$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: lx2U5COLtDn7HRsIiS7UhmrRCfInSwbnI3xp0g82cBo= Subject key identifier: 35:CB:47:96:D4:FF:74:7F:F5:D5:45:4C:49:B7:E1:E3:40:D4:A9:BA Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 6FC60A163FBAD1C02D305B909C0CB47A1B44259C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 014B Signing time: Tue 24 Mar 2026 02:30:41 +0000 Manifest this update: Tue 24 Mar 2026 02:25:41 +0000 Manifest next update: Fri 27 Mar 2026 08:29:41 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: aIHodB1nz1DhifH6iuPw3Hsr0XqaD481RG1+0C9lrxQ=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: JrpOhdiy+mBFESSL7rD9ukXYen5fXGnMpvaEHRT8ihU=) 3: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: J4I813NU5O2eZK+o2ukOoqM4CPCVoxnx3fbEsBKrlz4=) 4: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: qz1dXSjmkF1AA5Ei88d+aInM4zHfe9p4wjNpf+FYrqI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:29:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:c6:0a:16:3f:ba:d1:c0:2d:30:5b:90:9c:0c:b4:7a:1b:44:25:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Mar 24 02:25:41 2026 GMT Not After : Mar 27 08:29:41 2026 GMT Subject: CN=35CB4796D4FF747FF5D5454C49B7E1E340D4A9BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e8:a7:d3:84:ce:9b:d3:0b:ed:ef:58:f9:06: 19:33:64:3e:4d:c5:c7:9a:0b:08:b5:05:5c:a9:8c: 6a:59:93:1f:61:b2:57:36:17:86:5d:85:05:a5:c8: 3e:0c:63:dc:97:64:4e:1e:a9:a6:4d:fc:1b:2c:e7: dd:d8:b5:8d:89:ad:b4:30:ab:f7:df:3e:5c:e9:a8: 94:06:8b:15:3d:a2:b9:c2:af:49:2d:89:96:1e:19: b3:e4:25:8b:e5:46:36:8a:6c:ee:56:9f:9f:fc:a1: 42:65:bf:7c:4f:76:31:c9:2e:9e:31:8a:90:23:f4: 9c:5d:7d:e5:b2:ce:d1:f8:ed:6f:60:67:3c:7e:89: 8c:47:17:ee:53:c5:47:fa:f9:83:65:3c:18:ea:85: 37:28:75:c6:1a:fc:5e:8c:22:90:cd:e4:fd:77:73: 3e:a5:1d:2d:b7:e8:59:81:b0:1d:50:ca:0b:c0:55: 87:bd:48:42:c4:32:35:51:8a:d8:2d:5e:eb:2d:51: c8:b5:df:e4:dd:b6:13:d2:a2:8f:f1:96:a0:5c:ca: 41:42:da:05:bc:e2:81:93:f6:d0:8f:c6:6c:dd:6b: 09:aa:50:96:d6:70:63:1a:23:de:15:59:44:e3:50: 3f:2f:b5:06:15:1c:69:d8:76:ac:48:cd:4e:a7:29: 80:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:CB:47:96:D4:FF:74:7F:F5:D5:45:4C:49:B7:E1:E3:40:D4:A9:BA X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:16:94:19:1b:1f:a3:c5:75:e6:7d:8e:bc:0a:c6:21:28:95: 30:bb:24:8c:33:71:c5:b1:8a:31:00:3e:1e:9c:f9:00:2b:b3: 09:37:b9:84:13:5d:37:35:91:29:9a:b6:cd:bf:67:27:0e:92: bd:4f:db:85:35:c8:8f:92:a1:2f:2f:df:d5:6f:05:63:f0:bc: a1:2b:1d:71:c1:27:e9:cf:ca:5b:f7:49:70:38:20:60:31:01: a6:fc:34:3b:b4:75:f3:89:69:c5:9f:72:dd:d3:54:78:fc:23: 0a:4a:2d:9a:bf:04:66:bd:6c:17:68:83:d8:8a:c0:ca:c7:3e: 4b:6b:9b:dc:1a:88:5e:4f:ab:d5:29:dc:d0:3d:80:b5:ca:0e: fb:53:7f:30:91:99:b6:3b:88:7a:df:9f:3f:ff:b2:d5:eb:ef: 79:87:25:92:85:71:42:2a:08:8a:c4:a3:e8:56:3f:6d:59:0c: e6:f2:bc:e7:48:e3:cc:52:fb:62:91:39:8d:12:64:f1:9f:c1: 52:3a:70:dc:ce:08:6d:2b:68:9b:3f:9d:d9:d3:62:1f:fa:13: 18:92:0d:66:b7:eb:1d:3c:60:63:96:3c:3e:f7:6d:35:1c:b9: 00:66:76:24:a4:6b:44:e9:d0:c9:15:80:24:10:81:90:02:5c: a6:4d:cb:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb8YKFj+60cAtMFuQnAy0ehtEJZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjAzMjQwMjI1NDFaFw0yNjAzMjcwODI5NDFaMDMxMTAvBgNV BAMTKDM1Q0I0Nzk2RDRGRjc0N0ZGNUQ1NDU0QzQ5QjdFMUUzNDBENEE5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC86KfThM6b0wvt71j5BhkzZD5N xceaCwi1BVypjGpZkx9hslc2F4ZdhQWlyD4MY9yXZE4eqaZN/Bss593YtY2JrbQw q/ffPlzpqJQGixU9ornCr0ktiZYeGbPkJYvlRjaKbO5Wn5/8oUJlv3xPdjHJLp4x ipAj9JxdfeWyztH47W9gZzx+iYxHF+5TxUf6+YNlPBjqhTcodcYa/F6MIpDN5P13 cz6lHS236FmBsB1QygvAVYe9SELEMjVRitgtXustUci13+TdthPSoo/xlqBcykFC 2gW84oGT9tCPxmzdawmqUJbWcGMaI94VWUTjUD8vtQYVHGnYdqxIzU6nKYBJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNctHltT/dH/11UVMSbfh40DUqbowHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALQWlBkbH6PFdeZ9jrwKxiEolTC7JIwzccWx ijEAPh6c+QArswk3uYQTXTc1kSmats2/ZycOkr1P24U1yI+SoS8v39VvBWPwvKEr HXHBJ+nPylv3SXA4IGAxAab8NDu0dfOJacWfct3TVHj8IwpKLZq/BGa9bBdog9iK wMrHPktrm9waiF5Pq9Up3NA9gLXKDvtTfzCRmbY7iHrfnz//stXr73mHJZKFcUIq CIrEo+hWP21ZDObyvOdI48xS+2KROY0SZPGfwVI6cNzOCG0raJs/ndnTYh/6ExiS DWa36x08YGOWPD73bTUcuQBmdiSka0Tp0MkVgCQQgZACXKZNy7I= -----END CERTIFICATE-----Generated at Thu Mar 26 08:52:51 2026 by rpki-client