$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: UsaYYhkPjJE+KPmMTuYmWT7BPsCMfojWScaG7qY1024= Subject key identifier: EA:E0:A5:49:BD:9C:4C:CC:61:73:87:51:89:58:64:D8:A3:28:73:E0 Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 364CE6E45E723DD03213BC288E6DF64282682845 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: E4 Signing time: Sat 07 Mar 2026 10:22:36 +0000 Manifest this update: Sat 07 Mar 2026 10:17:36 +0000 Manifest next update: Tue 10 Mar 2026 21:56:36 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: TjSJLVMUyTe/pOi+KgpA23aZaWuGWn9R1ArTh0nk0DY=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:4c:e6:e4:5e:72:3d:d0:32:13:bc:28:8e:6d:f6:42:82:68:28:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Mar 7 10:17:36 2026 GMT Not After : Mar 10 21:56:36 2026 GMT Subject: CN=EAE0A549BD9C4CCC61738751895864D8A32873E0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:43:7a:3e:b2:05:67:5f:cf:fd:8c:76:14:e6: 3c:25:49:a6:42:5f:0f:17:22:b7:95:85:83:88:b5: ff:7e:8d:dd:db:1a:c9:f6:94:65:70:e3:31:d8:2b: a3:60:8e:ef:e5:41:96:fd:4f:c9:3c:40:2e:1e:64: 19:bc:47:09:e4:07:0f:2f:74:63:e7:6e:03:db:7b: f5:cd:7e:5c:93:14:30:02:b4:7c:81:ee:01:e5:c2: 60:bf:76:4f:89:49:9b:f5:28:12:c8:58:6e:e0:eb: d2:64:94:6d:80:cf:8d:c3:a9:d5:a1:09:6e:4d:1d: 9a:84:e7:cb:bc:70:2e:c7:76:3c:16:d3:1b:61:e0: 5f:71:68:23:8d:bd:e9:f3:ea:52:b0:8c:6b:22:e3: 67:a7:20:2e:7f:5d:59:48:16:8d:f2:69:4b:9b:70: a4:a6:38:af:d5:22:44:d2:20:96:2e:37:71:3b:ee: 48:93:a8:7e:b0:a6:9d:85:35:13:f9:06:4d:48:23: 67:e9:4a:3d:61:19:c2:fe:ce:9e:ef:a2:e2:13:49: 73:8c:db:b0:75:f2:2a:fb:12:c0:64:92:fb:da:50: 99:ad:8e:a3:26:6f:08:d9:19:5a:10:bc:05:25:91: 63:b5:c1:35:7c:d8:8e:da:73:b9:90:37:9a:e0:a4: 17:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:E0:A5:49:BD:9C:4C:CC:61:73:87:51:89:58:64:D8:A3:28:73:E0 X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:23:33:78:e5:f7:f1:95:13:17:3c:fe:73:d1:50:ab:51:0a: cc:79:07:58:fa:46:12:78:9b:7e:5b:98:d5:66:d6:15:6c:7d: 6d:b6:cd:bf:cd:b7:f1:89:75:ad:7e:dc:7f:01:26:a1:fc:76: 3f:88:85:3d:0c:db:59:9c:b2:fd:f8:36:6e:9c:21:0e:70:fe: 4c:7f:ce:b7:18:ed:8a:ea:78:46:bf:86:01:ea:b2:ca:6b:87: 8a:6c:b5:d4:9f:91:d2:4d:05:f6:17:3d:80:fd:5d:e8:44:cf: 69:1f:d5:26:b2:fc:fc:8e:cc:ce:19:b4:87:71:73:3a:f8:74: 55:10:c0:a7:11:0c:ca:ea:2a:0a:93:50:f1:ee:ef:7d:15:8d: 42:14:50:29:99:47:55:e5:77:74:e8:5b:49:e0:ab:c3:dc:7e: 5f:6b:68:54:7b:24:c5:7c:c3:87:ab:84:c2:ff:a9:0c:c4:30: 57:3a:ec:a0:71:81:29:ae:05:fa:07:fd:41:9f:ad:09:b6:8a: 55:ae:01:e7:25:da:63:97:29:84:d5:69:68:e6:97:66:b5:92: 37:c8:9f:46:6b:65:4e:e4:da:39:e9:6a:ee:75:50:3d:15:2f: 3c:dd:55:eb:33:82:c4:6b:60:8f:3d:be:34:bc:cb:69:67:ac: 6b:3f:dd:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNkzm5F5yPdAyE7wojm32QoJoKEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNjAzMDcxMDE3MzZaFw0yNjAzMTAyMTU2MzZaMDMxMTAvBgNV BAMTKEVBRTBBNTQ5QkQ5QzRDQ0M2MTczODc1MTg5NTg2NEQ4QTMyODczRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDQ3o+sgVnX8/9jHYU5jwlSaZC Xw8XIreVhYOItf9+jd3bGsn2lGVw4zHYK6Ngju/lQZb9T8k8QC4eZBm8RwnkBw8v dGPnbgPbe/XNflyTFDACtHyB7gHlwmC/dk+JSZv1KBLIWG7g69JklG2Az43DqdWh CW5NHZqE58u8cC7HdjwW0xth4F9xaCONvenz6lKwjGsi42enIC5/XVlIFo3yaUub cKSmOK/VIkTSIJYuN3E77kiTqH6wpp2FNRP5Bk1II2fpSj1hGcL+zp7vouITSXOM 27B18ir7EsBkkvvaUJmtjqMmbwjZGVoQvAUlkWO1wTV82I7ac7mQN5rgpBdzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6uClSb2cTMxhc4dRiVhk2KMoc+AwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGsjM3jl9/GVExc8/nPRUKtRCsx5B1j6RhJ4 m35bmNVm1hVsfW22zb/Nt/GJda1+3H8BJqH8dj+IhT0M21mcsv34Nm6cIQ5w/kx/ zrcY7YrqeEa/hgHqssprh4pstdSfkdJNBfYXPYD9XehEz2kf1Say/PyOzM4ZtIdx czr4dFUQwKcRDMrqKgqTUPHu730VjUIUUCmZR1Xld3ToW0ngq8Pcfl9raFR7JMV8 w4erhML/qQzEMFc67KBxgSmuBfoH/UGfrQm2ilWuAecl2mOXKYTVaWjml2a1kjfI n0ZrZU7k2jnpau51UD0VLzzdVeszgsRrYI89vjS8y2lnrGs/3R0= -----END CERTIFICATE-----Generated at Sun Mar 8 02:09:09 2026 by rpki-client