$ rpki-client -vvf repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft File: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft (raw, json) Hash identifier: bQovLmsVJpIaRtmZpn5WeKByx6WWxZ1z7KN4gBjYnvQ= Subject key identifier: DA:89:40:F2:24:8D:2F:5C:43:DF:D8:BE:50:08:B5:A3:BA:D9:0B:10 Authority key identifier: 1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 Certificate issuer: /CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Certificate serial: 748B18321ACF536F38948C06ACCE2FAF66C8DDD0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft Manifest number: 051E Signing time: Sun 01 Mar 2026 12:20:46 +0000 Manifest this update: Sun 01 Mar 2026 12:15:46 +0000 Manifest next update: Wed 04 Mar 2026 19:32:46 +0000 Files and hashes: 1: 1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl (hash: 4F2zuUzmoifwWCySzJqPOQvwW5ZSHcJjJtkzaqeS/WQ=) 2: 3230322e36372e382e302f32312d3234203d3e203234313935.roa (hash: B+C/2EohdvfSLSdEWCv4uFVDG8om8Pw0dnsHmi+NJ9Y=) 3: 323430313a343230303a3a2f33322d3438203d3e203234313935.roa (hash: xPjBnSpHmpcu0qAxiY2wE80xegcTsRNtPEAJ6PwASdw=) 4: 3131382e39312e3132382e302f32312d3234203d3e203234313935.roa (hash: yiPIGsDISayK97qWqm2UWsTxEHdxKETOsL8gSiwFMjA=) 5: 3131382e39312e3134302e302f32322d3234203d3e203633353032.roa (hash: XlrHKxvILobzAM8qX1Td9F4llGO1s7dDnxuDShAIB6Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:8b:18:32:1a:cf:53:6f:38:94:8c:06:ac:ce:2f:af:66:c8:dd:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946 Validity Not Before: Mar 1 12:15:46 2026 GMT Not After : Mar 4 19:32:46 2026 GMT Subject: CN=DA8940F2248D2F5C43DFD8BE5008B5A3BAD90B10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:15:8b:b5:8a:d8:21:c7:bb:0a:b0:02:10:8a: 89:85:16:63:42:68:3b:bd:c0:14:d5:b9:77:ef:9a: d3:72:1b:e2:63:e7:0f:24:b5:4a:3d:e7:e6:20:79: 5d:d6:00:75:c8:a3:15:ab:d0:94:f9:b0:0e:94:67: 89:70:42:f9:20:70:65:35:57:f6:09:0d:2c:27:16: bf:ae:22:47:68:dd:33:bf:f1:d9:44:34:79:2c:7c: f0:c4:60:f8:5d:8b:7e:55:88:ca:c7:15:5b:3a:f9: c2:51:f9:2b:68:3e:63:3f:d8:d9:d3:4f:5e:c5:cf: 64:10:fd:c1:59:a0:1e:c3:e0:ae:33:9c:2f:1a:e1: e9:fc:c4:9b:86:45:e2:8f:f1:28:35:69:be:d2:a5: fd:22:31:c5:94:7b:c6:26:84:b1:90:a5:5d:70:00: 99:f5:a6:8a:0e:2e:39:85:ca:ef:cd:42:69:42:33: 50:37:51:1d:c5:27:e2:e4:f1:51:52:d9:f0:5d:f1: 8f:80:d2:e8:a8:d6:4a:da:a9:3d:d0:d5:6d:c5:3c: a2:0a:50:91:d6:1f:58:f9:06:9b:4c:21:b4:9f:b9: 5c:6d:34:06:e8:81:82:94:58:78:c1:cd:36:d1:35: 79:c8:f6:c5:7e:20:7f:3c:d2:12:3e:f2:5a:3f:95: f9:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:89:40:F2:24:8D:2F:5C:43:DF:D8:BE:50:08:B5:A3:BA:D9:0B:10 X509v3 Authority Key Identifier: keyid:1F:CD:47:FB:4B:D7:29:E2:2E:4F:EE:FC:E5:B6:1B:4E:1C:7F:E9:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8792a4cd-dbac-43ac-8060-2e8d42eae655/0/1FCD47FB4BD729E22E4FEEFCE5B61B4E1C7FE946.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:6d:70:76:5d:9b:7c:75:d1:14:90:de:fc:57:35:03:1f:ab: 13:09:dd:e8:ca:f1:c9:97:70:cf:36:f9:de:0d:03:c4:69:0e: a5:2a:2c:b2:06:81:df:3b:a1:0d:c6:70:83:6b:d5:c1:9a:46: b0:29:ac:34:c7:43:92:d1:2d:91:f2:49:41:a0:bc:d7:76:ae: 47:94:44:c0:95:66:11:f1:79:11:87:ce:9d:e6:86:0b:8e:18: 98:d2:a8:0e:8c:47:f2:71:12:05:76:02:ed:a4:8f:6f:6f:36: 75:9c:38:78:c9:4a:88:7e:34:f9:8a:19:2f:3b:30:57:5b:7c: 04:ef:5a:9c:5a:e8:9b:fc:8c:25:5f:61:07:c0:55:ef:40:f0: 58:9f:b8:88:ce:a2:94:ba:37:9e:ee:a1:9a:c5:d3:8c:fc:be: 68:4c:f1:2b:79:e2:1e:1f:a7:9d:41:db:26:6b:68:2a:54:ac: d9:d4:e8:b8:21:5a:86:e5:bb:c3:8e:1e:e6:0e:d3:05:5d:90: 52:e6:c8:dc:71:63:8c:bf:3b:58:ed:26:d4:0a:3d:6a:68:42: e2:d0:ca:fc:bc:56:e4:50:30:95:c1:49:98:9a:46:4f:53:4b: e9:20:9d:da:34:17:4d:89:d5:f7:40:81:a8:da:02:87:ab:4b: e7:52:e1:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdIsYMhrPU284lIwGrM4vr2bI3dAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUx QzdGRTk0NjAeFw0yNjAzMDExMjE1NDZaFw0yNjAzMDQxOTMyNDZaMDMxMTAvBgNV BAMTKERBODk0MEYyMjQ4RDJGNUM0M0RGRDhCRTUwMDhCNUEzQkFEOTBCMTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4FYu1itghx7sKsAIQiomFFmNC aDu9wBTVuXfvmtNyG+Jj5w8ktUo95+YgeV3WAHXIoxWr0JT5sA6UZ4lwQvkgcGU1 V/YJDSwnFr+uIkdo3TO/8dlENHksfPDEYPhdi35ViMrHFVs6+cJR+StoPmM/2NnT T17Fz2QQ/cFZoB7D4K4znC8a4en8xJuGReKP8Sg1ab7Spf0iMcWUe8YmhLGQpV1w AJn1pooOLjmFyu/NQmlCM1A3UR3FJ+Lk8VFS2fBd8Y+A0uio1kraqT3Q1W3FPKIK UJHWH1j5BptMIbSfuVxtNAbogYKUWHjBzTbRNXnI9sV+IH880hI+8lo/lfnHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2olA8iSNL1xD39i+UAi1o7rZCxAwHwYDVR0j BBgwFoAUH81H+0vXKeIuT+785bYbThx/6UYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzkyYTRjZC1kYmFjLTQzYWMtODA2MC0yZThkNDJlYWU2NTUvMC8xRkNENDdGQjRC RDcyOUUyMkU0RkVFRkNFNUI2MUI0RTFDN0ZFOTQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFCNEUxQzdG RTk0Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODc5MmE0Y2QtZGJhYy00M2FjLTgw NjAtMmU4ZDQyZWFlNjU1LzAvMUZDRDQ3RkI0QkQ3MjlFMjJFNEZFRUZDRTVCNjFC NEUxQzdGRTk0Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE9tcHZdm3x10RSQ3vxXNQMfqxMJ3ejK8cmX cM82+d4NA8RpDqUqLLIGgd87oQ3GcINr1cGaRrAprDTHQ5LRLZHySUGgvNd2rkeU RMCVZhHxeRGHzp3mhguOGJjSqA6MR/JxEgV2Au2kj29vNnWcOHjJSoh+NPmKGS87 MFdbfATvWpxa6Jv8jCVfYQfAVe9A8FifuIjOopS6N57uoZrF04z8vmhM8St54h4f p51B2yZraCpUrNnU6LghWoblu8OOHuYO0wVdkFLmyNxxY4y/O1jtJtQKPWpoQuLQ yvy8VuRQMJXBSZiaRk9TS+kgndo0F02J1fdAgajaAoerS+dS4UY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:29:10 2026 by rpki-client