$ rpki-client -vvf repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft File: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft (raw, json) Hash identifier: 9ovRRaS0uIi2cCKapFdZBrUepQQVFXxltmu41AtDvIo= Subject key identifier: 23:01:8D:C2:1C:70:BD:9D:B3:1A:9A:00:C2:B8:E4:C9:7A:F1:0D:CB Authority key identifier: 16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA Certificate issuer: /CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Certificate serial: 3A2804D8D3403148CB166B4AA3336C62A1128127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft Manifest number: 01CE Signing time: Sun 19 Apr 2026 07:51:47 +0000 Manifest this update: Sun 19 Apr 2026 07:46:47 +0000 Manifest next update: Wed 22 Apr 2026 15:32:47 +0000 Files and hashes: 1: 3230322e35382e3233382e302f32332d3234203d3e203436303237.roa (hash: QTYZMnwghFNHa1aQd9N+8qyC9Gvq+zTwaSpUCC7zHNg=) 2: 1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl (hash: Tnq7gEFBsGvvBbUDtYsQMg1JJXFva4nFe9wni49KasI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Apr 2026 14:34:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:28:04:d8:d3:40:31:48:cb:16:6b:4a:a3:33:6c:62:a1:12:81:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1631B9A0997CBC975099A6FF7E27DCA3FDC649BA Validity Not Before: Apr 19 07:46:47 2026 GMT Not After : Apr 22 15:32:47 2026 GMT Subject: CN=23018DC21C70BD9DB31A9A00C2B8E4C97AF10DCB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:4d:2c:64:54:a2:b8:ae:01:b8:d6:da:f3:12: 7f:ca:b0:5c:40:b8:9a:a5:06:f0:e5:df:2a:b0:c5: 0b:83:d4:42:c7:07:4a:25:cf:62:46:2d:f9:07:6f: 1a:96:f2:f1:b1:62:c0:e2:84:8a:08:77:1d:cd:b7: b7:a4:2f:c2:c6:bb:e7:d4:5a:5f:3c:84:a0:79:93: 22:92:4c:5d:9d:c8:d1:1b:0f:36:3a:e0:d6:c9:b5: d7:5c:fe:cd:d7:74:d9:8a:3b:10:18:cf:f7:9f:c4: 59:8d:31:19:e1:30:65:9b:2e:33:91:86:93:68:61: b6:42:00:9c:92:ee:29:5e:6d:a3:0e:79:ff:df:3e: 6a:c2:3e:82:66:24:41:ce:b7:05:78:5a:6e:3a:95: 71:54:8f:41:b6:b0:9b:3f:34:e2:d4:a6:e9:e7:fa: 01:0e:40:63:15:4e:f8:3d:7c:d2:fd:5f:f4:0e:2a: ad:5f:e1:e9:82:41:d1:ae:6f:9a:e4:e2:fe:43:e8: 7a:02:5e:ce:a0:b8:82:45:d0:14:e9:55:b8:d6:31: 16:de:23:6d:c8:a4:e3:52:33:83:99:82:6c:5c:d9: 6c:6e:5a:aa:1b:50:5f:a5:df:af:a8:3b:1c:b6:e1: f8:b1:eb:40:9c:f0:6e:9a:b0:ce:9d:c8:3a:a6:72: 9b:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:01:8D:C2:1C:70:BD:9D:B3:1A:9A:00:C2:B8:E4:C9:7A:F1:0D:CB X509v3 Authority Key Identifier: keyid:16:31:B9:A0:99:7C:BC:97:50:99:A6:FF:7E:27:DC:A3:FD:C6:49:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96b1ab7f-e451-40d1-9b70-3a4022a9b4ec/0/1631B9A0997CBC975099A6FF7E27DCA3FDC649BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:62:17:8b:a5:e6:fe:1f:99:be:ab:df:cb:cc:a6:64:a9:49: dc:a6:04:8e:d9:2c:79:d1:db:31:b8:35:49:15:f6:c5:d3:35: 1b:f2:35:cb:64:ad:21:50:d0:ab:aa:d7:f9:91:8c:b0:98:15: 7b:2a:f8:9d:2e:10:8f:f4:90:1b:a3:fb:69:a1:f5:92:11:dd: cc:4e:0a:6a:27:7a:83:8f:65:32:76:f0:75:0f:22:a2:cd:60: cb:48:ca:f7:0e:43:60:6d:e6:da:f5:05:a6:41:c4:ef:dd:33: 09:59:05:6e:67:6f:e0:48:95:9c:43:eb:c6:10:03:04:55:1a: d0:37:41:4c:0b:87:23:22:52:cf:d6:84:dd:2a:d6:03:9c:70: a0:15:8d:59:f0:5e:59:98:17:68:e0:e3:d3:a1:a1:8a:42:e7: a3:0d:e8:df:bd:fd:05:f7:3f:61:24:e8:62:54:61:99:ef:db: 01:a0:2f:fb:d2:e3:2d:7a:69:a2:9f:88:15:00:7c:a7:86:79: ce:18:1a:64:25:e5:bc:c7:34:d8:fe:5d:18:79:c6:71:73:a2: 5a:05:bd:ff:d5:82:f3:1a:4b:b3:27:10:48:a8:18:25:60:0a: 50:f5:3d:ad:b4:de:36:a8:43:32:cb:a0:ce:a2:0c:5a:3f:39: 75:31:49:02 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOigE2NNAMUjLFmtKozNsYqESgScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNG REM2NDlCQTAeFw0yNjA0MTkwNzQ2NDdaFw0yNjA0MjIxNTMyNDdaMDMxMTAvBgNV BAMTKDIzMDE4REMyMUM3MEJEOURCMzFBOUEwMEMyQjhFNEM5N0FGMTBEQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDxTSxkVKK4rgG41trzEn/KsFxA uJqlBvDl3yqwxQuD1ELHB0olz2JGLfkHbxqW8vGxYsDihIoIdx3Nt7ekL8LGu+fU Wl88hKB5kyKSTF2dyNEbDzY64NbJtddc/s3XdNmKOxAYz/efxFmNMRnhMGWbLjOR hpNoYbZCAJyS7ilebaMOef/fPmrCPoJmJEHOtwV4Wm46lXFUj0G2sJs/NOLUpunn +gEOQGMVTvg9fNL9X/QOKq1f4emCQdGub5rk4v5D6HoCXs6guIJF0BTpVbjWMRbe I23IpONSM4OZgmxc2WxuWqobUF+l36+oOxy24fix60Cc8G6asM6dyDqmcpvpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIwGNwhxwvZ2zGpoAwrjkyXrxDcswHwYDVR0j BBgwFoAUFjG5oJl8vJdQmab/fifco/3GSbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NmIxYWI3Zi1lNDUxLTQwZDEtOWI3MC0zYTQwMjJhOWI0ZWMvMC8xNjMxQjlBMDk5 N0NCQzk3NTA5OUE2RkY3RTI3RENBM0ZEQzY0OUJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RDQTNGREM2 NDlCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTZiMWFiN2YtZTQ1MS00MGQxLTli NzAtM2E0MDIyYTliNGVjLzAvMTYzMUI5QTA5OTdDQkM5NzUwOTlBNkZGN0UyN0RD QTNGREM2NDlCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABtiF4ul5v4fmb6r38vMpmSpSdymBI7ZLHnR 2zG4NUkV9sXTNRvyNctkrSFQ0Kuq1/mRjLCYFXsq+J0uEI/0kBuj+2mh9ZIR3cxO CmoneoOPZTJ28HUPIqLNYMtIyvcOQ2Bt5tr1BaZBxO/dMwlZBW5nb+BIlZxD68YQ AwRVGtA3QUwLhyMiUs/WhN0q1gOccKAVjVnwXlmYF2jg49OhoYpC56MN6N+9/QX3 P2Ek6GJUYZnv2wGgL/vS4y16aaKfiBUAfKeGec4YGmQl5bzHNNj+XRh5xnFzoloF vf/VgvMaS7MnEEioGCVgClD1Pa203jaoQzLLoM6iDFo/OXUxSQI= -----END CERTIFICATE-----Generated at Sun Apr 19 12:46:26 2026 by rpki-client