$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: IC/G2swoBnA8az54xTMe1H8I++rwML+5p5l11ohOM5A= Subject key identifier: 03:5B:14:BF:44:28:EE:E8:9D:C0:68:01:B5:E6:9F:0E:E0:6E:CC:F0 Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 2F5827B233D514928025669F08B4B330F362587A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: 0125 Signing time: Fri 27 Feb 2026 18:51:09 +0000 Manifest this update: Fri 27 Feb 2026 18:46:09 +0000 Manifest next update: Tue 03 Mar 2026 03:52:09 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: VrWHNqbq1DuaG97lCFk+xRn64i/4H6xvVdyL+QXoN3s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:52:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:58:27:b2:33:d5:14:92:80:25:66:9f:08:b4:b3:30:f3:62:58:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Feb 27 18:46:09 2026 GMT Not After : Mar 3 03:52:09 2026 GMT Subject: CN=035B14BF4428EEE89DC06801B5E69F0EE06ECCF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:75:77:f7:30:4d:fb:59:70:7c:5f:8c:5d:bf: c6:00:9e:06:3f:da:11:62:b0:10:13:2e:c8:b1:ba: 56:a5:49:d6:eb:47:76:6f:36:8f:82:6d:4c:44:53: 7f:5e:ce:fc:e2:4e:05:be:be:34:c0:e7:ee:99:f9: 30:7b:ab:72:bb:24:f4:83:26:5b:cf:8e:35:c2:90: 3b:1d:5d:72:85:8b:05:af:9d:da:0e:f6:d1:57:2c: 6e:bf:2e:fd:3f:c0:17:c3:46:a2:8b:78:c5:87:79: 99:1b:ce:37:87:3d:15:49:c1:d4:d3:7a:00:15:78: f9:1e:fb:fb:23:37:28:e1:04:b0:e0:ff:38:a7:d7: 7c:7d:fd:82:4f:cb:06:ce:c2:2a:99:0a:48:cd:4f: 47:c7:36:f5:b4:db:c1:b8:87:1d:59:48:c0:ab:bf: 29:fc:35:a8:d4:4d:a3:6b:ab:44:33:9f:b1:68:3c: 01:5e:81:35:af:c7:e9:99:17:e9:ca:a2:65:9a:90: ec:67:b0:18:70:28:18:6e:00:b7:35:1c:c6:c7:7e: 7d:ae:90:61:ef:50:22:79:d4:91:96:f2:66:82:e3: 64:e2:11:6d:25:c9:67:ee:bc:21:c3:24:f0:c0:a3: ee:e4:f4:47:28:0c:f4:9b:9c:97:3a:aa:0e:e9:a8: c4:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5B:14:BF:44:28:EE:E8:9D:C0:68:01:B5:E6:9F:0E:E0:6E:CC:F0 X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:f4:78:d5:2a:d9:ce:8c:5d:40:56:e2:96:9e:aa:2d:31:cf: d5:25:a5:36:71:78:f1:11:f3:73:35:1b:ac:14:fa:c6:20:d2: e5:5b:b0:99:f9:96:47:a9:e0:18:fc:2e:f5:2c:fc:e5:7a:d9: b7:fe:e9:b5:4f:bb:4c:0c:fa:c8:69:df:9e:23:00:5c:fa:88: 2c:a1:33:fe:39:ac:aa:bf:d5:f9:55:3a:a1:33:bc:d0:cf:b6: 27:31:01:ef:b0:c9:1a:0b:92:47:cc:b3:f7:a0:59:28:27:26: 60:dd:12:8b:b5:64:b2:81:82:d9:1b:fe:72:5e:7d:ed:d5:4d: e9:b4:8a:17:a0:e3:9a:d1:0b:9d:bd:2e:da:28:ce:31:6a:28: fc:42:5c:dd:4f:d1:1f:33:48:6e:71:c0:71:87:14:0a:72:14: 1c:54:e7:cd:2c:27:9d:3b:95:18:f5:eb:b1:91:d0:e6:ff:06: e6:61:e4:b8:11:dc:5e:fa:d1:a2:df:f4:8e:77:2d:85:8b:76: 62:7e:77:79:f2:31:ab:e6:4b:ce:9f:25:72:32:d3:e5:da:0c: ad:db:a3:d5:b1:13:5e:5f:06:60:3a:f5:7b:a0:94:41:41:9d: 78:30:e1:6e:f4:8e:1c:6d:8e:1c:5e:96:84:b5:32:2a:61:1b: e0:68:75:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL1gnsjPVFJKAJWafCLSzMPNiWHowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNjAyMjcxODQ2MDlaFw0yNjAzMDMwMzUyMDlaMDMxMTAvBgNV BAMTKDAzNUIxNEJGNDQyOEVFRTg5REMwNjgwMUI1RTY5RjBFRTA2RUNDRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6dXf3ME37WXB8X4xdv8YAngY/ 2hFisBATLsixulalSdbrR3ZvNo+CbUxEU39ezvziTgW+vjTA5+6Z+TB7q3K7JPSD JlvPjjXCkDsdXXKFiwWvndoO9tFXLG6/Lv0/wBfDRqKLeMWHeZkbzjeHPRVJwdTT egAVePke+/sjNyjhBLDg/zin13x9/YJPywbOwiqZCkjNT0fHNvW028G4hx1ZSMCr vyn8NajUTaNrq0Qzn7FoPAFegTWvx+mZF+nKomWakOxnsBhwKBhuALc1HMbHfn2u kGHvUCJ51JGW8maC42TiEW0lyWfuvCHDJPDAo+7k9EcoDPSbnJc6qg7pqMTnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1sUv0Qo7uidwGgBteafDuBuzPAwHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAET0eNUq2c6MXUBW4paeqi0xz9UlpTZxePER 83M1G6wU+sYg0uVbsJn5lkep4Bj8LvUs/OV62bf+6bVPu0wM+shp354jAFz6iCyh M/45rKq/1flVOqEzvNDPticxAe+wyRoLkkfMs/egWSgnJmDdEou1ZLKBgtkb/nJe fe3VTem0iheg45rRC529LtoozjFqKPxCXN1P0R8zSG5xwHGHFApyFBxU580sJ507 lRj167GR0Ob/BuZh5LgR3F760aLf9I53LYWLdmJ+d3nyMavmS86fJXIy0+XaDK3b o9WxE15fBmA69XuglEFBnXgw4W70jhxtjhxeloS1MiphG+BodaA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:45:07 2026 by rpki-client