$ rpki-client -vvf repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft File: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft (raw, json) Hash identifier: qrTuHs088SV62GMan+NkBsQLhu6eEwA4Qzo0jVtccIQ= Subject key identifier: 33:D3:78:18:48:3D:41:BE:C8:C9:E8:0F:A3:58:1A:8F:94:9A:BC:7B Authority key identifier: 0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD Certificate issuer: /CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Certificate serial: 224B941CB9DE65B04ED74B5B4156791B6159E0C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft Manifest number: 0107 Signing time: Mon 20 Apr 2026 23:11:18 +0000 Manifest this update: Mon 20 Apr 2026 23:06:18 +0000 Manifest next update: Fri 24 Apr 2026 09:25:18 +0000 Files and hashes: 1: 3135372e32302e39382e302f32332d3234203d3e20313532343335.roa (hash: ksjiqtTAWCgIRtUjPZtNzrKoQay+iOF9ttjO6dpoPs4=) 2: 0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl (hash: dbyFEZE6kCj5LNspZHvt4e/R6m7UOdngHUnzSi9zJu4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 24 Apr 2026 09:25:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:4b:94:1c:b9:de:65:b0:4e:d7:4b:5b:41:56:79:1b:61:59:e0:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0C1FBE80F21EB26686978B3E769485C083FB7DCD Validity Not Before: Apr 20 23:06:18 2026 GMT Not After : Apr 24 09:25:18 2026 GMT Subject: CN=33D37818483D41BEC8C9E80FA3581A8F949ABC7B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:00:21:8c:4c:0e:6e:bb:54:6f:2d:2d:6a:56: d1:fd:aa:44:54:fe:5b:1c:bc:1a:f7:c7:fc:7a:99: de:b0:15:38:06:ce:32:bb:00:57:82:2e:81:68:7e: 84:1e:1b:0b:3b:dc:1a:db:12:c6:f3:74:0c:74:f6: f2:c7:e5:f4:20:c9:96:f7:2c:8a:67:31:40:49:9c: e6:13:16:e4:4d:0b:dd:13:05:9b:3b:1f:cc:12:31: 8e:57:88:cc:98:76:25:05:c3:a7:c7:9c:60:1e:1f: 6b:6b:f3:99:d0:47:84:4b:0c:c4:42:1c:ce:f0:e8: b8:b1:aa:c2:62:e4:74:a1:fd:96:af:a9:0a:f4:c0: 58:93:9b:2b:c4:63:42:7a:d5:84:b6:ad:4e:44:ab: e3:d7:4c:04:56:e5:3a:6d:01:35:85:fa:f7:55:1e: 5c:1d:ed:55:77:1c:2f:f7:d6:b4:22:63:96:f9:ec: f0:0b:c5:b0:a8:b0:6a:ec:c3:86:db:57:a9:04:85: 5a:5e:5e:d2:ab:92:1b:e9:87:b8:5b:d1:05:18:09: d4:e6:e3:38:8e:19:ec:d5:aa:a7:9f:12:5c:e3:68: cf:59:7d:82:ce:17:76:b1:76:80:5d:3c:fd:72:eb: c6:8d:2e:48:46:e6:d4:be:cb:3d:ad:5a:c9:4d:5c: 92:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:D3:78:18:48:3D:41:BE:C8:C9:E8:0F:A3:58:1A:8F:94:9A:BC:7B X509v3 Authority Key Identifier: keyid:0C:1F:BE:80:F2:1E:B2:66:86:97:8B:3E:76:94:85:C0:83:FB:7D:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/0C1FBE80F21EB26686978B3E769485C083FB7DCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1346c0e2-8194-4024-bcb3-d02956ce3a99/0/0C1FBE80F21EB26686978B3E769485C083FB7DCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:0a:ff:0f:1d:3b:9a:ee:6b:6a:f8:3c:5c:1a:16:b1:9c:2b: e7:17:a0:53:86:6b:a4:ef:59:42:d0:a1:7d:93:7e:75:01:26: 6b:91:1c:55:0b:f3:ed:79:1f:2d:9a:72:53:ff:d9:2f:d7:97: 47:50:04:8f:32:68:99:17:86:6d:4f:24:fd:62:de:22:4e:7b: 16:85:c9:f7:82:4a:25:ee:a2:e3:63:ae:e9:5e:a0:8c:0e:a5: e2:ae:bf:d9:8a:64:ea:1e:66:b8:18:da:53:aa:d5:a0:85:66: 66:bd:49:2f:3a:94:51:ed:fb:c0:a4:cb:de:1b:31:a4:9c:d4: 6a:9f:70:e7:c0:d9:07:15:e0:6a:ea:6a:11:a5:00:d2:99:cb: 1f:f2:31:53:e6:36:cb:d9:f3:34:3a:bd:d3:d8:4c:95:f8:6d: 01:80:83:90:70:1a:70:87:df:5d:af:6a:ce:8f:e4:f8:5c:33: a0:bb:3d:bc:97:a8:f8:40:1f:d6:0e:73:22:a0:74:fc:fa:6e: b7:97:68:3c:4b:80:26:65:0b:8a:d9:0b:21:de:86:f4:df:d2: f6:da:46:8d:a6:55:61:e7:09:98:92:07:fb:85:b4:c9:ef:b8: 13:2c:4e:4c:b9:8c:2f:f9:b9:fb:cf:1a:b3:d6:bf:84:96:0c: 1d:8f:84:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkuUHLneZbBO10tbQVZ5G2FZ4MgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4 M0ZCN0RDRDAeFw0yNjA0MjAyMzA2MThaFw0yNjA0MjQwOTI1MThaMDMxMTAvBgNV BAMTKDMzRDM3ODE4NDgzRDQxQkVDOEM5RTgwRkEzNTgxQThGOTQ5QUJDN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8ACGMTA5uu1RvLS1qVtH9qkRU /lscvBr3x/x6md6wFTgGzjK7AFeCLoFofoQeGws73BrbEsbzdAx09vLH5fQgyZb3 LIpnMUBJnOYTFuRNC90TBZs7H8wSMY5XiMyYdiUFw6fHnGAeH2tr85nQR4RLDMRC HM7w6LixqsJi5HSh/ZavqQr0wFiTmyvEY0J61YS2rU5Eq+PXTARW5TptATWF+vdV Hlwd7VV3HC/31rQiY5b57PALxbCosGrsw4bbV6kEhVpeXtKrkhvph7hb0QUYCdTm 4ziOGezVqqefElzjaM9ZfYLOF3axdoBdPP1y68aNLkhG5tS+yz2tWslNXJLfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM9N4GEg9Qb7IyegPo1gaj5SavHswHwYDVR0j BBgwFoAUDB++gPIesmaGl4s+dpSFwIP7fc0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MzQ2YzBlMi04MTk0LTQwMjQtYmNiMy1kMDI5NTZjZTNhOTkvMC8wQzFGQkU4MEYy MUVCMjY2ODY5NzhCM0U3Njk0ODVDMDgzRkI3RENELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1QzA4M0ZC N0RDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTM0NmMwZTItODE5NC00MDI0LWJj YjMtZDAyOTU2Y2UzYTk5LzAvMEMxRkJFODBGMjFFQjI2Njg2OTc4QjNFNzY5NDg1 QzA4M0ZCN0RDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMgK/w8dO5rua2r4PFwaFrGcK+cXoFOGa6Tv WULQoX2TfnUBJmuRHFUL8+15Hy2aclP/2S/Xl0dQBI8yaJkXhm1PJP1i3iJOexaF yfeCSiXuouNjruleoIwOpeKuv9mKZOoeZrgY2lOq1aCFZma9SS86lFHt+8Cky94b MaSc1GqfcOfA2QcV4GrqahGlANKZyx/yMVPmNsvZ8zQ6vdPYTJX4bQGAg5BwGnCH 312vas6P5PhcM6C7PbyXqPhAH9YOcyKgdPz6breXaDxLgCZlC4rZCyHehvTf0vba Ro2mVWHnCZiSB/uFtMnvuBMsTky5jC/5ufvPGrPWv4SWDB2PhFo= -----END CERTIFICATE-----Generated at Wed Apr 22 04:53:54 2026 by rpki-client