$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: WkKuSKTKdumQnDnkH/KhhAjD3VVtjE6zan6Pv1f/9hU= Subject key identifier: DF:B8:1D:EA:2D:B6:7A:3B:B8:CF:9E:19:CD:B9:B2:A3:BF:8F:C3:0F Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 5A5DDC4F50576886FA48F76728B5C27D79385187 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 0319 Signing time: Thu 19 Mar 2026 07:20:55 +0000 Manifest this update: Thu 19 Mar 2026 07:15:55 +0000 Manifest next update: Sun 22 Mar 2026 15:38:55 +0000 Files and hashes: 1: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: Cu5gtP7r72VzrcT1DZ3yE7CyZt4OuGRtySuxK43BT5E=) 2: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 15:38:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:5d:dc:4f:50:57:68:86:fa:48:f7:67:28:b5:c2:7d:79:38:51:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Mar 19 07:15:55 2026 GMT Not After : Mar 22 15:38:55 2026 GMT Subject: CN=DFB81DEA2DB67A3BB8CF9E19CDB9B2A3BF8FC30F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:6e:5d:d9:c6:4b:95:08:aa:89:78:8f:91:61: 85:9b:23:b2:8c:53:06:74:b5:f4:ce:6d:ac:20:50: e0:2a:c7:56:fc:23:d3:60:ee:e3:9c:b3:e4:57:79: b9:cb:b0:07:f4:ec:8a:a2:cc:e4:73:80:ea:9e:cb: 2f:b8:5f:c9:f1:7d:a2:08:51:30:b6:19:5a:29:42: 30:63:34:26:a6:f5:e2:5b:45:5d:24:ec:a0:52:54: a7:17:51:63:eb:bd:ef:3c:e3:4a:16:04:37:dc:9b: 45:c2:08:8e:ed:ba:61:3e:80:52:88:c8:b6:07:74: 7a:98:ca:b9:70:5b:dd:ac:2e:24:24:15:22:74:ca: 1b:ab:e6:9e:34:7f:8d:33:8a:29:b3:bd:d0:23:14: 3e:16:1e:0c:4c:64:af:9d:29:9c:48:84:58:eb:28: 0c:ca:5b:93:45:fd:2d:38:fe:07:00:a3:ff:23:dd: e9:93:03:9b:af:7f:7e:bb:4c:a1:0c:1c:98:c5:a8: 54:eb:6d:d7:c0:5f:74:b0:30:19:cb:79:52:b8:99: 8e:81:f8:38:b9:7f:a9:23:db:cd:2e:5e:3b:7a:86: 0e:77:ee:a6:3d:bc:81:d3:4b:27:2f:33:d7:f2:7d: 50:5e:99:7d:38:93:be:e6:da:e2:51:31:87:36:f9: 57:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:B8:1D:EA:2D:B6:7A:3B:B8:CF:9E:19:CD:B9:B2:A3:BF:8F:C3:0F X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:9b:1a:a0:69:ee:46:f1:cb:da:da:95:4c:ed:e7:bd:d8:7e: 42:6d:19:f9:ac:42:e2:c5:4d:b4:bd:7b:cb:c1:0b:d6:c9:06: 7e:11:d1:f4:89:27:f0:23:f7:9d:04:a0:a4:0c:01:fa:0f:1c: 1a:c3:cd:8b:99:8c:01:ae:7c:de:d0:7b:99:d2:d7:9a:24:eb: 6c:73:08:c4:bf:d7:8a:bd:45:d1:76:84:0d:0b:dd:53:ed:67: 06:b5:8f:01:eb:5a:13:e2:3f:b3:23:30:5e:5d:35:e9:ec:b1: 92:71:90:df:a5:f1:99:9f:30:1a:a6:30:e3:da:4e:99:3f:94: 07:29:e6:7d:b2:ef:e3:29:36:f0:18:53:74:23:a2:e6:38:4a: df:07:71:1e:c0:4a:84:fb:5c:83:cd:da:60:57:31:2d:a5:9a: 16:94:24:07:6d:07:31:16:94:57:6c:91:e0:6b:7d:57:f1:82: 32:f1:16:c3:26:dc:dd:da:29:5a:4c:bc:b0:16:3f:b2:55:74: 93:9b:af:4a:09:da:9e:19:fd:74:52:ad:43:8c:a6:79:9d:87: 67:81:41:52:c1:fd:57:8e:88:a0:26:17:f1:36:a1:70:e0:25: 9d:4c:8e:80:ab:dc:72:51:66:5f:ee:79:7b:12:d9:b4:b3:e0: 58:30:d9:a1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWl3cT1BXaIb6SPdnKLXCfXk4UYcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNjAzMTkwNzE1NTVaFw0yNjAzMjIxNTM4NTVaMDMxMTAvBgNV BAMTKERGQjgxREVBMkRCNjdBM0JCOENGOUUxOUNEQjlCMkEzQkY4RkMzMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAbl3ZxkuVCKqJeI+RYYWbI7KM UwZ0tfTObawgUOAqx1b8I9Ng7uOcs+RXebnLsAf07IqizORzgOqeyy+4X8nxfaII UTC2GVopQjBjNCam9eJbRV0k7KBSVKcXUWPrve8840oWBDfcm0XCCI7tumE+gFKI yLYHdHqYyrlwW92sLiQkFSJ0yhur5p40f40ziimzvdAjFD4WHgxMZK+dKZxIhFjr KAzKW5NF/S04/gcAo/8j3emTA5uvf367TKEMHJjFqFTrbdfAX3SwMBnLeVK4mY6B +Di5f6kj280uXjt6hg537qY9vIHTSycvM9fyfVBemX04k77m2uJRMYc2+VeZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU37gd6i22eju4z54Zzbmyo7+Pww8wHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABebGqBp7kbxy9ralUzt573YfkJtGfmsQuLF TbS9e8vBC9bJBn4R0fSJJ/Aj950EoKQMAfoPHBrDzYuZjAGufN7Qe5nS15ok62xz CMS/14q9RdF2hA0L3VPtZwa1jwHrWhPiP7MjMF5dNenssZJxkN+l8ZmfMBqmMOPa Tpk/lAcp5n2y7+MpNvAYU3QjouY4St8HcR7ASoT7XIPN2mBXMS2lmhaUJAdtBzEW lFdskeBrfVfxgjLxFsMm3N3aKVpMvLAWP7JVdJObr0oJ2p4Z/XRSrUOMpnmdh2eB QVLB/VeOiKAmF/E2oXDgJZ1MjoCr3HJRZl/ueXsS2bSz4Fgw2aE= -----END CERTIFICATE-----Generated at Fri Mar 20 21:59:18 2026 by rpki-client