$ rpki-client -vvf repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft File: 1A43B9C67646D3B8444E277C64D1FD489A45E536.mft (raw, json) Hash identifier: VFP8EANV6oMSsTs7vgbCDEByqRVVQrol45m2dkgFKeQ= Subject key identifier: E6:1E:25:2C:F3:06:C4:85:FD:3B:65:6B:AF:76:62:2D:84:6E:CF:9B Authority key identifier: 1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 Certificate issuer: /CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Certificate serial: 1A140E33F184785B596F2985D15D85314CF22E96 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft Manifest number: 0118 Signing time: Sun 01 Mar 2026 20:52:26 +0000 Manifest this update: Sun 01 Mar 2026 20:47:26 +0000 Manifest next update: Thu 05 Mar 2026 07:20:26 +0000 Files and hashes: 1: 1A43B9C67646D3B8444E277C64D1FD489A45E536.crl (hash: W9W40dtXo/+Zuh3xmur/3ca1MtLaUAEJt/3VCzx8iC8=) 2: 3135372e36362e3132352e302f32342d3234203d3e20313532373732.roa (hash: kqVD+n1IKw72OvnfLlVYQv+xCjn3zAPXv/doYj+5xns=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:14:0e:33:f1:84:78:5b:59:6f:29:85:d1:5d:85:31:4c:f2:2e:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A43B9C67646D3B8444E277C64D1FD489A45E536 Validity Not Before: Mar 1 20:47:26 2026 GMT Not After : Mar 5 07:20:26 2026 GMT Subject: CN=E61E252CF306C485FD3B656BAF76622D846ECF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:92:9f:69:c8:13:35:ee:f1:1b:db:84:bb:2d: 2a:10:ed:41:f7:f6:75:2f:6e:fe:56:73:82:8c:0c: d1:ba:a7:6c:92:08:a6:9f:46:dd:98:01:ec:76:82: fa:85:83:09:5b:6c:05:96:a6:b2:bd:21:9d:5c:f4: 3e:19:c5:3c:56:f5:1b:fa:85:c0:d8:b7:d7:a9:20: 2e:2e:37:65:62:76:df:9c:49:2f:e0:05:06:df:8b: e0:57:82:13:12:e5:f8:3a:af:b3:59:0e:cd:2c:5a: bf:1c:9e:92:d3:38:68:b6:cd:17:0e:ac:97:eb:66: ab:94:94:4c:8c:20:fe:97:6e:e2:74:65:8a:ef:62: 68:c4:2e:af:fc:b0:80:12:0f:af:cb:26:bb:8d:db: b1:e9:cc:82:ef:cf:96:ab:1b:41:04:38:4d:4f:17: e3:24:c2:ac:5b:22:b8:2e:5c:86:b3:78:dd:89:39: 52:9f:11:3e:b8:77:25:00:5b:c8:91:57:e9:2d:65: b1:79:f3:22:95:37:77:e1:98:ce:99:a3:83:68:ce: 43:8e:ab:fd:63:b3:96:6a:d5:dc:ee:a1:86:c5:46: 0a:3c:a8:81:d7:31:30:4e:19:91:48:54:e0:f8:b3: 2f:2f:b4:d7:dc:ff:c4:e0:13:d3:17:84:62:a3:41: 30:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:1E:25:2C:F3:06:C4:85:FD:3B:65:6B:AF:76:62:2D:84:6E:CF:9B X509v3 Authority Key Identifier: keyid:1A:43:B9:C6:76:46:D3:B8:44:4E:27:7C:64:D1:FD:48:9A:45:E5:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/1A43B9C67646D3B8444E277C64D1FD489A45E536.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7cf01ec6-8e89-402a-90c7-50c6f14cd242/0/1A43B9C67646D3B8444E277C64D1FD489A45E536.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:76:32:5d:7e:d3:fd:44:22:f9:29:d0:c6:9a:42:26:2e:e5: 74:24:5b:eb:2b:dd:e5:15:0c:d0:cd:e4:72:fd:92:ee:49:e9: 7d:ce:0a:66:e9:2d:0d:61:15:cf:62:77:64:de:89:7b:ba:72: 4b:ef:79:30:1e:4b:94:c2:83:03:40:cc:79:b9:f1:8c:c8:fb: 13:cd:80:0d:29:47:99:03:b0:ee:43:5a:5b:b3:73:c4:7d:fb: 42:af:4c:9c:47:bd:eb:b8:5f:d7:c7:f5:9c:1f:d7:0c:00:e4: e0:16:08:6b:0f:84:1e:cf:14:4e:40:96:5b:93:7d:b7:e3:54: c1:22:4a:1e:9a:d5:1b:3d:46:fe:e0:ab:9a:96:c7:2d:95:62: a9:7b:8c:67:34:04:40:1e:0c:a1:65:d5:28:b1:92:6b:e6:9c: 49:55:60:33:01:84:ea:6c:07:5a:35:66:49:f7:7c:30:a8:62: 73:79:5c:ec:0f:ae:c2:d1:8d:88:5d:9a:03:a7:7f:de:48:e1: cd:14:6d:bf:e5:9a:fd:26:a7:6b:a9:b9:50:90:1c:05:35:6c: 20:4f:fc:19:17:5a:5e:7a:c3:14:e6:d1:06:30:81:00:85:4e: 2c:7d:23:97:0c:4e:a0:ed:a3:e1:9f:cb:eb:90:36:e4:12:71: c4:23:6c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGhQOM/GEeFtZbymF0V2FMUzyLpYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5 QTQ1RTUzNjAeFw0yNjAzMDEyMDQ3MjZaFw0yNjAzMDUwNzIwMjZaMDMxMTAvBgNV BAMTKEU2MUUyNTJDRjMwNkM0ODVGRDNCNjU2QkFGNzY2MjJEODQ2RUNGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkp9pyBM17vEb24S7LSoQ7UH3 9nUvbv5Wc4KMDNG6p2ySCKafRt2YAex2gvqFgwlbbAWWprK9IZ1c9D4ZxTxW9Rv6 hcDYt9epIC4uN2Vidt+cSS/gBQbfi+BXghMS5fg6r7NZDs0sWr8cnpLTOGi2zRcO rJfrZquUlEyMIP6XbuJ0ZYrvYmjELq/8sIASD6/LJruN27HpzILvz5arG0EEOE1P F+MkwqxbIrguXIazeN2JOVKfET64dyUAW8iRV+ktZbF58yKVN3fhmM6Zo4NozkOO q/1js5Zq1dzuoYbFRgo8qIHXMTBOGZFIVOD4sy8vtNfc/8TgE9MXhGKjQTDnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5h4lLPMGxIX9O2Vrr3ZiLYRuz5swHwYDVR0j BBgwFoAUGkO5xnZG07hETid8ZNH9SJpF5TYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Y2YwMWVjNi04ZTg5LTQwMmEtOTBjNy01MGM2ZjE0Y2QyNDIvMC8xQTQzQjlDNjc2 NDZEM0I4NDQ0RTI3N0M2NEQxRkQ0ODlBNDVFNTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZENDg5QTQ1 RTUzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2NmMDFlYzYtOGU4OS00MDJhLTkw YzctNTBjNmYxNGNkMjQyLzAvMUE0M0I5QzY3NjQ2RDNCODQ0NEUyNzdDNjREMUZE NDg5QTQ1RTUzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIl2Ml1+0/1EIvkp0MaaQiYu5XQkW+sr3eUV DNDN5HL9ku5J6X3OCmbpLQ1hFc9id2TeiXu6ckvveTAeS5TCgwNAzHm58YzI+xPN gA0pR5kDsO5DWluzc8R9+0KvTJxHveu4X9fH9Zwf1wwA5OAWCGsPhB7PFE5AlluT fbfjVMEiSh6a1Rs9Rv7gq5qWxy2VYql7jGc0BEAeDKFl1SixkmvmnElVYDMBhOps B1o1Zkn3fDCoYnN5XOwPrsLRjYhdmgOnf95I4c0Ubb/lmv0mp2upuVCQHAU1bCBP /BkXWl56wxTm0QYwgQCFTix9I5cMTqDto+Gfy+uQNuQSccQjbCA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:17:06 2026 by rpki-client