$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: 07wwU4K+5ZlwHUwn8lE+DkRek/pY7NciWaCI5aqudig= Subject key identifier: F4:66:E1:7E:14:84:94:C8:5F:0B:A0:63:30:35:DF:0E:97:68:5E:E9 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 0AB0D59BCFB9387C1A69D0E19716A28783F278E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 83 Signing time: Thu 26 Mar 2026 06:52:03 +0000 Manifest this update: Thu 26 Mar 2026 06:47:03 +0000 Manifest next update: Sun 29 Mar 2026 08:55:03 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: jgVPJeLeJ7eA1bkjbd/tG9jjadyPKSitdCrZ0q4kPNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:55:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b0:d5:9b:cf:b9:38:7c:1a:69:d0:e1:97:16:a2:87:83:f2:78:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Mar 26 06:47:03 2026 GMT Not After : Mar 29 08:55:03 2026 GMT Subject: CN=F466E17E148494C85F0BA0633035DF0E97685EE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e2:16:04:68:cd:86:fe:79:f1:d3:c3:c2:dc: 5b:da:92:92:65:ef:00:ee:83:34:44:27:00:65:fd: ef:36:09:13:c1:20:a7:0e:88:29:e2:47:8a:2e:16: be:87:b8:ee:bf:63:8e:37:29:6f:ea:3d:5a:71:2a: 35:9e:78:71:94:86:83:1c:90:2a:4f:ed:b2:06:23: da:6f:2b:66:4f:c3:0d:2c:43:a6:87:05:c9:ca:db: 36:57:f9:89:1e:61:64:09:3c:a8:f4:f6:79:c1:c0: 40:57:21:94:ca:5d:7b:1a:f3:78:43:e8:b5:8f:ee: 50:82:f8:7d:fe:1a:5b:e8:15:06:15:b4:88:7a:92: 95:b9:1f:64:77:3b:a5:6b:1e:e0:c3:7e:34:6f:1a: 89:98:8c:d1:3a:07:35:b4:71:b8:1d:d2:80:59:e3: 57:a7:a5:2e:60:28:ac:7d:1f:ec:41:86:ef:17:08: d6:bc:6b:1d:4e:73:73:37:22:fb:46:17:9a:2a:86: c4:7c:b8:79:38:dc:40:a3:bf:ba:05:da:96:01:b4: 88:ac:02:67:4d:45:54:a5:a2:3c:e6:d9:1f:f6:a8: 78:61:12:d8:91:93:28:2c:ad:45:29:22:46:70:0b: 24:b8:89:e1:65:5e:ec:0c:ee:5c:65:32:86:43:4d: 8f:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:E1:7E:14:84:94:C8:5F:0B:A0:63:30:35:DF:0E:97:68:5E:E9 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:1d:d6:a2:c2:09:f2:6c:cf:7f:dc:a5:2b:12:9f:f1:0b:a5: ac:30:5b:a2:cc:cf:01:f1:88:ba:9c:99:38:39:40:13:06:bd: e6:a0:3c:15:6c:af:0f:5a:5f:3d:cd:12:a7:3e:b2:1c:13:5b: dc:1a:f6:fc:b8:9a:7d:68:1c:12:cf:18:4c:d4:cb:6d:4a:ff: 11:bc:a3:a2:a1:64:ee:62:30:ac:30:f1:ab:da:6c:d1:f3:6d: d4:04:15:c3:e9:91:c0:fe:58:76:16:1c:fd:cc:4e:10:1f:96: 32:da:f5:aa:31:f9:d6:d5:77:bf:06:ec:ed:1b:07:84:11:6e: 9c:32:84:6d:62:5f:10:37:0f:0e:da:71:1a:be:c6:28:7a:59: f6:ac:9c:02:43:0b:e6:16:c4:40:61:06:4f:c1:e9:84:55:17: ec:fb:83:79:4d:d1:04:11:39:ff:25:32:60:d6:8e:0f:93:80: c6:6b:ab:42:35:4d:22:ea:bd:60:d4:54:e0:ee:d7:51:b2:88: 74:d0:7f:aa:a5:74:93:4c:24:58:cf:92:ac:bd:7e:6a:5b:ac: 22:3b:db:f5:63:ba:10:8b:f0:d6:a8:9d:5b:5c:7e:39:dc:bf: e0:da:01:51:ee:8e:46:2a:98:1d:97:aa:fe:de:d5:36:83:3b: 74:b6:4f:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCrDVm8+5OHwaadDhlxaih4PyeOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNjAzMjYwNjQ3MDNaFw0yNjAzMjkwODU1MDNaMDMxMTAvBgNV BAMTKEY0NjZFMTdFMTQ4NDk0Qzg1RjBCQTA2MzMwMzVERjBFOTc2ODVFRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC4hYEaM2G/nnx08PC3FvakpJl 7wDugzREJwBl/e82CRPBIKcOiCniR4ouFr6HuO6/Y443KW/qPVpxKjWeeHGUhoMc kCpP7bIGI9pvK2ZPww0sQ6aHBcnK2zZX+YkeYWQJPKj09nnBwEBXIZTKXXsa83hD 6LWP7lCC+H3+GlvoFQYVtIh6kpW5H2R3O6VrHuDDfjRvGomYjNE6BzW0cbgd0oBZ 41enpS5gKKx9H+xBhu8XCNa8ax1Oc3M3IvtGF5oqhsR8uHk43ECjv7oF2pYBtIis AmdNRVSlojzm2R/2qHhhEtiRkygsrUUpIkZwCyS4ieFlXuwM7lxlMoZDTY9vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9GbhfhSElMhfC6BjMDXfDpdoXukwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGId1qLCCfJsz3/cpSsSn/ELpawwW6LMzwHx iLqcmTg5QBMGveagPBVsrw9aXz3NEqc+shwTW9wa9vy4mn1oHBLPGEzUy21K/xG8 o6KhZO5iMKww8avabNHzbdQEFcPpkcD+WHYWHP3MThAfljLa9aox+dbVd78G7O0b B4QRbpwyhG1iXxA3Dw7acRq+xih6WfasnAJDC+YWxEBhBk/B6YRVF+z7g3lN0QQR Of8lMmDWjg+TgMZrq0I1TSLqvWDUVODu11GyiHTQf6qldJNMJFjPkqy9fmpbrCI7 2/VjuhCL8NaonVtcfjncv+DaAVHujkYqmB2Xqv7e1TaDO3S2Twk= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:50 2026 by rpki-client