$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: MJs7a+Caysz7ayE3ZM+EhL8uZssx5ryFUcbZcJN9nhs= Subject key identifier: FE:51:CD:DA:70:98:10:46:8C:03:07:B8:CD:95:AA:B4:A8:A1:7A:79 Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 65A668FDB7909500E2D23CE4E267DA3BC73AC693 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 0206 Signing time: Sun 01 Mar 2026 05:23:50 +0000 Manifest this update: Sun 01 Mar 2026 05:18:50 +0000 Manifest next update: Wed 04 Mar 2026 12:00:50 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: 6oitpQMGKHdK+weVnof5bbSZczSQPo6E6hVrzjTxQwY=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:00:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:a6:68:fd:b7:90:95:00:e2:d2:3c:e4:e2:67:da:3b:c7:3a:c6:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Mar 1 05:18:50 2026 GMT Not After : Mar 4 12:00:50 2026 GMT Subject: CN=FE51CDDA709810468C0307B8CD95AAB4A8A17A79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:c5:0a:0f:b8:88:56:8c:d9:a4:56:6f:af:df: f0:30:69:e4:5e:5b:5f:05:e4:66:33:19:61:20:2c: b2:61:28:3c:04:f9:51:73:b7:31:87:c6:36:2d:87: fa:44:c4:42:88:61:63:ac:a3:64:44:07:7d:c0:4d: 07:d2:bc:b2:76:71:7e:7b:c7:07:69:d2:06:88:8a: 4a:59:d6:8e:f0:2a:78:a3:e1:e6:c1:90:02:51:9b: dc:32:39:3d:6a:37:bf:2f:e1:c3:22:a9:52:d2:2e: ec:fa:aa:8a:10:58:68:8c:86:e1:cf:8e:b5:0e:44: 85:af:fe:be:84:3e:db:79:5e:e3:5f:d8:b8:19:6e: 0a:ee:33:88:a5:85:4a:d2:8a:99:8c:35:f1:9d:72: a9:c3:33:34:14:75:6a:4f:2b:31:d8:b0:f8:35:1a: 78:e7:8f:1e:06:b7:f1:cb:a7:0b:17:66:84:5e:a0: fe:55:05:14:66:7b:cf:b5:f1:cb:f8:92:49:be:01: 1a:71:0a:e1:06:58:d1:8e:88:c9:67:0a:39:d1:aa: 4b:1d:75:9d:93:3f:de:3a:7d:f8:39:8d:93:bf:37: a3:a3:a4:09:42:b7:2e:79:b2:cd:a4:0c:d9:87:ef: 84:25:6e:b0:9f:2a:c1:dc:9f:84:2b:75:e6:ed:fb: 1a:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:51:CD:DA:70:98:10:46:8C:03:07:B8:CD:95:AA:B4:A8:A1:7A:79 X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:7c:7f:58:a0:db:96:73:1f:fd:de:ec:ff:e0:9c:2f:8a:28: cc:80:be:0a:8c:40:4e:a6:ad:2a:91:a1:53:2c:e5:02:86:c8: dd:0d:60:b6:7e:1e:82:a6:30:95:90:69:c0:6c:da:a3:7d:2f: f0:bf:b8:4c:d1:d7:d2:d6:c7:27:ee:a2:18:56:91:32:b7:e9: 02:90:3b:f6:53:0e:ce:86:56:a5:8b:75:66:12:39:33:63:0a: a0:a1:cb:9c:42:ae:03:e8:e6:2e:59:af:68:b0:05:90:1b:fc: e5:46:fb:83:f2:09:1b:09:e4:d4:82:0d:6f:37:2f:a9:f6:95: cf:1a:aa:67:0d:f6:3e:6e:e9:90:19:0a:c1:dc:27:87:f7:f4: 59:a4:37:cc:d0:0c:67:f7:94:56:22:dd:27:b8:76:aa:87:4c: be:a6:b4:6d:ff:cb:a5:15:96:dd:6a:66:34:1a:87:4e:53:5f: 00:ad:5d:d1:8b:f2:8a:c8:52:1e:ea:cb:ac:ff:c5:28:f7:5d: 31:8f:89:3c:0a:40:fe:d5:ab:31:fd:67:a9:38:5a:f0:1c:d4: 00:b1:b9:6a:0d:a9:fb:7b:8a:73:53:2f:8c:c9:9f:04:53:16: 1f:df:89:fb:8b:b3:e0:e4:41:9a:72:fb:45:0a:d1:30:b5:3c: f7:cd:0b:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZaZo/beQlQDi0jzk4mfaO8c6xpMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNjAzMDEwNTE4NTBaFw0yNjAzMDQxMjAwNTBaMDMxMTAvBgNV BAMTKEZFNTFDRERBNzA5ODEwNDY4QzAzMDdCOENEOTVBQUI0QThBMTdBNzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXxQoPuIhWjNmkVm+v3/AwaeRe W18F5GYzGWEgLLJhKDwE+VFztzGHxjYth/pExEKIYWOso2REB33ATQfSvLJ2cX57 xwdp0gaIikpZ1o7wKnij4ebBkAJRm9wyOT1qN78v4cMiqVLSLuz6qooQWGiMhuHP jrUORIWv/r6EPtt5XuNf2LgZbgruM4ilhUrSipmMNfGdcqnDMzQUdWpPKzHYsPg1 Gnjnjx4Gt/HLpwsXZoReoP5VBRRme8+18cv4kkm+ARpxCuEGWNGOiMlnCjnRqksd dZ2TP946ffg5jZO/N6OjpAlCty55ss2kDNmH74QlbrCfKsHcn4Qrdebt+xqPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/lHN2nCYEEaMAwe4zZWqtKihenkwHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADN8f1ig25ZzH/3e7P/gnC+KKMyAvgqMQE6m rSqRoVMs5QKGyN0NYLZ+HoKmMJWQacBs2qN9L/C/uEzR19LWxyfuohhWkTK36QKQ O/ZTDs6GVqWLdWYSOTNjCqChy5xCrgPo5i5Zr2iwBZAb/OVG+4PyCRsJ5NSCDW83 L6n2lc8aqmcN9j5u6ZAZCsHcJ4f39FmkN8zQDGf3lFYi3Se4dqqHTL6mtG3/y6UV lt1qZjQah05TXwCtXdGL8orIUh7qy6z/xSj3XTGPiTwKQP7VqzH9Z6k4WvAc1ACx uWoNqft7inNTL4zJnwRTFh/fifuLs+DkQZpy+0UK0TC1PPfNCz0= -----END CERTIFICATE-----Generated at Mon Mar 2 00:18:33 2026 by rpki-client