$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: EnB1Ksd195RhPiWl8K7/5fBwDBqVABzB1K4VzPQVn7Q= Subject key identifier: F5:0E:5A:7A:44:C1:BF:4D:C4:11:3C:77:A6:63:70:FA:05:DE:C1:05 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 71562D0B0812EEEEC284B2F8A0ACE3017189C5B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 0222 Signing time: Thu 26 Mar 2026 05:11:53 +0000 Manifest this update: Thu 26 Mar 2026 05:06:53 +0000 Manifest next update: Sun 29 Mar 2026 06:53:53 +0000 Files and hashes: 1: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: DNl39/mBFriSY+yAbFNv5IvO8NwnFXR9IFLxWW/Mp8A=) 2: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: HKLsheyFBInUiaRgw8Klw1MJDMbLM2+SrSvU3xYlmos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:53:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:56:2d:0b:08:12:ee:ee:c2:84:b2:f8:a0:ac:e3:01:71:89:c5:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Mar 26 05:06:53 2026 GMT Not After : Mar 29 06:53:53 2026 GMT Subject: CN=F50E5A7A44C1BF4DC4113C77A66370FA05DEC105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:57:58:81:84:78:12:df:c3:f7:f2:a5:52:b8: 2a:52:54:32:6f:a6:de:8d:05:3a:49:61:0b:e6:f0: 60:f4:04:5e:21:e1:f9:bf:d9:9d:d2:f4:fc:01:f5: 1b:8a:64:a6:54:d2:21:bb:18:2a:01:35:03:3f:0f: 6e:f1:9e:06:db:4b:2c:71:e6:d0:6e:65:f1:cd:3c: a1:76:a6:0c:ea:64:a9:19:9c:91:38:30:88:8b:ee: d3:2f:41:ba:e7:5e:44:91:fc:50:da:06:a6:ec:23: ea:ac:ad:1b:e4:2b:d2:8f:7a:2d:0a:d2:98:3c:d7: 6a:1e:fb:aa:ca:95:9e:64:74:5c:a4:3c:72:31:5a: ca:21:64:62:66:7a:e7:52:a9:61:bd:df:f6:92:8d: 4d:b9:05:37:d0:30:36:e8:96:16:14:cd:65:1e:87: 52:1c:96:d7:27:f3:e3:5c:31:bd:57:40:ef:37:c5: 9d:2c:e5:60:d1:cd:ab:d1:ce:ab:c8:08:1e:87:f2: 95:9e:ec:1f:1e:30:60:2c:da:94:a4:fd:53:9d:02: e8:66:dc:0f:01:18:0f:94:40:13:b9:8e:de:c3:58: bd:16:ec:ad:52:e3:e1:ff:8e:5c:cf:eb:ce:ee:6b: 33:61:88:0c:e2:c0:2a:06:c7:6a:63:3c:92:e4:2a: 4e:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:0E:5A:7A:44:C1:BF:4D:C4:11:3C:77:A6:63:70:FA:05:DE:C1:05 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:1b:ab:61:b7:eb:d2:c9:93:16:78:16:9b:fa:c5:3c:39:9d: 31:47:d3:99:18:95:0a:c2:49:7e:d6:df:e3:3f:eb:1b:d2:b3: 20:8e:30:a1:c0:04:5c:26:10:be:56:41:83:78:34:77:7f:b4: da:57:32:7a:f7:d8:1b:28:a4:81:2b:e2:85:26:74:f3:09:62: c1:e7:f9:4d:93:7c:8e:20:ea:43:a0:a6:d4:e3:31:67:51:d9: bb:5b:b1:e0:b7:e2:2c:71:37:6e:02:f7:36:ca:c9:43:16:5d: 72:c0:c8:4a:e5:b2:97:e9:e7:fc:25:f0:e2:b7:df:fc:08:4b: 53:41:84:bf:39:23:ea:c7:c7:72:68:83:c3:ef:8c:50:75:1e: 94:74:a7:cf:b6:4d:08:e8:53:4b:83:07:85:16:e7:47:6e:d5: 04:15:a4:68:1d:be:df:db:2b:c8:ba:46:25:58:22:bd:8d:ae: 63:06:5b:62:0b:84:12:8c:dd:18:b4:a6:20:23:19:68:93:80: f4:d2:9e:fe:ef:4f:57:eb:bb:b4:49:8a:76:01:6f:9c:e0:f1: 5c:3d:9f:3e:06:32:f1:06:88:13:41:f7:a3:89:96:96:16:94: 13:1e:84:6a:d3:3b:7e:5c:a5:e7:f8:e4:07:6c:ad:a2:4d:3f: b5:85:b9:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcVYtCwgS7u7ChLL4oKzjAXGJxbkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNjAzMjYwNTA2NTNaFw0yNjAzMjkwNjUzNTNaMDMxMTAvBgNV BAMTKEY1MEU1QTdBNDRDMUJGNERDNDExM0M3N0E2NjM3MEZBMDVERUMxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPV1iBhHgS38P38qVSuCpSVDJv pt6NBTpJYQvm8GD0BF4h4fm/2Z3S9PwB9RuKZKZU0iG7GCoBNQM/D27xngbbSyxx 5tBuZfHNPKF2pgzqZKkZnJE4MIiL7tMvQbrnXkSR/FDaBqbsI+qsrRvkK9KPei0K 0pg812oe+6rKlZ5kdFykPHIxWsohZGJmeudSqWG93/aSjU25BTfQMDbolhYUzWUe h1Icltcn8+NcMb1XQO83xZ0s5WDRzavRzqvICB6H8pWe7B8eMGAs2pSk/VOdAuhm 3A8BGA+UQBO5jt7DWL0W7K1S4+H/jlzP687uazNhiAziwCoGx2pjPJLkKk4XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Q5aekTBv03EETx3pmNw+gXewQUwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0bq2G369LJkxZ4Fpv6xTw5nTFH05kYlQrC SX7W3+M/6xvSsyCOMKHABFwmEL5WQYN4NHd/tNpXMnr32BsopIEr4oUmdPMJYsHn +U2TfI4g6kOgptTjMWdR2btbseC34ixxN24C9zbKyUMWXXLAyErlspfp5/wl8OK3 3/wIS1NBhL85I+rHx3Jog8PvjFB1HpR0p8+2TQjoU0uDB4UW50du1QQVpGgdvt/b K8i6RiVYIr2NrmMGW2ILhBKM3Ri0piAjGWiTgPTSnv7vT1fru7RJinYBb5zg8Vw9 nz4GMvEGiBNB96OJlpYWlBMehGrTO35cpef45AdsraJNP7WFuVI= -----END CERTIFICATE-----Generated at Thu Mar 26 21:20:15 2026 by rpki-client