$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft File: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft (raw, json) Hash identifier: TuzOupTREjBpCqeyR9EVX5kiO8yT+peCJjWEzUmX/+Y= Subject key identifier: 87:FC:A3:CF:9A:FE:95:B6:BD:5B:4D:9F:BE:C7:FC:46:38:1A:AB:55 Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Certificate serial: 79C7A259413EE807F86C00DFF414C1DBF0B58B3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft Manifest number: 0203 Signing time: Sat 21 Mar 2026 16:40:06 +0000 Manifest this update: Sat 21 Mar 2026 16:35:06 +0000 Manifest next update: Tue 24 Mar 2026 23:13:06 +0000 Files and hashes: 1: 3131342e3134312e39352e302f32342d3234203d3e20313338383138.roa (hash: qVIOTxzkHoMtUEEPyvvgBkFKT9oB5BtmkPkZiQLq0ng=) 2: 1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl (hash: NNJ/NB8xNBuAF2fyNkyInEVZRkK1KJS4/2/555lDEMU=) 3: 3131342e3134312e39342e302f32342d3234203d3e20313338383138.roa (hash: FBwLiD7U4sCYynBhJGjAu+VAe5YUj9+FUjVO+L+zaEo=) 4: 3131342e3134312e38382e302f32342d3234203d3e203338373733.roa (hash: rfAEDfb98EmJrbbYSOsJh0R3GKeVtrdV920jQ6JYXXk=) 5: 3131342e3134312e39302e302f32342d3234203d3e203338373733.roa (hash: 31rqAW06+FuDJELvsb/0uxq0ocORo684ERfMQVWzj54=) 6: 3131342e3134312e38392e302f32342d3234203d3e203338373733.roa (hash: vo3txQHD1GP/JznijvlkQTtQaeBbi729kAiguRxIkyE=) 7: 3131342e3134312e39312e302f32342d3234203d3e20313338383138.roa (hash: p/6KK4JMbgCv5VkdanC2JpAp7VpmlbyPcWCjqL4KniM=) 8: 3131342e3134312e39322e302f32342d3234203d3e20313338383138.roa (hash: YqkCvMl0PPv/SjM86CmSE7YV2BzpnMMQxQbEuJOY7ws=) 9: 3131342e3134312e39332e302f32342d3234203d3e20313338383138.roa (hash: 8bb25AjKY+CfhaHD2T35vRoSHcpGFrksD2snYFX7/PA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 24 Mar 2026 23:13:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:c7:a2:59:41:3e:e8:07:f8:6c:00:df:f4:14:c1:db:f0:b5:8b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F Validity Not Before: Mar 21 16:35:06 2026 GMT Not After : Mar 24 23:13:06 2026 GMT Subject: CN=87FCA3CF9AFE95B6BD5B4D9FBEC7FC46381AAB55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:88:01:90:64:70:4f:c1:b1:8d:3a:59:38:4b: 8b:69:53:9c:9a:c1:5d:b4:05:e7:66:12:ae:fb:d7: 38:b7:5e:16:2c:67:20:cb:aa:67:ff:0a:da:d9:13: d6:ef:46:88:4b:db:e8:9d:60:fc:cc:4c:06:3c:b4: e1:6d:f6:a7:9b:97:c1:5d:cd:f8:29:c3:a6:9e:7f: d0:9a:7a:4d:a1:db:b6:b2:59:67:02:63:d3:07:40: 3c:de:f2:79:ea:e6:3a:92:bd:85:76:d4:e4:c0:e1: a7:6b:b0:60:28:71:03:73:5f:e9:2c:e9:b0:a0:16: 2f:cf:cc:75:8b:1e:27:ee:9b:93:cb:ce:12:81:5c: f2:67:c4:30:7a:e1:c2:4c:e3:05:f4:9a:31:0c:9f: 00:2f:24:07:1c:5d:c8:ed:df:b6:78:a4:d7:98:26: 65:4f:1c:93:42:dc:75:71:c5:53:01:d7:9a:29:2b: 28:65:b9:ad:27:6e:dc:84:30:29:bf:47:e3:46:64: 43:2c:38:db:0e:0b:fb:b6:69:02:a9:21:f8:58:23: fc:39:d9:0b:18:18:3a:be:73:56:91:ee:6a:db:0c: 89:7e:65:04:2e:4e:c3:be:c1:65:ad:9b:e9:9e:81: c6:1c:4f:1e:71:a0:dd:53:bd:76:95:16:5f:4e:ff: f4:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:FC:A3:CF:9A:FE:95:B6:BD:5B:4D:9F:BE:C7:FC:46:38:1A:AB:55 X509v3 Authority Key Identifier: keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:65:09:00:a8:a4:b2:4d:fd:1b:66:91:b1:fb:0b:fa:de:4f: 12:46:1f:31:01:6d:90:b5:01:3f:d2:97:a4:98:d8:73:3c:0b: 66:da:ea:f0:1d:30:17:66:f8:15:7d:74:21:f3:36:ea:f4:04: 78:19:7b:2a:f7:75:b7:79:06:38:ae:2b:80:8c:42:18:c5:70: 4d:17:b6:28:0c:22:d0:5e:f1:af:3d:56:9a:40:b1:8b:42:69: 58:79:6d:35:2c:09:3b:9e:e9:e4:db:d2:27:b7:20:ce:13:fb: 60:0d:32:e2:15:02:82:3a:60:79:88:b2:4e:bb:46:75:24:9d: bc:de:cd:9b:48:c7:7b:3f:b3:31:ef:72:6e:9e:d6:e4:ff:8a: 7e:a0:25:bc:3d:f3:e5:dc:6d:8b:78:07:5a:53:b6:3f:69:7c: d5:29:88:71:97:1e:88:f5:f0:eb:78:ab:4f:c9:0c:a0:14:5f: 19:c6:32:28:51:fa:fe:e9:cb:63:90:a6:f2:ec:1a:5e:96:92: b7:20:73:31:fc:c8:a6:73:6c:4f:cd:d7:6b:c1:18:bc:1e:b8: b1:a9:be:5b:88:57:2f:d9:1b:ee:17:71:4a:19:bd:f7:5a:e4: db:1d:3b:5c:d3:55:37:9b:34:ad:e2:80:77:4e:28:ab:d6:fe: 0a:5f:49:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeceiWUE+6Af4bADf9BTB2/C1izowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw REMxNDY0RjAeFw0yNjAzMjExNjM1MDZaFw0yNjAzMjQyMzEzMDZaMDMxMTAvBgNV BAMTKDg3RkNBM0NGOUFGRTk1QjZCRDVCNEQ5RkJFQzdGQzQ2MzgxQUFCNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaiAGQZHBPwbGNOlk4S4tpU5ya wV20BedmEq771zi3XhYsZyDLqmf/CtrZE9bvRohL2+idYPzMTAY8tOFt9qebl8Fd zfgpw6aef9Caek2h27ayWWcCY9MHQDze8nnq5jqSvYV21OTA4adrsGAocQNzX+ks 6bCgFi/PzHWLHifum5PLzhKBXPJnxDB64cJM4wX0mjEMnwAvJAccXcjt37Z4pNeY JmVPHJNC3HVxxVMB15opKyhlua0nbtyEMCm/R+NGZEMsONsOC/u2aQKpIfhYI/w5 2QsYGDq+c1aR7mrbDIl+ZQQuTsO+wWWtm+megcYcTx5xoN1TvXaVFl9O//RTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh/yjz5r+lba9W02fvsf8Rjgaq1UwHwYDVR0j BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx NDY0Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzdmYzU0ZmItNzI0ZS00MzE2LWI5 YmMtMWM0YjA2ZWE1N2FlLzAvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURE RDcwREMxNDY0Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtlCQCopLJN/RtmkbH7C/reTxJGHzEBbZC1 AT/Sl6SY2HM8C2ba6vAdMBdm+BV9dCHzNur0BHgZeyr3dbd5BjiuK4CMQhjFcE0X tigMItBe8a89VppAsYtCaVh5bTUsCTue6eTb0ie3IM4T+2ANMuIVAoI6YHmIsk67 RnUknbzezZtIx3s/szHvcm6e1uT/in6gJbw98+XcbYt4B1pTtj9pfNUpiHGXHoj1 8Ot4q0/JDKAUXxnGMihR+v7py2OQpvLsGl6WkrcgczH8yKZzbE/N12vBGLweuLGp vluIVy/ZG+4XcUoZvfda5NsdO1zTVTebNK3igHdOKKvW/gpfSfM= -----END CERTIFICATE-----Generated at Sun Mar 22 20:15:25 2026 by rpki-client