$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: klv4ofh8PhWjemcKVAvfdVLNavE9jLCxawtP0rhECFo= Subject key identifier: CC:60:15:93:15:43:72:74:2C:F0:13:85:F1:FA:02:ED:B1:1F:D7:C0 Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 5C25950CA7AB536F93D63F049E14246CA8EF4AC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: 0132 Signing time: Wed 18 Mar 2026 08:32:36 +0000 Manifest this update: Wed 18 Mar 2026 08:27:36 +0000 Manifest next update: Sat 21 Mar 2026 08:37:36 +0000 Files and hashes: 1: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: qdcFmE7b+q0LTLl9il6wSO52ud1F6bxcFwe5bz9+Mwo=) 2: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: yThEaj9cxtdok/5GUXj7+kkX5Xj5C+3r/fUIRdcZf5k=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: GDGsAYju8Y7adfnim/budrOEXUrOtcGf3rQjkFgAPiA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 08:37:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:25:95:0c:a7:ab:53:6f:93:d6:3f:04:9e:14:24:6c:a8:ef:4a:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: Mar 18 08:27:36 2026 GMT Not After : Mar 21 08:37:36 2026 GMT Subject: CN=CC601593154372742CF01385F1FA02EDB11FD7C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:e5:4c:21:f7:bc:2d:e6:45:2c:3b:bf:59:de: 6c:c4:f4:4a:08:8b:3c:29:0c:b7:c0:f6:2c:01:5c: ef:81:29:52:f5:de:98:e1:0d:17:a6:d2:54:55:4e: f0:28:29:78:30:7f:3b:4f:95:92:6b:23:4b:f1:5a: 54:55:0f:97:01:98:38:28:fe:c3:b0:be:4b:fc:fd: 6b:dc:48:55:71:26:82:01:fe:2b:d9:7c:f0:5e:b5: 13:6a:d7:1a:b6:cf:32:49:6a:52:eb:32:cc:83:4b: 2b:54:dc:ff:a1:c9:16:b5:72:f2:3a:d2:7a:fc:24: d8:3c:1a:9b:61:5b:56:95:cf:96:b0:3b:07:49:2f: 11:5f:53:93:4e:7f:17:d3:2c:5b:25:30:99:ab:ea: 22:c1:4d:c0:ed:f8:8a:a8:30:77:a1:49:ae:14:90: 6f:dd:03:95:e1:74:88:33:8d:ce:f2:12:40:41:63: db:0a:c2:42:c2:71:e4:aa:23:40:a5:32:20:2e:a9: cd:3e:8a:fc:bd:eb:7a:36:84:cd:73:71:14:25:19: e7:60:24:86:2f:fb:24:88:64:fa:64:fc:8b:d4:e1: 3a:73:60:f3:4a:a9:b4:5c:7f:55:4d:85:08:45:94: 2d:6c:80:00:38:4c:67:a6:96:87:d6:31:bd:8a:a8: 44:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:60:15:93:15:43:72:74:2C:F0:13:85:F1:FA:02:ED:B1:1F:D7:C0 X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:ad:60:70:20:3e:63:77:49:ce:10:11:50:8c:37:9e:56:12: 16:09:d6:58:17:76:88:e9:58:ad:38:7e:e3:ec:9c:bd:5b:19: 67:0c:ba:4a:a4:f1:9e:17:18:e4:d5:23:02:34:0c:17:5a:a7: d0:09:41:e0:54:7a:41:d2:99:c3:25:51:5d:92:64:01:4d:89: 53:8b:9c:7d:b1:da:49:f9:6b:3c:3a:c7:8e:81:65:5c:41:bf: 30:15:49:17:a5:7c:f5:4e:aa:78:a4:f3:e5:5b:3d:d8:ff:36: 5a:86:3e:4c:f6:54:7a:25:1f:27:61:94:a6:32:17:2a:75:ef: 1a:9d:05:44:28:21:42:b8:c3:b1:eb:8d:37:61:49:a9:2e:b2: 48:6e:ce:dc:0e:12:84:fa:23:65:c0:70:8a:71:e3:0e:18:b8: f1:b8:82:f9:e3:27:60:1a:cd:f3:a9:20:8e:ab:73:7c:38:82: 7c:e7:29:5f:f2:b1:29:7b:0c:8f:e6:b5:54:f2:76:49:b2:11: 9d:a1:e7:ec:86:81:ee:a9:48:24:ff:9b:86:9a:cf:31:a9:cc: cb:09:d8:4f:e4:e4:6b:7a:b9:e7:6f:23:4e:49:b8:c9:f8:f2: da:79:e2:cb:aa:69:90:af:7a:6a:d7:4d:ab:1c:a5:f4:18:a8: 3c:2f:be:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXCWVDKerU2+T1j8EnhQkbKjvSsEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNjAzMTgwODI3MzZaFw0yNjAzMjEwODM3MzZaMDMxMTAvBgNV BAMTKENDNjAxNTkzMTU0MzcyNzQyQ0YwMTM4NUYxRkEwMkVEQjExRkQ3QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc5Uwh97wt5kUsO79Z3mzE9EoI izwpDLfA9iwBXO+BKVL13pjhDRem0lRVTvAoKXgwfztPlZJrI0vxWlRVD5cBmDgo /sOwvkv8/WvcSFVxJoIB/ivZfPBetRNq1xq2zzJJalLrMsyDSytU3P+hyRa1cvI6 0nr8JNg8GpthW1aVz5awOwdJLxFfU5NOfxfTLFslMJmr6iLBTcDt+IqoMHehSa4U kG/dA5XhdIgzjc7yEkBBY9sKwkLCceSqI0ClMiAuqc0+ivy963o2hM1zcRQlGedg JIYv+ySIZPpk/IvU4TpzYPNKqbRcf1VNhQhFlC1sgAA4TGemlofWMb2KqERnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzGAVkxVDcnQs8BOF8foC7bEf18AwHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGatYHAgPmN3Sc4QEVCMN55WEhYJ1lgXdojp WK04fuPsnL1bGWcMukqk8Z4XGOTVIwI0DBdap9AJQeBUekHSmcMlUV2SZAFNiVOL nH2x2kn5azw6x46BZVxBvzAVSRelfPVOqnik8+VbPdj/NlqGPkz2VHolHydhlKYy Fyp17xqdBUQoIUK4w7HrjTdhSakuskhuztwOEoT6I2XAcIpx4w4YuPG4gvnjJ2Aa zfOpII6rc3w4gnznKV/ysSl7DI/mtVTydkmyEZ2h5+yGge6pSCT/m4aazzGpzMsJ 2E/k5Gt6uedvI05JuMn48tp54suqaZCvemrXTascpfQYqDwvvsM= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:31 2026 by rpki-client