$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: 3yM8Vj2lP/fHk7i3y9uC/0wy/frifjhaf0N6X4EvoF4= Subject key identifier: C3:F6:AE:2B:49:3D:3E:7B:DF:39:CE:D2:25:E5:58:5B:4C:01:7D:02 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 729DF08D8B16AC4FF3BEF1A2C4C6E82E92E59BA9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: 0130 Signing time: Tue 24 Mar 2026 04:21:14 +0000 Manifest this update: Tue 24 Mar 2026 04:16:14 +0000 Manifest next update: Fri 27 Mar 2026 06:36:14 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: rIWJ5/QIs0slgnzKQHHhwM1UpjN4EBldZzti7siCAVg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 06:36:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:9d:f0:8d:8b:16:ac:4f:f3:be:f1:a2:c4:c6:e8:2e:92:e5:9b:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Mar 24 04:16:14 2026 GMT Not After : Mar 27 06:36:14 2026 GMT Subject: CN=C3F6AE2B493D3E7BDF39CED225E5585B4C017D02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:9d:64:f7:50:51:ff:bf:05:2b:ab:ba:9f:32: a7:cf:da:62:92:ac:d7:5f:cb:32:85:c0:82:37:b4: ad:bb:ba:e2:d3:80:22:44:92:75:6a:69:50:dd:7e: 87:10:ce:ce:7c:5c:db:40:8d:ac:f4:02:ad:54:c0: 54:7a:04:4f:1b:d2:71:c6:6f:89:20:74:88:68:9b: b3:a0:cb:b3:33:90:fe:c9:a1:9d:d7:42:43:07:f4: 28:25:f7:ac:3d:4f:95:5a:26:81:64:fc:42:fe:bb: 0f:d6:49:5a:a0:59:2a:83:be:af:a2:42:26:97:45: 62:fe:4f:5d:84:8a:f5:d2:ac:5a:e6:db:a4:1e:99: db:b2:0b:ce:19:af:b8:fe:11:b3:45:e8:34:95:e5: cf:3e:b1:89:b1:b2:1a:36:aa:bd:d6:f0:f8:8a:45: 82:ae:57:fa:81:f2:89:2d:15:56:a1:28:60:74:d1: 12:f5:55:90:7c:0b:30:6e:4b:04:aa:51:6b:9c:86: 76:f1:db:d0:cc:a1:0d:d8:59:f5:d7:df:1b:8e:c2: fe:a4:01:96:88:23:bf:b0:6d:fd:a0:6a:be:9f:77: a0:ef:34:d7:6d:70:6f:a2:99:d8:da:e6:bc:14:88: 06:ef:96:89:93:5d:a0:a7:c5:56:52:55:70:70:af: 44:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:F6:AE:2B:49:3D:3E:7B:DF:39:CE:D2:25:E5:58:5B:4C:01:7D:02 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:4e:cc:1f:49:14:d2:88:42:0c:75:89:81:e4:a1:fd:1b:59: 23:4e:5a:87:01:85:69:c6:1d:00:e6:3f:22:78:e3:81:e6:92: 10:0e:5f:eb:24:5b:87:16:94:72:64:1c:43:50:5e:93:98:9f: 84:06:20:bd:44:86:55:04:d0:e4:c7:b2:e6:b5:df:cc:2b:71: 47:f5:21:61:52:b9:19:f1:82:3f:68:4e:c6:51:54:3d:58:2b: 00:5d:6f:0a:b3:f0:3e:f2:2e:42:81:53:af:a6:10:9c:49:26: 35:dd:7b:e1:03:18:a1:d3:8d:cf:1b:c5:9d:75:b1:52:0d:35: 90:15:3b:47:93:78:50:4f:4b:0c:97:85:d3:e7:a7:0e:b2:e8: 39:1c:6b:9c:87:ba:79:d1:d9:39:d4:ae:26:f9:db:63:65:68: 71:8c:9b:1c:79:2e:ad:a0:39:bc:83:25:7a:1f:6f:8b:fc:b5: 2d:2e:cf:73:75:44:27:a7:89:fe:69:9f:60:98:47:47:76:91: a5:57:6a:e9:10:75:b7:e0:4d:fe:6b:73:be:7c:40:15:dd:53: e9:14:c0:7f:6d:b4:b2:17:6f:ab:21:9e:48:87:c4:5d:3f:41: d4:89:5a:99:c9:bf:85:a4:f6:c3:bd:45:38:c5:03:2e:b7:c1: ec:7c:09:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcp3wjYsWrE/zvvGixMboLpLlm6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNjAzMjQwNDE2MTRaFw0yNjAzMjcwNjM2MTRaMDMxMTAvBgNV BAMTKEMzRjZBRTJCNDkzRDNFN0JERjM5Q0VEMjI1RTU1ODVCNEMwMTdEMDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNnWT3UFH/vwUrq7qfMqfP2mKS rNdfyzKFwII3tK27uuLTgCJEknVqaVDdfocQzs58XNtAjaz0Aq1UwFR6BE8b0nHG b4kgdIhom7Ogy7MzkP7JoZ3XQkMH9Cgl96w9T5VaJoFk/EL+uw/WSVqgWSqDvq+i QiaXRWL+T12EivXSrFrm26QemduyC84Zr7j+EbNF6DSV5c8+sYmxsho2qr3W8PiK RYKuV/qB8oktFVahKGB00RL1VZB8CzBuSwSqUWuchnbx29DMoQ3YWfXX3xuOwv6k AZaII7+wbf2gar6fd6DvNNdtcG+imdja5rwUiAbvlomTXaCnxVZSVXBwr0QPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw/auK0k9PnvfOc7SJeVYW0wBfQIwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADROzB9JFNKIQgx1iYHkof0bWSNOWocBhWnG HQDmPyJ444HmkhAOX+skW4cWlHJkHENQXpOYn4QGIL1EhlUE0OTHsua138wrcUf1 IWFSuRnxgj9oTsZRVD1YKwBdbwqz8D7yLkKBU6+mEJxJJjXde+EDGKHTjc8bxZ11 sVINNZAVO0eTeFBPSwyXhdPnpw6y6Dkca5yHunnR2TnUrib522NlaHGMmxx5Lq2g ObyDJXofb4v8tS0uz3N1RCenif5pn2CYR0d2kaVXaukQdbfgTf5rc758QBXdU+kU wH9ttLIXb6shnkiHxF0/QdSJWpnJv4Wk9sO9RTjFAy63wex8CSg= -----END CERTIFICATE-----Generated at Thu Mar 26 07:36:29 2026 by rpki-client