$ rpki-client -vvf repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft File: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft (raw, json) Hash identifier: bgyhDqGjD0xJsysTZrGc4QbMq387fZpwNlXOWNTPea4= Subject key identifier: CA:F4:97:BF:07:88:50:E5:39:F6:F9:E2:9B:31:85:79:2F:1C:CB:6C Authority key identifier: 1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE Certificate issuer: /CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Certificate serial: 164C3A725C6B75ED74B069D9BC05B51CA0D777EA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft Manifest number: 37 Signing time: Sun 01 Mar 2026 08:32:28 +0000 Manifest this update: Sun 01 Mar 2026 08:27:28 +0000 Manifest next update: Wed 04 Mar 2026 09:46:28 +0000 Files and hashes: 1: 1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl (hash: r1afVLDnLjzJQdgUviUFWrxTcHlSmYiKZRWtyehk2bQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:46:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:4c:3a:72:5c:6b:75:ed:74:b0:69:d9:bc:05:b5:1c:a0:d7:77:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1C05C79C77544A2E3F54290E6007CA03E6FC3AAE Validity Not Before: Mar 1 08:27:28 2026 GMT Not After : Mar 4 09:46:28 2026 GMT Subject: CN=CAF497BF078850E539F6F9E29B3185792F1CCB6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fb:58:aa:fa:cc:ab:a5:d0:7a:06:e0:d2:82:64: fe:66:71:80:47:16:63:99:79:ce:28:6e:4f:69:ba: a9:83:d9:b6:60:39:11:63:7d:24:22:9f:c0:6b:14: 1b:38:42:46:b2:d2:55:b9:55:0c:3f:c0:f0:2e:08: 40:26:74:d8:db:59:c8:a0:a5:c3:85:7d:eb:be:13: 88:98:6c:b7:d0:fd:3e:d9:d6:64:d8:fe:48:f5:c4: 8e:b5:b9:da:6d:42:47:fc:3c:34:7b:11:fe:e5:c0: 12:12:1c:96:5c:52:8f:f6:e2:87:56:76:d9:9f:50: a6:7e:4c:48:81:81:34:a2:db:6f:65:9a:e9:07:ca: 5d:ad:49:67:c6:fa:c6:28:2c:15:9c:05:59:48:8c: a4:2f:ff:99:09:7b:dc:9c:d0:9e:2b:86:60:03:75: 7a:bc:d3:0e:b2:0b:36:7c:76:62:16:72:ad:9c:7f: b5:8d:a2:c5:a6:bf:b5:83:10:ce:a1:6e:3a:78:04: 94:fa:ad:ea:17:f3:28:d8:91:44:a2:2e:3f:f3:8c: df:2c:dc:66:60:4a:6b:da:95:07:a5:a4:0b:05:7f: 1f:6e:3a:08:a7:5b:99:87:f2:30:03:a1:8d:7e:54: a0:28:69:61:1b:d8:c6:00:fd:bf:25:7f:e3:6c:ca: f4:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:F4:97:BF:07:88:50:E5:39:F6:F9:E2:9B:31:85:79:2F:1C:CB:6C X509v3 Authority Key Identifier: keyid:1C:05:C7:9C:77:54:4A:2E:3F:54:29:0E:60:07:CA:03:E6:FC:3A:AE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62625bf2-f3b6-4e9c-85b0-55e3c5467f9c/0/1C05C79C77544A2E3F54290E6007CA03E6FC3AAE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:d1:e3:1b:f4:45:ee:57:9a:9d:0e:86:b6:54:51:e6:e1:0c: cc:39:a6:6d:1d:94:09:b2:83:d6:5a:6b:d4:0b:9e:36:c0:68: d6:f1:62:e9:c9:10:cf:6c:a0:f8:8a:bd:e8:c5:5f:df:63:b4: 8f:bb:92:a9:a8:bc:d9:41:87:a0:ad:6b:fa:2c:0c:c5:6f:1c: 81:2a:78:ea:f0:fc:ea:7b:f1:cf:fa:57:56:bb:a8:f3:ee:9d: a4:d5:83:54:24:a8:32:82:d7:b6:35:63:67:c6:9e:37:64:7b: b7:08:a1:6b:e3:10:e9:e3:0a:88:f9:3c:05:b3:01:84:21:1b: 81:18:93:bb:64:7b:6e:63:bc:56:a3:84:6c:29:d5:2d:18:74: d7:c0:c7:c1:81:56:8f:df:2f:be:a0:89:b6:ad:6a:21:e9:eb: b3:09:ca:86:9e:71:9a:df:04:f1:89:ab:9b:4a:2a:e6:0e:aa: 01:2e:38:99:77:fd:b7:90:55:54:54:85:a2:56:cd:5d:37:fa: 76:41:f0:27:0f:e5:d6:53:f4:1a:1c:8a:92:33:30:31:bb:68: 43:14:d2:21:79:ac:0b:81:50:e2:2c:32:08:fc:00:9d:7d:9b: 5a:bf:55:f9:b8:a6:29:aa:c6:23:27:ba:f4:a6:a3:47:42:25: 77:77:b3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFkw6clxrde10sGnZvAW1HKDXd+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNF NkZDM0FBRTAeFw0yNjAzMDEwODI3MjhaFw0yNjAzMDQwOTQ2MjhaMDMxMTAvBgNV BAMTKENBRjQ5N0JGMDc4ODUwRTUzOUY2RjlFMjlCMzE4NTc5MkYxQ0NCNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD7WKr6zKul0HoG4NKCZP5mcYBH FmOZec4obk9puqmD2bZgORFjfSQin8BrFBs4Qkay0lW5VQw/wPAuCEAmdNjbWcig pcOFfeu+E4iYbLfQ/T7Z1mTY/kj1xI61udptQkf8PDR7Ef7lwBISHJZcUo/24odW dtmfUKZ+TEiBgTSi229lmukHyl2tSWfG+sYoLBWcBVlIjKQv/5kJe9yc0J4rhmAD dXq80w6yCzZ8dmIWcq2cf7WNosWmv7WDEM6hbjp4BJT6reoX8yjYkUSiLj/zjN8s 3GZgSmvalQelpAsFfx9uOginW5mH8jADoY1+VKAoaWEb2MYA/b8lf+NsyvQxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyvSXvweIUOU59vnimzGFeS8cy2wwHwYDVR0j BBgwFoAUHAXHnHdUSi4/VCkOYAfKA+b8Oq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MjYyNWJmMi1mM2I2LTRlOWMtODViMC01NWUzYzU0NjdmOWMvMC8xQzA1Qzc5Qzc3 NTQ0QTJFM0Y1NDI5MEU2MDA3Q0EwM0U2RkMzQUFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NBMDNFNkZD M0FBRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjI2MjViZjItZjNiNi00ZTljLTg1 YjAtNTVlM2M1NDY3ZjljLzAvMUMwNUM3OUM3NzU0NEEyRTNGNTQyOTBFNjAwN0NB MDNFNkZDM0FBRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKfR4xv0Re5Xmp0OhrZUUebhDMw5pm0dlAmy g9Zaa9QLnjbAaNbxYunJEM9soPiKvejFX99jtI+7kqmovNlBh6Cta/osDMVvHIEq eOrw/Op78c/6V1a7qPPunaTVg1QkqDKC17Y1Y2fGnjdke7cIoWvjEOnjCoj5PAWz AYQhG4EYk7tke25jvFajhGwp1S0YdNfAx8GBVo/fL76gibataiHp67MJyoaecZrf BPGJq5tKKuYOqgEuOJl3/beQVVRUhaJWzV03+nZB8CcP5dZT9BocipIzMDG7aEMU 0iF5rAuBUOIsMgj8AJ19m1q/Vfm4pimqxiMnuvSmo0dCJXd3s5Q= -----END CERTIFICATE-----Generated at Mon Mar 2 15:45:15 2026 by rpki-client