$ rpki-client -vvf repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft File: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft (raw, json) Hash identifier: Dcs6vpMTDT3OFVmhdAaasC3byBoeU5mG812TV5Nq/tg= Subject key identifier: 7A:58:0B:31:D2:C8:85:0E:C6:40:82:E3:F8:F7:0F:DB:E0:9B:6E:20 Authority key identifier: 1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 Certificate issuer: /CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Certificate serial: 56023DB4F075005246484FE03DFFBBD836CF2007 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft Manifest number: 0268 Signing time: Sun 01 Mar 2026 23:01:14 +0000 Manifest this update: Sun 01 Mar 2026 22:56:14 +0000 Manifest next update: Thu 05 Mar 2026 10:53:14 +0000 Files and hashes: 1: 3130332e3138352e32372e302f32342d3234203d3e20313439373039.roa (hash: CxgHh2nx9jBqaj0dFrPpRiINoseZIE2Y0Tam4i3m6pw=) 2: 1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl (hash: bSvXtJQLH6USWTj7iox3Na5iJR5kTzwhYpipldxxNmo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:02:3d:b4:f0:75:00:52:46:48:4f:e0:3d:ff:bb:d8:36:cf:20:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51 Validity Not Before: Mar 1 22:56:14 2026 GMT Not After : Mar 5 10:53:14 2026 GMT Subject: CN=7A580B31D2C8850EC64082E3F8F70FDBE09B6E20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:6f:25:55:45:05:86:04:72:cc:b4:ba:13:fd: 96:d8:12:7c:2a:ac:13:3f:76:17:76:5e:81:af:52: a1:b6:ad:3f:de:41:5b:66:13:a9:cf:c6:81:f2:03: b3:be:3b:10:5e:1f:fa:26:fc:41:c4:33:66:e6:8d: 6e:a5:5b:9d:60:7a:1f:57:15:36:d1:02:30:f9:fe: 4b:66:4f:e0:bc:42:db:53:35:6c:4a:35:20:6f:35: cc:ae:dc:b3:7d:b6:05:5b:a2:15:56:b0:0c:10:1f: 7e:ae:90:c9:f3:ed:00:f6:54:80:08:71:f3:44:4d: 85:ec:50:b7:8b:cb:5a:db:6b:97:44:49:f2:fa:0c: d2:95:41:d2:3e:70:a1:04:2c:10:37:c6:34:77:d5: 33:75:6c:24:21:e4:d2:11:50:d5:11:a7:17:1a:f1: 0d:bd:b1:6d:1e:ca:d8:cf:bb:6a:ae:2b:1e:01:a2: 03:26:fd:a7:d2:8e:ef:28:9d:f2:5e:c7:90:76:4f: 90:09:da:15:50:0e:82:49:80:11:73:c3:dd:bf:06: 12:f7:b8:45:3d:bb:d2:10:47:cf:27:8a:c1:a8:39: 09:7e:71:67:2e:5c:91:52:54:ad:80:47:05:0d:dc: 2d:f3:ff:65:f6:8a:c1:bf:18:a6:3c:50:79:e7:0c: 70:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:58:0B:31:D2:C8:85:0E:C6:40:82:E3:F8:F7:0F:DB:E0:9B:6E:20 X509v3 Authority Key Identifier: keyid:1A:7E:52:5B:56:9E:9C:AE:03:35:BF:F6:6C:FA:1B:D4:A5:C1:2C:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dd6cacd4-4e08-4dd8-a5ae-9a5a63a8d2fa/0/1A7E525B569E9CAE0335BFF66CFA1BD4A5C12C51.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:8b:17:fc:ca:89:4d:60:40:c4:92:51:35:78:5b:d3:45:bc: 76:fb:73:93:26:9c:27:e0:58:6f:bb:df:4f:24:f4:53:f9:dd: 8b:f3:aa:ce:15:d7:41:97:83:ca:4c:84:e9:3e:c5:88:8d:90: 2c:df:77:76:74:24:c8:d3:e8:9b:d7:c6:13:eb:ab:ad:d7:2e: 0b:21:e6:0f:8f:10:df:a1:64:48:6c:01:69:98:37:16:d7:65: 29:02:94:0c:8f:81:6b:90:7f:20:c6:3a:c7:5a:d9:5a:6f:74: ca:a4:83:0d:b9:24:03:ca:91:2a:13:2b:91:50:e9:e3:af:34: 70:93:cf:10:77:62:b4:02:1c:10:35:f0:97:ac:21:00:0d:c8: bb:48:59:95:86:f7:89:5f:b3:9c:08:12:8e:a0:48:10:e8:2c: b9:cf:37:62:b5:4d:ab:7d:af:65:2f:c1:05:04:73:4e:08:8c: 31:42:d0:cc:7e:7f:85:73:5b:79:67:1c:47:4d:e1:65:42:ee: b2:29:5b:f7:24:a8:ff:3e:b8:88:7a:f0:7d:76:86:04:22:dc: e0:1b:53:ff:ee:c5:9a:96:13:58:8a:da:45:e7:8b:02:ce:5a: 7d:81:39:ad:91:2d:b5:33:50:37:1a:64:ad:0a:b9:cc:59:c9: 54:9b:8a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVgI9tPB1AFJGSE/gPf+72DbPIAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRB NUMxMkM1MTAeFw0yNjAzMDEyMjU2MTRaFw0yNjAzMDUxMDUzMTRaMDMxMTAvBgNV BAMTKDdBNTgwQjMxRDJDODg1MEVDNjQwODJFM0Y4RjcwRkRCRTA5QjZFMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDubyVVRQWGBHLMtLoT/ZbYEnwq rBM/dhd2XoGvUqG2rT/eQVtmE6nPxoHyA7O+OxBeH/om/EHEM2bmjW6lW51geh9X FTbRAjD5/ktmT+C8QttTNWxKNSBvNcyu3LN9tgVbohVWsAwQH36ukMnz7QD2VIAI cfNETYXsULeLy1rba5dESfL6DNKVQdI+cKEELBA3xjR31TN1bCQh5NIRUNURpxca 8Q29sW0eytjPu2quKx4BogMm/afSju8onfJex5B2T5AJ2hVQDoJJgBFzw92/BhL3 uEU9u9IQR88nisGoOQl+cWcuXJFSVK2ARwUN3C3z/2X2isG/GKY8UHnnDHBzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUelgLMdLIhQ7GQILj+PcP2+CbbiAwHwYDVR0j BBgwFoAUGn5SW1aenK4DNb/2bPob1KXBLFEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZDZjYWNkNC00ZTA4LTRkZDgtYTVhZS05YTVhNjNhOGQyZmEvMC8xQTdFNTI1QjU2 OUU5Q0FFMDMzNUJGRjY2Q0ZBMUJENEE1QzEyQzUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFCRDRBNUMx MkM1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGQ2Y2FjZDQtNGUwOC00ZGQ4LWE1 YWUtOWE1YTYzYThkMmZhLzAvMUE3RTUyNUI1NjlFOUNBRTAzMzVCRkY2NkNGQTFC RDRBNUMxMkM1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMGLF/zKiU1gQMSSUTV4W9NFvHb7c5MmnCfg WG+7308k9FP53Yvzqs4V10GXg8pMhOk+xYiNkCzfd3Z0JMjT6JvXxhPrq63XLgsh 5g+PEN+hZEhsAWmYNxbXZSkClAyPgWuQfyDGOsda2VpvdMqkgw25JAPKkSoTK5FQ 6eOvNHCTzxB3YrQCHBA18JesIQANyLtIWZWG94lfs5wIEo6gSBDoLLnPN2K1Tat9 r2UvwQUEc04IjDFC0Mx+f4VzW3lnHEdN4WVC7rIpW/ckqP8+uIh68H12hgQi3OAb U//uxZqWE1iK2kXniwLOWn2BOa2RLbUzUDcaZK0KucxZyVSbijs= -----END CERTIFICATE-----Generated at Mon Mar 2 23:09:56 2026 by rpki-client