$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: HqbJ2jcNCky7f3Au714/JENceLy/8H5BeGYimLJvA2c= Subject key identifier: 07:74:2F:D2:15:6D:EA:91:79:8D:25:5F:47:10:B3:A9:7B:D7:B2:C5 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 2870EB8C029BA6403CC04C307F8BFFE392A6E0BF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 0314 Signing time: Fri 17 Apr 2026 13:02:47 +0000 Manifest this update: Fri 17 Apr 2026 12:57:47 +0000 Manifest next update: Mon 20 Apr 2026 23:57:47 +0000 Files and hashes: 1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: CKKO0h5tPZfLsngI9B8JorKXrai20MR59SB5ZMnBDgE=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:57:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:70:eb:8c:02:9b:a6:40:3c:c0:4c:30:7f:8b:ff:e3:92:a6:e0:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Apr 17 12:57:47 2026 GMT Not After : Apr 20 23:57:47 2026 GMT Subject: CN=07742FD2156DEA91798D255F4710B3A97BD7B2C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c9:15:b6:6b:f2:be:d1:e8:1f:69:a9:0a:2b: db:46:1a:b9:bc:56:ef:d0:10:e9:b2:39:55:0b:35: d0:cd:41:ce:9e:8d:cf:b1:27:96:28:81:15:53:9a: ee:d5:aa:d9:90:02:a3:61:89:c3:e4:2f:ad:1d:c6: 83:de:f8:83:02:ea:bb:c0:d5:0a:a1:ca:a8:18:ad: 07:ec:b4:8a:24:a8:82:88:74:ff:f4:81:95:ec:a4: e5:0f:f5:19:81:5c:c3:8e:2e:e6:7b:1b:dd:30:1d: d2:ba:da:82:ca:d7:77:3f:33:c2:2a:38:3d:5b:cf: 33:4e:62:da:49:fe:6c:b8:0e:46:c6:f8:85:1f:2d: 53:47:91:03:4e:ab:8e:b2:31:14:7f:b3:fe:50:a2: 46:0c:2e:44:ea:fa:0c:64:dd:67:0e:61:9d:ed:84: 2a:f8:ca:30:03:56:d7:db:da:10:a5:56:f6:36:4f: ee:c3:67:cf:e7:ee:90:b2:82:b7:fa:57:64:b9:da: 09:f0:d0:f1:b3:50:49:42:53:b5:e1:67:69:1a:01: 9e:7d:6f:3c:39:52:43:c4:7f:e7:65:8b:de:1f:88: 12:29:57:37:82:f9:b1:9d:75:3c:ae:6c:ef:8d:6a: 2e:24:16:1c:b2:e5:6c:63:eb:51:de:a6:4e:fe:e1: 14:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:74:2F:D2:15:6D:EA:91:79:8D:25:5F:47:10:B3:A9:7B:D7:B2:C5 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption aa:cc:2f:76:2b:b0:06:4e:20:81:d9:17:b6:94:d6:53:0d:4f: 15:7c:1c:ae:0e:77:fc:15:11:63:9c:00:3b:45:ff:c6:d7:e9: f5:61:96:fc:d0:c7:3e:07:14:97:e6:7c:b0:c0:8a:da:50:ed: e2:aa:0e:1e:6b:3b:ea:fe:68:c9:a6:42:49:2c:28:51:71:4c: 97:e0:d3:bd:44:04:f2:60:96:16:5f:97:d9:15:a0:35:15:04: e7:45:52:94:38:75:ba:49:f7:78:9d:a8:1a:b5:ba:97:60:9b: 63:c3:f7:33:d8:32:13:18:59:e6:20:7d:0d:33:c9:3a:2f:1e: ab:22:60:92:82:4c:0a:3f:a0:15:ce:7a:70:65:69:f0:04:ef: 94:74:a2:df:98:90:3c:9b:e8:07:9a:89:9d:36:01:b1:26:cd: bb:c2:7e:a2:3f:8a:c0:2c:76:a5:3d:4c:2c:a8:af:34:9c:a4: b9:2f:34:6c:b0:25:8d:f4:ca:9a:e4:da:0d:c9:f2:f8:f8:27: fa:bb:1b:d6:3b:60:ab:08:fb:1b:a0:a8:88:28:4e:76:a2:f3: 7d:67:f8:31:28:16:ba:5f:4a:33:b6:5b:c7:a0:4b:7f:ce:c0: 79:0d:93:8c:29:2a:ef:40:09:ee:c4:52:36:35:79:30:a4:c4: a8:1d:e6:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHDrjAKbpkA8wEwwf4v/45Km4L8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNjA0MTcxMjU3NDdaFw0yNjA0MjAyMzU3NDdaMDMxMTAvBgNV BAMTKDA3NzQyRkQyMTU2REVBOTE3OThEMjU1RjQ3MTBCM0E5N0JEN0IyQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEyRW2a/K+0egfaakKK9tGGrm8 Vu/QEOmyOVULNdDNQc6ejc+xJ5YogRVTmu7VqtmQAqNhicPkL60dxoPe+IMC6rvA 1QqhyqgYrQfstIokqIKIdP/0gZXspOUP9RmBXMOOLuZ7G90wHdK62oLK13c/M8Iq OD1bzzNOYtpJ/my4DkbG+IUfLVNHkQNOq46yMRR/s/5QokYMLkTq+gxk3WcOYZ3t hCr4yjADVtfb2hClVvY2T+7DZ8/n7pCygrf6V2S52gnw0PGzUElCU7XhZ2kaAZ59 bzw5UkPEf+dli94fiBIpVzeC+bGddTyubO+Nai4kFhyy5Wxj61Hepk7+4RTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB3Qv0hVt6pF5jSVfRxCzqXvXssUwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKrML3YrsAZOIIHZF7aU1lMNTxV8HK4Od/wV EWOcADtF/8bX6fVhlvzQxz4HFJfmfLDAitpQ7eKqDh5rO+r+aMmmQkksKFFxTJfg 071EBPJglhZfl9kVoDUVBOdFUpQ4dbpJ93idqBq1updgm2PD9zPYMhMYWeYgfQ0z yTovHqsiYJKCTAo/oBXOenBlafAE75R0ot+YkDyb6AeaiZ02AbEmzbvCfqI/isAs dqU9TCyorzScpLkvNGywJY30yprk2g3J8vj4J/q7G9Y7YKsI+xugqIgoTnai831n +DEoFrpfSjO2W8egS3/OwHkNk4wpKu9ACe7EUjY1eTCkxKgd5jE= -----END CERTIFICATE-----Generated at Sat Apr 18 04:59:21 2026 by rpki-client