$ rpki-client -vvf repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft File: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft (raw, json) Hash identifier: /dxwBkx9RGrtOiLPxLwHG0rWlsFHKNUqamnsMUPPl5Y= Subject key identifier: 27:21:BC:98:22:4C:58:EF:ED:ED:C8:20:93:E4:79:B3:8C:2F:0A:3E Authority key identifier: 19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC Certificate issuer: /CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Certificate serial: 653D15826179122ED1E0F393656B5477EEE1E6EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft Manifest number: 055B Signing time: Thu 26 Mar 2026 05:40:54 +0000 Manifest this update: Thu 26 Mar 2026 05:35:54 +0000 Manifest next update: Sun 29 Mar 2026 09:22:54 +0000 Files and hashes: 1: 1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl (hash: 2WU55xLB/YOZuYRZ8CAi1b6aDYyFgyqeQ/UpWS9A818=) 2: 3130332e3134352e39372e302f32342d3234203d3e20313339343433.roa (hash: PgHEb146XoyGC0/9tuhNMcAsAzVP9MObWQdPhmy9XiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:22:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:3d:15:82:61:79:12:2e:d1:e0:f3:93:65:6b:54:77:ee:e1:e6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1975F0B2F27DE4AFF43CC246058A2B9E15950AEC Validity Not Before: Mar 26 05:35:54 2026 GMT Not After : Mar 29 09:22:54 2026 GMT Subject: CN=2721BC98224C58EFEDEDC82093E479B38C2F0A3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:92:57:fe:96:09:f8:c2:c7:b2:aa:02:a3:81: bf:a5:55:6d:64:3f:c5:0d:bc:50:1a:d0:6e:d1:27: a8:4e:92:68:d0:8b:6f:1e:d0:de:ef:73:67:09:ed: 73:6f:49:f1:46:4b:ca:e9:54:81:36:04:2f:83:3d: f6:15:dd:f6:98:1d:c4:70:a7:92:ed:81:37:9f:7b: 69:a4:7a:32:79:06:3f:5c:8b:16:87:43:74:34:3a: ed:17:89:af:89:19:e9:b0:4a:3b:d5:45:ba:51:fd: 8b:4c:1c:da:12:e2:c5:10:59:5d:26:04:1b:76:53: 47:be:68:2e:a6:41:6a:28:30:7c:0b:a7:c3:11:70: 89:cc:48:fe:93:03:0a:b9:11:2d:a3:49:73:73:54: 5a:d9:f4:8a:d5:61:1a:67:e6:82:ee:f7:ab:11:2a: 1c:de:1a:40:28:e4:65:47:b3:54:0c:d1:0e:37:86: b6:07:95:78:ed:c3:71:8b:70:4e:d0:11:39:36:f1: 3b:ca:a5:68:45:9c:3f:d7:eb:69:57:8a:42:a8:1e: f8:f2:a3:52:09:a9:ca:e6:e9:38:a3:16:c5:f9:f7: 80:58:3d:a7:b3:c1:7c:3e:6a:ce:90:b8:b1:27:56: ab:12:43:1b:e6:29:ca:9e:31:f6:b1:d6:e5:68:ca: 64:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:21:BC:98:22:4C:58:EF:ED:ED:C8:20:93:E4:79:B3:8C:2F:0A:3E X509v3 Authority Key Identifier: keyid:19:75:F0:B2:F2:7D:E4:AF:F4:3C:C2:46:05:8A:2B:9E:15:95:0A:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f03362e2-9765-42bd-b59b-68d43cadeb5c/0/1975F0B2F27DE4AFF43CC246058A2B9E15950AEC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b6:63:c2:66:ca:25:3e:9f:c1:61:92:77:08:54:cf:04:4c: fa:b7:66:71:7a:b6:8b:93:24:bf:e4:f8:4e:c1:2e:36:ce:dc: 82:06:d7:fa:68:c6:be:32:ec:41:f6:99:dc:4d:8b:51:82:05: 3f:31:68:50:f0:6a:6f:21:82:2b:e2:a6:f5:97:d0:63:4f:ba: 77:54:0b:38:62:e9:e6:90:92:4e:30:0a:72:3a:5f:1e:48:6b: eb:58:6b:28:33:21:c5:99:72:99:2b:2e:57:4a:1d:52:5f:75: 38:16:d0:68:5d:e1:54:ba:06:2e:f5:21:11:64:4e:2b:46:d5: 6c:2c:29:00:7e:99:9a:c2:43:98:20:5f:e2:f8:6b:ad:16:77: 59:19:ba:b7:3a:d4:6f:af:a8:d7:e1:ec:19:22:bb:c7:61:a9: 48:5f:25:d3:40:9a:91:5d:d4:b6:33:73:4b:64:d7:73:e1:af: d5:c2:44:60:bf:4f:c0:3e:76:fb:7f:52:e2:61:ee:76:26:33: 75:05:cc:cc:9a:9d:30:6f:25:53:c3:69:40:6e:7f:96:6a:74: 4c:ff:4f:2d:6b:36:2c:b1:9c:52:4c:bd:1f:50:67:5c:05:50: 6d:93:20:14:43:6e:c1:1f:e8:d7:ac:d4:90:e5:4d:63:11:2d: 4b:50:47:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZT0VgmF5Ei7R4POTZWtUd+7h5u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUx NTk1MEFFQzAeFw0yNjAzMjYwNTM1NTRaFw0yNjAzMjkwOTIyNTRaMDMxMTAvBgNV BAMTKDI3MjFCQzk4MjI0QzU4RUZFREVEQzgyMDkzRTQ3OUIzOEMyRjBBM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNklf+lgn4wseyqgKjgb+lVW1k P8UNvFAa0G7RJ6hOkmjQi28e0N7vc2cJ7XNvSfFGS8rpVIE2BC+DPfYV3faYHcRw p5LtgTefe2mkejJ5Bj9cixaHQ3Q0Ou0Xia+JGemwSjvVRbpR/YtMHNoS4sUQWV0m BBt2U0e+aC6mQWooMHwLp8MRcInMSP6TAwq5ES2jSXNzVFrZ9IrVYRpn5oLu96sR KhzeGkAo5GVHs1QM0Q43hrYHlXjtw3GLcE7QETk28TvKpWhFnD/X62lXikKoHvjy o1IJqcrm6TijFsX594BYPaezwXw+as6QuLEnVqsSQxvmKcqeMfax1uVoymSvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJyG8mCJMWO/t7cggk+R5s4wvCj4wHwYDVR0j BBgwFoAUGXXwsvJ95K/0PMJGBYornhWVCuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MDMzNjJlMi05NzY1LTQyYmQtYjU5Yi02OGQ0M2NhZGViNWMvMC8xOTc1RjBCMkYy N0RFNEFGRjQzQ0MyNDYwNThBMkI5RTE1OTUwQUVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJCOUUxNTk1 MEFFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjAzMzYyZTItOTc2NS00MmJkLWI1 OWItNjhkNDNjYWRlYjVjLzAvMTk3NUYwQjJGMjdERTRBRkY0M0NDMjQ2MDU4QTJC OUUxNTk1MEFFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq2Y8JmyiU+n8FhkncIVM8ETPq3ZnF6touT JL/k+E7BLjbO3IIG1/poxr4y7EH2mdxNi1GCBT8xaFDwam8hgivipvWX0GNPundU Czhi6eaQkk4wCnI6Xx5Ia+tYaygzIcWZcpkrLldKHVJfdTgW0Ghd4VS6Bi71IRFk TitG1WwsKQB+mZrCQ5ggX+L4a60Wd1kZurc61G+vqNfh7Bkiu8dhqUhfJdNAmpFd 1LYzc0tk13Phr9XCRGC/T8A+dvt/UuJh7nYmM3UFzMyanTBvJVPDaUBuf5ZqdEz/ Ty1rNiyxnFJMvR9QZ1wFUG2TIBRDbsEf6Nes1JDlTWMRLUtQRyo= -----END CERTIFICATE-----Generated at Thu Mar 26 13:10:32 2026 by rpki-client