$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft File: 19960F4C3FEEC60D5A59281148061FB21094449A.mft (raw, json) Hash identifier: zEgRvaxokEAlBWtfGPuXQYMSvc3p2hNF7DcjHyV/XcI= Subject key identifier: 1E:51:ED:B9:C0:DE:30:8F:B3:86:DE:AE:75:B4:D3:1C:1F:BE:F1:81 Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A Certificate issuer: /CN=19960F4C3FEEC60D5A59281148061FB21094449A Certificate serial: 7A584C57E5EDD0B640C0AB0FA312E86875602A0A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft Manifest number: 0234 Signing time: Wed 25 Mar 2026 05:31:59 +0000 Manifest this update: Wed 25 Mar 2026 05:26:59 +0000 Manifest next update: Sat 28 Mar 2026 17:23:59 +0000 Files and hashes: 1: 3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (hash: HSJwEbuYdmswA8IoW9wUF9tpsYQbZVSX70vEOoOrwhM=) 2: 19960F4C3FEEC60D5A59281148061FB21094449A.crl (hash: c72ZjndtWFSHz3qVu/eM6pywPYAMkSx+mo7mGPwE0FA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:23:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:58:4c:57:e5:ed:d0:b6:40:c0:ab:0f:a3:12:e8:68:75:60:2a:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A Validity Not Before: Mar 25 05:26:59 2026 GMT Not After : Mar 28 17:23:59 2026 GMT Subject: CN=1E51EDB9C0DE308FB386DEAE75B4D31C1FBEF181 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:9b:1e:78:e0:0f:42:a6:23:d0:49:79:d1:28: 5a:fa:d9:a6:67:ab:b9:f6:59:25:85:11:9f:c1:8f: 95:20:11:ad:2d:6b:fa:13:1b:5b:58:04:a5:89:f7: f0:41:54:29:7b:b6:ba:50:d9:12:13:af:a3:07:1b: 6e:0b:af:8e:60:64:4e:0f:2e:f0:da:2b:22:a3:1e: 6c:56:21:5a:69:ea:5c:6a:2f:2f:f0:72:d9:cc:e1: 39:d3:54:ac:75:9f:73:2e:8d:17:af:b4:53:de:c5: 3c:9f:b2:0e:b9:a2:d8:f7:de:84:7d:0e:47:7e:f0: 31:29:f2:b4:08:b0:c3:4a:74:51:39:07:66:12:aa: 0c:6f:3c:b5:af:2b:a0:c7:e8:d7:51:99:e3:85:e4: 3e:e4:26:f9:98:80:ce:33:08:7d:77:05:d5:f6:c2: e9:ee:c4:14:53:21:8e:35:8b:d3:60:95:f6:73:91: b8:cb:ca:47:74:17:cd:81:7c:93:55:26:d4:87:e5: 0c:f2:95:fc:fb:bd:51:c2:bd:48:56:94:dd:a9:8e: 13:9a:05:df:f5:06:68:22:ac:95:ad:3c:32:49:a8: a0:e8:5f:c3:b6:65:d7:3e:11:fe:02:96:77:da:15: 6a:2c:a3:53:24:60:cf:f9:28:e2:43:00:ec:78:5f: d8:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:51:ED:B9:C0:DE:30:8F:B3:86:DE:AE:75:B4:D3:1C:1F:BE:F1:81 X509v3 Authority Key Identifier: keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:36:23:d5:a3:f3:1a:9a:b4:d3:25:b5:48:60:fe:16:14:7a: 2f:3a:d0:83:58:f9:51:5c:09:9b:d0:a3:63:2a:4f:c7:b8:0d: c5:ff:64:dd:b8:b9:3d:cf:5c:54:b3:d1:07:2b:2a:cf:0d:88: e2:6f:c5:aa:c6:2e:a0:5b:81:34:52:ad:2d:20:09:0c:dd:a1: 25:dc:55:23:b2:3d:9e:9f:c9:78:c1:dd:0b:42:96:a2:b8:b0: 15:7f:91:0d:f4:9a:b0:54:10:69:02:07:1b:38:2b:8b:ed:6a: be:f3:fa:d7:99:58:19:5a:da:6f:5f:a2:f7:79:8f:c5:dc:b6: 7f:dd:c6:c6:2c:c0:6e:33:92:85:4c:31:e4:2f:b7:e1:be:06: e3:3e:27:ff:f6:f2:01:d2:b0:88:99:2a:4c:95:cf:78:01:12: 2a:a7:c6:13:bd:6e:ca:fc:1b:ed:47:a5:25:2a:f6:69:93:41: fe:4b:06:ba:7c:d9:65:fd:a0:c7:9a:33:58:4a:c6:6d:31:f9: 29:ec:34:ae:89:f7:9d:b1:e7:ad:1c:f5:d5:3d:bf:a3:8c:8c: 7d:6b:93:ae:e1:ce:c8:82:13:8e:0c:d6:76:47:5e:af:da:81: 69:fa:31:23:d5:5b:4d:95:5b:a2:69:32:ae:c1:05:cd:fc:3c: c4:f1:6d:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUelhMV+Xt0LZAwKsPoxLoaHVgKgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIx MDk0NDQ5QTAeFw0yNjAzMjUwNTI2NTlaFw0yNjAzMjgxNzIzNTlaMDMxMTAvBgNV BAMTKDFFNTFFREI5QzBERTMwOEZCMzg2REVBRTc1QjREMzFDMUZCRUYxODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYmx544A9CpiPQSXnRKFr62aZn q7n2WSWFEZ/Bj5UgEa0ta/oTG1tYBKWJ9/BBVCl7trpQ2RITr6MHG24Lr45gZE4P LvDaKyKjHmxWIVpp6lxqLy/wctnM4TnTVKx1n3MujRevtFPexTyfsg65otj33oR9 Dkd+8DEp8rQIsMNKdFE5B2YSqgxvPLWvK6DH6NdRmeOF5D7kJvmYgM4zCH13BdX2 wunuxBRTIY41i9NglfZzkbjLykd0F82BfJNVJtSH5Qzylfz7vVHCvUhWlN2pjhOa Bd/1BmgirJWtPDJJqKDoX8O2Zdc+Ef4ClnfaFWoso1MkYM/5KOJDAOx4X9gvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHlHtucDeMI+zht6udbTTHB++8YEwHwYDVR0j BBgwFoAUGZYPTD/uxg1aWSgRSAYfshCURJowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWU4YmNjOS00M2ExLTRiYWItYjZkOC0xYTk3ZDBkM2MyMWQvMC8xOTk2MEY0QzNG RUVDNjBENUE1OTI4MTE0ODA2MUZCMjEwOTQ0NDlBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFGQjIxMDk0 NDQ5QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFlOGJjYzktNDNhMS00YmFiLWI2 ZDgtMWE5N2QwZDNjMjFkLzAvMTk5NjBGNEMzRkVFQzYwRDVBNTkyODExNDgwNjFG QjIxMDk0NDQ5QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAc2I9Wj8xqatNMltUhg/hYUei860INY+VFc CZvQo2MqT8e4DcX/ZN24uT3PXFSz0QcrKs8NiOJvxarGLqBbgTRSrS0gCQzdoSXc VSOyPZ6fyXjB3QtClqK4sBV/kQ30mrBUEGkCBxs4K4vtar7z+teZWBla2m9fovd5 j8Xctn/dxsYswG4zkoVMMeQvt+G+BuM+J//28gHSsIiZKkyVz3gBEiqnxhO9bsr8 G+1HpSUq9mmTQf5LBrp82WX9oMeaM1hKxm0x+SnsNK6J952x560c9dU9v6OMjH1r k67hzsiCE44M1nZHXq/agWn6MSPVW02VW6JpMq7BBc38PMTxbR0= -----END CERTIFICATE-----Generated at Thu Mar 26 08:56:59 2026 by rpki-client