$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft File: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft (raw, json) Hash identifier: GOzavK3S6tgL54kPSckjeEGey+7Fj1Hq97P6ToWEgEI= Subject key identifier: 86:27:80:E5:CB:C3:A4:0A:24:13:E0:C7:09:59:70:48:CA:F5:B4:5F Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB Certificate issuer: /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Certificate serial: 1852FE7DC7AAA211521DDADF68418150274C9D16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft Manifest number: 0311 Signing time: Thu 26 Mar 2026 13:51:50 +0000 Manifest this update: Thu 26 Mar 2026 13:46:50 +0000 Manifest next update: Sun 29 Mar 2026 21:06:50 +0000 Files and hashes: 1: 3130332e3233332e3131302e302f32342d3234203d3e203338373538.roa (hash: GqBNlUasP3BBKs1HKiCmKonJkN/x7ynhSUEn/yP8W34=) 2: 4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl (hash: WA3e5us8BM+Ng7AtlBgqgVeMXeXIy7Rm04xOPordpf8=) 3: 3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (hash: eFtycN+JT8tU5jGgNYSVj/q/av7ifXOzPsUFY3TiJd8=) 4: 3130332e3233332e3130392e302f32342d3234203d3e203633343838.roa (hash: t0tvOedwZBmqoSfphz50ZVpo28lYeqE5SYlSQlUDw04=) 5: 3130332e3233332e3130382e302f32342d3234203d3e203633343838.roa (hash: Wfy8788i5fY/ej9a3YM/+k7wfb0vlK99rdw4A0vlE+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 21:06:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:52:fe:7d:c7:aa:a2:11:52:1d:da:df:68:41:81:50:27:4c:9d:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB Validity Not Before: Mar 26 13:46:50 2026 GMT Not After : Mar 29 21:06:50 2026 GMT Subject: CN=862780E5CBC3A40A2413E0C709597048CAF5B45F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:6c:00:87:e3:11:08:f7:14:1e:97:57:52:1c: 48:54:17:d8:26:f6:d4:bc:41:90:5a:af:50:f9:e0: 36:14:59:40:94:13:f0:28:75:0b:01:61:be:b7:cb: 97:b5:59:e9:72:d4:6b:77:f7:aa:f7:ce:c5:32:de: ba:75:15:e1:18:80:7d:fb:6e:1b:5b:d0:0f:ee:24: 1b:d6:11:ec:05:c4:a3:1e:03:6f:fc:de:0b:64:b6: 51:c6:ce:6b:16:9b:ed:a4:7f:eb:b0:5e:a6:17:84: eb:86:11:d4:99:41:56:11:66:f6:75:c3:04:48:77: ad:6c:44:bb:f7:a6:96:5d:cc:3c:31:46:01:81:25: ae:d9:3d:36:e7:f1:6c:b3:94:56:1d:c9:87:1a:fb: c6:67:54:bf:9c:11:29:d4:b6:56:22:8b:3c:ab:f8: ae:6a:30:0e:ea:53:8d:99:2c:15:60:c0:96:a4:1d: c7:5f:f9:02:01:59:78:47:c1:2a:93:6d:b2:cd:74: c6:ef:77:87:2f:bc:55:7c:23:77:dc:37:10:b7:81: 25:0d:25:2f:57:9f:a4:0b:51:cb:0c:ec:3f:9d:be: 15:78:7d:42:cc:f3:62:71:10:e8:99:8d:24:38:84: 51:06:1a:57:a2:7f:4d:63:92:dd:17:d3:c9:bb:e9: 92:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:27:80:E5:CB:C3:A4:0A:24:13:E0:C7:09:59:70:48:CA:F5:B4:5F X509v3 Authority Key Identifier: keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:48:b5:b8:d0:cb:3b:74:4e:05:e5:da:de:b7:86:ab:16:52: a5:7c:4d:a7:1e:f4:02:97:65:da:d2:af:25:57:71:3c:cc:ee: d8:2e:e0:dc:76:e5:89:71:97:dd:91:53:24:0a:20:34:1d:21: 7b:fc:d3:a4:f9:18:02:88:42:fb:2b:1a:1a:07:c0:b3:07:59: 9f:92:8d:ef:1d:3d:bd:6b:61:17:e8:85:50:22:04:de:df:b4: 6f:24:2c:20:33:1e:c8:31:69:67:17:d3:4c:4e:e3:75:70:7e: b1:4b:c7:f5:79:f9:24:65:65:78:fa:a9:cd:7f:cc:1b:74:f4: 1f:d2:ef:ef:c2:ae:91:33:4f:33:30:e4:ea:13:db:0a:93:57: 82:53:36:c1:03:f3:fd:c2:a1:25:16:3a:5d:dd:f4:44:9e:05: 4a:1d:ff:a6:95:e2:2c:11:de:93:04:01:d2:5b:a6:3b:22:7e: 17:d3:6a:c6:88:27:76:ce:3b:cc:0a:7c:7b:d2:79:ee:e7:86: 80:24:6a:9e:44:1a:4a:b9:a1:91:a1:16:48:c5:23:73:e4:ec: 1b:22:07:be:64:2c:7d:f7:b5:c3:19:c0:5a:9f:92:6d:6d:d4: b5:a8:d5:26:be:0f:dd:fe:49:a0:7e:ac:a6:c3:82:fd:5e:ef: 8d:d5:bc:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGFL+fceqohFSHdrfaEGBUCdMnRYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2 MTczQUVBQjAeFw0yNjAzMjYxMzQ2NTBaFw0yNjAzMjkyMTA2NTBaMDMxMTAvBgNV BAMTKDg2Mjc4MEU1Q0JDM0E0MEEyNDEzRTBDNzA5NTk3MDQ4Q0FGNUI0NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmbACH4xEI9xQel1dSHEhUF9gm 9tS8QZBar1D54DYUWUCUE/AodQsBYb63y5e1Wely1Gt396r3zsUy3rp1FeEYgH37 bhtb0A/uJBvWEewFxKMeA2/83gtktlHGzmsWm+2kf+uwXqYXhOuGEdSZQVYRZvZ1 wwRId61sRLv3ppZdzDwxRgGBJa7ZPTbn8WyzlFYdyYca+8ZnVL+cESnUtlYiizyr +K5qMA7qU42ZLBVgwJakHcdf+QIBWXhHwSqTbbLNdMbvd4cvvFV8I3fcNxC3gSUN JS9Xn6QLUcsM7D+dvhV4fULM82JxEOiZjSQ4hFEGGleif01jkt0X08m76ZLFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhieA5cvDpAokE+DHCVlwSMr1tF8wHwYDVR0j BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1 QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz QUVBQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVkNDZmODItY2YxMS00ZTMyLWIw NTEtNmFjMzM0YTkyNjIyLzAvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYx MEE2MTczQUVBQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5ItbjQyzt0TgXl2t63hqsWUqV8Tace9AKX ZdrSryVXcTzM7tgu4Nx25Ylxl92RUyQKIDQdIXv806T5GAKIQvsrGhoHwLMHWZ+S je8dPb1rYRfohVAiBN7ftG8kLCAzHsgxaWcX00xO43VwfrFLx/V5+SRlZXj6qc1/ zBt09B/S7+/CrpEzTzMw5OoT2wqTV4JTNsED8/3CoSUWOl3d9ESeBUod/6aV4iwR 3pMEAdJbpjsifhfTasaIJ3bOO8wKfHvSee7nhoAkap5EGkq5oZGhFkjFI3Pk7Bsi B75kLH33tcMZwFqfkm1t1LWo1Sa+D93+SaB+rKbDgv1e743VvEo= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:09 2026 by rpki-client