$ rpki-client -vvf repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft File: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft (raw, json) Hash identifier: 5GaZ/Jqk696FT6osFEhZxCykD1VboBGxnID9WUeU/v8= Subject key identifier: B7:7D:65:78:B2:2F:1D:7A:98:4D:D9:CA:02:42:B1:31:A2:2B:7E:4C Authority key identifier: 1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 Certificate issuer: /CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Certificate serial: 056B90C530358A32B7838C0F9D17593F43B23BC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft Manifest number: F5 Signing time: Wed 15 Apr 2026 10:42:37 +0000 Manifest this update: Wed 15 Apr 2026 10:37:37 +0000 Manifest next update: Sat 18 Apr 2026 19:45:37 +0000 Files and hashes: 1: 1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl (hash: RCjWxMrqANV0p3zUbupQxd0PUA7ntJcIp2AzY54+ghs=) 2: 323030313a6466343a353863303a3a2f34382d3438203d3e20313533313237.roa (hash: vwgSPrWbk7InW3RVvW95kOhCGfi4C/hudM8AnWKgHzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 19:45:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:6b:90:c5:30:35:8a:32:b7:83:8c:0f:9d:17:59:3f:43:b2:3b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F515919CCC0A900FF9717E1B7EF11F5A5183DF3 Validity Not Before: Apr 15 10:37:37 2026 GMT Not After : Apr 18 19:45:37 2026 GMT Subject: CN=B77D6578B22F1D7A984DD9CA0242B131A22B7E4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:3f:6e:66:2a:66:7b:72:b5:db:17:b4:e8: 87:6d:8e:89:39:7e:d1:72:42:e6:ca:4c:36:5d:bf: 72:9f:e2:71:3d:63:0c:fc:e1:2e:4f:eb:2b:74:23: e1:99:6c:85:4c:d1:59:41:c5:f1:52:d0:01:4e:0c: 85:76:be:d8:cc:1a:68:30:3c:57:bb:34:f1:f2:dd: 32:ee:25:3c:a3:14:01:c6:46:55:64:7e:4e:e7:fe: 0f:b2:ad:83:21:55:0f:c0:0c:47:86:2c:25:25:af: 58:18:83:47:2c:08:cb:26:73:77:a6:1c:71:c3:76: 4b:61:a6:58:90:62:0d:97:98:58:c8:20:f3:5a:64: 9c:a3:42:d5:12:ac:19:63:3d:c3:44:91:50:74:02: e5:1c:17:61:97:8c:b6:e6:ff:ec:e4:9f:92:e5:9d: 9f:68:84:0e:79:7b:0a:fa:b0:af:2e:44:b1:e0:a9: 72:4e:3c:b8:14:3d:ed:8e:fa:78:9c:ba:41:3c:b8: 0a:9a:ef:90:91:15:2d:02:ae:54:12:52:07:e3:83: 2c:0b:d9:d4:51:f4:5b:3a:0a:b5:b1:08:70:be:7e: 59:83:f5:9f:90:a2:be:4c:22:29:69:6e:5a:07:5b: da:77:c6:d3:17:f9:56:31:de:21:60:66:b5:ab:9f: 04:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:7D:65:78:B2:2F:1D:7A:98:4D:D9:CA:02:42:B1:31:A2:2B:7E:4C X509v3 Authority Key Identifier: keyid:1F:51:59:19:CC:C0:A9:00:FF:97:17:E1:B7:EF:11:F5:A5:18:3D:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/21d97b40-c031-4e5b-9b42-d2ae1c9cf987/1/1F515919CCC0A900FF9717E1B7EF11F5A5183DF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:74:88:0b:c2:66:bc:5b:bf:3b:59:b0:2e:e7:b1:a8:4a:97: e4:af:a5:a1:39:70:78:30:a3:8a:c0:c1:e4:ed:63:68:52:30: af:d7:0d:70:fb:7f:b2:b1:cb:58:0d:2b:25:52:7a:cd:34:64: 68:38:a1:e3:5d:f2:56:44:86:cd:4d:f2:e8:6d:49:3e:e4:5e: 46:f1:ea:cb:72:2f:c5:37:09:6e:98:f3:de:58:dd:5a:1c:2d: c0:c2:be:1f:83:37:10:f1:c2:3d:08:49:71:f7:66:b4:b8:04: e6:26:a9:82:58:43:74:1e:08:7a:de:36:cf:73:1b:22:9b:7f: ab:ae:ef:e8:17:1c:d6:4c:83:f9:5d:a9:46:20:8c:1a:99:cf: 68:4b:50:6b:e1:72:2a:7d:4b:20:bb:8a:60:d3:56:2c:6e:bd: 27:2b:32:c1:c0:9e:46:77:88:89:f0:4d:fd:3b:67:df:28:d0: 13:55:71:04:f1:0b:be:b1:b8:e2:82:26:f9:92:3c:0f:aa:8d: 39:9b:ef:81:3b:d9:fa:a6:36:4c:db:16:cc:54:c3:84:75:64: 9c:22:fc:d8:52:e5:98:8a:fb:58:a3:9a:ec:3a:ec:15:e5:d5: 92:fc:6b:90:aa:6e:67:23:0e:be:dd:d3:87:9e:8c:d1:4e:8a: c9:34:e1:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBWuQxTA1ijK3g4wPnRdZP0OyO8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVB NTE4M0RGMzAeFw0yNjA0MTUxMDM3MzdaFw0yNjA0MTgxOTQ1MzdaMDMxMTAvBgNV BAMTKEI3N0Q2NTc4QjIyRjFEN0E5ODRERDlDQTAyNDJCMTMxQTIyQjdFNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNwz9uZipme3K12xe06Idtjok5 ftFyQubKTDZdv3Kf4nE9Ywz84S5P6yt0I+GZbIVM0VlBxfFS0AFODIV2vtjMGmgw PFe7NPHy3TLuJTyjFAHGRlVkfk7n/g+yrYMhVQ/ADEeGLCUlr1gYg0csCMsmc3em HHHDdkthpliQYg2XmFjIIPNaZJyjQtUSrBljPcNEkVB0AuUcF2GXjLbm/+zkn5Ll nZ9ohA55ewr6sK8uRLHgqXJOPLgUPe2O+nicukE8uAqa75CRFS0CrlQSUgfjgywL 2dRR9Fs6CrWxCHC+flmD9Z+Qor5MIilpbloHW9p3xtMX+VYx3iFgZrWrnwSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt31leLIvHXqYTdnKAkKxMaIrfkwwHwYDVR0j BBgwFoAUH1FZGczAqQD/lxfht+8R9aUYPfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MWQ5N2I0MC1jMDMxLTRlNWItOWI0Mi1kMmFlMWM5Y2Y5ODcvMS8xRjUxNTkxOUND QzBBOTAwRkY5NzE3RTFCN0VGMTFGNUE1MTgzREYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjExRjVBNTE4 M0RGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjFkOTdiNDAtYzAzMS00ZTViLTli NDItZDJhZTFjOWNmOTg3LzEvMUY1MTU5MTlDQ0MwQTkwMEZGOTcxN0UxQjdFRjEx RjVBNTE4M0RGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJF0iAvCZrxbvztZsC7nsahKl+SvpaE5cHgw o4rAweTtY2hSMK/XDXD7f7Kxy1gNKyVSes00ZGg4oeNd8lZEhs1N8uhtST7kXkbx 6styL8U3CW6Y895Y3VocLcDCvh+DNxDxwj0ISXH3ZrS4BOYmqYJYQ3QeCHreNs9z GyKbf6uu7+gXHNZMg/ldqUYgjBqZz2hLUGvhcip9SyC7imDTVixuvScrMsHAnkZ3 iInwTf07Z98o0BNVcQTxC76xuOKCJvmSPA+qjTmb74E72fqmNkzbFsxUw4R1ZJwi /NhS5ZiK+1ijmuw67BXl1ZL8a5CqbmcjDr7d04eejNFOisk04fQ= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:47 2026 by rpki-client