$ rpki-client -vvf repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft File: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft (raw, json) Hash identifier: Ta6dsqteE0MkX1WZYaii/kTLn0lgwtCL7iiPZ1BDS9c= Subject key identifier: 4C:DC:63:3E:95:76:E3:F1:3C:5B:38:A4:B6:F7:A8:FB:BD:97:16:93 Authority key identifier: 1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A Certificate issuer: /CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Certificate serial: 777247613AADDF8552027DE03013B1DFC19D6503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft Manifest number: E1 Signing time: Fri 17 Apr 2026 11:32:22 +0000 Manifest this update: Fri 17 Apr 2026 11:27:22 +0000 Manifest next update: Mon 20 Apr 2026 13:08:22 +0000 Files and hashes: 1: 1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl (hash: 7fqcFCKa6I99nJknwSflSZKhibXoyo5YxJTOvEYtpNc=) 2: 3135372e36362e3234362e302f32332d3234203d3e20313532373630.roa (hash: GxPwcl3xG0lJtuIsVw/HKN6DPia/mCVf1Me2ZjNBfOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 13:08:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:72:47:61:3a:ad:df:85:52:02:7d:e0:30:13:b1:df:c1:9d:65:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A Validity Not Before: Apr 17 11:27:22 2026 GMT Not After : Apr 20 13:08:22 2026 GMT Subject: CN=4CDC633E9576E3F13C5B38A4B6F7A8FBBD971693 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:90:8f:30:29:00:16:54:67:89:b1:38:77:11: e2:34:73:89:05:6a:f5:8c:39:00:43:a6:ce:f6:d3: 38:52:16:17:e0:2b:db:b8:c4:e0:bd:78:1c:8f:cb: 28:89:a8:0d:ff:31:d0:ed:a8:27:38:05:5b:6f:a8: 0a:0d:83:54:c9:66:5f:ca:c6:ed:72:56:34:19:a0: bc:a9:7b:3b:2a:db:c8:d8:c4:83:08:f1:34:1a:ba: a4:99:dd:40:eb:cc:24:b6:c6:cc:7e:9e:82:85:a3: 0e:55:4d:98:05:3e:3f:35:4b:62:56:f1:b1:b3:a5: b3:5b:24:05:24:15:72:3d:83:31:23:26:ca:5b:5c: b3:06:99:a5:d9:fa:a2:6a:bb:87:3b:bc:48:79:1c: 17:b5:e1:1e:cd:87:13:79:cb:35:b9:94:0e:01:bc: 99:d0:c0:fa:1b:e0:a5:d6:5a:5b:58:0b:ab:a6:1d: 30:54:87:a3:56:38:80:ae:58:10:26:ea:46:a0:01: 5b:e9:62:67:13:58:38:b0:f2:3a:af:ac:9d:7e:e3: d2:c6:ba:b4:02:df:3e:fc:af:67:c3:36:e0:03:dd: e5:41:0e:a2:ba:aa:40:dd:33:19:18:47:1c:87:cd: 86:84:56:3c:b6:5c:97:d6:22:6b:4f:23:53:3a:70: 9f:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:DC:63:3E:95:76:E3:F1:3C:5B:38:A4:B6:F7:A8:FB:BD:97:16:93 X509v3 Authority Key Identifier: keyid:1F:CB:89:53:4D:D8:C2:C8:49:5A:1B:3F:1F:6D:B4:6B:58:D2:E1:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5272e527-725b-49e3-8743-c753dd3379e3/0/1FCB89534DD8C2C8495A1B3F1F6DB46B58D2E13A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:ff:3d:3a:74:95:08:14:f2:4f:cd:09:b9:a9:49:41:c8:1d: 2e:83:01:c5:d9:d4:5a:e6:ca:ab:25:04:ea:d2:31:b5:89:15: 98:c5:2a:7d:00:81:0f:0e:45:10:1f:f2:e6:be:3d:1a:84:bb: cc:26:f2:55:da:0d:07:26:22:3d:3c:f7:e7:73:77:5e:3b:99: 76:5f:e1:29:0e:36:62:9c:e4:0a:cd:9e:67:df:a4:72:f4:fd: 83:cb:8f:5a:e6:2b:2e:bc:f2:52:8c:da:a6:38:b1:c8:b8:e0: f9:ff:9c:61:4f:31:c7:90:ea:87:82:ce:de:3c:48:64:94:36: c5:47:5d:54:63:35:55:4c:dd:f2:db:71:fc:56:53:91:17:9e: 0c:17:2e:82:af:a3:78:52:49:cb:cf:a5:7f:97:36:a4:4b:ae: 59:aa:35:0b:e9:70:02:65:62:2d:77:04:28:0a:b3:cb:98:78: 37:89:dc:91:87:75:3c:8f:2e:ba:da:20:4a:dc:79:75:03:cc: 98:ae:83:b2:31:a7:a2:76:50:db:af:a9:02:bb:ab:b6:51:f7: 42:8c:fe:87:c3:06:b7:c6:b3:c7:b6:b6:76:3d:b5:33:a0:ee: c4:1b:fb:e8:de:da:61:a1:3f:b1:59:e5:ac:b9:f2:78:53:74: f0:0a:3d:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd3JHYTqt34VSAn3gMBOx38GdZQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1 OEQyRTEzQTAeFw0yNjA0MTcxMTI3MjJaFw0yNjA0MjAxMzA4MjJaMDMxMTAvBgNV BAMTKDRDREM2MzNFOTU3NkUzRjEzQzVCMzhBNEI2RjdBOEZCQkQ5NzE2OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5kI8wKQAWVGeJsTh3EeI0c4kF avWMOQBDps720zhSFhfgK9u4xOC9eByPyyiJqA3/MdDtqCc4BVtvqAoNg1TJZl/K xu1yVjQZoLypezsq28jYxIMI8TQauqSZ3UDrzCS2xsx+noKFow5VTZgFPj81S2JW 8bGzpbNbJAUkFXI9gzEjJspbXLMGmaXZ+qJqu4c7vEh5HBe14R7NhxN5yzW5lA4B vJnQwPob4KXWWltYC6umHTBUh6NWOICuWBAm6kagAVvpYmcTWDiw8jqvrJ1+49LG urQC3z78r2fDNuAD3eVBDqK6qkDdMxkYRxyHzYaEVjy2XJfWImtPI1M6cJ+HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTNxjPpV24/E8Wziktveo+72XFpMwHwYDVR0j BBgwFoAUH8uJU03YwshJWhs/H220a1jS4TowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjcyZTUyNy03MjViLTQ5ZTMtODc0My1jNzUzZGQzMzc5ZTMvMC8xRkNCODk1MzRE RDhDMkM4NDk1QTFCM0YxRjZEQjQ2QjU4RDJFMTNBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0NkI1OEQy RTEzQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTI3MmU1MjctNzI1Yi00OWUzLTg3 NDMtYzc1M2RkMzM3OWUzLzAvMUZDQjg5NTM0REQ4QzJDODQ5NUExQjNGMUY2REI0 NkI1OEQyRTEzQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACP/PTp0lQgU8k/NCbmpSUHIHS6DAcXZ1Frm yqslBOrSMbWJFZjFKn0AgQ8ORRAf8ua+PRqEu8wm8lXaDQcmIj089+dzd147mXZf 4SkONmKc5ArNnmffpHL0/YPLj1rmKy688lKM2qY4sci44Pn/nGFPMceQ6oeCzt48 SGSUNsVHXVRjNVVM3fLbcfxWU5EXngwXLoKvo3hSScvPpX+XNqRLrlmqNQvpcAJl Yi13BCgKs8uYeDeJ3JGHdTyPLrraIErceXUDzJiug7Ixp6J2UNuvqQK7q7ZR90KM /ofDBrfGs8e2tnY9tTOg7sQb++je2mGhP7FZ5ay58nhTdPAKPSs= -----END CERTIFICATE-----Generated at Fri Apr 17 19:44:25 2026 by rpki-client