$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: Bs3+BQdcaB4pcjokG3C0LY5B29PF/3egZPaN5FruJ5k= Subject key identifier: 42:B5:6C:DA:2C:D2:41:2C:9F:CA:DF:8B:F1:FB:49:6D:83:B5:8B:C4 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 485AF2D650187118FF8F9D60C20CC2398789587B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0528 Signing time: Tue 24 Mar 2026 20:01:33 +0000 Manifest this update: Tue 24 Mar 2026 19:56:33 +0000 Manifest next update: Sat 28 Mar 2026 02:01:33 +0000 Files and hashes: 1: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: qWH/KoYh9G6t17awLSQH+pSKBNWAWXWquSOIHi+Pp5E=) 2: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 3: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 4: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:01:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5a:f2:d6:50:18:71:18:ff:8f:9d:60:c2:0c:c2:39:87:89:58:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Mar 24 19:56:33 2026 GMT Not After : Mar 28 02:01:33 2026 GMT Subject: CN=42B56CDA2CD2412C9FCADF8BF1FB496D83B58BC4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:88:ed:bb:d1:7c:b6:f0:57:5e:c4:4f:5a:a9: b9:09:13:25:54:af:6e:89:90:8a:c1:ee:55:79:97: 36:a3:fb:49:16:b6:94:45:53:86:03:01:2f:03:9c: ad:ee:55:80:5f:70:9b:64:4b:61:65:19:c0:86:56: 95:54:17:4a:51:2a:25:05:4b:46:d7:b6:cf:8c:91: ab:b1:fa:75:0a:36:00:57:a1:63:28:4c:41:dd:6e: b7:02:8f:f3:59:cb:0c:50:cd:2b:92:97:b8:b4:4b: fe:cc:8a:15:dd:ed:f1:79:cc:af:21:44:92:26:9c: 91:19:b5:58:f4:81:66:6d:7d:fd:ae:6a:c5:6d:c8: ce:fe:f4:88:11:52:fc:1e:7c:82:b3:ef:60:ee:7e: 10:07:58:99:37:d5:21:cc:32:75:06:3f:e8:f5:5a: 63:f7:1b:9f:2a:5e:c2:e5:e5:e2:45:f5:a5:6a:ad: c1:69:3a:d1:9b:ce:2a:b6:9c:f0:18:bf:63:e8:24: fd:f4:53:a9:e9:6a:36:0a:ad:14:f0:fc:35:66:7a: d8:a6:28:f2:28:ae:fa:4c:4d:de:59:3f:80:e6:70: 25:5a:36:47:3b:5b:fe:fd:f1:cb:06:10:9d:5f:13: 2a:a9:04:97:8c:c5:3d:f2:5c:0b:cb:ee:58:9b:34: 45:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:B5:6C:DA:2C:D2:41:2C:9F:CA:DF:8B:F1:FB:49:6D:83:B5:8B:C4 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:d2:e3:38:2e:5d:73:d7:af:9b:81:f0:59:98:a2:a7:39:2c: c4:ed:25:e0:af:90:5a:8c:2c:b4:23:4e:6e:f9:84:a7:e9:01: 59:d8:d6:99:e2:66:15:94:c1:d1:af:3b:57:96:20:3b:56:23: a7:8f:51:d7:bf:a1:4f:ea:b5:ff:84:37:79:c3:b9:f3:45:5c: 60:dd:0c:f1:72:2a:d3:40:a8:fa:f8:0f:c7:bb:07:48:43:25: a1:37:7e:02:b6:75:5d:39:55:d5:17:88:aa:4e:38:27:5c:7e: fd:14:5e:64:ec:8e:29:e9:15:b4:2b:d9:b6:fd:8a:5e:6c:17: 90:cf:18:c0:67:46:b5:d3:2b:8c:08:b3:61:29:cf:64:92:59: dd:fe:36:02:ac:97:31:9d:3d:bf:00:bc:2f:dc:ee:62:56:b7: c0:49:0b:30:fb:5a:f3:69:aa:b7:7a:ec:2b:22:6f:cc:5a:b3: a1:09:0d:9a:b1:66:78:aa:77:ef:70:d3:fa:68:12:24:7e:11: d7:64:c5:38:27:57:d2:8c:f2:fb:bd:1e:47:67:58:2c:2c:1c: d3:7a:d7:9b:6e:2c:0f:5e:ad:20:97:42:63:73:a9:a0:f9:b2: e1:82:13:12:6d:b6:4a:37:82:86:ea:c8:c3:f4:4f:85:cb:60: 50:98:85:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFry1lAYcRj/j51gwgzCOYeJWHswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNjAzMjQxOTU2MzNaFw0yNjAzMjgwMjAxMzNaMDMxMTAvBgNV BAMTKDQyQjU2Q0RBMkNEMjQxMkM5RkNBREY4QkYxRkI0OTZEODNCNThCQzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgiO270Xy28FdexE9aqbkJEyVU r26JkIrB7lV5lzaj+0kWtpRFU4YDAS8DnK3uVYBfcJtkS2FlGcCGVpVUF0pRKiUF S0bXts+Mkaux+nUKNgBXoWMoTEHdbrcCj/NZywxQzSuSl7i0S/7MihXd7fF5zK8h RJImnJEZtVj0gWZtff2uasVtyM7+9IgRUvwefIKz72DufhAHWJk31SHMMnUGP+j1 WmP3G58qXsLl5eJF9aVqrcFpOtGbziq2nPAYv2PoJP30U6npajYKrRTw/DVmetim KPIorvpMTd5ZP4DmcCVaNkc7W/798csGEJ1fEyqpBJeMxT3yXAvL7libNEXJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQrVs2izSQSyfyt+L8ftJbYO1i8QwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHHS4zguXXPXr5uB8FmYoqc5LMTtJeCvkFqM LLQjTm75hKfpAVnY1pniZhWUwdGvO1eWIDtWI6ePUde/oU/qtf+EN3nDufNFXGDd DPFyKtNAqPr4D8e7B0hDJaE3fgK2dV05VdUXiKpOOCdcfv0UXmTsjinpFbQr2bb9 il5sF5DPGMBnRrXTK4wIs2Epz2SSWd3+NgKslzGdPb8AvC/c7mJWt8BJCzD7WvNp qrd67Csib8xas6EJDZqxZniqd+9w0/poEiR+EddkxTgnV9KM8vu9HkdnWCwsHNN6 15tuLA9erSCXQmNzqaD5suGCExJttko3gobqyMP0T4XLYFCYhe0= -----END CERTIFICATE-----Generated at Fri Mar 27 01:57:40 2026 by rpki-client