$ rpki-client -vvf repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft File: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft (raw, json) Hash identifier: wjrwAFC360m2TN+A0lpx79VJr5TjtnNfCTdbJl30jwg= Subject key identifier: 48:C5:46:13:C1:F2:7D:12:A0:9C:C5:09:68:90:8B:DC:4C:49:8C:32 Authority key identifier: 1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 Certificate issuer: /CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Certificate serial: 73D3FDE45C3FBA7A81909AFF5AEEEE4FC35682C0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft Manifest number: 0558 Signing time: Sun 01 Mar 2026 19:11:09 +0000 Manifest this update: Sun 01 Mar 2026 19:06:09 +0000 Manifest next update: Thu 05 Mar 2026 01:48:09 +0000 Files and hashes: 1: 3130332e3135332e3138382e302f32332d3234203d3e20313531303030.roa (hash: swFGOhGRguY6xbHl+4Isnl0Fys0RcqGksCRObsxxYUI=) 2: 1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl (hash: DzvEy4LRQGVis6V/ZhBTx3EuNKwWwNoFn8wft8bEVMs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:48:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:d3:fd:e4:5c:3f:ba:7a:81:90:9a:ff:5a:ee:ee:4f:c3:56:82:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1BA144741407FB84B27FEDFC33E86A5D5F5704C5 Validity Not Before: Mar 1 19:06:09 2026 GMT Not After : Mar 5 01:48:09 2026 GMT Subject: CN=48C54613C1F27D12A09CC50968908BDC4C498C32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:10:0e:71:8a:b1:b2:f6:eb:76:05:97:cd:bf: c0:cb:da:b2:d1:20:08:d1:11:e7:aa:76:81:20:0c: e1:f1:58:96:c2:e9:37:c7:a4:b5:3b:ff:7f:54:69: 63:ce:4a:29:d3:42:03:78:49:ab:e2:9b:2b:09:dd: 0f:bb:31:cd:8a:31:8d:84:88:81:44:9d:ba:f8:52: 42:68:77:77:77:55:7c:f1:b5:6d:e3:09:24:48:9a: e1:46:53:99:1d:d2:d8:2c:65:e5:c0:9c:d2:33:0f: 1b:10:55:7c:2e:15:12:d2:2b:61:8b:9b:a9:89:15: 0c:d8:3a:74:b1:bc:59:27:98:20:b8:47:58:97:02: 7a:49:de:81:72:af:a0:0b:a8:03:a7:80:93:6b:00: 07:59:d8:65:e4:7e:2a:9a:b6:6b:d3:79:29:62:a9: b5:79:a3:2c:1c:bf:92:ae:9f:d9:92:14:ea:c5:11: 68:53:ae:81:a5:80:c8:91:49:2d:94:71:d9:ea:25: f5:f8:b7:12:f8:ea:76:0b:0d:76:b0:e2:ea:dc:2d: f8:1d:8f:c6:20:dc:6c:3a:ac:19:b2:8d:da:88:e5: 1b:55:1b:7b:64:36:39:02:42:d0:53:ee:c3:bc:a3: 67:bc:d0:68:13:85:d6:df:92:39:16:c4:1e:36:19: 06:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:C5:46:13:C1:F2:7D:12:A0:9C:C5:09:68:90:8B:DC:4C:49:8C:32 X509v3 Authority Key Identifier: keyid:1B:A1:44:74:14:07:FB:84:B2:7F:ED:FC:33:E8:6A:5D:5F:57:04:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80f62176-e164-492c-8a72-99c1e161b2df/0/1BA144741407FB84B27FEDFC33E86A5D5F5704C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:5b:9f:df:2e:e0:af:91:cd:8d:7a:17:83:1f:40:fc:f1:96: 20:d6:1f:67:38:bf:23:ca:88:43:9a:59:5b:8f:ac:e2:13:e4: aa:c8:b1:62:da:84:68:06:8a:19:49:b1:8e:8e:7b:33:1d:ff: bf:08:bb:59:0a:b9:34:03:2f:77:7e:e3:d5:63:1c:26:72:1d: 6f:9c:dd:77:9c:e6:70:88:6e:89:48:eb:db:c1:da:0b:3d:84: 59:1d:6f:a0:11:8b:c8:a9:65:20:87:df:17:a0:15:07:f7:2b: 18:1e:3a:35:3a:56:a5:8d:db:bd:83:70:2b:42:94:6a:a0:57: da:31:7d:e6:9c:b7:17:95:ae:31:e6:f3:7c:0d:fb:5c:0c:98: ec:37:19:73:e2:bf:26:0b:7e:69:07:1b:61:b6:d5:40:4d:2e: 96:6a:00:16:c2:98:ee:fd:1a:04:65:39:47:29:0f:80:35:1e: b2:52:52:09:51:2a:64:b9:1e:be:f2:a3:b4:66:51:22:ba:89: e2:f3:ae:19:15:5a:a1:4d:87:b3:81:92:bd:82:62:e3:c4:c9: 76:bf:77:65:e6:ef:12:d2:d8:cd:55:71:29:ec:e8:bc:19:e4: 30:79:64:ba:e3:da:2e:6d:34:52:74:b9:38:e7:28:3e:01:dc: 32:37:b9:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc9P95Fw/unqBkJr/Wu7uT8NWgsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1 RjU3MDRDNTAeFw0yNjAzMDExOTA2MDlaFw0yNjAzMDUwMTQ4MDlaMDMxMTAvBgNV BAMTKDQ4QzU0NjEzQzFGMjdEMTJBMDlDQzUwOTY4OTA4QkRDNEM0OThDMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYEA5xirGy9ut2BZfNv8DL2rLR IAjREeeqdoEgDOHxWJbC6TfHpLU7/39UaWPOSinTQgN4SavimysJ3Q+7Mc2KMY2E iIFEnbr4UkJod3d3VXzxtW3jCSRImuFGU5kd0tgsZeXAnNIzDxsQVXwuFRLSK2GL m6mJFQzYOnSxvFknmCC4R1iXAnpJ3oFyr6ALqAOngJNrAAdZ2GXkfiqatmvTeSli qbV5oywcv5Kun9mSFOrFEWhTroGlgMiRSS2UcdnqJfX4txL46nYLDXaw4urcLfgd j8Yg3Gw6rBmyjdqI5RtVG3tkNjkCQtBT7sO8o2e80GgThdbfkjkWxB42GQbJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSMVGE8HyfRKgnMUJaJCL3ExJjDIwHwYDVR0j BBgwFoAUG6FEdBQH+4Syf+38M+hqXV9XBMUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MGY2MjE3Ni1lMTY0LTQ5MmMtOGE3Mi05OWMxZTE2MWIyZGYvMC8xQkExNDQ3NDE0 MDdGQjg0QjI3RkVERkMzM0U4NkE1RDVGNTcwNEM1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZBNUQ1RjU3 MDRDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODBmNjIxNzYtZTE2NC00OTJjLThh NzItOTljMWUxNjFiMmRmLzAvMUJBMTQ0NzQxNDA3RkI4NEIyN0ZFREZDMzNFODZB NUQ1RjU3MDRDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFFbn98u4K+RzY16F4MfQPzxliDWH2c4vyPK iEOaWVuPrOIT5KrIsWLahGgGihlJsY6OezMd/78Iu1kKuTQDL3d+49VjHCZyHW+c 3Xec5nCIbolI69vB2gs9hFkdb6ARi8ipZSCH3xegFQf3KxgeOjU6VqWN272DcCtC lGqgV9oxfeactxeVrjHm83wN+1wMmOw3GXPivyYLfmkHG2G21UBNLpZqABbCmO79 GgRlOUcpD4A1HrJSUglRKmS5Hr7yo7RmUSK6ieLzrhkVWqFNh7OBkr2CYuPEyXa/ d2Xm7xLS2M1VcSns6LwZ5DB5ZLrj2i5tNFJ0uTjnKD4B3DI3ueY= -----END CERTIFICATE-----Generated at Mon Mar 2 19:54:31 2026 by rpki-client