$ rpki-client -vvf repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft File: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft (raw, json) Hash identifier: x5wcv6eiAiQfawXuY/GqE2+5sOMBNEQKlEk9neBwWlE= Subject key identifier: 7A:5D:A7:E1:03:A3:56:1E:EC:5F:DB:21:67:61:CB:0E:B1:A6:9E:45 Authority key identifier: C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 Certificate issuer: /CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Certificate serial: 2B60677F475CC45F441147CB519978314561CEC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft Manifest number: 0202 Signing time: Wed 25 Mar 2026 18:21:27 +0000 Manifest this update: Wed 25 Mar 2026 18:16:27 +0000 Manifest next update: Sun 29 Mar 2026 03:48:27 +0000 Files and hashes: 1: 3130332e3138362e322e302f32342d3234203d3e20313439383837.roa (hash: XKb8rxYeYuD4PKUeGTZQ0dDYWCAE/hKgR+dYvEQGg4I=) 2: C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl (hash: 5aCQEkpRdUIv6qo5wYr5hHPz8xprtlY7K+ANhgFcSRs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:48:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:60:67:7f:47:5c:c4:5f:44:11:47:cb:51:99:78:31:45:61:ce:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C19B133025B2D947034F2B0FC582B9F2ABC7A6B2 Validity Not Before: Mar 25 18:16:27 2026 GMT Not After : Mar 29 03:48:27 2026 GMT Subject: CN=7A5DA7E103A3561EEC5FDB216761CB0EB1A69E45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:33:32:7d:31:ff:ab:83:e0:73:1a:03:af:4f: 11:98:b8:f1:1b:5e:72:db:42:b9:29:e1:3d:d1:26: 0e:0f:8d:dc:a1:85:e7:a0:b4:ba:d3:b0:2f:fb:75: 00:4d:6c:d4:e1:6c:01:14:52:e7:a0:1c:c6:89:d1: d4:1a:e6:b6:0c:93:7c:1a:45:80:da:e1:9f:ef:ff: d9:54:4a:d0:eb:b5:40:92:24:8c:61:88:bc:b1:c3: 2e:d9:46:61:01:8f:98:83:d1:a3:ce:57:c7:1d:51: d1:ce:24:2a:40:91:81:80:b8:11:23:7e:d4:8c:f8: 62:40:8d:21:87:ef:24:50:b1:1a:61:bb:08:c6:d0: 57:51:1a:0f:af:67:4a:ca:a4:93:d4:52:36:77:d8: 83:81:8f:f9:4e:54:71:3b:be:81:87:fa:51:29:7c: cb:2f:94:1c:fc:18:fd:0e:f3:e2:c3:53:ef:8b:20: 50:f9:2c:41:63:d4:9b:3c:85:6f:1c:35:8f:f8:7e: 30:76:42:0b:30:1b:cb:b4:60:f0:64:36:d1:da:5e: 7f:cd:5f:57:c2:38:9a:f7:23:99:bc:cb:f7:d4:8f: ea:b3:da:76:31:4e:b8:93:92:ca:aa:23:a0:b3:1a: 4d:54:bc:75:25:66:a5:f4:65:9f:2f:8a:51:ac:b2: 0d:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:5D:A7:E1:03:A3:56:1E:EC:5F:DB:21:67:61:CB:0E:B1:A6:9E:45 X509v3 Authority Key Identifier: keyid:C1:9B:13:30:25:B2:D9:47:03:4F:2B:0F:C5:82:B9:F2:AB:C7:A6:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d4f6d86b-e3df-4e2f-936f-ed9b963503a1/0/C19B133025B2D947034F2B0FC582B9F2ABC7A6B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:2d:b4:76:76:2e:99:ab:49:63:4e:89:f0:37:b4:1f:b1:79: f8:d7:5d:7d:fb:34:3d:8c:7f:71:7c:a0:f5:42:b1:3a:ed:24: 48:57:b3:ba:cb:c3:6a:e9:29:0d:fb:5a:b7:ad:13:e0:6e:85: 96:6a:78:6c:6c:aa:09:93:22:91:4a:02:e0:e1:06:61:31:80: 52:bf:1a:10:55:10:e4:b1:06:6a:92:32:8e:34:1e:cf:21:35: 90:71:57:3e:fc:3f:60:db:df:74:51:cb:8b:53:22:e5:22:96: 3d:40:0a:4c:4b:18:53:d3:c2:98:4e:f5:2a:8b:76:52:f8:b8: a5:3d:4c:17:a0:46:d1:b6:55:a3:4a:8d:c9:6c:c6:7b:04:f4: 43:21:af:1b:a3:b5:45:6e:cd:50:74:39:b9:83:0d:57:c6:48: 04:0a:7f:4a:a6:8f:f2:16:b4:f2:3f:04:b0:87:9d:66:f1:db: 99:88:c1:61:f4:16:79:a7:5e:3b:25:78:56:63:b1:1f:0c:ca: 28:26:b5:b4:56:29:bd:36:c4:c7:a6:e4:49:88:29:51:13:24: 5c:78:1a:3f:d0:85:56:ed:f4:da:ce:18:65:02:78:f0:dd:74: 0b:ee:e8:48:12:58:e4:76:41:48:48:b5:9b:e2:1b:3a:b2:28: 68:ed:d3:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK2Bnf0dcxF9EEUfLUZl4MUVhzskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJB QkM3QTZCMjAeFw0yNjAzMjUxODE2MjdaFw0yNjAzMjkwMzQ4MjdaMDMxMTAvBgNV BAMTKDdBNURBN0UxMDNBMzU2MUVFQzVGREIyMTY3NjFDQjBFQjFBNjlFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUMzJ9Mf+rg+BzGgOvTxGYuPEb XnLbQrkp4T3RJg4PjdyhheegtLrTsC/7dQBNbNThbAEUUuegHMaJ0dQa5rYMk3wa RYDa4Z/v/9lUStDrtUCSJIxhiLyxwy7ZRmEBj5iD0aPOV8cdUdHOJCpAkYGAuBEj ftSM+GJAjSGH7yRQsRphuwjG0FdRGg+vZ0rKpJPUUjZ32IOBj/lOVHE7voGH+lEp fMsvlBz8GP0O8+LDU++LIFD5LEFj1Js8hW8cNY/4fjB2QgswG8u0YPBkNtHaXn/N X1fCOJr3I5m8y/fUj+qz2nYxTriTksqqI6CzGk1UvHUlZqX0ZZ8vilGssg0xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUel2n4QOjVh7sX9shZ2HLDrGmnkUwHwYDVR0j BBgwFoAUwZsTMCWy2UcDTysPxYK58qvHprIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NGY2ZDg2Yi1lM2RmLTRlMmYtOTM2Zi1lZDliOTYzNTAzYTEvMC9DMTlCMTMzMDI1 QjJEOTQ3MDM0RjJCMEZDNTgyQjlGMkFCQzdBNkIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5RjJBQkM3 QTZCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDRmNmQ4NmItZTNkZi00ZTJmLTkz NmYtZWQ5Yjk2MzUwM2ExLzAvQzE5QjEzMzAyNUIyRDk0NzAzNEYyQjBGQzU4MkI5 RjJBQkM3QTZCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKsttHZ2LpmrSWNOifA3tB+xefjXXX37ND2M f3F8oPVCsTrtJEhXs7rLw2rpKQ37WretE+BuhZZqeGxsqgmTIpFKAuDhBmExgFK/ GhBVEOSxBmqSMo40Hs8hNZBxVz78P2Db33RRy4tTIuUilj1ACkxLGFPTwphO9SqL dlL4uKU9TBegRtG2VaNKjclsxnsE9EMhrxujtUVuzVB0ObmDDVfGSAQKf0qmj/IW tPI/BLCHnWbx25mIwWH0FnmnXjsleFZjsR8MyigmtbRWKb02xMem5EmIKVETJFx4 Gj/QhVbt9NrOGGUCePDddAvu6EgSWOR2QUhItZviGzqyKGjt0xA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:10:23 2026 by rpki-client