$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: YF7Gaf29pati+PameqK3eE7anJ4K5OrzSzk72LEgOgw= Subject key identifier: 3F:2F:DC:86:A0:52:9D:45:95:E4:9D:01:F8:56:30:2D:49:01:6D:C1 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 2E14FC965A156F15876307FBEDF1A80EA21A51A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: F8 Signing time: Wed 22 Apr 2026 01:52:41 +0000 Manifest this update: Wed 22 Apr 2026 01:47:41 +0000 Manifest next update: Sat 25 Apr 2026 02:42:41 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: 9KWadRa/lIhdhnTwATRhquD6Yx4QKBw89d0wWVoyJJE=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 Apr 2026 02:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:14:fc:96:5a:15:6f:15:87:63:07:fb:ed:f1:a8:0e:a2:1a:51:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Apr 22 01:47:41 2026 GMT Not After : Apr 25 02:42:41 2026 GMT Subject: CN=3F2FDC86A0529D4595E49D01F856302D49016DC1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:cf:4c:7d:92:56:51:a9:9a:5f:28:fe:9e:aa: ee:3b:dc:d1:56:74:f5:6e:57:bb:de:cc:67:12:fb: 82:37:80:4a:d9:09:4a:d7:88:42:73:20:04:8a:f2: 39:b6:f9:c6:d2:ae:ba:f0:12:37:c8:63:fd:62:c6: 33:42:2b:81:2a:d9:6c:82:67:bd:ac:00:c1:05:81: de:d8:72:ec:7b:a2:f4:05:41:a6:45:62:e0:17:d9: 07:52:c8:f1:36:00:56:73:e9:8e:a5:7c:c2:65:15: 59:e9:5c:3c:83:a4:ae:14:0d:7c:a6:11:9b:f9:da: 60:9f:4d:d6:69:f1:50:79:4e:e2:33:c2:60:eb:80: 7b:75:7d:4b:1b:6c:74:84:78:d4:8a:11:e8:8b:f9: 79:ed:99:11:2e:b8:5c:95:db:d8:5c:a8:90:4e:6d: 63:37:5d:b6:cd:e6:92:76:7b:4e:d2:b4:d7:17:62: 96:a2:01:73:0d:74:76:19:0f:43:c3:a3:57:ac:f2: 15:40:53:54:4e:78:99:85:6c:48:1a:f2:42:21:28: 64:dc:62:04:17:6d:d0:a9:17:92:d4:a1:0d:29:bc: ae:38:5f:e5:0d:bc:23:84:5f:08:d2:92:bb:cc:c6: 97:d9:cd:74:dd:26:34:1f:d4:47:03:78:ce:b1:1f: f3:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:2F:DC:86:A0:52:9D:45:95:E4:9D:01:F8:56:30:2D:49:01:6D:C1 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:63:c4:85:34:17:84:86:11:74:f3:ee:16:4e:61:4d:1f:fd: e3:27:2e:c4:37:04:1a:60:4d:69:ba:bc:aa:03:46:fe:59:fe: 32:1c:35:11:ae:d2:88:04:56:c4:60:71:bf:13:e9:7d:29:fe: f8:a2:df:c2:ad:de:2a:cb:63:c8:cd:d4:57:c3:5b:e2:20:e5: 1a:72:df:c9:06:ee:a8:14:f6:a7:e9:34:77:66:9e:53:30:e3: 48:4d:db:ad:3d:2c:d6:22:05:97:3e:3c:6b:e7:43:7f:9f:95: 3a:a9:32:93:4d:e6:81:c3:bf:15:c2:ba:69:fb:3b:1d:6d:fa: 5d:19:a0:16:52:8d:ac:7e:56:33:43:59:16:f6:bb:7c:b3:97: 4f:e3:95:79:77:c8:c9:05:d4:e6:c9:64:4e:79:ac:b1:3a:11: 84:a2:b7:fe:f1:e2:bc:c8:d4:f8:74:4f:65:b2:e1:1e:86:7d: 55:7f:0b:ff:2e:3b:48:73:f3:25:3e:a6:22:05:f5:d6:f9:b0: cd:4a:f7:8d:9d:c4:8a:09:b2:56:46:7a:f7:e1:70:38:a5:b4: 26:0b:7b:90:1a:9c:63:f7:40:b7:ff:d4:98:dc:f7:df:25:44: 10:a5:7b:00:77:04:00:89:db:97:35:c6:a1:2e:e9:da:7d:21: 5c:c3:31:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULhT8lloVbxWHYwf77fGoDqIaUaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNjA0MjIwMTQ3NDFaFw0yNjA0MjUwMjQyNDFaMDMxMTAvBgNV BAMTKDNGMkZEQzg2QTA1MjlENDU5NUU0OUQwMUY4NTYzMDJENDkwMTZEQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHz0x9klZRqZpfKP6equ473NFW dPVuV7vezGcS+4I3gErZCUrXiEJzIASK8jm2+cbSrrrwEjfIY/1ixjNCK4Eq2WyC Z72sAMEFgd7Ycux7ovQFQaZFYuAX2QdSyPE2AFZz6Y6lfMJlFVnpXDyDpK4UDXym EZv52mCfTdZp8VB5TuIzwmDrgHt1fUsbbHSEeNSKEeiL+XntmREuuFyV29hcqJBO bWM3XbbN5pJ2e07StNcXYpaiAXMNdHYZD0PDo1es8hVAU1ROeJmFbEga8kIhKGTc YgQXbdCpF5LUoQ0pvK44X+UNvCOEXwjSkrvMxpfZzXTdJjQf1EcDeM6xH/OXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPy/chqBSnUWV5J0B+FYwLUkBbcEwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEBjxIU0F4SGEXTz7hZOYU0f/eMnLsQ3BBpg TWm6vKoDRv5Z/jIcNRGu0ogEVsRgcb8T6X0p/vii38Kt3irLY8jN1FfDW+Ig5Rpy 38kG7qgU9qfpNHdmnlMw40hN2609LNYiBZc+PGvnQ3+flTqpMpNN5oHDvxXCumn7 Ox1t+l0ZoBZSjax+VjNDWRb2u3yzl0/jlXl3yMkF1ObJZE55rLE6EYSit/7x4rzI 1Ph0T2Wy4R6GfVV/C/8uO0hz8yU+piIF9db5sM1K942dxIoJslZGevfhcDiltCYL e5AanGP3QLf/1Jjc998lRBClewB3BACJ25c1xqEu6dp9IVzDMVM= -----END CERTIFICATE-----Generated at Wed Apr 22 09:58:29 2026 by rpki-client