$ rpki-client -vvf repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft File: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft (raw, json) Hash identifier: 3bvV31+qr2xXL9FYRZPVm6UusjQFQkpsg8qR+Ci5jS0= Subject key identifier: A9:A3:30:9C:0B:F6:E6:35:8F:D9:0A:5D:97:67:18:AD:57:62:B6:A0 Authority key identifier: 19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E Certificate issuer: /CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Certificate serial: 2B33688C9AC682E82E5BE0DB052520A64E5234B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft Manifest number: 0280 Signing time: Wed 25 Mar 2026 10:51:39 +0000 Manifest this update: Wed 25 Mar 2026 10:46:39 +0000 Manifest next update: Sat 28 Mar 2026 16:04:39 +0000 Files and hashes: 1: 1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl (hash: Lut3RLckJmaQ1AqcLJf79YQTwR15ufMtyH1NIEhMSgQ=) 2: 3130332e3137372e31312e302f32342d3234203d3e20313437313634.roa (hash: wdg18zJQmcMX1jP6b67v/A0N+8jFBnFGoxqu8Vs9QZM=) 3: 3130332e3137372e31302e302f32342d3234203d3e20313437313634.roa (hash: e866bgD8+WV+E66L19k4qbdrOD68wAEFfxlCAZGgSi4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 16:04:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:33:68:8c:9a:c6:82:e8:2e:5b:e0:db:05:25:20:a6:4e:52:34:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E Validity Not Before: Mar 25 10:46:39 2026 GMT Not After : Mar 28 16:04:39 2026 GMT Subject: CN=A9A3309C0BF6E6358FD90A5D976718AD5762B6A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:11:69:c7:33:d4:ac:d5:70:d0:bc:ed:6b:0a: 39:85:86:ac:6c:59:fa:ae:7e:79:40:82:c9:8b:a1: df:d9:a2:f7:a7:fc:27:09:f4:91:e9:5f:22:33:53: 97:02:44:7a:20:b0:ed:e2:38:33:f4:45:0e:3f:fa: dd:4e:9a:c6:64:08:c2:ec:fd:f0:44:7c:52:8d:07: cf:ab:48:57:a0:bb:6c:05:fe:1e:72:ab:90:5d:71: 62:34:20:d2:9d:91:be:4d:d1:28:a8:6c:a8:9c:16: 2c:7c:63:c7:ae:43:9f:1f:3e:56:5e:cb:d0:03:9f: f7:a8:e9:61:61:3a:37:56:74:9d:ae:93:a3:30:7b: ad:66:ff:ef:94:2b:ac:65:e0:47:f2:ce:d8:9f:47: 04:9e:9b:0a:4e:a6:45:3f:78:7e:83:73:df:b0:ba: eb:f0:9b:6f:b5:ed:37:f6:bf:15:36:8d:7e:d0:d6: 33:2c:e9:88:26:73:75:3e:7d:37:f6:4b:06:92:d1: a8:71:6c:61:d2:2c:d6:e1:ac:bc:e0:b1:b1:a5:a7: 8c:78:8f:a3:4e:ae:24:15:b9:02:b9:fc:da:65:49: 04:c6:96:24:5e:48:2a:2f:57:b1:92:16:7a:13:61: 00:ea:a8:1c:aa:91:80:14:d7:e3:e7:fd:ab:f2:c7: 23:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:A3:30:9C:0B:F6:E6:35:8F:D9:0A:5D:97:67:18:AD:57:62:B6:A0 X509v3 Authority Key Identifier: keyid:19:54:C3:3C:FB:AF:8A:07:2B:A3:B9:0B:3E:83:8D:63:D1:2B:FD:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd196d65-21a8-4b04-a9de-7283fbe3c1cb/0/1954C33CFBAF8A072BA3B90B3E838D63D12BFD2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:33:5e:18:47:f5:d2:b6:b2:ea:4e:c3:4f:fa:45:5d:4e:4a: 58:79:c8:96:b0:b6:db:e9:12:f9:62:d3:9a:d4:04:37:6c:49: 72:79:c0:a2:ad:ea:4e:4f:b6:8f:0c:3d:82:5c:f0:98:42:3e: 51:1a:57:c4:4b:d5:df:dc:0d:1e:74:be:b0:e3:e3:75:d9:fb: 23:ff:30:02:3f:e5:d8:96:3d:e1:4b:67:09:66:ae:c6:6c:4e: 10:35:0f:66:1f:f3:df:3d:35:bf:72:63:11:68:9a:cd:ac:82: a4:ef:86:6c:04:73:79:d2:18:22:9b:5b:b8:73:9a:14:08:8c: 0f:73:b8:26:43:19:75:01:b7:2e:d9:d6:4f:38:5f:cb:5f:26: ab:56:b1:0e:bb:1f:64:de:e5:50:68:bb:dd:ae:74:dc:f2:23: 94:4a:94:31:1a:3b:0b:7e:f2:d8:6e:c1:48:77:25:dc:cc:c1: d8:ae:a1:ea:cc:6c:64:b9:48:82:83:70:bb:25:29:16:44:a7: 82:4f:99:d1:ae:af:3a:f2:fa:20:dd:90:31:cb:6e:cd:4c:de: 76:f2:e2:ce:96:94:46:23:10:45:c0:03:b5:44:d6:ea:05:14: 00:70:75:2d:5b:82:e2:c6:4d:b7:03:8f:86:50:ad:94:75:b1: cf:d2:53:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKzNojJrGguguW+DbBSUgpk5SNLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNE MTJCRkQyRTAeFw0yNjAzMjUxMDQ2MzlaFw0yNjAzMjgxNjA0MzlaMDMxMTAvBgNV BAMTKEE5QTMzMDlDMEJGNkU2MzU4RkQ5MEE1RDk3NjcxOEFENTc2MkI2QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeEWnHM9Ss1XDQvO1rCjmFhqxs WfqufnlAgsmLod/Zoven/CcJ9JHpXyIzU5cCRHogsO3iODP0RQ4/+t1OmsZkCMLs /fBEfFKNB8+rSFegu2wF/h5yq5BdcWI0INKdkb5N0SiobKicFix8Y8euQ58fPlZe y9ADn/eo6WFhOjdWdJ2uk6Mwe61m/++UK6xl4EfyztifRwSemwpOpkU/eH6Dc9+w uuvwm2+17Tf2vxU2jX7Q1jMs6Ygmc3U+fTf2SwaS0ahxbGHSLNbhrLzgsbGlp4x4 j6NOriQVuQK5/NplSQTGliReSCovV7GSFnoTYQDqqByqkYAU1+Pn/avyxyMXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqaMwnAv25jWP2Qpdl2cYrVditqAwHwYDVR0j BBgwFoAUGVTDPPuvigcro7kLPoONY9Er/S4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDE5NmQ2NS0yMWE4LTRiMDQtYTlkZS03MjgzZmJlM2MxY2IvMC8xOTU0QzMzQ0ZC QUY4QTA3MkJBM0I5MEIzRTgzOEQ2M0QxMkJGRDJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhENjNEMTJC RkQyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQxOTZkNjUtMjFhOC00YjA0LWE5 ZGUtNzI4M2ZiZTNjMWNiLzAvMTk1NEMzM0NGQkFGOEEwNzJCQTNCOTBCM0U4MzhE NjNEMTJCRkQyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFMzXhhH9dK2supOw0/6RV1OSlh5yJawttvp Evli05rUBDdsSXJ5wKKt6k5Pto8MPYJc8JhCPlEaV8RL1d/cDR50vrDj43XZ+yP/ MAI/5diWPeFLZwlmrsZsThA1D2Yf8989Nb9yYxFoms2sgqTvhmwEc3nSGCKbW7hz mhQIjA9zuCZDGXUBty7Z1k84X8tfJqtWsQ67H2Te5VBou92udNzyI5RKlDEaOwt+ 8thuwUh3JdzMwdiuoerMbGS5SIKDcLslKRZEp4JPmdGurzry+iDdkDHLbs1M3nby 4s6WlEYjEEXAA7VE1uoFFABwdS1bguLGTbcDj4ZQrZR1sc/SU8w= -----END CERTIFICATE-----Generated at Thu Mar 26 16:14:31 2026 by rpki-client