$ rpki-client -vvf repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft File: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft (raw, json) Hash identifier: gjTmvhVj1JQxiFg0uyOJS6KhLjGLP2OdO/aLnPlZcuw= Subject key identifier: 4A:8A:EF:DB:E5:C5:E2:C5:26:BF:80:27:F7:93:C4:A7:64:54:92:99 Authority key identifier: 1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 Certificate issuer: /CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Certificate serial: 51DA30B2E5CB3619FDF32B8E41EFC35A86D48C1B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft Manifest number: 0119 Signing time: Sun 01 Mar 2026 02:01:15 +0000 Manifest this update: Sun 01 Mar 2026 01:56:15 +0000 Manifest next update: Wed 04 Mar 2026 02:16:15 +0000 Files and hashes: 1: 1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl (hash: VgrzKqR0U83S2ovnmxIKhewbmtHZ1EMxM+ne68JWS8k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:da:30:b2:e5:cb:36:19:fd:f3:2b:8e:41:ef:c3:5a:86:d4:8c:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1E64BF65051052D913D7DB8C4512F615E3FAB9B2 Validity Not Before: Mar 1 01:56:15 2026 GMT Not After : Mar 4 02:16:15 2026 GMT Subject: CN=4A8AEFDBE5C5E2C526BF8027F793C4A764549299 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:00:93:fb:62:ed:d1:a1:67:57:db:0d:7b:34: bf:2a:8c:17:72:6b:5c:89:26:0d:fa:95:a3:6a:aa: ba:72:82:66:8b:dc:d2:0d:b0:f7:59:01:9d:78:7e: f9:7e:b9:94:2f:7e:93:af:58:91:d4:7f:57:ec:1e: d4:7d:7a:95:11:05:82:5e:5e:95:e2:b9:4c:52:6a: 51:2b:f8:ef:4a:40:f9:9e:db:f9:2b:56:12:58:b1: d1:dd:be:9f:80:70:cb:b7:5c:0e:fd:fb:7b:0d:60: f8:eb:22:d6:77:a6:15:ec:e7:4b:5b:a2:48:e9:82: 41:c1:c6:20:77:7b:ef:52:30:8e:21:1f:c9:5b:a1: ec:7e:c8:9d:a7:b3:c1:e8:59:4c:3c:06:ad:b5:da: d1:fe:3b:32:a0:03:26:d5:3d:6b:c2:3d:b2:cb:6d: f1:1c:0a:00:58:2b:d1:83:e0:7a:77:1b:5d:13:9a: 3d:58:7e:7d:5b:55:19:84:17:51:00:d9:af:47:77: b2:96:62:7b:92:a7:3b:b4:65:de:e8:d3:bc:e0:88: d7:4e:c7:6a:c3:98:1a:01:20:ae:76:88:06:49:a0: 12:5a:ba:2e:4f:7f:68:e7:3c:aa:53:5d:37:20:6d: 2d:79:33:ed:11:81:5a:db:6d:a1:92:f2:da:a8:76: 6d:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:8A:EF:DB:E5:C5:E2:C5:26:BF:80:27:F7:93:C4:A7:64:54:92:99 X509v3 Authority Key Identifier: keyid:1E:64:BF:65:05:10:52:D9:13:D7:DB:8C:45:12:F6:15:E3:FA:B9:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae198816-5af9-47ef-b989-42f2731848be/1/1E64BF65051052D913D7DB8C4512F615E3FAB9B2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c8:ad:92:92:56:ea:f5:bc:18:5c:ec:ed:2b:93:34:73:38:9d: ee:1e:ab:e1:d3:d7:9d:35:2b:8f:bb:dc:17:ce:e5:d7:82:d1: 7f:b7:a7:11:6f:7c:5e:e3:12:df:c3:1f:bf:c1:27:5c:12:66: 7d:12:2a:dd:f4:83:ea:93:38:39:92:03:6f:e9:81:83:df:75: 9c:8f:5c:40:4d:14:4c:df:00:2d:6f:6b:1c:4f:22:68:c2:b9: 5c:3d:41:b0:33:09:6d:4d:fd:69:96:33:6b:de:0d:1f:ae:44: a3:9d:14:2e:44:5c:57:14:2b:d3:75:e7:54:15:84:23:ed:21: 3f:08:3c:01:14:9f:f6:ea:3d:c1:51:80:de:d3:4c:3d:7d:84: 41:e1:19:4f:23:c5:3f:c0:41:55:7d:63:28:57:cd:bb:5c:00: cc:e8:d7:5b:30:ff:42:23:65:5b:6e:e5:f9:9a:35:a3:c1:8c: 82:19:53:82:e1:0a:8a:11:11:d9:77:e9:11:f1:b5:44:d5:e2: 71:70:07:08:8d:ea:31:b8:26:59:83:2d:21:84:d9:33:a7:b3: 00:e4:15:51:13:50:e3:c5:32:25:eb:72:7a:eb:c3:a6:0e:3b: 3d:47:73:7c:86:48:b2:15:66:a4:85:39:d9:13:a5:2f:7e:72: 7a:e1:f2:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdowsuXLNhn98yuOQe/DWobUjBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVF M0ZBQjlCMjAeFw0yNjAzMDEwMTU2MTVaFw0yNjAzMDQwMjE2MTVaMDMxMTAvBgNV BAMTKDRBOEFFRkRCRTVDNUUyQzUyNkJGODAyN0Y3OTNDNEE3NjQ1NDkyOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7AJP7Yu3RoWdX2w17NL8qjBdy a1yJJg36laNqqrpygmaL3NINsPdZAZ14fvl+uZQvfpOvWJHUf1fsHtR9epURBYJe XpXiuUxSalEr+O9KQPme2/krVhJYsdHdvp+AcMu3XA79+3sNYPjrItZ3phXs50tb okjpgkHBxiB3e+9SMI4hH8lboex+yJ2ns8HoWUw8Bq212tH+OzKgAybVPWvCPbLL bfEcCgBYK9GD4Hp3G10Tmj1Yfn1bVRmEF1EA2a9Hd7KWYnuSpzu0Zd7o07zgiNdO x2rDmBoBIK52iAZJoBJaui5Pf2jnPKpTXTcgbS15M+0RgVrbbaGS8tqodm2NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSorv2+XF4sUmv4An95PEp2RUkpkwHwYDVR0j BBgwFoAUHmS/ZQUQUtkT19uMRRL2FeP6ubIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTE5ODgxNi01YWY5LTQ3ZWYtYjk4OS00MmYyNzMxODQ4YmUvMS8xRTY0QkY2NTA1 MTA1MkQ5MTNEN0RCOEM0NTEyRjYxNUUzRkFCOUIyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2MTVFM0ZB QjlCMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUxOTg4MTYtNWFmOS00N2VmLWI5 ODktNDJmMjczMTg0OGJlLzEvMUU2NEJGNjUwNTEwNTJEOTEzRDdEQjhDNDUxMkY2 MTVFM0ZBQjlCMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMitkpJW6vW8GFzs7SuTNHM4ne4eq+HT1501 K4+73BfO5deC0X+3pxFvfF7jEt/DH7/BJ1wSZn0SKt30g+qTODmSA2/pgYPfdZyP XEBNFEzfAC1vaxxPImjCuVw9QbAzCW1N/WmWM2veDR+uRKOdFC5EXFcUK9N151QV hCPtIT8IPAEUn/bqPcFRgN7TTD19hEHhGU8jxT/AQVV9YyhXzbtcAMzo11sw/0Ij ZVtu5fmaNaPBjIIZU4LhCooREdl36RHxtUTV4nFwBwiN6jG4JlmDLSGE2TOnswDk FVETUOPFMiXrcnrrw6YOOz1Hc3yGSLIVZqSFOdkTpS9+cnrh8iA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:43:57 2026 by rpki-client