$ rpki-client -vvf repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft File: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft (raw, json) Hash identifier: ZWd7WZFtVnduCtn4yP95GyamJXZRlTk50/SLus0KH/Y= Subject key identifier: CD:7D:8B:58:3B:85:AB:59:A4:52:14:6C:C1:AE:41:6C:C4:07:CA:B8 Authority key identifier: 1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB Certificate issuer: /CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Certificate serial: 452F3A75F8696331C818C1D2A82F5C240A0220B7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft Manifest number: 02FF Signing time: Sat 28 Feb 2026 05:42:29 +0000 Manifest this update: Sat 28 Feb 2026 05:37:29 +0000 Manifest next update: Tue 03 Mar 2026 15:59:29 +0000 Files and hashes: 1: 1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl (hash: chG71OxeGWYYmYUN1dO2ApXRFVJjPFXn4areblp63Xs=) 2: 3130332e3137372e3130302e302f32332d3234203d3e20313331313131.roa (hash: 3wek+JTR4Gr3DKmUDawbdf/x7TASEspEnmo4iHcCsdk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 15:59:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:2f:3a:75:f8:69:63:31:c8:18:c1:d2:a8:2f:5c:24:0a:02:20:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BF71219664707A7B776CD99B9A6D2CC60CE0BAB Validity Not Before: Feb 28 05:37:29 2026 GMT Not After : Mar 3 15:59:29 2026 GMT Subject: CN=CD7D8B583B85AB59A452146CC1AE416CC407CAB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:9b:9d:a5:80:e3:c2:93:d7:f9:10:f8:b8:0d: f5:16:19:1e:02:f7:0b:88:9d:a2:73:f0:3d:f8:44: 60:58:54:b4:f8:ce:0c:a2:30:3d:ce:43:ec:04:a4: 80:d7:ff:19:2b:1c:c9:2d:f0:dc:89:d9:52:67:6d: 8d:dc:f6:29:db:41:86:71:62:38:d3:a8:e0:65:39: ac:5f:df:f0:1e:6f:49:d2:0f:55:3c:e2:96:93:28: a7:e1:af:7d:ca:30:1d:37:8d:9d:b3:71:1d:ee:2a: 53:1e:08:c2:d1:18:04:96:b3:ae:58:65:7c:fe:84: 83:9f:68:9e:8e:0c:7e:aa:39:02:b6:fa:cb:43:fd: 29:21:e0:50:c3:de:df:3d:fe:55:ee:43:38:56:bb: 0f:30:58:14:9f:14:b3:0b:7c:34:65:41:80:d4:0a: 81:7b:49:11:d9:38:9c:cc:92:fc:79:43:00:ea:5b: 39:2c:2a:55:db:6e:2d:af:54:f4:af:ce:cf:be:80: 3b:59:a3:a3:06:af:b6:1c:5d:68:1d:38:7f:a5:ac: 28:5b:ac:1c:0a:f4:39:5f:60:47:c7:7d:c7:5a:f9: df:06:c7:4a:56:f9:da:4d:ce:29:44:34:27:f7:c8: fc:0a:37:84:23:57:de:d5:8e:df:23:3c:37:43:31: 37:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:7D:8B:58:3B:85:AB:59:A4:52:14:6C:C1:AE:41:6C:C4:07:CA:B8 X509v3 Authority Key Identifier: keyid:1B:F7:12:19:66:47:07:A7:B7:76:CD:99:B9:A6:D2:CC:60:CE:0B:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/08985f59-0ee6-4208-9a90-29c108600cfc/0/1BF71219664707A7B776CD99B9A6D2CC60CE0BAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:a1:17:36:d8:78:ff:17:b1:e8:d3:90:58:bc:72:29:a4:ef: 76:18:35:41:0e:30:5d:75:0c:39:01:dc:67:85:d9:1b:c6:c8: 71:22:08:7c:0b:22:15:f2:11:91:35:67:9e:2f:07:a7:60:88: 0c:ac:ff:2d:96:2c:41:8b:8e:75:b6:72:ed:08:45:cb:fb:19: af:49:64:af:22:f5:2a:bd:59:a0:72:14:68:2a:1b:f3:af:26: 3d:3e:37:9f:54:e3:a3:21:32:8b:c8:c8:41:05:d0:0f:6f:27: 78:46:8c:58:0f:0e:d1:a2:ae:de:41:b6:7b:16:d2:22:80:9c: 27:ca:c2:9c:64:da:e6:ca:5c:ec:95:5c:99:fe:59:cb:64:ac: 1d:4e:f1:c4:7e:b0:bc:eb:6d:88:a2:73:44:5e:5b:79:92:60: 88:c7:95:3e:64:18:5a:81:1b:c4:3c:a9:ff:af:99:f7:6f:97: 3c:63:9c:bb:fa:72:75:90:8b:c1:7f:7c:47:d8:ec:09:dd:05: ee:bc:f0:7b:ba:de:27:9b:08:ff:42:f4:dc:24:9e:85:9a:12: 4d:b1:ce:99:76:ae:e3:57:6f:bf:9c:1e:e1:f0:a1:92:37:67: 1e:68:67:91:38:83:50:7a:cc:c1:84:ea:2f:54:95:91:1a:39: 52:b6:bd:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURS86dfhpYzHIGMHSqC9cJAoCILcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2 MENFMEJBQjAeFw0yNjAyMjgwNTM3MjlaFw0yNjAzMDMxNTU5MjlaMDMxMTAvBgNV BAMTKENEN0Q4QjU4M0I4NUFCNTlBNDUyMTQ2Q0MxQUU0MTZDQzQwN0NBQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmm52lgOPCk9f5EPi4DfUWGR4C 9wuInaJz8D34RGBYVLT4zgyiMD3OQ+wEpIDX/xkrHMkt8NyJ2VJnbY3c9inbQYZx YjjTqOBlOaxf3/Aeb0nSD1U84paTKKfhr33KMB03jZ2zcR3uKlMeCMLRGASWs65Y ZXz+hIOfaJ6ODH6qOQK2+stD/Skh4FDD3t89/lXuQzhWuw8wWBSfFLMLfDRlQYDU CoF7SRHZOJzMkvx5QwDqWzksKlXbbi2vVPSvzs++gDtZo6MGr7YcXWgdOH+lrChb rBwK9DlfYEfHfcda+d8Gx0pW+dpNzilENCf3yPwKN4QjV97Vjt8jPDdDMTfRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzX2LWDuFq1mkUhRswa5BbMQHyrgwHwYDVR0j BBgwFoAUG/cSGWZHB6e3ds2ZuabSzGDOC6swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ODk4NWY1OS0wZWU2LTQyMDgtOWE5MC0yOWMxMDg2MDBjZmMvMC8xQkY3MTIxOTY2 NDcwN0E3Qjc3NkNEOTlCOUE2RDJDQzYwQ0UwQkFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQyQ0M2MENF MEJBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDg5ODVmNTktMGVlNi00MjA4LTlh OTAtMjljMTA4NjAwY2ZjLzAvMUJGNzEyMTk2NjQ3MDdBN0I3NzZDRDk5QjlBNkQy Q0M2MENFMEJBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACyhFzbYeP8XsejTkFi8cimk73YYNUEOMF11 DDkB3GeF2RvGyHEiCHwLIhXyEZE1Z54vB6dgiAys/y2WLEGLjnW2cu0IRcv7Ga9J ZK8i9Sq9WaByFGgqG/OvJj0+N59U46MhMovIyEEF0A9vJ3hGjFgPDtGirt5BtnsW 0iKAnCfKwpxk2ubKXOyVXJn+WctkrB1O8cR+sLzrbYiic0ReW3mSYIjHlT5kGFqB G8Q8qf+vmfdvlzxjnLv6cnWQi8F/fEfY7AndBe688Hu63iebCP9C9NwknoWaEk2x zpl2ruNXb7+cHuHwoZI3Zx5oZ5E4g1B6zMGE6i9UlZEaOVK2va0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:32:42 2026 by rpki-client