$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft File: 1B5E8685B8219B59B20D12DC9D13863826746ED6.mft (raw, json) Hash identifier: OMAJ1hinS4pJyuQ8yRWfq1xVhbgVIrH0pAJ7d0gua0k= Subject key identifier: 2C:76:C2:B5:47:95:97:EC:1D:58:79:96:8C:89:BB:C3:6C:81:99:6B Authority key identifier: 1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 Certificate issuer: /CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Certificate serial: 0209514590939A4350F283172F372AE66CBF2D50 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft Manifest number: 013A Signing time: Wed 15 Apr 2026 09:21:14 +0000 Manifest this update: Wed 15 Apr 2026 09:16:14 +0000 Manifest next update: Sat 18 Apr 2026 15:07:14 +0000 Files and hashes: 1: 1B5E8685B8219B59B20D12DC9D13863826746ED6.crl (hash: plTTyfwXhmHLrCPAOPWsU3T96Gn7R7ELW0lP3U5TEnw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 18 Apr 2026 15:07:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:09:51:45:90:93:9a:43:50:f2:83:17:2f:37:2a:e6:6c:bf:2d:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1B5E8685B8219B59B20D12DC9D13863826746ED6 Validity Not Before: Apr 15 09:16:14 2026 GMT Not After : Apr 18 15:07:14 2026 GMT Subject: CN=2C76C2B5479597EC1D5879968C89BBC36C81996B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:2f:9a:62:40:f6:4b:33:59:0b:34:b8:76:75: 12:14:3f:2f:d3:5d:5b:2d:3f:b2:35:b4:64:c9:61: 07:d1:18:98:1f:ac:0e:ca:4d:42:fe:81:61:6d:d7: 6e:d8:45:60:ae:ac:ce:b4:5b:7f:95:dd:2f:03:0e: 4c:1d:ad:63:4b:66:9f:59:f9:a8:ba:bd:99:2b:c8: 72:c4:a9:c7:c5:e6:95:b6:2d:b1:ed:b5:b0:da:96: 1f:6c:da:55:37:14:fd:b8:eb:74:c7:36:60:81:a3: ab:eb:12:aa:da:7d:6a:39:62:bf:fb:2d:56:c3:45: e7:43:3c:eb:30:43:96:ac:55:30:b6:90:84:4d:53: ba:07:18:0b:e4:b1:a8:92:da:eb:a6:7a:97:23:ad: 75:13:b6:fa:04:81:5f:91:d2:d2:4e:35:aa:0f:16: cc:2f:e2:4f:7e:33:72:eb:4f:0f:1d:0f:63:2c:1c: 82:2f:98:17:8e:14:db:d5:09:f8:77:fa:8f:3d:98: 00:41:e6:7e:b3:f9:04:6f:8d:b1:ef:a3:ef:bf:89: c3:bf:06:88:43:cd:96:5e:73:d1:06:b6:df:8d:1e: c9:0d:86:48:9c:e7:87:02:45:cc:67:f8:47:79:fa: b4:76:8f:b1:79:f9:5f:ae:e7:ff:af:2e:c8:98:6b: c1:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:76:C2:B5:47:95:97:EC:1D:58:79:96:8C:89:BB:C3:6C:81:99:6B X509v3 Authority Key Identifier: keyid:1B:5E:86:85:B8:21:9B:59:B2:0D:12:DC:9D:13:86:38:26:74:6E:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B5E8685B8219B59B20D12DC9D13863826746ED6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/1/1B5E8685B8219B59B20D12DC9D13863826746ED6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1f:3f:c4:6a:b8:b4:5f:8d:9a:6d:05:e7:29:77:a2:1d:06:f7: 35:9a:1b:d8:0c:30:42:c5:69:c1:c0:12:99:df:46:a3:c3:df: ae:80:a1:4b:1b:48:c8:19:3d:19:32:df:ac:c5:e6:0a:52:49: 31:8b:09:6f:a2:0d:2d:12:44:48:88:21:21:69:27:35:5a:cf: 69:5a:50:e1:2a:2c:c6:e1:6b:c1:90:d0:11:8f:1a:0a:9a:24: f1:46:f9:b2:a7:24:d1:83:9b:b9:ec:9a:8c:11:dd:ac:f0:6f: 8d:6b:9c:2c:3f:aa:bb:e3:f5:96:ef:1e:78:b1:95:a4:ac:ab: 7d:78:98:d9:d5:f7:a1:02:95:e6:1b:5e:bf:a3:e4:2b:fa:c8: 0c:d3:a0:a6:40:4d:d3:d6:02:15:a0:b2:e9:6c:2f:b9:1a:7a: f3:ea:21:13:5f:d7:6c:db:52:d3:b2:35:6d:de:66:cc:2a:4c: 07:f4:bf:0a:5f:82:8c:cb:5d:4e:54:69:76:53:81:af:ba:1d: 4b:1c:96:7c:c2:9c:54:a2:6b:d2:fc:06:24:82:06:6b:2f:02: 26:9f:50:c6:ab:11:54:7c:02:d8:19:88:8c:db:4d:88:20:bb: 68:ba:59:d9:f7:d5:49:d6:2f:db:e2:16:12:0d:c7:a9:d5:9d: 74:ed:e8:6e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAglRRZCTmkNQ8oMXLzcq5my/LVAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2Mzgy Njc0NkVENjAeFw0yNjA0MTUwOTE2MTRaFw0yNjA0MTgxNTA3MTRaMDMxMTAvBgNV BAMTKDJDNzZDMkI1NDc5NTk3RUMxRDU4Nzk5NjhDODlCQkMzNkM4MTk5NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBL5piQPZLM1kLNLh2dRIUPy/T XVstP7I1tGTJYQfRGJgfrA7KTUL+gWFt127YRWCurM60W3+V3S8DDkwdrWNLZp9Z +ai6vZkryHLEqcfF5pW2LbHttbDalh9s2lU3FP2463THNmCBo6vrEqrafWo5Yr/7 LVbDRedDPOswQ5asVTC2kIRNU7oHGAvksaiS2uumepcjrXUTtvoEgV+R0tJONaoP Fswv4k9+M3LrTw8dD2MsHIIvmBeOFNvVCfh3+o89mABB5n6z+QRvjbHvo++/icO/ BohDzZZec9EGtt+NHskNhkic54cCRcxn+Ed5+rR2j7F5+V+u5/+vLsiYa8HBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULHbCtUeVl+wdWHmWjIm7w2yBmWswHwYDVR0j BBgwFoAUG16Ghbghm1myDRLcnROGOCZ0btYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMS8xQjVFODY4NUI4 MjE5QjU5QjIwRDEyREM5RDEzODYzODI2NzQ2RUQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2MzgyNjc0 NkVENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzEvMUI1RTg2ODVCODIxOUI1OUIyMEQxMkRDOUQxMzg2 MzgyNjc0NkVENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB8/xGq4tF+Nmm0F5yl3oh0G9zWaG9gMMELF acHAEpnfRqPD366AoUsbSMgZPRky36zF5gpSSTGLCW+iDS0SREiIISFpJzVaz2la UOEqLMbha8GQ0BGPGgqaJPFG+bKnJNGDm7nsmowR3azwb41rnCw/qrvj9ZbvHnix laSsq314mNnV96ECleYbXr+j5Cv6yAzToKZATdPWAhWgsulsL7kaevPqIRNf12zb UtOyNW3eZswqTAf0vwpfgozLXU5UaXZTga+6HUsclnzCnFSia9L8BiSCBmsvAiaf UMarEVR8AtgZiIzbTYggu2i6Wdn31UnWL9viFhINx6nVnXTt6G4= -----END CERTIFICATE-----Generated at Fri Apr 17 17:07:19 2026 by rpki-client