$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: NyqjYaWQLE4UfifrL5GCop35F2HlCs61zk/si/3aGKk= Subject key identifier: 81:2C:C2:DF:AF:1E:83:C3:09:1C:58:A9:38:98:6B:75:8A:3D:82:AF Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 59390200058F1632AAB5E9D45FF79FC277AEC245 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 01B8 Signing time: Sun 01 Mar 2026 03:01:48 +0000 Manifest this update: Sun 01 Mar 2026 02:56:48 +0000 Manifest next update: Wed 04 Mar 2026 12:58:48 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: TVHLoA6S/RXowJVfDxEwT3G/jcn7qgjqSJZOEgaAkds=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: y3pWY5Sj4JWLFPu67rG58+jgQGCtJucYZhESYmX/IYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:58:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:39:02:00:05:8f:16:32:aa:b5:e9:d4:5f:f7:9f:c2:77:ae:c2:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Mar 1 02:56:48 2026 GMT Not After : Mar 4 12:58:48 2026 GMT Subject: CN=812CC2DFAF1E83C3091C58A938986B758A3D82AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:2a:9e:a7:df:f8:10:c0:8d:d7:0d:6c:ef: b0:1a:16:03:94:40:ef:41:02:50:ea:d9:81:9c:c0: 48:0d:94:17:93:bc:43:ae:88:f1:d8:6d:9e:88:80: e4:2e:6e:db:2b:bd:00:7e:f0:dc:16:ef:70:40:f5: 5c:f9:68:52:4d:aa:ae:4e:e6:7c:f8:bf:a5:a1:b3: 56:08:c0:63:41:19:e1:ec:e1:ae:36:63:9f:62:c2: 6b:08:7c:59:de:fe:de:9c:ec:6b:55:2c:b5:75:8e: e5:47:be:25:de:b9:17:51:d9:81:18:f3:a3:99:57: 8c:05:b6:e2:1b:8f:fd:22:f7:81:63:d2:0b:e3:e4: f0:1b:6a:29:48:b3:32:70:da:55:e0:32:44:34:e9: fc:26:11:80:33:3f:7c:87:29:83:43:01:02:dd:7a: 7e:96:78:27:7e:cd:c2:08:68:c5:85:1d:9f:6f:de: 6a:48:92:d9:9a:b5:bd:e6:a6:0b:43:23:2e:08:69: 62:b4:3a:86:76:4e:0e:79:30:e1:a9:5a:74:c5:a0: ee:59:17:4a:77:b6:e0:63:4c:73:75:0c:0e:38:44: b7:94:5b:8c:4f:42:e8:21:3b:49:fa:1e:a5:2f:81: c9:82:e8:f9:16:38:ec:74:56:07:70:4a:6c:bc:75: 20:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:2C:C2:DF:AF:1E:83:C3:09:1C:58:A9:38:98:6B:75:8A:3D:82:AF X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:94:ab:6e:75:37:4c:9e:03:e0:8c:68:73:7e:3c:af:75:76: 82:fd:a8:96:62:7b:4a:82:db:d8:f1:7e:00:26:6f:e5:3a:be: 47:f1:c9:ab:68:4e:c4:22:8b:60:68:0e:9f:c5:4d:e6:7c:e1: a4:0c:17:58:3b:7d:83:57:8e:47:a6:14:db:d8:63:a4:fd:04: 78:64:11:81:c3:ca:b7:7e:e8:73:05:20:c8:8a:15:68:5e:7a: 1e:fe:23:96:84:03:64:79:a6:c2:4f:2d:f3:33:61:9b:97:d0: 49:f0:fb:e0:e0:f1:15:06:44:59:51:4c:db:f9:86:3a:64:eb: a9:be:b2:d9:36:5b:e7:c0:eb:4d:90:8f:75:f4:60:93:d5:32: ba:b6:34:61:83:a0:21:1c:85:8c:38:1f:ef:9c:4b:8e:74:b6: b0:4a:a6:11:ff:1d:58:3e:dd:e4:f4:eb:99:90:5a:35:53:01: a3:b9:12:06:80:a5:7a:bc:3c:c8:4b:4e:54:92:d5:d5:32:af: 0c:98:33:12:33:49:82:d0:a7:83:c7:f3:2c:85:79:26:45:09: 47:57:db:4a:90:76:f7:68:62:94:74:c2:76:c8:df:95:69:0c: cc:e5:d3:f3:e2:18:14:dd:62:ec:d9:d9:53:48:6c:2a:ee:3f: 28:ba:fe:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWTkCAAWPFjKqtenUX/efwneuwkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNjAzMDEwMjU2NDhaFw0yNjAzMDQxMjU4NDhaMDMxMTAvBgNV BAMTKDgxMkNDMkRGQUYxRTgzQzMwOTFDNThBOTM4OTg2Qjc1OEEzRDgyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGSqep9/4EMCN1w1s77AaFgOU QO9BAlDq2YGcwEgNlBeTvEOuiPHYbZ6IgOQubtsrvQB+8NwW73BA9Vz5aFJNqq5O 5nz4v6Whs1YIwGNBGeHs4a42Y59iwmsIfFne/t6c7GtVLLV1juVHviXeuRdR2YEY 86OZV4wFtuIbj/0i94Fj0gvj5PAbailIszJw2lXgMkQ06fwmEYAzP3yHKYNDAQLd en6WeCd+zcIIaMWFHZ9v3mpIktmatb3mpgtDIy4IaWK0OoZ2Tg55MOGpWnTFoO5Z F0p3tuBjTHN1DA44RLeUW4xPQughO0n6HqUvgcmC6PkWOOx0VgdwSmy8dSClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgSzC368eg8MJHFipOJhrdYo9gq8wHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK+Uq251N0yeA+CMaHN+PK91doL9qJZie0qC 29jxfgAmb+U6vkfxyatoTsQii2BoDp/FTeZ84aQMF1g7fYNXjkemFNvYY6T9BHhk EYHDyrd+6HMFIMiKFWheeh7+I5aEA2R5psJPLfMzYZuX0Enw++Dg8RUGRFlRTNv5 hjpk66m+stk2W+fA602Qj3X0YJPVMrq2NGGDoCEchYw4H++cS450trBKphH/HVg+ 3eT065mQWjVTAaO5EgaApXq8PMhLTlSS1dUyrwyYMxIzSYLQp4PH8yyFeSZFCUdX 20qQdvdoYpR0wnbI35VpDMzl0/PiGBTdYuzZ2VNIbCruPyi6/t0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:16:14 2026 by rpki-client