$ rpki-client -vvf repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft File: 1C427FBF1A649B90BD89B0EA83871003D9045925.mft (raw, json) Hash identifier: 6fgZWXbNKFe/Rfcxg8wRcSA0MJ4QevpuzCzOySP19jg= Subject key identifier: 82:95:D0:21:CF:7B:1B:15:37:C4:57:1A:57:20:14:36:FA:AF:EF:1E Authority key identifier: 1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 Certificate issuer: /CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Certificate serial: 369ECCA5C40EA7345A520780D5CE7AFDD04728A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft Manifest number: 028B Signing time: Sat 28 Feb 2026 03:41:50 +0000 Manifest this update: Sat 28 Feb 2026 03:36:50 +0000 Manifest next update: Tue 03 Mar 2026 12:05:50 +0000 Files and hashes: 1: 3130332e3138322e302e302f32332d3233203d3e2039333431.roa (hash: nPXN7jiM3pyEkrdy+/m6LPxlqXOvK01rGWZj8klP7xs=) 2: 1C427FBF1A649B90BD89B0EA83871003D9045925.crl (hash: 3ePe3zYDS+NjYCYaT6A+0XCGOozfIZNtLLfjPiX948o=) 3: 3130332e3138322e312e302f32342d3234203d3e2039333431.roa (hash: cBkGG+I0fKOsMSDWDVv2R09AQ7o+qWoi+Szb7iMxrC8=) 4: 3130332e3138322e302e302f32342d3234203d3e2039333431.roa (hash: D3+VPean7D1EYCu/31sceMfjTlNNJfKyOQfz7pihzoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:05:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:9e:cc:a5:c4:0e:a7:34:5a:52:07:80:d5:ce:7a:fd:d0:47:28:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C427FBF1A649B90BD89B0EA83871003D9045925 Validity Not Before: Feb 28 03:36:50 2026 GMT Not After : Mar 3 12:05:50 2026 GMT Subject: CN=8295D021CF7B1B1537C4571A57201436FAAFEF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:f8:a7:df:0b:9f:b9:ad:20:46:3b:21:3c:4c: 1d:5c:f6:77:a3:f6:b9:28:c2:e3:9d:b1:c8:8c:50: a2:6c:ab:1a:cf:f2:be:cf:aa:e6:e4:ff:fb:5f:5f: f0:c0:7f:5e:ca:ef:cb:12:66:7d:33:f9:5b:2d:7e: 1b:a7:f0:06:78:b8:61:64:c4:8a:e5:4b:c2:76:8e: ab:17:01:ee:13:7a:68:9f:6f:3f:4f:2f:f4:a2:dc: 3d:8d:06:88:10:b9:7e:52:bf:bb:96:b9:9e:02:45: 0a:72:bf:cb:47:d3:da:cd:93:a1:18:df:13:bf:62: ca:2c:4b:d5:ec:15:c3:e9:68:6d:91:76:55:8b:dc: 2d:f4:71:1b:09:81:39:03:51:6b:2e:ea:77:53:64: 84:ee:69:f0:29:e4:0c:91:b0:2f:29:5f:13:53:67: cb:94:bd:ef:3e:dc:19:34:10:da:e0:97:80:93:1c: a1:2f:12:0b:7a:a4:da:b7:45:b0:d5:6a:1b:e7:ec: 07:d7:b6:31:2e:6b:a6:c1:84:6d:ea:2f:05:31:bc: d1:18:6b:95:2c:03:bb:c4:06:1a:b1:f5:a8:40:fa: f8:5e:a9:5a:6e:20:f1:08:0a:27:f1:e6:94:2f:a1: 24:c3:39:de:34:66:44:9c:de:c5:94:21:23:d5:7d: 09:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:95:D0:21:CF:7B:1B:15:37:C4:57:1A:57:20:14:36:FA:AF:EF:1E X509v3 Authority Key Identifier: keyid:1C:42:7F:BF:1A:64:9B:90:BD:89:B0:EA:83:87:10:03:D9:04:59:25 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C427FBF1A649B90BD89B0EA83871003D9045925.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ffa3b64-3c61-48d5-ab0c-d63b4824d00e/0/1C427FBF1A649B90BD89B0EA83871003D9045925.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:53:98:0e:54:d1:3c:1c:e6:2c:ea:2b:cb:02:96:2f:88:c2: 78:e5:05:68:fd:c7:e5:3c:32:00:6a:1b:92:01:32:8f:11:88: d3:11:44:a4:9a:37:1c:ac:2c:a9:54:99:c2:de:72:58:55:72: ee:65:41:89:32:9b:f3:c0:fe:35:56:7d:c3:95:d8:08:4e:17: 2c:a3:ed:49:b8:c9:8d:cc:f9:43:42:cd:b8:0a:1a:33:37:bb: 5c:4f:c9:be:89:ca:1d:37:da:0c:ef:af:8f:a8:1e:a7:b4:0e: 35:ee:7f:a2:fd:57:93:8b:f4:a4:69:d6:20:41:eb:cd:d7:dd: 93:4b:ad:5f:76:4d:18:1e:e3:55:e7:18:e9:ba:84:a0:b9:0b: bd:b2:03:21:3e:c1:02:5e:c0:a0:50:da:4d:61:e6:19:0d:bd: 50:aa:d5:99:4d:e7:38:9d:18:c7:65:bd:50:7e:0b:9f:f7:76: db:9c:7e:07:a4:75:85:78:fd:01:19:e9:ea:02:04:0c:c8:6c: c7:15:da:25:9d:4b:f1:99:8c:90:d8:2d:53:99:fb:23:c0:7f: dc:0b:42:6b:19:15:d2:d0:10:a7:42:62:a0:5e:0c:57:76:5b: a8:ce:15:8b:68:da:c0:ca:4e:2d:78:4b:5a:1f:37:34:f3:4b: b6:03:3e:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNp7MpcQOpzRaUgeA1c56/dBHKKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNE OTA0NTkyNTAeFw0yNjAyMjgwMzM2NTBaFw0yNjAzMDMxMjA1NTBaMDMxMTAvBgNV BAMTKDgyOTVEMDIxQ0Y3QjFCMTUzN0M0NTcxQTU3MjAxNDM2RkFBRkVGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl+KffC5+5rSBGOyE8TB1c9nej 9rkowuOdsciMUKJsqxrP8r7Pqubk//tfX/DAf17K78sSZn0z+Vstfhun8AZ4uGFk xIrlS8J2jqsXAe4Temifbz9PL/Si3D2NBogQuX5Sv7uWuZ4CRQpyv8tH09rNk6EY 3xO/YsosS9XsFcPpaG2RdlWL3C30cRsJgTkDUWsu6ndTZITuafAp5AyRsC8pXxNT Z8uUve8+3Bk0ENrgl4CTHKEvEgt6pNq3RbDVahvn7AfXtjEua6bBhG3qLwUxvNEY a5UsA7vEBhqx9ahA+vheqVpuIPEICifx5pQvoSTDOd40ZkSc3sWUISPVfQkbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgpXQIc97GxU3xFcaVyAUNvqv7x4wHwYDVR0j BBgwFoAUHEJ/vxpkm5C9ibDqg4cQA9kEWSUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZmZhM2I2NC0zYzYxLTQ4ZDUtYWIwYy1kNjNiNDgyNGQwMGUvMC8xQzQyN0ZCRjFB NjQ5QjkwQkQ4OUIwRUE4Mzg3MTAwM0Q5MDQ1OTI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEwMDNEOTA0 NTkyNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWZmYTNiNjQtM2M2MS00OGQ1LWFi MGMtZDYzYjQ4MjRkMDBlLzAvMUM0MjdGQkYxQTY0OUI5MEJEODlCMEVBODM4NzEw MDNEOTA0NTkyNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNTmA5U0Twc5izqK8sCli+IwnjlBWj9x+U8 MgBqG5IBMo8RiNMRRKSaNxysLKlUmcLeclhVcu5lQYkym/PA/jVWfcOV2AhOFyyj 7Um4yY3M+UNCzbgKGjM3u1xPyb6Jyh032gzvr4+oHqe0DjXuf6L9V5OL9KRp1iBB 683X3ZNLrV92TRge41XnGOm6hKC5C72yAyE+wQJewKBQ2k1h5hkNvVCq1ZlN5zid GMdlvVB+C5/3dtucfgekdYV4/QEZ6eoCBAzIbMcV2iWdS/GZjJDYLVOZ+yPAf9wL QmsZFdLQEKdCYqBeDFd2W6jOFYto2sDKTi14S1ofNzTzS7YDPlE= -----END CERTIFICATE-----Generated at Mon Mar 2 13:53:55 2026 by rpki-client