$ rpki-client -vvf repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft File: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft (raw, json) Hash identifier: 0rJVuO02S4F3mALhae0x0bKVRSGZa2uwRWcOhWexdiM= Subject key identifier: 90:5F:32:54:6B:6C:EA:1A:3E:F6:6C:0D:3D:A4:D3:11:C3:A7:32:1B Authority key identifier: 1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 Certificate issuer: /CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Certificate serial: 0388DB471B397FCA557AEE28B79BA630DDFC84A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft Manifest number: 021B Signing time: Thu 16 Apr 2026 21:01:54 +0000 Manifest this update: Thu 16 Apr 2026 20:56:54 +0000 Manifest next update: Sun 19 Apr 2026 23:43:54 +0000 Files and hashes: 1: 1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl (hash: Ay7kMNrFHnsFP6bSTgFgKjGzmXNNmJa2cArzY285118=) 2: 3130332e38372e3230322e302f32342d3234203d3e20313530323539.roa (hash: 6g8PbhkbZbLbnKoZLBgTfyMpeWvcwwbeUmAnxaDznuY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 19 Apr 2026 23:43:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:88:db:47:1b:39:7f:ca:55:7a:ee:28:b7:9b:a6:30:dd:fc:84:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17 Validity Not Before: Apr 16 20:56:54 2026 GMT Not After : Apr 19 23:43:54 2026 GMT Subject: CN=905F32546B6CEA1A3EF66C0D3DA4D311C3A7321B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:9a:38:3e:59:c3:67:4e:ac:d0:a7:9e:50:fc: 1a:5f:62:7d:54:f2:79:42:57:f9:53:1f:fb:f3:57: 9c:6b:eb:ec:ae:24:c8:44:10:55:72:76:27:53:4a: 64:6e:c3:0e:de:06:f0:b1:d3:0e:9d:10:7e:37:9f: 01:50:e7:c5:4f:4d:d6:62:df:2f:7a:52:c1:4a:d3: bc:99:5c:5c:66:9b:24:ba:97:df:e9:6b:7f:b4:a7: 6d:9a:0d:9d:73:51:e8:ca:3d:78:d8:cd:42:68:a1: 18:95:02:c0:2c:90:29:01:c3:f1:0f:d7:a9:4f:88: 5e:0e:1c:35:e8:4a:eb:60:33:09:6e:5d:0b:87:75: ff:b9:ff:8d:e0:37:95:21:94:0a:df:56:cf:76:01: 8d:d4:8d:64:21:4a:ef:ba:4c:de:b8:5e:39:3c:ae: af:5d:5b:24:73:17:b5:7e:37:7a:46:9b:e7:c0:8b: c3:11:01:0d:3e:6f:e9:f4:e5:ed:40:6f:40:f2:61: 7d:f5:fa:72:f4:9c:11:25:99:b2:ef:3a:14:e5:d8: ac:27:01:db:72:3a:6f:c1:ab:02:ee:13:50:e0:d1: 05:6d:de:a7:6c:be:6c:60:4d:95:ec:6c:45:49:ed: 97:f3:2c:9d:bd:80:11:43:06:3a:24:4e:4b:12:2d: f3:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:5F:32:54:6B:6C:EA:1A:3E:F6:6C:0D:3D:A4:D3:11:C3:A7:32:1B X509v3 Authority Key Identifier: keyid:1C:F1:15:D0:21:8C:AB:4E:31:67:A7:D5:B0:D0:FA:C2:D5:CB:8A:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8d59430-de78-4532-8e1a-34b53b8f26fa/0/1CF115D0218CAB4E3167A7D5B0D0FAC2D5CB8A17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:de:8a:9e:d3:37:b1:37:3d:56:4d:4f:1e:ce:c1:3a:1e:0f: db:d6:a3:9a:0f:cb:13:61:43:64:7e:b6:02:52:71:ed:d7:f1: 30:43:0d:55:9e:ec:0d:e0:7c:95:06:0b:a1:28:54:ae:18:9d: da:07:ce:e5:2c:8e:f0:84:34:f5:09:b0:54:b7:dd:63:b2:87: ae:19:d2:64:6f:d2:12:34:5b:02:a3:10:f6:cb:af:86:5e:ce: 62:ba:ff:70:14:be:0d:eb:0a:20:ab:02:fc:eb:25:5b:ba:00: a4:f4:27:ef:18:41:28:58:4e:32:41:d8:3e:e8:b3:6f:06:5e: 91:4a:e9:b1:14:82:bd:ba:fb:86:ad:6d:4c:73:dc:0a:69:85: db:5d:9b:5a:5d:6b:65:cc:be:3b:f6:61:26:5b:37:64:1d:94: 97:a1:fd:bd:6d:99:b3:be:e6:83:76:b1:15:3e:a4:6d:d8:dd: d6:b8:94:a6:b1:bf:80:71:42:99:68:e4:8b:91:98:d1:44:12: 01:32:94:a0:05:00:d7:db:6a:eb:60:93:7c:55:98:47:89:0e: 15:b2:f7:a2:5b:2d:d5:4f:ad:ff:fe:58:a7:d8:97:43:7d:86: 80:da:cb:77:fb:ca:ac:70:c4:41:b9:10:57:76:40:74:6b:d5: 71:2a:b2:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA4jbRxs5f8pVeu4ot5umMN38hKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJE NUNCOEExNzAeFw0yNjA0MTYyMDU2NTRaFw0yNjA0MTkyMzQzNTRaMDMxMTAvBgNV BAMTKDkwNUYzMjU0NkI2Q0VBMUEzRUY2NkMwRDNEQTREMzExQzNBNzMyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqmjg+WcNnTqzQp55Q/BpfYn1U 8nlCV/lTH/vzV5xr6+yuJMhEEFVydidTSmRuww7eBvCx0w6dEH43nwFQ58VPTdZi 3y96UsFK07yZXFxmmyS6l9/pa3+0p22aDZ1zUejKPXjYzUJooRiVAsAskCkBw/EP 16lPiF4OHDXoSutgMwluXQuHdf+5/43gN5UhlArfVs92AY3UjWQhSu+6TN64Xjk8 rq9dWyRzF7V+N3pGm+fAi8MRAQ0+b+n05e1Ab0DyYX31+nL0nBElmbLvOhTl2Kwn AdtyOm/BqwLuE1Dg0QVt3qdsvmxgTZXsbEVJ7ZfzLJ29gBFDBjokTksSLfPtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkF8yVGts6ho+9mwNPaTTEcOnMhswHwYDVR0j BBgwFoAUHPEV0CGMq04xZ6fVsND6wtXLihcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j OGQ1OTQzMC1kZTc4LTQ1MzItOGUxYS0zNGI1M2I4ZjI2ZmEvMC8xQ0YxMTVEMDIx OENBQjRFMzE2N0E3RDVCMEQwRkFDMkQ1Q0I4QTE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZBQzJENUNC OEExNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhkNTk0MzAtZGU3OC00NTMyLThl MWEtMzRiNTNiOGYyNmZhLzAvMUNGMTE1RDAyMThDQUI0RTMxNjdBN0Q1QjBEMEZB QzJENUNCOEExNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAELeip7TN7E3PVZNTx7OwToeD9vWo5oPyxNh Q2R+tgJSce3X8TBDDVWe7A3gfJUGC6EoVK4YndoHzuUsjvCENPUJsFS33WOyh64Z 0mRv0hI0WwKjEPbLr4ZezmK6/3AUvg3rCiCrAvzrJVu6AKT0J+8YQShYTjJB2D7o s28GXpFK6bEUgr26+4atbUxz3Apphdtdm1pda2XMvjv2YSZbN2QdlJeh/b1tmbO+ 5oN2sRU+pG3Y3da4lKaxv4BxQplo5IuRmNFEEgEylKAFANfbautgk3xVmEeJDhWy 96JbLdVPrf/+WKfYl0N9hoDay3f7yqxwxEG5EFd2QHRr1XEqsvA= -----END CERTIFICATE-----Generated at Fri Apr 17 21:22:53 2026 by rpki-client