$ rpki-client -vvf repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft File: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft (raw, json) Hash identifier: ESj5Po4u4sMdDnSsc8afu+f7pc5CQ2qOPesWMpb23R4= Subject key identifier: 94:F0:DF:A8:AD:4A:8F:52:86:D9:E7:A7:0C:0F:8B:34:8D:CD:1D:14 Authority key identifier: 1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED Certificate issuer: /CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Certificate serial: 53424D7DECCD3360067468EF0E5E21680A4C9049 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft Manifest number: 022C Signing time: Fri 17 Apr 2026 13:25:24 +0000 Manifest this update: Fri 17 Apr 2026 13:20:24 +0000 Manifest next update: Mon 20 Apr 2026 20:06:24 +0000 Files and hashes: 1: 3130332e33362e37302e302f32342d3234203d3e20313530323037.roa (hash: HKLsheyFBInUiaRgw8Klw1MJDMbLM2+SrSvU3xYlmos=) 2: 1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl (hash: LQ5d9gbp546e8SFXrw9sBmatdVWFpVO0+NiVSWKh6ZU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 20:06:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:42:4d:7d:ec:cd:33:60:06:74:68:ef:0e:5e:21:68:0a:4c:90:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FF9DE476AB686559E1C183A1B5BD4733E1B01ED Validity Not Before: Apr 17 13:20:24 2026 GMT Not After : Apr 20 20:06:24 2026 GMT Subject: CN=94F0DFA8AD4A8F5286D9E7A70C0F8B348DCD1D14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:5b:cb:ca:a5:cd:a1:1e:a2:df:65:d2:84:3b: 3f:5f:22:8f:97:c3:96:83:8c:fd:11:44:9f:84:3e: e5:55:1f:94:93:de:9d:68:a8:ee:00:cd:6d:dd:c6: 95:a4:2d:e9:a0:4e:d7:eb:ca:16:7e:70:a5:7e:f4: 90:54:64:fb:3a:80:70:3c:d9:89:13:0c:ab:8b:67: 90:fd:ab:40:9b:38:dc:ca:e4:7e:e7:35:09:07:1a: e9:db:77:94:77:87:4c:a7:1d:f0:c7:09:59:b5:a5: 20:79:1f:ef:07:d8:6d:96:c2:8d:4f:6b:d8:a8:f6: 5b:25:a8:7c:d6:e8:64:50:0f:f3:70:be:54:07:5b: b8:bc:fa:16:13:c5:0a:f4:c7:7a:c7:5e:55:84:69: e7:40:56:33:aa:1c:9f:ea:f9:13:4f:e6:08:d9:50: 86:5d:c2:de:78:e1:b1:45:b9:09:53:bd:4b:cd:2a: 63:39:e2:5c:0e:d5:28:3f:1c:fa:5b:6f:27:d6:3d: 98:a1:a1:9a:13:17:24:70:5c:8a:13:0f:58:ec:4c: df:aa:68:ba:e1:d8:e3:f4:4e:16:b1:b9:48:3d:e1: 75:1e:27:ba:1b:8d:b0:9e:68:5a:45:43:89:d8:6f: 68:e1:85:75:a0:5a:9d:f1:9d:ad:17:3c:35:ed:0a: 6b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:F0:DF:A8:AD:4A:8F:52:86:D9:E7:A7:0C:0F:8B:34:8D:CD:1D:14 X509v3 Authority Key Identifier: keyid:1F:F9:DE:47:6A:B6:86:55:9E:1C:18:3A:1B:5B:D4:73:3E:1B:01:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be11e98f-f54e-460b-88f3-bf91e0443e90/0/1FF9DE476AB686559E1C183A1B5BD4733E1B01ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:74:4e:17:3a:6f:d8:a4:5b:de:80:33:9e:d4:4f:58:f3:4c: de:77:e3:e9:8d:9d:82:ab:3a:c6:f2:63:00:b7:7a:f5:fa:79: d4:07:58:9f:90:3b:eb:6c:ed:fe:26:61:7a:07:10:26:76:4a: 67:9c:97:24:8d:ee:29:8e:2e:e4:06:02:83:f7:d5:71:8b:89: dc:0f:a6:9f:99:d7:d2:af:cb:d0:1e:1c:0c:9d:79:60:40:3d: 9a:d1:6b:73:d1:e9:ae:5f:72:d0:f0:f7:ef:55:fa:56:91:4a: 74:d6:e5:fc:4e:7a:30:3e:09:a8:6e:7b:72:57:ec:c3:3e:5d: 7c:4a:34:49:a5:79:bf:40:1e:c5:64:d5:77:1e:0e:c2:ba:b6: 29:9a:68:cc:24:c1:db:1c:35:e0:13:96:08:9a:0c:b6:d2:bf: 08:55:b8:57:ce:1a:bf:01:31:5e:97:5f:85:d3:a3:2c:4b:47: 25:5f:78:12:45:05:f8:65:9d:dd:f3:e8:6b:29:90:40:60:bc: b2:f4:7d:90:3b:ce:b3:a1:0a:2f:e4:40:35:c4:51:cc:1d:f5: 02:bf:59:24:87:89:0f:6c:c2:68:ea:26:f6:f8:dd:0e:f5:c6: e5:9b:50:97:d6:18:0b:4b:81:8f:fb:bf:6f:c7:f0:d7:b2:01: ab:57:8f:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU0JNfezNM2AGdGjvDl4haApMkEkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMz RTFCMDFFRDAeFw0yNjA0MTcxMzIwMjRaFw0yNjA0MjAyMDA2MjRaMDMxMTAvBgNV BAMTKDk0RjBERkE4QUQ0QThGNTI4NkQ5RTdBNzBDMEY4QjM0OERDRDFEMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHW8vKpc2hHqLfZdKEOz9fIo+X w5aDjP0RRJ+EPuVVH5ST3p1oqO4AzW3dxpWkLemgTtfryhZ+cKV+9JBUZPs6gHA8 2YkTDKuLZ5D9q0CbONzK5H7nNQkHGunbd5R3h0ynHfDHCVm1pSB5H+8H2G2Wwo1P a9io9lslqHzW6GRQD/NwvlQHW7i8+hYTxQr0x3rHXlWEaedAVjOqHJ/q+RNP5gjZ UIZdwt544bFFuQlTvUvNKmM54lwO1Sg/HPpbbyfWPZihoZoTFyRwXIoTD1jsTN+q aLrh2OP0ThaxuUg94XUeJ7objbCeaFpFQ4nYb2jhhXWgWp3xna0XPDXtCmt7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlPDfqK1Kj1KG2eenDA+LNI3NHRQwHwYDVR0j BBgwFoAUH/neR2q2hlWeHBg6G1vUcz4bAe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZTExZTk4Zi1mNTRlLTQ2MGItODhmMy1iZjkxZTA0NDNlOTAvMC8xRkY5REU0NzZB QjY4NjU1OUUxQzE4M0ExQjVCRDQ3MzNFMUIwMUVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0NzMzRTFC MDFFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmUxMWU5OGYtZjU0ZS00NjBiLTg4 ZjMtYmY5MWUwNDQzZTkwLzAvMUZGOURFNDc2QUI2ODY1NTlFMUMxODNBMUI1QkQ0 NzMzRTFCMDFFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIp0Thc6b9ikW96AM57UT1jzTN534+mNnYKr OsbyYwC3evX6edQHWJ+QO+ts7f4mYXoHECZ2SmeclySN7imOLuQGAoP31XGLidwP pp+Z19Kvy9AeHAydeWBAPZrRa3PR6a5fctDw9+9V+laRSnTW5fxOejA+Cahue3JX 7MM+XXxKNEmleb9AHsVk1XceDsK6timaaMwkwdscNeATlgiaDLbSvwhVuFfOGr8B MV6XX4XToyxLRyVfeBJFBfhlnd3z6GspkEBgvLL0fZA7zrOhCi/kQDXEUcwd9QK/ WSSHiQ9swmjqJvb43Q71xuWbUJfWGAtLgY/7v2/H8NeyAatXj3A= -----END CERTIFICATE-----Generated at Sat Apr 18 03:07:14 2026 by rpki-client