$ rpki-client -vvf repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft File: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft (raw, json) Hash identifier: m6YhvTYXebWsnggQB8RmlfLTmx5fHQ9SmPyPA1Pb7rg= Subject key identifier: CF:06:39:94:D0:88:46:B5:E1:A4:6E:24:E8:FD:B0:BB:31:5A:6F:C7 Authority key identifier: 1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 Certificate issuer: /CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Certificate serial: 67EF0AE1E281BFA19FA928BFF5857C90E2B57050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft Manifest number: 025B Signing time: Thu 26 Mar 2026 05:22:10 +0000 Manifest this update: Thu 26 Mar 2026 05:17:10 +0000 Manifest next update: Sun 29 Mar 2026 09:57:10 +0000 Files and hashes: 1: 3130332e3137342e3137362e302f32332d3234203d3e203338333230.roa (hash: cvSUe3AQS7vHmxajLkKKuMBi1DdbqQp+jMzC9vjMR70=) 2: 1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl (hash: Ij4UGZgHxetVOdKtUFWVC8pc31NuwEEgv3S1kEeJiQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:ef:0a:e1:e2:81:bf:a1:9f:a9:28:bf:f5:85:7c:90:e2:b5:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF652DE540015052EA06BCE3644C9C1C9B83B32 Validity Not Before: Mar 26 05:17:10 2026 GMT Not After : Mar 29 09:57:10 2026 GMT Subject: CN=CF063994D08846B5E1A46E24E8FDB0BB315A6FC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:69:7e:dd:e5:ac:fa:61:20:50:5b:f0:85:79: 95:63:3d:de:f2:b5:48:75:a7:1e:1b:eb:bd:93:c1: c6:4d:8f:9e:b2:05:a3:54:40:43:9c:28:90:7f:4c: 54:f2:49:bf:00:89:7d:3e:0e:8d:fc:3c:5e:db:16: 71:43:a4:0a:8c:0c:13:e1:6b:1f:ca:f4:1c:fc:ca: 34:f3:ee:4c:f6:6a:fd:1d:99:d8:f3:89:85:cd:93: e4:00:19:5d:c1:f1:91:93:0c:48:f6:f5:0e:07:a9: 97:41:fd:62:e7:8f:9d:1b:9e:c7:a5:73:03:6c:d7: dd:0f:95:72:de:0d:6e:bb:70:3a:d5:9e:8e:a4:32: 39:3a:e9:d8:7a:c7:4f:d8:87:e2:f5:4e:2e:fb:32: 2d:f3:b4:1a:ce:82:b4:cb:69:9b:a1:9b:45:d1:b3: a5:ed:6b:be:a1:08:10:01:12:84:04:38:11:36:4f: 04:48:f3:f2:35:05:ef:f0:04:77:90:0e:9c:73:0d: 3a:28:c4:bd:6d:c5:30:8e:5e:93:a9:14:0b:77:55: f0:8b:90:fa:65:d9:60:61:a6:45:3e:26:01:01:00: c0:c5:8e:0d:08:44:aa:78:fa:a7:b3:ec:63:e6:a1: e6:2d:f3:62:80:cc:0d:04:5d:81:7e:c9:a7:06:92: 74:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:06:39:94:D0:88:46:B5:E1:A4:6E:24:E8:FD:B0:BB:31:5A:6F:C7 X509v3 Authority Key Identifier: keyid:1F:F6:52:DE:54:00:15:05:2E:A0:6B:CE:36:44:C9:C1:C9:B8:3B:32 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF652DE540015052EA06BCE3644C9C1C9B83B32.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fbe15e6f-0689-4713-b0fc-943062ac592e/0/1FF652DE540015052EA06BCE3644C9C1C9B83B32.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:a9:d0:bb:dd:dd:85:7a:42:45:e5:67:3c:f0:30:69:22:56: cc:3a:0a:a2:ad:12:c7:97:b7:2d:a9:c7:78:6a:6e:5e:a0:e5: 40:f3:3e:ec:0b:2c:4d:92:c0:af:a0:d1:e4:94:07:f1:68:6a: 6c:2c:7c:16:75:89:4a:a9:f3:c3:d0:b8:38:7f:e2:fe:36:93: 4a:6d:78:4d:5f:7e:16:fc:01:a7:16:0d:4c:40:3b:e8:ee:8a: 5b:42:59:87:71:ed:e4:ca:35:7b:20:b4:db:26:be:b5:c7:10: fb:5b:80:21:f4:47:81:d1:d8:8c:bc:92:d9:f8:78:be:bc:48: f4:ac:7c:09:c5:71:ec:53:05:1f:67:65:1f:cf:7e:58:0b:1d: d4:22:c3:de:99:44:b9:2c:af:d4:c7:44:a8:47:61:3d:a2:bb: fa:cd:a4:bf:22:37:28:12:db:39:f8:f0:73:bc:e0:75:cf:ca: c9:5b:35:f1:ba:d9:e1:98:e4:69:e5:2a:bd:ee:b0:f9:98:a2: 7d:4e:e3:49:37:b5:86:34:36:1e:74:2e:45:49:ae:bc:39:6b: a3:9d:0d:a5:ee:6b:0d:31:e8:a5:cc:04:a9:1f:f0:75:49:d6: 45:a2:6b:99:9a:7c:c2:f1:d9:f6:0a:3f:fe:e8:d4:52:bc:f0: 6d:46:b7:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+8K4eKBv6GfqSi/9YV8kOK1cFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFD OUI4M0IzMjAeFw0yNjAzMjYwNTE3MTBaFw0yNjAzMjkwOTU3MTBaMDMxMTAvBgNV BAMTKENGMDYzOTk0RDA4ODQ2QjVFMUE0NkUyNEU4RkRCMEJCMzE1QTZGQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaX7d5az6YSBQW/CFeZVjPd7y tUh1px4b672TwcZNj56yBaNUQEOcKJB/TFTySb8AiX0+Do38PF7bFnFDpAqMDBPh ax/K9Bz8yjTz7kz2av0dmdjziYXNk+QAGV3B8ZGTDEj29Q4HqZdB/WLnj50bnsel cwNs190PlXLeDW67cDrVno6kMjk66dh6x0/Yh+L1Ti77Mi3ztBrOgrTLaZuhm0XR s6Xta76hCBABEoQEOBE2TwRI8/I1Be/wBHeQDpxzDTooxL1txTCOXpOpFAt3VfCL kPpl2WBhpkU+JgEBAMDFjg0IRKp4+qez7GPmoeYt82KAzA0EXYF+yacGknTbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzwY5lNCIRrXhpG4k6P2wuzFab8cwHwYDVR0j BBgwFoAUH/ZS3lQAFQUuoGvONkTJwcm4OzIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YmUxNWU2Zi0wNjg5LTQ3MTMtYjBmYy05NDMwNjJhYzU5MmUvMC8xRkY2NTJERTU0 MDAxNTA1MkVBMDZCQ0UzNjQ0QzlDMUM5QjgzQjMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5QzFDOUI4 M0IzMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmJlMTVlNmYtMDY4OS00NzEzLWIw ZmMtOTQzMDYyYWM1OTJlLzAvMUZGNjUyREU1NDAwMTUwNTJFQTA2QkNFMzY0NEM5 QzFDOUI4M0IzMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJup0Lvd3YV6QkXlZzzwMGkiVsw6CqKtEseX ty2px3hqbl6g5UDzPuwLLE2SwK+g0eSUB/FoamwsfBZ1iUqp88PQuDh/4v42k0pt eE1ffhb8AacWDUxAO+juiltCWYdx7eTKNXsgtNsmvrXHEPtbgCH0R4HR2Iy8ktn4 eL68SPSsfAnFcexTBR9nZR/PflgLHdQiw96ZRLksr9THRKhHYT2iu/rNpL8iNygS 2zn48HO84HXPyslbNfG62eGY5GnlKr3usPmYon1O40k3tYY0Nh50LkVJrrw5a6Od DaXuaw0x6KXMBKkf8HVJ1kWia5mafMLx2fYKP/7o1FK88G1Gtzw= -----END CERTIFICATE-----Generated at Thu Mar 26 20:16:46 2026 by rpki-client