$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: izZ47Mjh67Dt8VgB9IID9w+nhW7Kbx91BTyOwKeSvkE= Subject key identifier: 0E:CA:12:1E:41:1C:C8:AC:C0:EA:6F:F4:CE:0D:99:25:64:98:30:2B Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 705E1CEC7C9FADE08FA11128FF9B0571C890D733 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0273 Signing time: Thu 26 Mar 2026 21:31:19 +0000 Manifest this update: Thu 26 Mar 2026 21:26:19 +0000 Manifest next update: Mon 30 Mar 2026 05:44:19 +0000 Files and hashes: 1: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: rBG4l3DmK4/bXSph93DviDVBOcLjseS136wv6PZj47o=) 2: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: CxgHh2nx9jBqaj0dFrPpRiINoseZIE2Y0Tam4i3m6pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 05:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:5e:1c:ec:7c:9f:ad:e0:8f:a1:11:28:ff:9b:05:71:c8:90:d7:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Mar 26 21:26:19 2026 GMT Not After : Mar 30 05:44:19 2026 GMT Subject: CN=0ECA121E411CC8ACC0EA6FF4CE0D99256498302B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8d:26:da:14:31:ea:ea:29:67:cb:48:37:89: a9:36:c3:ca:b6:16:3c:22:61:24:4b:43:06:fa:6c: c7:2a:42:31:f1:c6:cb:6e:0a:3e:88:56:61:ac:4b: 68:0c:87:32:f3:4f:83:b5:59:ff:69:0f:ce:c6:19: 62:88:8b:66:c8:65:f8:d5:4a:7b:24:36:4a:bc:83: 64:37:d6:dc:b5:54:8b:b2:e5:0c:f2:32:6a:9c:a5: 49:cc:79:10:9f:3f:ba:6d:60:93:29:b0:1e:88:48: d4:3a:8b:7c:a2:29:ad:12:ed:8f:20:0b:ec:a5:8b: 98:77:db:c6:58:4b:0a:8a:92:87:13:9f:cc:18:17: 49:33:1c:99:d8:1c:01:2d:ce:75:63:84:dd:c5:1f: 98:91:bf:3f:34:25:34:08:ae:c0:d1:60:4c:b3:e5: 81:2f:c1:ab:21:25:0a:54:46:ea:63:aa:00:fd:a8: 6f:8b:e1:eb:c7:de:87:38:ab:b8:34:a3:52:7c:b4: 18:4a:9d:37:76:69:ca:5a:ac:2e:6a:e1:35:03:12: 9b:b0:3d:cb:e1:b3:e5:5c:c8:73:25:1f:96:23:28: c3:e3:03:3f:10:21:00:be:fb:bc:c7:8a:2c:fe:96: 5e:32:b3:fe:45:bb:7e:35:f7:1c:fe:d7:ea:55:81: c7:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CA:12:1E:41:1C:C8:AC:C0:EA:6F:F4:CE:0D:99:25:64:98:30:2B X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:07:d5:4e:6e:6c:3f:32:0c:12:86:20:73:2e:66:bf:28:aa: 85:6c:72:4f:c1:be:41:06:1b:31:b4:3b:6f:97:14:88:a8:43: 5d:90:51:66:98:21:e4:67:13:05:51:74:1b:3a:3d:05:27:e3: 7c:6f:2a:33:02:4e:88:71:a0:ad:26:2d:e0:e5:39:43:f6:7b: 28:7e:48:24:5c:9c:8b:00:55:52:84:10:28:c2:b3:9f:21:ca: f2:02:e3:a0:4a:b2:22:26:23:cb:22:8d:6f:f7:fb:5c:94:53: ed:3e:41:e1:b6:db:f7:64:02:ab:92:49:0a:3b:2f:87:86:fb: e2:3b:f0:77:00:1c:c7:bf:0e:63:ca:9e:b5:de:8f:0f:77:45: 4b:3f:ff:65:b6:4e:69:4d:b0:db:ad:10:ab:89:9b:12:c5:a1: 72:f0:af:a6:4d:3b:fa:28:86:66:15:cb:d5:7d:47:10:6f:7b: 96:c8:2b:36:02:c2:fa:5f:1b:64:fa:00:63:fe:0d:e3:e0:b4: 0c:77:a7:2d:b9:ca:6c:11:22:10:b7:53:e0:b4:47:9c:4e:c8: 21:ad:2b:ad:50:2e:f8:7a:da:9a:26:92:1d:42:e0:ef:36:33: 38:65:8f:87:1f:d6:66:7e:10:1b:d2:aa:ab:45:d8:0e:77:be: 9b:b4:45:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcF4c7HyfreCPoREo/5sFcciQ1zMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNjAzMjYyMTI2MTlaFw0yNjAzMzAwNTQ0MTlaMDMxMTAvBgNV BAMTKDBFQ0ExMjFFNDExQ0M4QUNDMEVBNkZGNENFMEQ5OTI1NjQ5ODMwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqjSbaFDHq6ilny0g3iak2w8q2 FjwiYSRLQwb6bMcqQjHxxstuCj6IVmGsS2gMhzLzT4O1Wf9pD87GGWKIi2bIZfjV SnskNkq8g2Q31ty1VIuy5QzyMmqcpUnMeRCfP7ptYJMpsB6ISNQ6i3yiKa0S7Y8g C+yli5h328ZYSwqKkocTn8wYF0kzHJnYHAEtznVjhN3FH5iRvz80JTQIrsDRYEyz 5YEvwashJQpURupjqgD9qG+L4evH3oc4q7g0o1J8tBhKnTd2acparC5q4TUDEpuw Pcvhs+VcyHMlH5YjKMPjAz8QIQC++7zHiiz+ll4ys/5Fu3419xz+1+pVgcdnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDsoSHkEcyKzA6m/0zg2ZJWSYMCswHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwH1U5ubD8yDBKGIHMuZr8oqoVsck/BvkEG GzG0O2+XFIioQ12QUWaYIeRnEwVRdBs6PQUn43xvKjMCTohxoK0mLeDlOUP2eyh+ SCRcnIsAVVKEECjCs58hyvIC46BKsiImI8sijW/3+1yUU+0+QeG22/dkAquSSQo7 L4eG++I78HcAHMe/DmPKnrXejw93RUs//2W2TmlNsNutEKuJmxLFoXLwr6ZNO/oo hmYVy9V9RxBve5bIKzYCwvpfG2T6AGP+DePgtAx3py25ymwRIhC3U+C0R5xOyCGt K61QLvh62pomkh1C4O82Mzhlj4cf1mZ+EBvSqqtF2A53vpu0ReY= -----END CERTIFICATE-----Generated at Fri Mar 27 02:13:37 2026 by rpki-client