$ rpki-client -vvf repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft File: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft (raw, json) Hash identifier: x3x+TeokAXoVt2kAMcsJ6Z5Egg2rc8mLoXlZy26hgfE= Subject key identifier: 39:D8:A2:8F:BA:1C:E2:73:AB:1B:E9:C7:BD:79:7F:36:19:EB:FA:BA Authority key identifier: C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 Certificate issuer: /CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Certificate serial: 0F4EC7BD99A8B96C87B5E65FC771D1DA7E7D9D74 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft Manifest number: 73 Signing time: Wed 18 Mar 2026 05:52:18 +0000 Manifest this update: Wed 18 Mar 2026 05:47:18 +0000 Manifest next update: Sat 21 Mar 2026 14:10:18 +0000 Files and hashes: 1: C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl (hash: Ty2MDkp0GJeF1BYhE8/xIGPGeR4oqwa/IvzIx0rMOBw=) 2: 3130332e3130332e32302e302f32322d3234203d3e20313333383030.roa (hash: gE+l6BtwnE696koy6eWA+mSXnnRQKbYtsxfkWucx8c8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 14:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:4e:c7:bd:99:a8:b9:6c:87:b5:e6:5f:c7:71:d1:da:7e:7d:9d:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585 Validity Not Before: Mar 18 05:47:18 2026 GMT Not After : Mar 21 14:10:18 2026 GMT Subject: CN=39D8A28FBA1CE273AB1BE9C7BD797F3619EBFABA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:d0:6e:d0:19:90:05:9a:e4:f7:80:94:21:d9: 29:aa:c4:26:6f:35:55:ba:76:ef:ad:63:32:4f:d6: 86:31:31:69:9f:40:62:39:db:12:3f:ed:8d:a3:52: 54:3b:79:9b:2a:5e:d0:f2:82:f2:53:9a:eb:be:3c: 4a:64:0d:97:54:05:0f:80:fc:6f:6b:09:03:c1:f7: 1e:f8:51:e8:f6:eb:7d:00:51:76:eb:66:59:e2:cd: 09:ea:a3:1a:31:dc:64:f4:dd:43:4b:88:25:a9:fe: 89:c3:d2:5d:93:8c:0b:80:98:ac:15:70:b6:a3:10: a8:14:89:8a:b1:07:08:85:e0:68:1f:5d:8f:8f:69: 53:0c:6c:79:99:c4:63:e4:e2:05:02:f5:15:a5:be: 02:5f:f1:7e:77:38:b7:ca:4c:a5:67:48:a4:28:6c: ef:c7:bb:ca:ae:08:37:56:7e:26:39:cc:67:c5:58: 52:f9:7b:5c:ea:dc:84:5c:c0:22:77:bf:62:13:37: 5a:91:d8:fc:d3:5f:84:f6:51:06:a1:fe:18:54:5b: 87:b8:77:53:43:77:bc:19:18:af:df:93:c2:53:cb: b8:4d:f1:15:54:28:b7:a5:6d:2b:65:6b:03:63:d6: ba:c8:2f:6c:90:fd:65:53:ad:56:ad:5c:7a:8c:1e: be:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D8:A2:8F:BA:1C:E2:73:AB:1B:E9:C7:BD:79:7F:36:19:EB:FA:BA X509v3 Authority Key Identifier: keyid:C1:F7:CC:0C:8D:5E:31:55:96:AF:10:F6:EC:F4:6F:2C:75:E4:F5:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/866247f9-1eec-4901-ba42-9df26424f5b8/0/C1F7CC0C8D5E315596AF10F6ECF46F2C75E4F585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:50:a2:04:bd:8f:b7:00:bb:12:dd:cc:4b:85:25:a4:f7:8e: f9:57:b0:e9:8c:0f:d3:22:ab:46:91:22:d6:51:3e:84:af:f6: 15:92:07:77:3f:50:94:c8:58:2e:8b:e4:95:8f:a7:6f:39:8c: d1:46:9e:60:29:93:45:92:9e:ff:bf:bc:ac:4c:cc:af:db:46: de:5b:71:b9:ff:1e:e2:c1:de:8a:5c:d4:5b:2c:bf:56:a0:6f: 06:80:73:2b:a5:5e:ff:9a:53:22:79:aa:a8:11:c3:76:6d:e5: 10:bf:18:47:bc:60:d2:42:01:90:f8:97:09:64:02:17:28:0f: 31:2e:b6:f6:9b:8c:40:19:78:c8:ad:7c:7e:fe:b4:ab:5e:c9: 0a:7d:8a:a2:b4:90:80:22:b4:0c:1a:b2:ad:5a:ad:75:9d:90: 2b:dd:4a:ff:9b:0b:c0:8f:01:bc:53:4f:ad:c0:60:a5:6d:5e: 43:02:a8:53:fa:05:14:32:6b:d2:01:5f:ab:88:4a:2f:3b:0d: ee:35:16:f7:51:fd:58:f7:59:ff:36:7b:c6:8d:f9:63:b7:8a: 33:2a:fe:d6:f5:95:51:31:52:01:26:53:a0:da:0b:6e:ee:f3: e8:af:62:9b:07:b6:27:0c:7c:d8:f7:d1:d0:83:a0:c2:ff:c9: 36:e6:b4:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD07HvZmouWyHteZfx3HR2n59nXQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3 NUU0RjU4NTAeFw0yNjAzMTgwNTQ3MThaFw0yNjAzMjExNDEwMThaMDMxMTAvBgNV BAMTKDM5RDhBMjhGQkExQ0UyNzNBQjFCRTlDN0JENzk3RjM2MTlFQkZBQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr0G7QGZAFmuT3gJQh2SmqxCZv NVW6du+tYzJP1oYxMWmfQGI52xI/7Y2jUlQ7eZsqXtDygvJTmuu+PEpkDZdUBQ+A /G9rCQPB9x74Uej2630AUXbrZlnizQnqoxox3GT03UNLiCWp/onD0l2TjAuAmKwV cLajEKgUiYqxBwiF4GgfXY+PaVMMbHmZxGPk4gUC9RWlvgJf8X53OLfKTKVnSKQo bO/Hu8quCDdWfiY5zGfFWFL5e1zq3IRcwCJ3v2ITN1qR2PzTX4T2UQah/hhUW4e4 d1NDd7wZGK/fk8JTy7hN8RVUKLelbStlawNj1rrIL2yQ/WVTrVatXHqMHr5tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOdiij7oc4nOrG+nHvXl/Nhnr+rowHwYDVR0j BBgwFoAUwffMDI1eMVWWrxD27PRvLHXk9YUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NjYyNDdmOS0xZWVjLTQ5MDEtYmE0Mi05ZGYyNjQyNGY1YjgvMC9DMUY3Q0MwQzhE NUUzMTU1OTZBRjEwRjZFQ0Y0NkYyQzc1RTRGNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZGMkM3NUU0 RjU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODY2MjQ3ZjktMWVlYy00OTAxLWJh NDItOWRmMjY0MjRmNWI4LzAvQzFGN0NDMEM4RDVFMzE1NTk2QUYxMEY2RUNGNDZG MkM3NUU0RjU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADtQogS9j7cAuxLdzEuFJaT3jvlXsOmMD9Mi q0aRItZRPoSv9hWSB3c/UJTIWC6L5JWPp285jNFGnmApk0WSnv+/vKxMzK/bRt5b cbn/HuLB3opc1Fssv1agbwaAcyulXv+aUyJ5qqgRw3Zt5RC/GEe8YNJCAZD4lwlk AhcoDzEutvabjEAZeMitfH7+tKteyQp9iqK0kIAitAwasq1arXWdkCvdSv+bC8CP AbxTT63AYKVtXkMCqFP6BRQya9IBX6uISi87De41FvdR/Vj3Wf82e8aN+WO3ijMq /tb1lVExUgEmU6DaC27u8+ivYpsHticMfNj30dCDoML/yTbmtBo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:24:11 2026 by rpki-client