$ rpki-client -vvf repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft File: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft (raw, json) Hash identifier: 3P2kH0XcQpG5vpZA7FFpQhIU5ADfse2JuUJoEpk88z4= Subject key identifier: 6F:B5:72:37:B0:75:C0:A5:1D:A6:C2:FA:B7:2E:FE:5A:FD:C4:47:55 Authority key identifier: 1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 Certificate issuer: /CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Certificate serial: 2792BF4C0694A22CF828ABF5D2BCC7F98C48364C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft Manifest number: 0122 Signing time: Sun 01 Mar 2026 03:20:04 +0000 Manifest this update: Sun 01 Mar 2026 03:15:04 +0000 Manifest next update: Wed 04 Mar 2026 04:34:04 +0000 Files and hashes: 1: 1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl (hash: TcjJbSKsKr8B0FNkNaWyPQQiyYyHYBZGvNs58D0sd8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:34:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:92:bf:4c:06:94:a2:2c:f8:28:ab:f5:d2:bc:c7:f9:8c:48:36:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8 Validity Not Before: Mar 1 03:15:04 2026 GMT Not After : Mar 4 04:34:04 2026 GMT Subject: CN=6FB57237B075C0A51DA6C2FAB72EFE5AFDC44755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:0d:50:ac:99:47:b6:e9:12:e2:11:47:83:2b: 1a:04:c3:a4:0f:b9:da:4c:a8:5c:4c:08:4e:ac:73: 0b:13:fe:50:9e:27:8d:a7:ed:f2:86:d6:92:54:82: 90:f8:17:59:2f:07:72:cf:5b:41:c0:ce:e7:6c:69: d0:f9:ca:e4:a5:b4:a0:77:d5:c3:29:40:e9:74:3e: f3:e8:af:7b:63:0f:33:00:6f:4b:34:68:c3:11:3a: b7:4b:d6:ec:bd:d9:bd:06:7d:c2:0a:5f:c8:d2:76: 16:fe:2d:f2:14:27:b8:d1:b7:bf:1e:2e:4a:6c:db: 34:30:5a:89:a7:58:7e:e7:67:fe:ea:9b:9d:72:97: 6e:22:36:e9:43:1c:52:e7:e2:ea:2f:b0:0e:dd:fa: f7:39:dc:90:0a:00:7d:4c:16:de:6e:04:05:62:ed: 49:1c:c2:7c:c8:7f:48:75:bd:50:2e:64:5b:5a:dc: 54:bc:76:cb:26:89:be:20:06:16:e8:b4:38:7d:bc: 35:9d:dd:62:fb:b5:43:ea:a7:24:78:01:e9:9b:53: ce:c0:db:ef:33:d8:4c:57:2c:e9:b4:53:cc:90:82: 56:a4:aa:8b:b7:51:47:94:73:63:34:a5:98:6c:f2: 24:8f:3f:00:b8:27:d3:00:ee:6c:97:51:d5:78:bc: 96:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:B5:72:37:B0:75:C0:A5:1D:A6:C2:FA:B7:2E:FE:5A:FD:C4:47:55 X509v3 Authority Key Identifier: keyid:1A:4C:E5:46:9A:9D:AB:D2:77:C7:F1:A6:C2:E0:0D:B1:13:69:7A:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3037b63c-e498-4e47-b97e-67aba458781c/0/1A4CE5469A9DABD277C7F1A6C2E00DB113697AD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:82:b0:8b:17:bd:2d:9c:fd:9e:3f:30:e4:88:7e:f8:6c:ae: f6:fa:08:e3:72:c8:7f:fd:57:ed:91:c3:47:2b:d4:c0:5b:0e: 3e:f3:9e:55:2a:26:47:da:6c:93:e2:bd:7f:96:54:83:8d:5e: 27:eb:78:26:2e:49:e5:b4:e4:89:ce:79:aa:c6:07:9d:35:df: dd:43:57:39:49:53:74:f6:34:f6:fa:80:7a:3a:64:ed:47:d3: 12:ee:16:54:38:46:b5:1a:da:f3:98:89:e5:84:09:75:ef:7e: e0:92:5c:c0:b7:75:d8:ae:3d:0f:0b:59:42:cb:a8:7b:5d:b9: a7:73:07:b2:b9:3b:a7:20:5c:ff:2d:19:d9:76:34:0f:00:59: 72:ff:82:ba:7a:a0:7b:05:6e:f3:98:50:cd:f6:78:e3:80:f6: 03:a1:5a:3b:a4:a7:1d:f4:a2:63:23:1e:5f:b4:50:f5:30:c5: e6:78:e1:86:26:cb:6b:e4:5e:8b:ea:ef:88:07:24:90:f2:a8: f6:b9:34:51:9d:78:04:d7:18:9d:f8:2b:3e:75:09:7e:f6:5a: 47:c4:5b:55:78:72:86:66:59:a7:f9:97:e8:db:3e:bc:e9:b1: b2:3e:4c:da:76:26:64:2d:79:0d:5a:8f:c1:76:b2:41:17:94: f1:a4:c4:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ5K/TAaUoiz4KKv10rzH+YxINkwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjEx MzY5N0FEODAeFw0yNjAzMDEwMzE1MDRaFw0yNjAzMDQwNDM0MDRaMDMxMTAvBgNV BAMTKDZGQjU3MjM3QjA3NUMwQTUxREE2QzJGQUI3MkVGRTVBRkRDNDQ3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJDVCsmUe26RLiEUeDKxoEw6QP udpMqFxMCE6scwsT/lCeJ42n7fKG1pJUgpD4F1kvB3LPW0HAzudsadD5yuSltKB3 1cMpQOl0PvPor3tjDzMAb0s0aMMROrdL1uy92b0GfcIKX8jSdhb+LfIUJ7jRt78e Lkps2zQwWomnWH7nZ/7qm51yl24iNulDHFLn4uovsA7d+vc53JAKAH1MFt5uBAVi 7UkcwnzIf0h1vVAuZFta3FS8dssmib4gBhbotDh9vDWd3WL7tUPqpyR4AembU87A 2+8z2ExXLOm0U8yQglakqou3UUeUc2M0pZhs8iSPPwC4J9MA7myXUdV4vJYpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb7VyN7B1wKUdpsL6ty7+Wv3ER1UwHwYDVR0j BBgwFoAUGkzlRpqdq9J3x/GmwuANsRNpetgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDM3YjYzYy1lNDk4LTRlNDctYjk3ZS02N2FiYTQ1ODc4MWMvMC8xQTRDRTU0NjlB OURBQkQyNzdDN0YxQTZDMkUwMERCMTEzNjk3QUQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBEQjExMzY5 N0FEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzN2I2M2MtZTQ5OC00ZTQ3LWI5 N2UtNjdhYmE0NTg3ODFjLzAvMUE0Q0U1NDY5QTlEQUJEMjc3QzdGMUE2QzJFMDBE QjExMzY5N0FEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGGCsIsXvS2c/Z4/MOSIfvhsrvb6CONyyH/9 V+2Rw0cr1MBbDj7znlUqJkfabJPivX+WVIONXifreCYuSeW05InOearGB501391D VzlJU3T2NPb6gHo6ZO1H0xLuFlQ4RrUa2vOYieWECXXvfuCSXMC3ddiuPQ8LWULL qHtduadzB7K5O6cgXP8tGdl2NA8AWXL/grp6oHsFbvOYUM32eOOA9gOhWjukpx30 omMjHl+0UPUwxeZ44YYmy2vkXovq74gHJJDyqPa5NFGdeATXGJ34Kz51CX72WkfE W1V4coZmWaf5l+jbPrzpsbI+TNp2JmQteQ1aj8F2skEXlPGkxDA= -----END CERTIFICATE-----Generated at Mon Mar 2 10:54:16 2026 by rpki-client