$ rpki-client -vvf repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft File: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft (raw, json) Hash identifier: VTZ9xbBhLh1KlVfKl32i180rlfkZ31up3rtn0yDS+9w= Subject key identifier: 7B:0F:3F:10:33:BC:AD:E8:81:7C:69:89:82:B1:0A:A6:52:34:A5:F4 Authority key identifier: 4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC Certificate issuer: /CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Certificate serial: 58BC0214452B41C35C23C80518914EB09E666DE8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft Manifest number: 01E7 Signing time: Tue 24 Mar 2026 04:20:55 +0000 Manifest this update: Tue 24 Mar 2026 04:15:55 +0000 Manifest next update: Fri 27 Mar 2026 11:49:55 +0000 Files and hashes: 1: 4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl (hash: 9r9rs9NxeNrBVeKPdHDBg/NDT717kQE337/l0AK+rX4=) 2: 3130332e3231372e37362e302f32342d3234203d3e20313431393035.roa (hash: wuNIHLORz4Vdmg8tO/nySnMFBaLuy8MnBl+qb8R+V1Q=) 3: 3130332e3136342e38342e302f32342d3234203d3e20313431393035.roa (hash: cnuV3XBMOXYCEsZye3rtB+j/sH8H265eHTPTRDcKOJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 11:49:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:bc:02:14:45:2b:41:c3:5c:23:c8:05:18:91:4e:b0:9e:66:6d:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AAA6F5B5D0E6858FC56A304655C7BB397518DCC Validity Not Before: Mar 24 04:15:55 2026 GMT Not After : Mar 27 11:49:55 2026 GMT Subject: CN=7B0F3F1033BCADE8817C698982B10AA65234A5F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:ff:28:e8:50:87:66:0d:75:fa:61:2c:c5:dc: a2:c1:07:67:64:18:09:f7:62:ba:14:42:93:be:ee: 3e:ad:a3:a3:1b:6a:81:73:4c:bd:4f:1f:37:7a:e4: 97:5e:f8:f9:37:4c:5f:5a:de:c9:a6:3a:be:cf:a9: 66:64:92:cf:96:f8:7e:6f:bb:2c:fe:61:1b:30:1f: 96:47:9f:8b:5a:ff:0c:95:6a:1c:5b:8f:73:f7:f7: ec:ad:ad:f8:de:3c:6d:93:e7:30:2a:ec:d5:42:7d: a1:ff:5b:3a:54:77:e1:61:07:35:dc:1c:8a:99:ad: c3:95:61:64:f4:e0:e1:2e:4c:a8:bc:65:a0:73:d8: 64:ea:55:5b:67:e7:14:2b:08:e5:28:f7:ef:94:af: 95:87:ee:04:9d:fb:88:9a:57:dc:80:fa:07:51:e0: 58:dd:ca:a7:39:8b:58:b5:fc:e6:75:76:07:c1:a5: 21:f2:3a:98:46:3e:cc:61:31:44:db:8b:e1:76:72: 38:c5:10:61:d8:c7:9c:a8:ae:ae:2e:89:db:7c:92: d6:c0:4d:3b:41:f5:91:2b:8a:c3:b6:c5:91:a7:30: 6f:37:fd:16:e3:99:51:5e:3f:36:41:40:67:c3:02: 22:d3:fd:4e:a9:e2:5f:c5:78:bc:db:c3:77:8b:de: a7:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:0F:3F:10:33:BC:AD:E8:81:7C:69:89:82:B1:0A:A6:52:34:A5:F4 X509v3 Authority Key Identifier: keyid:4A:AA:6F:5B:5D:0E:68:58:FC:56:A3:04:65:5C:7B:B3:97:51:8D:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27ee6bf3-2bda-4ca4-a5e7-6e70632404b4/0/4AAA6F5B5D0E6858FC56A304655C7BB397518DCC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1d:ac:e6:ac:89:b7:30:c8:04:dc:78:ca:b2:8f:69:f1:7a: 91:b3:1d:89:39:78:f8:ab:00:0a:e9:fb:61:41:26:a2:08:38: 0d:f8:c4:1c:a7:31:34:69:5d:46:0e:72:22:29:6a:8c:91:9f: fd:75:c6:f1:8e:0e:03:fd:02:db:64:1a:b6:c0:ed:5e:74:de: 16:e0:03:68:7c:76:fe:f9:38:14:9d:b2:20:f7:ae:19:7c:f5: 50:75:10:51:46:d5:e8:bd:3e:36:60:08:78:a8:22:7f:e5:75: 70:2a:85:9b:46:b2:96:a6:c3:3b:08:05:bc:92:9f:ef:57:3e: 1e:56:8a:e8:a8:be:4e:d5:9b:d6:9c:0a:4d:9d:c8:03:fa:00: c2:60:9c:ff:6e:a2:5a:c8:d6:54:92:e7:ba:a3:33:49:6d:cd: 5f:f5:b2:c6:e5:a4:c4:6d:07:8b:18:76:38:a7:47:2c:fa:22: 21:c6:7a:6c:c8:8f:8d:02:43:a9:64:fb:51:46:6c:77:2a:38: f4:69:fc:3d:dc:48:0b:5d:ba:41:b7:0d:05:71:9b:92:06:ae: 49:d8:af:e7:55:7b:09:11:a8:a6:7e:b9:d8:20:ce:47:2b:37: 8f:a6:68:bf:f4:cb:6e:dc:0a:92:47:e9:05:f3:76:58:56:d5: c0:00:c9:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWLwCFEUrQcNcI8gFGJFOsJ5mbegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5 NzUxOERDQzAeFw0yNjAzMjQwNDE1NTVaFw0yNjAzMjcxMTQ5NTVaMDMxMTAvBgNV BAMTKDdCMEYzRjEwMzNCQ0FERTg4MTdDNjk4OTgyQjEwQUE2NTIzNEE1RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/yjoUIdmDXX6YSzF3KLBB2dk GAn3YroUQpO+7j6to6MbaoFzTL1PHzd65Jde+Pk3TF9a3smmOr7PqWZkks+W+H5v uyz+YRswH5ZHn4ta/wyVahxbj3P39+ytrfjePG2T5zAq7NVCfaH/WzpUd+FhBzXc HIqZrcOVYWT04OEuTKi8ZaBz2GTqVVtn5xQrCOUo9++Ur5WH7gSd+4iaV9yA+gdR 4Fjdyqc5i1i1/OZ1dgfBpSHyOphGPsxhMUTbi+F2cjjFEGHYx5yorq4uidt8ktbA TTtB9ZErisO2xZGnMG83/RbjmVFePzZBQGfDAiLT/U6p4l/FeLzbw3eL3qe7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUew8/EDO8reiBfGmJgrEKplI0pfQwHwYDVR0j BBgwFoAUSqpvW10OaFj8VqMEZVx7s5dRjcwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2VlNmJmMy0yYmRhLTRjYTQtYTVlNy02ZTcwNjMyNDA0YjQvMC80QUFBNkY1QjVE MEU2ODU4RkM1NkEzMDQ2NTVDN0JCMzk3NTE4RENDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdCQjM5NzUx OERDQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdlZTZiZjMtMmJkYS00Y2E0LWE1 ZTctNmU3MDYzMjQwNGI0LzAvNEFBQTZGNUI1RDBFNjg1OEZDNTZBMzA0NjU1QzdC QjM5NzUxOERDQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIdrOasibcwyATceMqyj2nxepGzHYk5ePir AArp+2FBJqIIOA34xBynMTRpXUYOciIpaoyRn/11xvGODgP9AttkGrbA7V503hbg A2h8dv75OBSdsiD3rhl89VB1EFFG1ei9PjZgCHioIn/ldXAqhZtGspamwzsIBbyS n+9XPh5Wiuiovk7Vm9acCk2dyAP6AMJgnP9uolrI1lSS57qjM0ltzV/1ssblpMRt B4sYdjinRyz6IiHGemzIj40CQ6lk+1FGbHcqOPRp/D3cSAtdukG3DQVxm5IGrknY r+dVewkRqKZ+udggzkcrN4+maL/0y27cCpJH6QXzdlhW1cAAyTg= -----END CERTIFICATE-----Generated at Thu Mar 26 08:03:00 2026 by rpki-client