$ rpki-client -vvf repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft File: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft (raw, json) Hash identifier: T1Roxx7Th1PWy1rvCnjbWII1FA7FTRkFoJjHlM69hv4= Subject key identifier: 03:5A:F4:E3:EE:EC:E8:B4:25:83:0F:F5:EF:B1:CB:A2:43:E3:92:1B Authority key identifier: 4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 Certificate issuer: /CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Certificate serial: 33B9987DF09BE54AA140683DC8F76DF3EF19FD8D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject info access: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft Manifest number: 0380 Signing time: Thu 26 Mar 2026 02:02:29 +0000 Manifest this update: Thu 26 Mar 2026 01:57:29 +0000 Manifest next update: Sun 29 Mar 2026 07:11:29 +0000 Files and hashes: 1: 3130332e3136382e3235312e302f32342d3234203d3e20313432333237.roa (hash: mP3dXLTjkrRr0prh2Jzplj5CirAMZtpiVu7s//8AY3w=) 2: 3130332e3136382e3235302e302f32342d3234203d3e20313432333237.roa (hash: vUWQBZ0/r7vI2v8KbhMfVsf4gR9LmNP6bUrY9mudCfU=) 3: 3130332e3136382e3235302e302f32332d3233203d3e20313432333237.roa (hash: ik9rrWYA9D4GBjhetTFAP4k0XQKOPTBWebSo28sOHb8=) 4: 4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl (hash: RTHag58h0t0O3JYCm9g7qQDDadzXd9rgAy/l2Y4jfW0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:b9:98:7d:f0:9b:e5:4a:a1:40:68:3d:c8:f7:6d:f3:ef:19:fd:8d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4EE959798755CD4BA407AEB6EBDD3100261EAA55 Validity Not Before: Mar 26 01:57:29 2026 GMT Not After : Mar 29 07:11:29 2026 GMT Subject: CN=035AF4E3EEECE8B425830FF5EFB1CBA243E3921B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:27:f6:72:40:5b:5e:7f:eb:4f:08:95:12:59: 21:8a:9d:10:e9:92:97:a7:22:83:32:71:90:9a:a5: ce:75:db:ac:86:08:0a:e5:fe:98:34:40:ac:45:44: ec:19:61:d8:7e:99:e3:c9:4a:5a:b8:9c:fa:ba:62: 75:91:1c:f8:89:a4:b2:0e:ed:26:d9:81:27:73:2f: 0f:35:56:18:5a:9a:2e:fa:4e:a5:1d:1b:ba:9a:7e: 20:d6:4c:66:4b:4f:f3:9d:e7:cf:c2:6b:51:89:0e: 1d:d7:fe:72:b3:95:e0:9b:79:50:59:f0:1f:76:d4: 67:18:2b:f3:7d:fa:69:d3:36:3f:f9:86:81:a3:18: e0:8d:b9:ed:e1:e0:1e:0f:3b:cc:30:ed:c6:69:94: f4:6c:0f:8c:b5:fb:2a:c3:d7:1e:a1:b3:a3:cf:cb: 0e:9e:18:69:1e:ad:77:c0:14:7d:ff:99:47:03:71: 67:6b:5e:af:c2:2b:58:3f:f2:db:2c:ea:61:d6:8c: 83:8f:e6:b7:fb:b1:c6:44:4d:e9:20:02:64:88:e2: 41:a1:3c:78:9f:99:fb:e7:01:64:92:5e:98:4c:b7: 5f:55:1b:fd:0e:01:24:ca:69:22:fc:cb:4d:b4:6a: 59:44:f4:8e:c7:ee:e7:b8:14:65:fd:12:8f:4a:c7: af:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:5A:F4:E3:EE:EC:E8:B4:25:83:0F:F5:EF:B1:CB:A2:43:E3:92:1B X509v3 Authority Key Identifier: keyid:4E:E9:59:79:87:55:CD:4B:A4:07:AE:B6:EB:DD:31:00:26:1E:AA:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EE959798755CD4BA407AEB6EBDD3100261EAA55.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/038d580b-452e-42d7-b041-901dc33d6857/0/4EE959798755CD4BA407AEB6EBDD3100261EAA55.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:1d:0e:5b:88:c8:6b:83:b3:e6:d5:7e:24:b6:5c:d0:78:2b: 71:6f:0a:93:07:24:b2:48:3f:c9:37:31:29:a1:89:bb:34:01: 3d:63:a6:6c:0d:f8:e9:f3:a5:5c:ae:4b:5c:69:8a:d8:de:98: ff:80:c4:54:1a:e7:a3:e4:5d:39:b5:2d:19:c0:a1:40:4b:17: 22:53:a7:6f:ef:4c:3f:d1:fb:2b:2a:3b:26:d9:9c:6a:6c:40: 1a:fa:ec:66:3a:41:74:23:e4:f3:c3:75:0b:ee:94:60:36:3d: ad:cb:cc:9b:95:03:cb:47:7c:4b:f4:51:54:e2:a5:cf:9b:44: d8:2e:ca:01:13:da:c2:bf:3c:91:f0:ea:f0:e4:eb:09:d9:8c: 23:36:75:c5:ad:69:a4:e8:ee:2f:c3:30:e5:dd:61:99:7e:ca: ac:ec:fe:c8:57:be:72:67:d4:bf:c0:e7:27:63:b8:f1:e4:26: cc:f8:97:21:ef:55:a4:f5:ea:17:ec:58:60:64:5d:7a:35:b5: d3:0a:f7:f0:cc:c3:e2:96:93:eb:c4:59:5d:25:ee:33:ca:78: 83:fb:c5:5f:bc:b8:af:1a:1d:2d:9a:2b:b7:e8:bc:da:27:21: e5:d1:61:08:34:43:33:7d:8e:8d:23:1b:5d:00:fa:94:02:6d: db:01:9b:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM7mYffCb5UqhQGg9yPdt8+8Z/Y0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAy NjFFQUE1NTAeFw0yNjAzMjYwMTU3MjlaFw0yNjAzMjkwNzExMjlaMDMxMTAvBgNV BAMTKDAzNUFGNEUzRUVFQ0U4QjQyNTgzMEZGNUVGQjFDQkEyNDNFMzkyMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCJ/ZyQFtef+tPCJUSWSGKnRDp kpenIoMycZCapc5126yGCArl/pg0QKxFROwZYdh+mePJSlq4nPq6YnWRHPiJpLIO 7SbZgSdzLw81Vhhami76TqUdG7qafiDWTGZLT/Od58/Ca1GJDh3X/nKzleCbeVBZ 8B921GcYK/N9+mnTNj/5hoGjGOCNue3h4B4PO8ww7cZplPRsD4y1+yrD1x6hs6PP yw6eGGkerXfAFH3/mUcDcWdrXq/CK1g/8tss6mHWjIOP5rf7scZETekgAmSI4kGh PHifmfvnAWSSXphMt19VG/0OASTKaSL8y020allE9I7H7ue4FGX9Eo9Kx69lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA1r04+7s6LQlgw/177HLokPjkhswHwYDVR0j BBgwFoAUTulZeYdVzUukB662690xACYeqlUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzhkNTgwYi00NTJlLTQyZDctYjA0MS05MDFkYzMzZDY4NTcvMC80RUU5NTk3OTg3 NTVDRDRCQTQwN0FFQjZFQkREMzEwMDI2MUVBQTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMxMDAyNjFF QUE1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDM4ZDU4MGItNDUyZS00MmQ3LWIw NDEtOTAxZGMzM2Q2ODU3LzAvNEVFOTU5Nzk4NzU1Q0Q0QkE0MDdBRUI2RUJERDMx MDAyNjFFQUE1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGEdDluIyGuDs+bVfiS2XNB4K3FvCpMHJLJI P8k3MSmhibs0AT1jpmwN+OnzpVyuS1xpitjemP+AxFQa56PkXTm1LRnAoUBLFyJT p2/vTD/R+ysqOybZnGpsQBr67GY6QXQj5PPDdQvulGA2Pa3LzJuVA8tHfEv0UVTi pc+bRNguygET2sK/PJHw6vDk6wnZjCM2dcWtaaTo7i/DMOXdYZl+yqzs/shXvnJn 1L/A5ydjuPHkJsz4lyHvVaT16hfsWGBkXXo1tdMK9/DMw+KWk+vEWV0l7jPKeIP7 xV+8uK8aHS2aK7fovNonIeXRYQg0QzN9jo0jG10A+pQCbdsBmw8= -----END CERTIFICATE-----Generated at Thu Mar 26 15:30:09 2026 by rpki-client