$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft File: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft (raw, json) Hash identifier: qQeS0Pn7NtsN0J87WLeHqYnOhTOSwZRkMCJNg+wxFcU= Subject key identifier: 01:B2:08:32:34:80:F6:68:90:59:6E:BD:D8:5A:BD:23:F0:CE:6C:CA Authority key identifier: 1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 Certificate issuer: /CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Certificate serial: 74A6EE8132F34EBFC1B1F192983CFEDA33677E5C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft Manifest number: D4 Signing time: Sun 01 Mar 2026 19:11:26 +0000 Manifest this update: Sun 01 Mar 2026 19:06:26 +0000 Manifest next update: Thu 05 Mar 2026 06:33:26 +0000 Files and hashes: 1: 323030313a6466343a353463303a3a2f34382d3438203d3e20313533313233.roa (hash: Q7G/cO+mdHwEtFeO3AaAW+h1sCR4ojICSfcSL5zARmI=) 2: 1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl (hash: ZQXzGK4Y+s9BGqkAz+f7BnoSu1TOAF9Ft8dA8Tcmves=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a6:ee:81:32:f3:4e:bf:c1:b1:f1:92:98:3c:fe:da:33:67:7e:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C13BBF82B802D9CB18A9FE51C67745AD430C918 Validity Not Before: Mar 1 19:06:26 2026 GMT Not After : Mar 5 06:33:26 2026 GMT Subject: CN=01B208323480F66890596EBDD85ABD23F0CE6CCA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:1a:20:5b:83:4c:87:49:b2:3c:ba:96:30:84: 39:47:cf:d2:ad:6a:63:dd:04:8d:b5:e3:ab:39:e4: bd:7d:e1:f4:8e:5c:52:8f:dc:86:7d:2d:8d:1f:3d: 5f:b2:d8:af:be:ea:b8:fa:53:f0:1f:a1:b7:80:ab: 1b:85:1c:94:86:62:65:31:5e:58:ab:de:ee:af:6e: 2d:9f:de:a1:25:3e:00:66:d6:84:ff:49:c1:e4:15: 27:ab:30:99:df:9e:39:90:7b:42:5f:84:b3:f8:0d: 36:3f:80:7e:de:ee:37:c1:83:04:4a:a7:2c:a1:07: 47:60:fc:0e:82:8c:d9:2e:14:fa:34:e4:8f:86:4b: 3f:36:fa:2d:61:35:0f:8d:38:21:2d:d1:56:fc:ca: d4:aa:cb:93:57:42:d2:74:05:53:2d:63:f0:a5:ff: 5c:ee:66:20:70:b1:28:42:e5:7c:3e:11:69:a3:07: 8d:cd:f8:ba:e3:dd:52:eb:aa:1b:57:50:1b:b9:04: a9:24:ce:8f:02:32:ba:63:ae:0d:09:24:2b:64:bc: 3b:07:3f:2a:72:fc:34:b6:e3:39:15:91:57:61:2a: 1c:a9:b9:e0:ae:ca:b5:f6:f7:5f:6a:36:97:31:e2: 78:43:66:ff:0b:86:31:12:5a:de:ae:48:ef:e3:e0: 37:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:B2:08:32:34:80:F6:68:90:59:6E:BD:D8:5A:BD:23:F0:CE:6C:CA X509v3 Authority Key Identifier: keyid:1C:13:BB:F8:2B:80:2D:9C:B1:8A:9F:E5:1C:67:74:5A:D4:30:C9:18 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C13BBF82B802D9CB18A9FE51C67745AD430C918.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/1/1C13BBF82B802D9CB18A9FE51C67745AD430C918.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:95:d6:af:54:8d:88:04:24:41:7d:32:fb:3f:fa:5a:95:3a: bc:d9:06:66:2c:a1:89:a7:7e:bb:2a:a4:f8:b1:6d:5b:2a:bf: ee:0e:a0:be:1f:d3:a4:c6:79:60:c7:26:ab:0e:03:78:90:ec: 9f:f9:bb:72:6c:44:3f:15:3c:af:10:f3:1b:e6:2a:84:9b:39: 78:84:e4:20:bf:c1:bd:57:5b:40:c0:a6:6b:fd:6d:5c:86:b4: 61:4d:b6:40:ca:0e:52:98:7f:dd:b9:4a:b9:88:fd:c7:a8:eb: 59:04:51:ba:f6:3c:32:ac:fa:e1:1c:f6:d3:e6:a4:5c:1e:ec: fb:dd:10:c5:ff:07:d4:de:3c:a8:13:2c:88:57:3d:4c:7d:f9: 49:8e:e1:e0:56:b5:d7:80:ca:16:80:86:82:40:6e:79:e9:00: 32:7d:83:22:cf:32:32:0f:7d:29:1f:3f:32:c2:20:8d:39:a4: 94:d6:87:f9:df:1d:ed:a2:ca:c8:a7:95:55:a0:a6:58:b8:6f: fa:3c:28:94:a3:76:d2:e5:b8:62:4d:50:95:af:d5:84:7b:41: fe:7e:1b:50:89:3c:0c:ab:ec:9b:08:fb:25:33:a5:d3:7f:50: c4:42:f7:75:9e:ef:05:9f:c8:0e:72:4e:1c:f2:81:e8:1b:2e: e4:ba:79:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKbugTLzTr/BsfGSmDz+2jNnflwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFE NDMwQzkxODAeFw0yNjAzMDExOTA2MjZaFw0yNjAzMDUwNjMzMjZaMDMxMTAvBgNV BAMTKDAxQjIwODMyMzQ4MEY2Njg5MDU5NkVCREQ4NUFCRDIzRjBDRTZDQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbGiBbg0yHSbI8upYwhDlHz9Kt amPdBI2146s55L194fSOXFKP3IZ9LY0fPV+y2K++6rj6U/AfobeAqxuFHJSGYmUx Xlir3u6vbi2f3qElPgBm1oT/ScHkFSerMJnfnjmQe0JfhLP4DTY/gH7e7jfBgwRK pyyhB0dg/A6CjNkuFPo05I+GSz82+i1hNQ+NOCEt0Vb8ytSqy5NXQtJ0BVMtY/Cl /1zuZiBwsShC5Xw+EWmjB43N+Lrj3VLrqhtXUBu5BKkkzo8CMrpjrg0JJCtkvDsH Pypy/DS24zkVkVdhKhypueCuyrX2919qNpcx4nhDZv8LhjESWt6uSO/j4DevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAbIIMjSA9miQWW692Fq9I/DObMowHwYDVR0j BBgwFoAUHBO7+CuALZyxip/lHGd0WtQwyRgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMS8xQzEzQkJGODJC ODAyRDlDQjE4QTlGRTUxQzY3NzQ1QUQ0MzBDOTE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0NUFENDMw QzkxOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzEvMUMxM0JCRjgyQjgwMkQ5Q0IxOEE5RkU1MUM2Nzc0 NUFENDMwQzkxOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyV1q9UjYgEJEF9Mvs/+lqVOrzZBmYsoYmn frsqpPixbVsqv+4OoL4f06TGeWDHJqsOA3iQ7J/5u3JsRD8VPK8Q8xvmKoSbOXiE 5CC/wb1XW0DApmv9bVyGtGFNtkDKDlKYf925SrmI/ceo61kEUbr2PDKs+uEc9tPm pFwe7PvdEMX/B9TePKgTLIhXPUx9+UmO4eBWtdeAyhaAhoJAbnnpADJ9gyLPMjIP fSkfPzLCII05pJTWh/nfHe2iysinlVWgpli4b/o8KJSjdtLluGJNUJWv1YR7Qf5+ G1CJPAyr7JsI+yUzpdN/UMRC93We7wWfyA5yThzygegbLuS6eXY= -----END CERTIFICATE-----Generated at Mon Mar 2 17:29:26 2026 by rpki-client