$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft File: 1B42B2BB5674F23468744614CDF9B0B00D510190.mft (raw, json) Hash identifier: uwMUz7ol5A9N9MI+79gv3HSeUqiJPyO7DS5MCFpuHvo= Subject key identifier: 66:43:62:73:B5:D8:1F:49:CD:53:F8:64:CB:0D:7C:03:E6:FD:09:85 Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 Certificate issuer: /CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Certificate serial: 4A4EC194D6232308797BDB376E0057E34524EBD6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft Manifest number: 021D Signing time: Sun 01 Mar 2026 22:42:11 +0000 Manifest this update: Sun 01 Mar 2026 22:37:11 +0000 Manifest next update: Thu 05 Mar 2026 03:25:11 +0000 Files and hashes: 1: 1B42B2BB5674F23468744614CDF9B0B00D510190.crl (hash: v5vTs7u70SJlaXdJJT+xcwAW/QnAdeqveERCiXmPezM=) 2: 3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (hash: oFFK8blgpeKf9LD5SV2KXd2JEMT+aIlFev67ub7lEjE=) 3: 3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (hash: Czzvj4vJQSB2KKayEoKqCf4S1sGvCeEbVuyOD7N/uO0=) 4: 3130332e31392e3135362e302f32342d3234203d3e20313530323334.roa (hash: 7jDOzKEybqHgosjfCyx4hqCz0tcDh6a5dAdb4UBUTOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:25:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:4e:c1:94:d6:23:23:08:79:7b:db:37:6e:00:57:e3:45:24:eb:d6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190 Validity Not Before: Mar 1 22:37:11 2026 GMT Not After : Mar 5 03:25:11 2026 GMT Subject: CN=66436273B5D81F49CD53F864CB0D7C03E6FD0985 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:38:df:4c:d9:52:81:19:32:9e:ce:0e:ab:8f: 9a:48:53:7e:4f:38:9b:a6:f5:37:03:32:4b:41:13: a8:6f:74:cf:e0:6f:6f:d8:c2:65:0d:f5:3c:cc:72: 9c:fe:47:2a:99:4c:59:82:c1:c8:25:5c:d8:05:d7: d7:28:59:cf:89:1c:8a:0d:7d:71:28:97:d3:5d:0f: a6:11:3b:2e:6b:f9:e0:68:b4:1f:b1:f6:4b:86:e1: d3:13:8f:1d:ce:9a:6b:2e:f6:f3:da:c5:48:6c:b0: 0e:7b:5a:22:8d:ec:96:8c:2b:89:b8:59:59:02:d7: 65:a6:6f:1e:da:51:b3:16:e6:2f:d1:c9:ac:e8:ab: 01:5d:6e:64:a2:ec:eb:80:30:8a:f2:49:f2:07:3c: 9f:9a:c1:6b:85:ca:23:48:8d:64:58:5a:75:53:65: 12:48:21:3b:10:ae:27:a5:ca:d4:72:9b:d4:97:2a: 91:d9:31:08:ba:e9:22:a4:c9:c1:c5:e6:b3:33:c2: 19:1b:17:a9:16:f2:c7:6e:b0:2b:4d:94:f7:58:7c: 0a:6d:70:54:6d:37:19:aa:4b:10:6d:77:0f:a2:c5: 7f:bb:a2:6c:40:b8:c1:a1:c5:4c:16:cd:b4:66:2f: 36:d8:32:90:27:6f:52:f1:d3:1a:a3:98:51:6f:30: e7:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:43:62:73:B5:D8:1F:49:CD:53:F8:64:CB:0D:7C:03:E6:FD:09:85 X509v3 Authority Key Identifier: keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:c6:e9:3f:d7:37:0e:b2:f7:48:12:80:72:16:a4:ad:ee:a8: 5f:9f:56:e2:5f:8d:c1:70:20:94:83:53:5e:5b:e7:63:f2:8e: c5:58:aa:f3:a5:55:d1:c6:49:68:99:a1:96:55:16:e1:36:68: 91:9a:22:a4:e9:11:4b:1a:ab:6e:d6:94:ff:92:51:43:15:a2: 90:62:1d:f1:c7:5d:b4:42:b6:d7:a1:2b:51:51:22:60:a7:6f: 7f:5a:fd:b7:17:53:02:37:66:34:24:88:1a:2e:a0:62:2a:c9: 7f:32:82:4d:cf:c4:4d:0d:a8:f2:3e:29:be:02:3b:81:1e:db: b1:dd:cf:a4:bf:3a:36:70:93:f0:42:0b:0f:84:16:16:aa:6a: cf:7f:ae:56:c2:5c:ef:92:aa:04:8e:77:a3:bd:cb:b9:c9:4b: ae:c7:69:d5:7a:1c:bc:74:63:10:01:1c:1c:3c:c6:f8:cf:a4: dc:d3:54:64:40:12:e1:02:cc:cc:83:c6:62:12:32:13:c4:14: a0:cb:bf:7b:41:e1:e6:5e:b9:42:87:0d:6d:38:74:92:d9:b0: d2:95:32:3d:55:57:0b:6b:ff:80:3e:89:ff:27:43:60:aa:7c: 3b:8b:f7:dd:e1:74:2f:85:2a:d9:74:59:ff:1e:f3:54:f4:21: 45:aa:e5:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSk7BlNYjIwh5e9s3bgBX40Uk69YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw RDUxMDE5MDAeFw0yNjAzMDEyMjM3MTFaFw0yNjAzMDUwMzI1MTFaMDMxMTAvBgNV BAMTKDY2NDM2MjczQjVEODFGNDlDRDUzRjg2NENCMEQ3QzAzRTZGRDA5ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyON9M2VKBGTKezg6rj5pIU35P OJum9TcDMktBE6hvdM/gb2/YwmUN9TzMcpz+RyqZTFmCwcglXNgF19coWc+JHIoN fXEol9NdD6YROy5r+eBotB+x9kuG4dMTjx3Ommsu9vPaxUhssA57WiKN7JaMK4m4 WVkC12Wmbx7aUbMW5i/RyazoqwFdbmSi7OuAMIrySfIHPJ+awWuFyiNIjWRYWnVT ZRJIITsQrielytRym9SXKpHZMQi66SKkycHF5rMzwhkbF6kW8sdusCtNlPdYfApt cFRtNxmqSxBtdw+ixX+7omxAuMGhxUwWzbRmLzbYMpAnb1Lx0xqjmFFvMOeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZkNic7XYH0nNU/hkyw18A+b9CYUwHwYDVR0j BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2 NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx MDE5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE0NDI1MmItZDMwZS00YmRjLTgz MmYtYjM4YjA1YzdhMDM1LzAvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIw QjAwRDUxMDE5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIjG6T/XNw6y90gSgHIWpK3uqF+fVuJfjcFw IJSDU15b52PyjsVYqvOlVdHGSWiZoZZVFuE2aJGaIqTpEUsaq27WlP+SUUMVopBi HfHHXbRCttehK1FRImCnb39a/bcXUwI3ZjQkiBouoGIqyX8ygk3PxE0NqPI+Kb4C O4Ee27Hdz6S/OjZwk/BCCw+EFhaqas9/rlbCXO+SqgSOd6O9y7nJS67HadV6HLx0 YxABHBw8xvjPpNzTVGRAEuECzMyDxmISMhPEFKDLv3tB4eZeuUKHDW04dJLZsNKV Mj1VVwtr/4A+if8nQ2CqfDuL993hdC+FKtl0Wf8e81T0IUWq5eg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:10:10 2026 by rpki-client