$ rpki-client -vvf repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft File: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft (raw, json) Hash identifier: KS454wQKRxaWk3GG1bcB0DJCc+nslaud/ubkC5ZCEFw= Subject key identifier: BB:F1:D0:79:37:DE:71:00:42:E0:34:3D:FF:35:98:00:B4:22:CF:00 Authority key identifier: 1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 Certificate issuer: /CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Certificate serial: 771EC045B3641619CEDC66CA657E84495B7F3622 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft Manifest number: 0530 Signing time: Wed 25 Mar 2026 04:42:02 +0000 Manifest this update: Wed 25 Mar 2026 04:37:02 +0000 Manifest next update: Sat 28 Mar 2026 06:07:02 +0000 Files and hashes: 1: 323430363a376234303a3a2f33322d3438203d3e203538383231.roa (hash: 01o8IIdEBMNVP2rARnAtQNMxpIRvEPCoH/cFEbdvFjA=) 2: 3130332e3135362e31342e302f32332d3234203d3e203538383231.roa (hash: lbqLm4gtIn2PpfyD5NIDm37sX2MwPhaC2Wn66mlRkRA=) 3: 1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl (hash: QnqI7boNHTY2tNKt3jvMn+2Ytex2d/iPt+I6g9w1G2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 06:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:1e:c0:45:b3:64:16:19:ce:dc:66:ca:65:7e:84:49:5b:7f:36:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D8D9CBC52934EF02BCD1D478AEBA6A368F80419 Validity Not Before: Mar 25 04:37:02 2026 GMT Not After : Mar 28 06:07:02 2026 GMT Subject: CN=BBF1D07937DE710042E0343DFF359800B422CF00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:05:32:94:01:e6:b9:46:4b:23:ac:60:53:2d: b3:06:de:27:82:e8:e1:a0:c4:14:20:8d:cf:75:8d: 28:db:da:f1:f3:8a:e1:75:ab:f1:cb:6f:27:f8:b9: c8:82:e6:00:e8:86:35:e0:4f:4d:c9:26:28:5b:a3: 77:4b:65:a6:7f:7b:22:53:da:1c:34:7f:4b:62:13: ff:ee:db:9f:27:a9:f1:3f:b8:fc:a7:b8:4d:ce:ba: c3:32:4d:5e:e2:85:1e:03:64:2f:27:96:0f:e2:72: 4e:0f:54:a2:a6:76:06:53:6d:e6:7c:b6:b6:77:5d: f7:6b:38:9d:80:4d:29:f1:b8:d8:0d:2d:37:fb:52: f1:3f:cd:32:9c:66:06:36:4e:52:5a:c2:6c:1a:72: 60:74:2b:0a:f5:f4:ac:33:5a:f7:6c:81:14:60:18: b5:28:1b:d2:f5:d6:4a:97:7f:ed:2d:f2:7d:a1:7d: bb:81:b2:1d:44:ec:2b:9f:c0:d4:9f:9c:9f:65:78: 95:d2:8d:48:fc:62:36:57:83:c7:d3:98:5a:42:7d: f0:c5:a7:8f:92:e5:64:eb:4a:5d:4e:9b:df:9c:25: 19:69:78:24:a4:22:0e:b5:d4:62:3a:5c:17:2a:df: 33:ff:5a:a1:9d:64:d4:7c:39:c2:fe:04:9b:d1:ac: 75:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:F1:D0:79:37:DE:71:00:42:E0:34:3D:FF:35:98:00:B4:22:CF:00 X509v3 Authority Key Identifier: keyid:1D:8D:9C:BC:52:93:4E:F0:2B:CD:1D:47:8A:EB:A6:A3:68:F8:04:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce1ea513-ac6e-4a5f-b3eb-d5352caf486b/0/1D8D9CBC52934EF02BCD1D478AEBA6A368F80419.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:da:b0:be:23:76:5f:78:c6:62:0b:7f:a8:49:e3:8b:aa:d4: 19:53:f3:51:a7:b5:a6:62:1c:36:12:ed:fd:70:34:26:de:64: c6:0e:ac:d7:22:8a:3b:40:60:0c:52:2d:d7:f3:09:11:76:7f: bd:2b:18:66:b7:79:75:e6:7e:e2:fb:e5:ec:55:04:97:23:cc: e9:21:b4:e2:5f:ce:8f:2e:e1:dc:22:92:1c:62:5a:0c:9e:13: f6:14:47:f2:8f:c9:69:30:84:2f:db:8b:23:ee:9d:b4:1a:48: 4f:5c:57:cd:c3:21:de:d6:fd:6c:4a:4d:8a:09:f2:8f:c3:98: 1c:c9:46:2a:fd:fb:b8:bd:91:4f:e0:1e:b0:40:8f:32:e3:e9: bb:ff:e8:40:ac:2d:2b:99:0e:7e:a3:e5:37:2a:7a:a9:3b:be: 9a:0d:57:fd:0f:7f:c9:7a:de:72:b7:5d:eb:6d:bc:2c:4e:7a: 7f:02:92:7a:53:55:06:61:37:24:fa:65:7a:4c:04:76:4a:12: de:b2:14:dc:91:c4:a7:e9:f4:7f:05:76:f8:31:05:8a:a8:c3: 4a:0b:8e:48:e4:79:6c:82:dc:05:d9:05:8b:66:48:99:fa:70: ef:c8:1c:e9:9d:8b:ce:b5:fe:f4:2a:b5:61:6d:b4:46:b4:f3: 02:2c:e5:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdx7ARbNkFhnO3GbKZX6ESVt/NiIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2 OEY4MDQxOTAeFw0yNjAzMjUwNDM3MDJaFw0yNjAzMjgwNjA3MDJaMDMxMTAvBgNV BAMTKEJCRjFEMDc5MzdERTcxMDA0MkUwMzQzREZGMzU5ODAwQjQyMkNGMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDABTKUAea5RksjrGBTLbMG3ieC 6OGgxBQgjc91jSjb2vHziuF1q/HLbyf4uciC5gDohjXgT03JJihbo3dLZaZ/eyJT 2hw0f0tiE//u258nqfE/uPynuE3OusMyTV7ihR4DZC8nlg/ick4PVKKmdgZTbeZ8 trZ3XfdrOJ2ATSnxuNgNLTf7UvE/zTKcZgY2TlJawmwacmB0Kwr19KwzWvdsgRRg GLUoG9L11kqXf+0t8n2hfbuBsh1E7CufwNSfnJ9leJXSjUj8YjZXg8fTmFpCffDF p4+S5WTrSl1Om9+cJRlpeCSkIg611GI6XBcq3zP/WqGdZNR8OcL+BJvRrHVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu/HQeTfecQBC4DQ9/zWYALQizwAwHwYDVR0j BBgwFoAUHY2cvFKTTvArzR1Hiuumo2j4BBkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTFlYTUxMy1hYzZlLTRhNWYtYjNlYi1kNTM1MmNhZjQ4NmIvMC8xRDhEOUNCQzUy OTM0RUYwMkJDRDFENDc4QUVCQTZBMzY4RjgwNDE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2QTM2OEY4 MDQxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UxZWE1MTMtYWM2ZS00YTVmLWIz ZWItZDUzNTJjYWY0ODZiLzAvMUQ4RDlDQkM1MjkzNEVGMDJCQ0QxRDQ3OEFFQkE2 QTM2OEY4MDQxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/asL4jdl94xmILf6hJ44uq1BlT81GntaZi HDYS7f1wNCbeZMYOrNciijtAYAxSLdfzCRF2f70rGGa3eXXmfuL75exVBJcjzOkh tOJfzo8u4dwikhxiWgyeE/YUR/KPyWkwhC/biyPunbQaSE9cV83DId7W/WxKTYoJ 8o/DmBzJRir9+7i9kU/gHrBAjzLj6bv/6ECsLSuZDn6j5Tcqeqk7vpoNV/0Pf8l6 3nK3XettvCxOen8CknpTVQZhNyT6ZXpMBHZKEt6yFNyRxKfp9H8FdvgxBYqow0oL jkjkeWyC3AXZBYtmSJn6cO/IHOmdi861/vQqtWFttEa08wIs5XE= -----END CERTIFICATE-----Generated at Thu Mar 26 09:10:01 2026 by rpki-client