BAMTKDFGMzI1MjhDREYwNTM4NjkwNDcxQzdGOUExOTc3RkU2MkRBMEM5QzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDarBdFBGDOnc8io4bH+FH4b/+w xev3EUaPVwRGk6+2kI/78ASdr2nNwyI0mlLh+nWciWNFLK/GmaPteWZCRolpoepk hjqAb6m+RBHb2/uWc9mc0MZ2JwMNJ6mcmM7uFCA2R2RKUaOwKq0wcxpFrtFQ1Pyp Efrt7/ummoJxoDKKGboiA3yjHboQUyzpv/Z5u98MIdRgiW6JGePSzhKGUofdzaD8 jVvTRKEj6+ftXN5+1Wxe7u4RN2ykchSKTfpOg8ZjgnLs+5YRJxQ7faaIWkZPNm0N 0v5kzZUnPYr7npiGaZU6afv2jXAPoyQ03aYoxjOtziyOi7Ma3GHzKdKcf8HjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHzJSjN8FOGkEccf5oZd/5i2gycQwHwYDVR0j BBgwFoAUHQJLffak9UITxQxAWuHje4UhtJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTNkZTNlYy00ZDNjLTQ0MDItYTdiOC04YTFiOTYyMjZlNzUvMS8xRDAyNEI3REY2 QTRGNTQyMTNDNTBDNDA1QUUxRTM3Qjg1MjFCNDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUzN0I4NTIx QjQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEzZGUzZWMtNGQzYy00NDAyLWE3 YjgtOGExYjk2MjI2ZTc1LzEvMUQwMjRCN0RGNkE0RjU0MjEzQzUwQzQwNUFFMUUz N0I4NTIxQjQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICSLNBnFS2I/UUVGNKT3dwy9l0bn2vCehsk MAI7rRA0pEaypn3Lm2kx7KtcJXhTU/ykpuwIZ9oaHMF/Ml5kj1giEl5u4JpRcQ1t zL0xRlw01tD8vnMAuZPFfNcgeCj0w2XIaeKfciCBtdhaV28mC0kh3NDKTboyhTNK JW+zkNSDd6XI3X1jIAE6fa35vjEn8MB+WJXrfDyjFNQ65ftCST0wSXtCXvHS643r 9AQzKHgr31SxYEzbfOgyGidq6EMsaGDitH/8+ZygIQfpTeW70DFiqU701HRYpfQL OiJNxVCoJhSmWaBuad8OPt6qZvBRueTzuNqcdaCVdZPwBQrQxSE= -----END CERTIFICATE-----Generated at Thu Mar 26 22:27:58 2026 by rpki-client