$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: Uy2MyCmWbzGj9O0WFBTVemG8vyhAgMvY8bqk6PdtG/k= Subject key identifier: F8:AB:03:BE:7B:8B:D2:23:43:87:0F:1B:6C:32:10:7A:9B:69:28:10 Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 307DCA2DA48702A519EBB452F2950A6EA31D0DAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 0294 Signing time: Fri 20 Mar 2026 09:31:57 +0000 Manifest this update: Fri 20 Mar 2026 09:26:57 +0000 Manifest next update: Mon 23 Mar 2026 20:22:57 +0000 Files and hashes: 1: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 43U2ur0nA2JHijedZZRNe8PQ0b7BNuhlr2rAdIHcr8M=) 2: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=) 3: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=) 4: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 10:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:7d:ca:2d:a4:87:02:a5:19:eb:b4:52:f2:95:0a:6e:a3:1d:0d:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Mar 20 09:26:57 2026 GMT Not After : Mar 23 20:22:57 2026 GMT Subject: CN=F8AB03BE7B8BD22343870F1B6C32107A9B692810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:75:b0:0b:e6:ba:3f:cb:35:e8:50:5f:b4:d5: 78:ff:f9:af:06:eb:02:14:35:ea:05:bd:4f:b2:76: 3e:32:b2:12:8b:57:76:d7:01:66:31:c5:dc:7c:d9: 48:42:a3:12:6e:d8:5f:3c:20:bb:6a:fe:5c:56:18: d6:c1:27:b0:81:d2:55:83:37:7a:16:43:92:41:dc: e4:3b:96:a1:cc:96:b2:27:9c:b4:7c:c3:af:1e:9e: 1b:b4:8c:ab:21:c1:9f:bb:46:4f:02:ea:90:68:a2: 8e:ff:48:5c:cf:10:8c:fe:d8:26:a1:2a:6b:17:07: de:49:3c:cb:b0:31:7c:0c:84:37:00:00:1e:5a:eb: 82:33:52:ab:4e:33:10:53:64:99:7c:de:a3:4a:83: 96:9e:57:c8:f8:47:f1:1d:e9:f3:da:0e:e1:bd:07: f7:c5:2d:cc:60:cb:f7:52:5b:76:56:11:75:61:05: b4:57:ac:21:9b:61:88:65:52:43:e0:74:9c:07:96: 9f:fb:8f:97:7b:64:43:be:3d:5d:e5:ac:e5:7c:f0: a3:d8:87:c1:6b:69:3d:dd:aa:3b:a6:e3:a9:d8:8d: e6:5b:2a:f0:8d:72:7e:3b:54:83:2e:ae:f9:50:a3: 19:0f:ca:58:62:38:ba:c3:0d:5b:0a:82:94:46:96: 81:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:AB:03:BE:7B:8B:D2:23:43:87:0F:1B:6C:32:10:7A:9B:69:28:10 X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:80:14:da:57:99:df:ac:ea:8b:66:0b:1d:b8:7a:e7:35:68: 79:ae:01:2b:da:0b:ff:75:ff:24:bf:8b:4f:33:2d:89:08:8f: 16:16:41:3a:9b:9b:e4:bd:7d:22:4e:52:7c:ee:fc:3c:f3:00: 81:a6:c6:b6:c8:2e:35:f8:fd:73:e7:63:54:69:9e:61:a1:5d: 5a:50:30:2a:b5:af:03:73:4b:76:e3:c5:f8:07:1d:9f:2d:62: 02:88:6c:3f:37:60:3a:fb:10:1c:83:fc:49:32:59:67:3f:8e: 29:f0:4b:3f:ac:b8:92:a0:36:41:03:e8:e3:5d:59:ce:43:16: 94:01:73:00:ff:95:fd:5d:95:75:d6:3b:28:ac:11:42:18:b5: 25:db:1c:95:45:e1:71:9b:42:63:3f:f4:92:b4:c2:af:2a:dc: 52:fe:4d:03:56:39:3f:5c:b8:70:47:d7:25:81:89:c3:30:28: 37:f5:20:17:f8:77:47:50:77:7e:41:cb:80:d8:ae:fe:c2:41: 4e:f6:43:11:af:56:e9:3e:6e:6a:7b:1e:86:a0:63:0b:63:e8: 40:3f:7f:3b:89:af:87:5a:d7:a7:86:f9:41:67:01:63:dc:65: d3:e5:5f:b1:80:9d:ed:e9:d3:6d:95:cc:19:9e:74:02:49:c9: 2f:0b:66:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMH3KLaSHAqUZ67RS8pUKbqMdDa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNjAzMjAwOTI2NTdaFw0yNjAzMjMyMDIyNTdaMDMxMTAvBgNV BAMTKEY4QUIwM0JFN0I4QkQyMjM0Mzg3MEYxQjZDMzIxMDdBOUI2OTI4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFdbAL5ro/yzXoUF+01Xj/+a8G 6wIUNeoFvU+ydj4yshKLV3bXAWYxxdx82UhCoxJu2F88ILtq/lxWGNbBJ7CB0lWD N3oWQ5JB3OQ7lqHMlrInnLR8w68enhu0jKshwZ+7Rk8C6pBooo7/SFzPEIz+2Cah KmsXB95JPMuwMXwMhDcAAB5a64IzUqtOMxBTZJl83qNKg5aeV8j4R/Ed6fPaDuG9 B/fFLcxgy/dSW3ZWEXVhBbRXrCGbYYhlUkPgdJwHlp/7j5d7ZEO+PV3lrOV88KPY h8FraT3dqjum46nYjeZbKvCNcn47VIMurvlQoxkPylhiOLrDDVsKgpRGloGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+KsDvnuL0iNDhw8bbDIQeptpKBAwHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAOAFNpXmd+s6otmCx24euc1aHmuASvaC/91 /yS/i08zLYkIjxYWQTqbm+S9fSJOUnzu/DzzAIGmxrbILjX4/XPnY1RpnmGhXVpQ MCq1rwNzS3bjxfgHHZ8tYgKIbD83YDr7EByD/EkyWWc/jinwSz+suJKgNkED6ONd Wc5DFpQBcwD/lf1dlXXWOyisEUIYtSXbHJVF4XGbQmM/9JK0wq8q3FL+TQNWOT9c uHBH1yWBicMwKDf1IBf4d0dQd35By4DYrv7CQU72QxGvVuk+bmp7HoagYwtj6EA/ fzuJr4da16eG+UFnAWPcZdPlX7GAne3p022VzBmedAJJyS8LZjw= -----END CERTIFICATE-----Generated at Fri Mar 20 12:43:18 2026 by rpki-client