$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: XX4+E4F/izyNXP/lomWEUJMguN/NoeXTY+IrudD62aY= Subject key identifier: 4E:9A:12:1C:9C:A4:6E:2A:F8:0F:70:C4:2F:46:01:8E:FB:E1:31:0E Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 2EBE04CE259A0D8F18BD64D263A10664667623DF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 0124 Signing time: Wed 25 Mar 2026 11:51:15 +0000 Manifest this update: Wed 25 Mar 2026 11:46:15 +0000 Manifest next update: Sat 28 Mar 2026 13:46:15 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: 9e66Nv32h0OdoWOdqS/22D2IHykD0LVtk4wTwcAmGJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:be:04:ce:25:9a:0d:8f:18:bd:64:d2:63:a1:06:64:66:76:23:df Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Mar 25 11:46:15 2026 GMT Not After : Mar 28 13:46:15 2026 GMT Subject: CN=4E9A121C9CA46E2AF80F70C42F46018EFBE1310E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:26:a4:54:c6:7f:84:f8:41:4f:d8:61:95:e9: 08:88:60:ac:c3:d7:bd:4a:88:23:e1:52:82:13:d1: 19:68:24:7d:f5:7c:66:c0:18:dd:b2:c7:3f:a1:a9: fe:00:8e:2e:31:88:45:c4:00:fb:dd:e0:7b:b7:39: 2b:5c:1c:6e:42:8c:88:95:de:e6:8b:16:ff:39:ce: ad:3d:fa:24:eb:30:82:6d:44:f8:35:d1:31:9b:7f: 9e:18:07:7b:a2:81:cd:bc:20:be:a9:7b:e0:65:1f: dc:79:81:60:58:40:88:6f:6f:7e:6b:6d:0b:b7:b1: e6:8b:72:e5:43:e6:cf:98:f6:16:58:ca:d2:52:5c: d2:1e:0e:db:81:3c:b5:4d:ef:b3:22:2d:85:ae:da: 76:96:69:44:7a:14:0d:b7:a4:85:87:23:2e:60:b8: 46:0a:51:26:fb:5d:3e:79:07:54:b0:43:39:67:78: 91:74:d1:8c:0c:e0:de:8a:41:17:86:fa:10:76:04: f5:0a:2b:be:84:ab:ce:fe:60:ea:12:fc:36:31:30: ae:ee:5a:b4:b9:99:8c:6f:9f:d7:6e:b5:d6:6d:4e: e6:ec:a3:42:fb:9a:82:10:4c:80:f6:5c:f4:71:dc: 37:5b:a0:da:ca:f1:2f:71:88:2e:8f:61:28:73:1a: 7d:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:9A:12:1C:9C:A4:6E:2A:F8:0F:70:C4:2F:46:01:8E:FB:E1:31:0E X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:58:c4:68:b8:c9:8f:90:c0:bc:c4:1a:83:a9:9d:f8:4e:f6: 9b:f3:b7:ea:cc:74:77:79:1c:f6:5e:29:6c:c0:51:8a:2a:87: e8:5e:c5:e7:42:53:93:30:1e:2d:1f:b6:b9:3d:ad:4b:db:cb: 52:78:16:6d:81:0d:3f:67:31:e7:1d:6d:cc:66:b6:00:ea:76: df:87:05:2a:e3:dc:6d:8e:ce:8f:d7:0a:86:c5:ee:6e:30:af: db:1e:52:9b:f2:6c:de:e9:22:cc:b8:ba:75:97:0e:32:e5:1e: c7:3c:1a:05:d3:34:04:79:2d:49:ea:28:80:a1:9e:dc:f8:9f: a5:ab:f1:2a:83:60:10:e9:36:e5:70:af:fb:c0:9a:b2:a0:89: 43:6e:f6:9f:2f:cb:9d:d5:31:71:aa:e9:fe:64:f1:dd:20:b3: d1:7a:3b:d3:7b:1a:d1:b2:7f:a5:a2:de:4f:cd:88:f0:7b:11: 37:43:85:a2:47:4f:08:38:f5:92:bc:79:7b:c9:28:26:83:3b: 77:74:39:c3:5b:fc:f7:fa:4e:6a:1a:42:57:e3:41:53:b4:17: 87:75:c2:df:49:75:b4:22:c7:16:6e:24:3b:ff:bb:64:4a:4a: af:a8:83:53:d4:71:f9:f3:03:5f:86:28:35:a3:06:31:a3:d8: ca:cd:88:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULr4EziWaDY8YvWTSY6EGZGZ2I98wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNjAzMjUxMTQ2MTVaFw0yNjAzMjgxMzQ2MTVaMDMxMTAvBgNV BAMTKDRFOUExMjFDOUNBNDZFMkFGODBGNzBDNDJGNDYwMThFRkJFMTMxMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1JqRUxn+E+EFP2GGV6QiIYKzD 171KiCPhUoIT0RloJH31fGbAGN2yxz+hqf4Aji4xiEXEAPvd4Hu3OStcHG5CjIiV 3uaLFv85zq09+iTrMIJtRPg10TGbf54YB3uigc28IL6pe+BlH9x5gWBYQIhvb35r bQu3seaLcuVD5s+Y9hZYytJSXNIeDtuBPLVN77MiLYWu2naWaUR6FA23pIWHIy5g uEYKUSb7XT55B1SwQzlneJF00YwM4N6KQReG+hB2BPUKK76Eq87+YOoS/DYxMK7u WrS5mYxvn9dutdZtTubso0L7moIQTID2XPRx3DdboNrK8S9xiC6PYShzGn3LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTpoSHJykbir4D3DEL0YBjvvhMQ4wHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJRYxGi4yY+QwLzEGoOpnfhO9pvzt+rMdHd5 HPZeKWzAUYoqh+hexedCU5MwHi0ftrk9rUvby1J4Fm2BDT9nMecdbcxmtgDqdt+H BSrj3G2Ozo/XCobF7m4wr9seUpvybN7pIsy4unWXDjLlHsc8GgXTNAR5LUnqKICh ntz4n6Wr8SqDYBDpNuVwr/vAmrKgiUNu9p8vy53VMXGq6f5k8d0gs9F6O9N7GtGy f6Wi3k/NiPB7ETdDhaJHTwg49ZK8eXvJKCaDO3d0OcNb/Pf6TmoaQlfjQVO0F4d1 wt9JdbQixxZuJDv/u2RKSq+og1PUcfnzA1+GKDWjBjGj2MrNiKg= -----END CERTIFICATE-----Generated at Thu Mar 26 21:25:08 2026 by rpki-client