$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: vzP0kpS8nLjFFs59nygYIQlgm0JfWa+l9/gAEMLdxaY= Subject key identifier: 78:DE:17:A6:E6:FD:16:05:6D:C9:DD:6E:7F:0F:F2:F9:14:DB:78:72 Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 5AFD08D2036360CA01C68920EB5EA40B87A86064 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: CF Signing time: Sat 07 Mar 2026 07:22:19 +0000 Manifest this update: Sat 07 Mar 2026 07:17:19 +0000 Manifest next update: Tue 10 Mar 2026 10:28:19 +0000 Files and hashes: 1: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: nMsveR3m9+2kcJF7vGodqeVTro8rECBKklYVkRLQaOQ=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: GxPwcl3xG0lJtuIsVw/HKN6DPia/mCVf1Me2ZjNBfOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:fd:08:d2:03:63:60:ca:01:c6:89:20:eb:5e:a4:0b:87:a8:60:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Mar 7 07:17:19 2026 GMT Not After : Mar 10 10:28:19 2026 GMT Subject: CN=78DE17A6E6FD16056DC9DD6E7F0FF2F914DB7872 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:f5:7c:62:2b:a7:23:be:7c:76:bb:7d:91:c7: d2:db:5c:d1:0b:34:a4:3f:75:ed:4e:d2:c3:e4:12: 0e:14:88:74:41:b9:da:e2:64:ba:48:8a:71:df:3e: 6e:6c:53:a1:33:bb:78:04:42:2e:e0:0b:b6:ab:fd: 6f:5b:2e:17:c6:95:3c:43:72:72:f8:5d:a8:74:7a: 10:49:50:6a:63:b7:45:fc:02:bc:aa:0e:eb:c0:bf: 64:16:70:98:fe:54:dd:3e:cb:4f:e3:6b:3a:e8:c7: 0c:56:cd:ea:ac:29:ee:47:e1:0a:c9:51:8c:d2:f1: 22:78:e3:aa:e4:a2:6c:18:1d:59:5b:67:c4:5d:dc: a3:4e:4d:fe:99:ac:c7:e7:ac:d8:85:38:64:46:0f: 9e:89:ec:85:0d:a0:23:ab:76:f6:27:80:d7:ea:a5: 13:cb:5a:f4:06:ee:7d:0b:ce:1b:c0:08:51:92:c3: 8d:79:25:e0:85:9e:00:8e:28:76:58:23:bb:b7:5a: e4:83:c5:c0:45:a4:1f:6e:bf:82:d6:17:c8:77:54: 8f:63:11:99:9f:bb:37:32:13:75:dd:f4:c9:a2:16: 7f:66:a6:21:87:69:14:8b:90:65:66:cf:39:35:98: 4d:75:83:57:31:2a:9f:b6:55:11:d5:ff:a3:32:a3: 60:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:DE:17:A6:E6:FD:16:05:6D:C9:DD:6E:7F:0F:F2:F9:14:DB:78:72 X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:17:9d:30:c2:cd:4b:7d:d6:4e:b4:75:f8:94:24:be:5e:68: 8f:bf:13:ed:7a:10:8e:ff:26:b7:25:55:9a:8b:98:7f:44:ea: 98:08:b0:ec:e8:f8:04:0d:c4:5e:f1:8b:5d:2a:c1:54:04:f6: 18:fc:2d:75:c2:f1:e2:e3:ea:bd:9a:49:47:13:8d:67:77:63: 04:02:17:cd:ba:f5:c2:42:a8:a7:20:02:01:56:8f:7f:e3:48: 93:30:df:89:bf:05:40:93:72:2d:36:15:53:65:6e:06:da:69: 8c:e5:5a:fc:b0:d8:1f:4c:12:ac:ef:06:b8:be:30:d6:b7:bf: 44:37:a5:13:0d:20:9a:66:c9:cc:bb:00:a5:0c:ea:e8:1d:fa: 22:0a:2d:0a:98:80:04:22:1f:6a:1d:7e:29:b5:97:54:c7:90: 00:58:79:bd:1a:fc:57:e5:c8:43:56:c8:65:d8:55:65:c3:b8: 2d:a9:67:9b:b9:75:36:88:02:f7:1d:4b:e0:75:29:08:94:af: a3:6b:5c:c2:58:8d:54:8f:f0:c4:81:42:c9:00:2b:f4:68:90: c5:65:c0:e5:14:3c:d4:f7:b9:d0:31:d6:89:cb:bd:97:87:9e: 26:d3:80:a0:5f:89:a4:e4:be:a0:93:c3:52:a5:7b:4a:b4:3f: 34:35:98:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWv0I0gNjYMoBxokg616kC4eoYGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNjAzMDcwNzE3MTlaFw0yNjAzMTAxMDI4MTlaMDMxMTAvBgNV BAMTKDc4REUxN0E2RTZGRDE2MDU2REM5REQ2RTdGMEZGMkY5MTREQjc4NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF9XxiK6cjvnx2u32Rx9LbXNEL NKQ/de1O0sPkEg4UiHRBudriZLpIinHfPm5sU6Ezu3gEQi7gC7ar/W9bLhfGlTxD cnL4Xah0ehBJUGpjt0X8AryqDuvAv2QWcJj+VN0+y0/jazroxwxWzeqsKe5H4QrJ UYzS8SJ446rkomwYHVlbZ8Rd3KNOTf6ZrMfnrNiFOGRGD56J7IUNoCOrdvYngNfq pRPLWvQG7n0LzhvACFGSw415JeCFngCOKHZYI7u3WuSDxcBFpB9uv4LWF8h3VI9j EZmfuzcyE3Xd9MmiFn9mpiGHaRSLkGVmzzk1mE11g1cxKp+2VRHV/6Myo2C3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeN4Xpub9FgVtyd1ufw/y+RTbeHIwHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIXnTDCzUt91k60dfiUJL5eaI+/E+16EI7/ JrclVZqLmH9E6pgIsOzo+AQNxF7xi10qwVQE9hj8LXXC8eLj6r2aSUcTjWd3YwQC F8269cJCqKcgAgFWj3/jSJMw34m/BUCTci02FVNlbgbaaYzlWvyw2B9MEqzvBri+ MNa3v0Q3pRMNIJpmycy7AKUM6ugd+iIKLQqYgAQiH2odfim1l1THkABYeb0a/Ffl yENWyGXYVWXDuC2pZ5u5dTaIAvcdS+B1KQiUr6NrXMJYjVSP8MSBQskAK/RokMVl wOUUPNT3udAx1onLvZeHnibTgKBfiaTkvqCTw1Kle0q0PzQ1mMQ= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:41 2026 by rpki-client