$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft File: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft (raw, json) Hash identifier: DZDOO75LRYz9AjwBMxjxvYd41Hf1uX8tWXp8WzM6cWY= Subject key identifier: 05:AC:26:F5:74:CA:7F:55:6E:E2:E8:FA:C6:37:34:9C:90:41:2B:07 Authority key identifier: 1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 Certificate issuer: /CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Certificate serial: 50CAD3C577C3EEE85D1E0EFD73F73D004E441C71 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft Manifest number: 78 Signing time: Sun 01 Mar 2026 11:02:01 +0000 Manifest this update: Sun 01 Mar 2026 10:57:01 +0000 Manifest next update: Wed 04 Mar 2026 21:22:01 +0000 Files and hashes: 1: 1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl (hash: 1tSGwpl+im4B3Ik9EqJEgSXA/IqF9kMr8GoBhzF0x8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:22:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ca:d3:c5:77:c3:ee:e8:5d:1e:0e:fd:73:f7:3d:00:4e:44:1c:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1F985AF84B6945804B853C2E7C09AEDC28B6B2E5 Validity Not Before: Mar 1 10:57:01 2026 GMT Not After : Mar 4 21:22:01 2026 GMT Subject: CN=05AC26F574CA7F556EE2E8FAC637349C90412B07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:81:00:45:4f:7c:b5:0d:24:1d:f8:37:aa:82: 2c:ad:0d:de:05:60:54:fb:ab:14:14:e7:d3:bf:49: 5b:0c:6b:3d:21:e8:2e:49:32:d9:e9:9d:4d:1e:f1: 27:2d:14:1e:15:24:38:e6:a5:3c:c2:0b:fc:0a:14: e3:0a:98:01:5a:f7:fa:b2:20:13:28:dc:34:2c:79: 7f:e8:7f:b3:d6:be:9c:ce:52:9a:f3:bf:98:8e:35: dd:9f:85:c0:4b:ea:18:ac:16:bb:9b:fb:5e:76:07: e8:7e:5f:3b:ed:eb:c8:a7:7c:2c:47:80:fe:ed:68: 9a:68:14:b2:dd:a3:7f:40:7a:44:1e:30:2f:61:9a: 8c:88:92:e6:33:b9:62:f7:82:0b:ff:2b:56:2a:2d: b6:3e:34:77:35:b2:96:7f:84:53:b6:b8:99:46:d1: 7c:09:a3:bc:43:f7:e4:51:33:5f:80:ca:69:78:a1: 34:7c:05:87:d7:3a:f4:de:d3:ff:84:62:11:0e:1b: 2f:c5:c3:15:7f:c8:b3:79:bc:11:2d:a6:f3:17:48: 5d:28:d4:bf:f0:79:74:2b:4c:e3:2f:69:16:dc:8f: 08:32:d4:0b:3c:7f:7e:da:6f:22:7a:39:e2:2a:76: 62:9f:52:2a:af:23:bd:0f:b8:08:88:70:cc:ab:a7: fb:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:AC:26:F5:74:CA:7F:55:6E:E2:E8:FA:C6:37:34:9C:90:41:2B:07 X509v3 Authority Key Identifier: keyid:1F:98:5A:F8:4B:69:45:80:4B:85:3C:2E:7C:09:AE:DC:28:B6:B2:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b926e0-6c6b-4855-a756-e0cbb7ad01f8/0/1F985AF84B6945804B853C2E7C09AEDC28B6B2E5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c8:ba:8b:94:6c:fe:8b:ab:c5:de:54:59:77:71:30:c3:b9: c2:e9:4e:96:8b:fd:bf:3c:df:8f:d5:28:32:40:54:87:24:74: 46:a9:f2:aa:08:fb:f0:6e:e1:33:bc:79:49:a5:42:eb:83:8a: ad:8c:0d:48:75:c2:d2:fc:de:d4:19:02:69:66:56:b4:71:91: f9:b2:34:fe:93:1d:f1:38:5b:26:81:84:4e:33:07:99:38:89: a3:03:b0:c5:3c:19:ab:19:6b:74:b4:f1:be:e5:2d:2e:d8:d7: 2b:99:4d:45:49:aa:c1:98:e6:16:94:8b:10:8a:76:4b:1d:8c: 7b:51:7a:4b:ab:53:dd:b1:0b:af:58:5e:11:f1:06:39:19:e7: 8d:be:84:4f:b8:d9:0b:4e:b3:c6:4c:a3:59:61:28:33:8e:43: c0:29:9b:66:5d:1f:1d:0b:b1:e4:f3:8c:41:e1:44:36:b9:3e: 25:18:e5:85:87:f8:5b:76:ac:4d:92:2f:cb:90:18:c2:b6:4e: df:68:8c:bf:f8:cc:0d:65:6a:3c:84:d0:ea:d4:e3:88:2f:68: 1b:09:4c:2a:27:a0:78:91:f7:0e:8b:16:02:49:5a:83:a8:93: eb:f8:ec:72:d4:b2:f0:39:bc:3d:25:1e:f0:b9:be:db:72:39: 57:ab:be:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUMrTxXfD7uhdHg79c/c9AE5EHHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMy OEI2QjJFNTAeFw0yNjAzMDExMDU3MDFaFw0yNjAzMDQyMTIyMDFaMDMxMTAvBgNV BAMTKDA1QUMyNkY1NzRDQTdGNTU2RUUyRThGQUM2MzczNDlDOTA0MTJCMDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZgQBFT3y1DSQd+DeqgiytDd4F YFT7qxQU59O/SVsMaz0h6C5JMtnpnU0e8SctFB4VJDjmpTzCC/wKFOMKmAFa9/qy IBMo3DQseX/of7PWvpzOUprzv5iONd2fhcBL6hisFrub+152B+h+Xzvt68infCxH gP7taJpoFLLdo39AekQeMC9hmoyIkuYzuWL3ggv/K1YqLbY+NHc1spZ/hFO2uJlG 0XwJo7xD9+RRM1+Ayml4oTR8BYfXOvTe0/+EYhEOGy/FwxV/yLN5vBEtpvMXSF0o 1L/weXQrTOMvaRbcjwgy1As8f37abyJ6OeIqdmKfUiqvI70PuAiIcMyrp/t5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBawm9XTKf1Vu4uj6xjc0nJBBKwcwHwYDVR0j BBgwFoAUH5ha+EtpRYBLhTwufAmu3Ci2suUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWI5MjZlMC02YzZiLTQ4NTUtYTc1Ni1lMGNiYjdhZDAxZjgvMC8xRjk4NUFGODRC Njk0NTgwNEI4NTNDMkU3QzA5QUVEQzI4QjZCMkU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFFREMyOEI2 QjJFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiOTI2ZTAtNmM2Yi00ODU1LWE3 NTYtZTBjYmI3YWQwMWY4LzAvMUY5ODVBRjg0QjY5NDU4MDRCODUzQzJFN0MwOUFF REMyOEI2QjJFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErIuouUbP6Lq8XeVFl3cTDDucLpTpaL/b88 34/VKDJAVIckdEap8qoI+/Bu4TO8eUmlQuuDiq2MDUh1wtL83tQZAmlmVrRxkfmy NP6THfE4WyaBhE4zB5k4iaMDsMU8GasZa3S08b7lLS7Y1yuZTUVJqsGY5haUixCK dksdjHtRekurU92xC69YXhHxBjkZ542+hE+42QtOs8ZMo1lhKDOOQ8Apm2ZdHx0L seTzjEHhRDa5PiUY5YWH+Ft2rE2SL8uQGMK2Tt9ojL/4zA1lajyE0OrU44gvaBsJ TConoHiR9w6LFgJJWoOok+v47HLUsvA5vD0lHvC5vttyOVervks= -----END CERTIFICATE-----Generated at Mon Mar 2 02:38:34 2026 by rpki-client