$ rpki-client -vvf repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft File: 1CA9E40710262DA751A67E932477D6E12B4B2DED.mft (raw, json) Hash identifier: faz/ooGVEPcC0GddvBZlALwdOT4hshmfhqkvaAb8Nns= Subject key identifier: 1A:B4:10:6C:DD:21:2B:49:52:F0:89:8F:8C:85:B1:BD:4B:EE:8E:BA Authority key identifier: 1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED Certificate issuer: /CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Certificate serial: 04454AED9CD70B4EF58F6AC29D699F5690A15AEB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft Manifest number: 0562 Signing time: Wed 25 Mar 2026 03:30:03 +0000 Manifest this update: Wed 25 Mar 2026 03:25:03 +0000 Manifest next update: Sat 28 Mar 2026 07:30:03 +0000 Files and hashes: 1: 3130332e3132332e3130342e302f32322d3234203d3e20313338303730.roa (hash: ecHhrbZmg4e2LGAXb1athWjLi3ckLPNV/WtpLFe/T6g=) 2: 3130332e3132332e3130372e302f32342d3234203d3e20313338303730.roa (hash: tIqxyyUJXh1h7pLShHxvnCr+I+7KzlD3abcUHgx/fqg=) 3: 3130332e3132332e3130352e302f32342d3234203d3e20313338303730.roa (hash: BfFCh7Vfs8z+WKVbxTTngHawwEIYaKlayBm3t+ZFnyU=) 4: 3130332e3132332e3130362e302f32342d3234203d3e20313338303730.roa (hash: N64FdjfsEbU2WD4SaXp6qetiDmoRcr1f6RqJuh8FUBk=) 5: 1CA9E40710262DA751A67E932477D6E12B4B2DED.crl (hash: vVNHeGcN1Ge1S/Jgw0VcIIPg3CmWISySYk9cypO1VLg=) 6: 323430333a396663303a3a2f33322d3438203d3e20313338303730.roa (hash: Spbhx8bMHNr3NhNqW27nH4GC4otA4EtMJD/jv8eEkwo=) 7: 3130332e3132332e3130342e302f32342d3234203d3e20313338303730.roa (hash: yHCpL2jeoTRdKkL9PeW/BmTUh9ZLAObQa8uLRwAc8Ww=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:30:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:45:4a:ed:9c:d7:0b:4e:f5:8f:6a:c2:9d:69:9f:56:90:a1:5a:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CA9E40710262DA751A67E932477D6E12B4B2DED Validity Not Before: Mar 25 03:25:03 2026 GMT Not After : Mar 28 07:30:03 2026 GMT Subject: CN=1AB4106CDD212B4952F0898F8C85B1BD4BEE8EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:b1:b7:ee:3d:87:e0:a7:5e:ce:8f:fb:65:11: 70:b6:bf:e9:50:b9:b3:b7:65:77:79:ae:84:8b:a8: 3d:ab:19:95:8e:93:2a:f4:96:f5:a4:2d:93:bd:86: b1:ad:b3:8a:a2:25:7f:00:60:63:42:6d:ef:2e:55: fb:1b:30:5b:01:0b:10:e4:a0:e6:8d:e5:92:c9:28: bd:ea:ca:1a:63:e0:d8:4f:e1:f8:44:2a:e3:10:3c: e8:bf:b9:9c:9e:fb:2e:17:cc:b3:d7:5c:51:5c:82: 70:f5:3b:9c:7e:ee:f3:b1:24:57:94:30:ae:93:a3: a1:f7:cd:82:60:95:7b:12:1d:18:fe:94:dd:22:b1: 34:06:0f:cd:b0:72:07:6e:64:96:9f:03:1a:13:ea: 79:7c:fd:09:af:fc:71:c7:3f:33:2d:82:15:71:11: 0f:45:12:5d:9a:35:db:7f:d3:04:b1:4c:01:0a:34: d8:c6:17:11:5e:81:42:fb:78:b4:5b:0a:36:ac:d1: 1d:0f:a9:6c:e9:51:85:eb:70:9a:57:b1:db:0d:93: d9:2d:9f:a2:8d:69:d4:41:cb:9f:3d:64:6d:85:f8: 93:b7:94:6b:ff:67:93:73:d4:39:f6:65:8d:e1:a1: 07:7c:ff:01:c7:5c:f4:ac:3c:43:8f:ee:12:4f:b0: 90:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:B4:10:6C:DD:21:2B:49:52:F0:89:8F:8C:85:B1:BD:4B:EE:8E:BA X509v3 Authority Key Identifier: keyid:1C:A9:E4:07:10:26:2D:A7:51:A6:7E:93:24:77:D6:E1:2B:4B:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CA9E40710262DA751A67E932477D6E12B4B2DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dad67d5f-5713-4153-871b-1b008f7ffdd2/0/1CA9E40710262DA751A67E932477D6E12B4B2DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:e6:ab:4f:43:3e:ba:80:7c:72:c2:01:84:61:eb:29:b8:b7: f5:94:87:fd:e6:f1:d6:23:95:65:25:a0:61:84:f5:6a:c5:f4: 71:ea:e0:f1:8a:c9:cb:e7:5e:4d:04:e3:df:b5:5c:a9:dc:1f: b2:ee:cf:16:c0:c8:9a:86:03:d1:dd:3a:12:0c:ab:26:dd:cb: b9:28:5d:59:88:02:95:b7:10:8b:5a:66:19:ee:c8:21:30:55: 11:02:c1:a3:8f:c2:12:98:e7:c7:dc:b2:17:88:aa:7c:87:cd: 75:5e:a3:3b:01:1d:04:67:79:ad:ca:39:a2:ba:fa:95:70:c0: c9:7c:ab:9f:05:32:0d:d3:3a:ea:4b:c8:c8:90:d7:42:29:c5: 46:1b:8a:c5:2e:18:50:25:1f:a2:6f:6d:cc:23:bc:7d:3d:07: 90:83:c5:bf:b4:c8:0c:2c:5d:77:21:e2:bf:bc:5b:ac:6c:27: ab:7c:83:48:f5:10:2a:b6:2e:b6:1c:ce:98:90:b6:e8:c2:35: c0:b0:87:b7:2e:25:a3:b1:94:a1:25:f9:29:9b:14:93:bf:2b: 4b:0a:98:ba:4e:14:26:3d:80:65:45:af:f0:d3:bd:68:9a:39: 8d:62:0a:bb:57:6b:bb:b7:d6:ce:0c:3e:4d:ad:17:c5:78:2a: e0:4f:be:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEVK7ZzXC071j2rCnWmfVpChWuswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEy QjRCMkRFRDAeFw0yNjAzMjUwMzI1MDNaFw0yNjAzMjgwNzMwMDNaMDMxMTAvBgNV BAMTKDFBQjQxMDZDREQyMTJCNDk1MkYwODk4RjhDODVCMUJENEJFRThFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDesbfuPYfgp17Oj/tlEXC2v+lQ ubO3ZXd5roSLqD2rGZWOkyr0lvWkLZO9hrGts4qiJX8AYGNCbe8uVfsbMFsBCxDk oOaN5ZLJKL3qyhpj4NhP4fhEKuMQPOi/uZye+y4XzLPXXFFcgnD1O5x+7vOxJFeU MK6To6H3zYJglXsSHRj+lN0isTQGD82wcgduZJafAxoT6nl8/Qmv/HHHPzMtghVx EQ9FEl2aNdt/0wSxTAEKNNjGFxFegUL7eLRbCjas0R0PqWzpUYXrcJpXsdsNk9kt n6KNadRBy589ZG2F+JO3lGv/Z5Nz1Dn2ZY3hoQd8/wHHXPSsPEOP7hJPsJBTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGrQQbN0hK0lS8ImPjIWxvUvujrowHwYDVR0j BBgwFoAUHKnkBxAmLadRpn6TJHfW4StLLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWQ2N2Q1Zi01NzEzLTQxNTMtODcxYi0xYjAwOGY3ZmZkZDIvMC8xQ0E5RTQwNzEw MjYyREE3NTFBNjdFOTMyNDc3RDZFMTJCNEIyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2RTEyQjRC MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFkNjdkNWYtNTcxMy00MTUzLTg3 MWItMWIwMDhmN2ZmZGQyLzAvMUNBOUU0MDcxMDI2MkRBNzUxQTY3RTkzMjQ3N0Q2 RTEyQjRCMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB7mq09DPrqAfHLCAYRh6ym4t/WUh/3m8dYj lWUloGGE9WrF9HHq4PGKycvnXk0E49+1XKncH7LuzxbAyJqGA9HdOhIMqybdy7ko XVmIApW3EItaZhnuyCEwVRECwaOPwhKY58fcsheIqnyHzXVeozsBHQRnea3KOaK6 +pVwwMl8q58FMg3TOupLyMiQ10IpxUYbisUuGFAlH6JvbcwjvH09B5CDxb+0yAws XXch4r+8W6xsJ6t8g0j1ECq2LrYczpiQtujCNcCwh7cuJaOxlKEl+SmbFJO/K0sK mLpOFCY9gGVFr/DTvWiaOY1iCrtXa7u31s4MPk2tF8V4KuBPvuY= -----END CERTIFICATE-----Generated at Thu Mar 26 14:17:27 2026 by rpki-client