$ rpki-client -vvf repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft File: 1811CB623E9BFFB82945CA39C74C4C274914837F.mft (raw, json) Hash identifier: XDApTT3GcN2fMGQoLOSiVs8Jp26+LPLcxi2AkzYrBTo= Subject key identifier: B7:E4:BE:1D:D6:55:E8:07:BF:16:ED:09:9E:F4:80:F4:C7:98:FA:82 Authority key identifier: 18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F Certificate issuer: /CN=1811CB623E9BFFB82945CA39C74C4C274914837F Certificate serial: 58F67B3A77C8E8227BC5BF53D7FAD4D4E0F53C5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft Manifest number: 0311 Signing time: Sun 01 Mar 2026 05:40:55 +0000 Manifest this update: Sun 01 Mar 2026 05:35:55 +0000 Manifest next update: Wed 04 Mar 2026 08:57:55 +0000 Files and hashes: 1: 3130332e3137372e39362e302f32332d3234203d3e20313331313131.roa (hash: IWu36PgrlbrIyJKi1yWtOTjXE0y4uzUHTwZcjUqTWx8=) 2: 1811CB623E9BFFB82945CA39C74C4C274914837F.crl (hash: UAe8+sobpK7DKd1kTZ2fOJLE1toetik6PrcyW04Tc14=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:57:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:f6:7b:3a:77:c8:e8:22:7b:c5:bf:53:d7:fa:d4:d4:e0:f5:3c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1811CB623E9BFFB82945CA39C74C4C274914837F Validity Not Before: Mar 1 05:35:55 2026 GMT Not After : Mar 4 08:57:55 2026 GMT Subject: CN=B7E4BE1DD655E807BF16ED099EF480F4C798FA82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5b:01:50:c7:07:58:fe:cd:d6:3f:dd:00:dd: 6e:43:07:39:dc:0e:91:c7:d9:bc:ee:c5:c8:aa:ef: 70:2a:5f:1f:cc:e9:f2:04:7a:82:30:c8:4f:68:39: 64:52:05:39:1a:b1:b9:f4:50:2f:e7:7a:70:47:4f: 63:3a:0e:37:7f:dd:0c:64:e3:e8:01:f5:75:e7:9d: 69:f0:89:df:07:44:95:00:82:70:d4:a7:07:c8:b2: 0d:b5:d1:2b:6e:36:da:ad:2f:3e:25:cf:c9:ab:7d: d9:25:73:55:3f:44:4e:f5:90:da:a8:c0:3b:03:70: 73:4b:ab:8c:a4:e0:ff:c7:00:48:ed:ad:52:05:76: 12:39:9c:3e:4f:1d:4a:bd:af:12:00:c4:c2:02:8e: d8:8e:97:55:93:07:6b:51:68:99:2d:4a:75:47:47: 51:a3:6d:f1:ed:09:77:30:52:5a:56:bb:95:22:49: 86:53:94:28:f5:27:0d:cc:75:c8:35:19:b5:89:34: 9b:5b:f9:d4:a5:bd:a1:8a:38:4f:7d:cd:65:ae:02: f0:20:6b:2c:71:d6:3e:ad:93:f4:2e:94:4d:63:34: 4b:e0:d8:eb:9c:05:5c:6e:10:b0:c1:bd:a8:78:77: 82:2b:c9:52:e6:08:59:40:c1:35:be:67:5b:00:8f: cf:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:E4:BE:1D:D6:55:E8:07:BF:16:ED:09:9E:F4:80:F4:C7:98:FA:82 X509v3 Authority Key Identifier: keyid:18:11:CB:62:3E:9B:FF:B8:29:45:CA:39:C7:4C:4C:27:49:14:83:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1811CB623E9BFFB82945CA39C74C4C274914837F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e87f1d1-06fb-436b-9ce6-92daa29f1f9b/0/1811CB623E9BFFB82945CA39C74C4C274914837F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:cf:e9:f2:61:4e:0d:af:be:62:87:fe:2c:ca:cb:88:65:53: 60:dc:17:cd:81:ce:0d:76:a9:bb:a3:c6:1d:ae:10:66:5e:f7: ba:88:94:16:8d:33:17:9b:ae:37:fe:fa:c1:3e:b7:11:e6:d2: 42:4d:3c:ce:87:b3:13:a1:2a:dd:3c:d1:51:d0:2d:a4:c2:e2: e4:9b:70:62:88:e9:71:98:0b:2d:5b:fb:2b:24:51:a3:db:20: 1c:08:d9:38:a8:4b:88:1d:74:ef:18:44:b4:e8:da:67:b8:9f: 55:0f:79:dc:a7:28:b7:f6:dc:7e:d5:a0:0a:80:bc:9d:eb:ae: 38:c5:e5:6a:87:11:0d:e2:9e:70:32:cd:3a:97:20:89:c7:64: 77:c2:48:54:97:23:65:d2:fc:79:a2:b8:fa:f7:5c:65:f3:2c: d8:74:a0:b9:d2:a0:b9:e2:54:6b:46:9d:3e:bb:1d:aa:91:30: ad:a4:e8:a9:6e:7c:9b:d6:d3:e3:80:18:cd:e9:05:d1:ed:ea: d3:1e:da:db:29:7b:b6:97:62:c7:ef:cb:72:82:71:6e:35:2c: 67:3e:4b:f6:aa:77:95:4e:c0:9d:ff:d4:f8:42:db:c6:d8:c7: 94:c4:df:52:df:91:f4:e8:71:ec:f7:e3:56:a7:22:cc:6d:b2: 54:79:ac:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWPZ7OnfI6CJ7xb9T1/rU1OD1PF0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0 OTE0ODM3RjAeFw0yNjAzMDEwNTM1NTVaFw0yNjAzMDQwODU3NTVaMDMxMTAvBgNV BAMTKEI3RTRCRTFERDY1NUU4MDdCRjE2RUQwOTlFRjQ4MEY0Qzc5OEZBODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiWwFQxwdY/s3WP90A3W5DBznc DpHH2bzuxciq73AqXx/M6fIEeoIwyE9oOWRSBTkasbn0UC/nenBHT2M6Djd/3Qxk 4+gB9XXnnWnwid8HRJUAgnDUpwfIsg210StuNtqtLz4lz8mrfdklc1U/RE71kNqo wDsDcHNLq4yk4P/HAEjtrVIFdhI5nD5PHUq9rxIAxMICjtiOl1WTB2tRaJktSnVH R1GjbfHtCXcwUlpWu5UiSYZTlCj1Jw3Mdcg1GbWJNJtb+dSlvaGKOE99zWWuAvAg ayxx1j6tk/QulE1jNEvg2OucBVxuELDBvah4d4IryVLmCFlAwTW+Z1sAj8/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUt+S+HdZV6Ae/Fu0JnvSA9MeY+oIwHwYDVR0j BBgwFoAUGBHLYj6b/7gpRco5x0xMJ0kUg38wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZTg3ZjFkMS0wNmZiLTQzNmItOWNlNi05MmRhYTI5ZjFmOWIvMC8xODExQ0I2MjNF OUJGRkI4Mjk0NUNBMzlDNzRDNEMyNzQ5MTQ4MzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRDMjc0OTE0 ODM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2U4N2YxZDEtMDZmYi00MzZiLTlj ZTYtOTJkYWEyOWYxZjliLzAvMTgxMUNCNjIzRTlCRkZCODI5NDVDQTM5Qzc0QzRD Mjc0OTE0ODM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjP6fJhTg2vvmKH/izKy4hlU2DcF82Bzg12 qbujxh2uEGZe97qIlBaNMxebrjf++sE+txHm0kJNPM6HsxOhKt080VHQLaTC4uSb cGKI6XGYCy1b+yskUaPbIBwI2TioS4gddO8YRLTo2me4n1UPedynKLf23H7VoAqA vJ3rrjjF5WqHEQ3innAyzTqXIInHZHfCSFSXI2XS/HmiuPr3XGXzLNh0oLnSoLni VGtGnT67HaqRMK2k6KlufJvW0+OAGM3pBdHt6tMe2tspe7aXYsfvy3KCcW41LGc+ S/aqd5VOwJ3/1PhC28bYx5TE31LfkfTocez341anIsxtslR5rFc= -----END CERTIFICATE-----Generated at Mon Mar 2 15:37:36 2026 by rpki-client