$ rpki-client -vvf repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft File: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft (raw, json) Hash identifier: rU4MuPgKa32wf7Ny6U2lAbgSgCk4PPzB5u/36bCRxqI= Subject key identifier: 72:47:54:6C:57:F8:BC:EC:8A:BF:7B:E3:43:F5:80:07:12:B1:9A:11 Authority key identifier: 1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 Certificate issuer: /CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Certificate serial: 0AD6FE9DA8E65322635341D50CD2C65293FB4500 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft Manifest number: 014A Signing time: Fri 17 Apr 2026 17:22:01 +0000 Manifest this update: Fri 17 Apr 2026 17:17:01 +0000 Manifest next update: Mon 20 Apr 2026 23:06:01 +0000 Files and hashes: 1: 1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl (hash: 5VBCrvIAkn6ixETpeWZaXHAwPeIz8e/oNDs9T03J4Ac=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 23:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:d6:fe:9d:a8:e6:53:22:63:53:41:d5:0c:d2:c6:52:93:fb:45:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A32099023DD32B1C3EE67151C5098ABDFA55F49 Validity Not Before: Apr 17 17:17:01 2026 GMT Not After : Apr 20 23:06:01 2026 GMT Subject: CN=7247546C57F8BCEC8ABF7BE343F5800712B19A11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4d:c8:be:8d:28:70:a7:6b:6e:59:56:78:47: 59:f0:ca:72:5b:5a:8d:6f:73:ef:e2:66:d7:c2:7a: 4b:5f:c1:02:0f:c4:af:f6:96:e8:dd:63:f9:42:9c: 74:73:f4:e3:3c:57:42:9e:d0:b9:4e:24:93:7b:ba: bc:97:db:a6:6f:0a:63:40:ba:63:72:39:7e:8f:aa: 96:72:48:1f:b3:a0:7e:86:8e:a6:1f:1c:bb:97:68: d4:c2:c1:c7:ff:d2:b7:9b:6f:13:f7:5d:75:cb:e5: 84:63:49:e3:86:62:21:c8:48:d3:e1:8e:f0:44:0a: 1a:b5:c6:ae:2b:3c:10:22:82:98:03:dd:b4:4f:20: 7d:06:e5:66:dc:4d:6d:b3:75:85:2b:c0:15:95:a2: 3c:ff:80:7b:45:fc:d9:cc:59:2a:86:d4:df:1b:b6: e4:be:1f:82:a7:42:f2:12:d3:9a:6d:10:9a:60:01: cd:d5:61:a1:cf:cf:3b:3a:97:47:cf:9c:2e:43:6e: f5:31:ec:cf:a2:a8:1c:7a:23:be:4c:28:b6:62:85: ba:e4:e8:57:1e:b1:03:25:28:1b:5d:68:95:77:0a: c4:72:02:f0:54:35:ca:f3:6c:12:0e:54:7c:78:31: 19:c5:8f:f6:fb:42:a9:85:c7:1f:dc:fc:5d:5f:94: 73:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:47:54:6C:57:F8:BC:EC:8A:BF:7B:E3:43:F5:80:07:12:B1:9A:11 X509v3 Authority Key Identifier: keyid:1A:32:09:90:23:DD:32:B1:C3:EE:67:15:1C:50:98:AB:DF:A5:5F:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1A32099023DD32B1C3EE67151C5098ABDFA55F49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2e05fcf-5f2a-4d5e-a3f2-d84032f0c8f7/0/1A32099023DD32B1C3EE67151C5098ABDFA55F49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:9e:95:b9:35:15:4d:73:03:f9:fa:35:d5:6d:e4:3c:4f:da: cc:2f:dc:25:61:3a:fc:f8:5e:76:29:a3:6d:4e:f5:ed:f7:86: 55:50:a5:c5:60:da:e8:51:95:b8:8d:c4:4b:bb:4a:76:1e:df: e5:23:9d:2c:55:7f:50:4a:f7:9a:cb:5f:43:07:25:99:95:48: b6:dc:71:d4:47:cc:0e:62:da:ce:d6:a0:94:56:41:8c:57:05: 6a:ee:57:fa:c9:2c:1e:d9:da:12:b2:27:ca:35:2e:66:30:f6: 4e:b4:20:b2:e5:ea:24:07:e4:71:6e:c2:3c:8e:3f:29:b7:d9: e3:0b:3e:30:a9:26:76:de:45:e7:d9:e3:c3:c9:51:27:a3:6d: e3:82:f5:23:80:89:f5:45:1b:da:3b:cf:50:7e:cf:82:c0:e3: 69:26:87:08:2d:05:46:e6:ac:80:88:fb:36:02:2b:52:97:fe: 17:47:f5:c6:af:73:ae:91:20:85:01:2d:32:09:53:e8:a9:f8: 77:c6:de:c0:d9:98:dd:bc:53:01:7b:51:37:ca:95:30:b6:ff: b9:2c:42:1a:98:11:67:89:63:d7:48:ce:69:ec:43:69:89:31: e9:42:46:ef:46:ec:35:f9:63:40:ca:aa:2f:a5:1a:f3:a5:02: 09:3c:8b:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCtb+najmUyJjU0HVDNLGUpP7RQAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJE RkE1NUY0OTAeFw0yNjA0MTcxNzE3MDFaFw0yNjA0MjAyMzA2MDFaMDMxMTAvBgNV BAMTKDcyNDc1NDZDNTdGOEJDRUM4QUJGN0JFMzQzRjU4MDA3MTJCMTlBMTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATci+jShwp2tuWVZ4R1nwynJb Wo1vc+/iZtfCektfwQIPxK/2lujdY/lCnHRz9OM8V0Ke0LlOJJN7uryX26ZvCmNA umNyOX6PqpZySB+zoH6GjqYfHLuXaNTCwcf/0rebbxP3XXXL5YRjSeOGYiHISNPh jvBEChq1xq4rPBAigpgD3bRPIH0G5WbcTW2zdYUrwBWVojz/gHtF/NnMWSqG1N8b tuS+H4KnQvIS05ptEJpgAc3VYaHPzzs6l0fPnC5DbvUx7M+iqBx6I75MKLZihbrk 6FcesQMlKBtdaJV3CsRyAvBUNcrzbBIOVHx4MRnFj/b7QqmFxx/c/F1flHMBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUckdUbFf4vOyKv3vjQ/WABxKxmhEwHwYDVR0j BBgwFoAUGjIJkCPdMrHD7mcVHFCYq9+lX0kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MmUwNWZjZi01ZjJhLTRkNWUtYTNmMi1kODQwMzJmMGM4ZjcvMC8xQTMyMDk5MDIz REQzMkIxQzNFRTY3MTUxQzUwOThBQkRGQTU1RjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4QUJERkE1 NUY0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjJlMDVmY2YtNWYyYS00ZDVlLWEz ZjItZDg0MDMyZjBjOGY3LzAvMUEzMjA5OTAyM0REMzJCMUMzRUU2NzE1MUM1MDk4 QUJERkE1NUY0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKmelbk1FU1zA/n6NdVt5DxP2swv3CVhOvz4 XnYpo21O9e33hlVQpcVg2uhRlbiNxEu7SnYe3+UjnSxVf1BK95rLX0MHJZmVSLbc cdRHzA5i2s7WoJRWQYxXBWruV/rJLB7Z2hKyJ8o1LmYw9k60ILLl6iQH5HFuwjyO Pym32eMLPjCpJnbeRefZ48PJUSejbeOC9SOAifVFG9o7z1B+z4LA42kmhwgtBUbm rICI+zYCK1KX/hdH9cavc66RIIUBLTIJU+ip+HfG3sDZmN28UwF7UTfKlTC2/7ks QhqYEWeJY9dIzmnsQ2mJMelCRu9G7DX5Y0DKqi+lGvOlAgk8i8E= -----END CERTIFICATE-----Generated at Sun Apr 19 14:18:58 2026 by rpki-client