$ rpki-client -vvf repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft File: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft (raw, json) Hash identifier: TzF/YcW0wlfWiZDnw0rwQTFy1r7t7FxxyFmgACeR6oA= Subject key identifier: 6D:72:94:93:6B:FD:51:DB:7A:72:A4:5F:91:A8:EE:9B:30:D6:77:0C Authority key identifier: B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 Certificate issuer: /CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Certificate serial: 1AF95411B466D9C76618952B62161A4A0E3FD50D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft Manifest number: 01F9 Signing time: Wed 25 Mar 2026 17:01:37 +0000 Manifest this update: Wed 25 Mar 2026 16:56:37 +0000 Manifest next update: Sat 28 Mar 2026 21:49:37 +0000 Files and hashes: 1: 3130332e32302e3231392e302f32342d3234203d3e20313439393638.roa (hash: Qxhmm+FrOJl9N2gO3uMNdKcckPxH2c3YLUPCuEz7Xsg=) 2: B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl (hash: D3uZiLE1gPWMEO9IS+XFh/Ork7VWNe5c7ttv5WJW3pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 21:49:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:f9:54:11:b4:66:d9:c7:66:18:95:2b:62:16:1a:4a:0e:3f:d5:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0 Validity Not Before: Mar 25 16:56:37 2026 GMT Not After : Mar 28 21:49:37 2026 GMT Subject: CN=6D7294936BFD51DB7A72A45F91A8EE9B30D6770C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:be:a6:e7:86:ef:5a:78:5d:fe:39:5f:1a:45: be:70:bf:bc:3a:c0:1f:fe:6b:a5:a4:3f:a2:82:91: ce:bc:52:2c:43:8a:e2:92:00:02:7c:5d:be:66:a7: 97:9b:5f:61:e7:39:a1:15:13:07:b5:11:4b:56:1e: 61:3b:1b:4c:b6:c6:e0:06:59:71:4c:2a:09:7f:85: ed:2e:f8:1d:9c:6e:03:80:aa:0e:5d:b4:86:81:3b: 01:4c:0d:bb:ba:3c:c4:ab:93:e5:31:ae:71:10:1f: 46:e9:48:8a:f8:46:33:1e:83:bc:d4:16:5e:3b:14: b7:74:db:a1:96:9a:ba:60:af:ed:59:1e:dd:c5:3e: 2a:a7:d7:81:af:16:79:14:29:2c:c3:c4:f3:54:a1: ba:8a:17:6a:1e:dd:8f:7a:96:b5:eb:fc:b6:aa:6a: d3:92:6f:2b:a5:63:b0:20:85:f8:1c:7b:c9:a0:ac: e5:72:b4:8e:4a:6b:22:17:3a:c4:a8:8a:21:4b:80: 0d:53:20:f9:89:90:eb:11:99:8c:db:a2:7a:4b:2d: 94:8a:5f:55:65:7f:6a:45:e1:39:ff:73:22:b1:6a: 1d:7b:b0:1a:84:49:f3:3a:64:1f:cf:00:53:56:a5: 9b:1f:42:ed:c1:15:0b:9d:10:50:dc:d2:3f:9a:e5: 44:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:72:94:93:6B:FD:51:DB:7A:72:A4:5F:91:A8:EE:9B:30:D6:77:0C X509v3 Authority Key Identifier: keyid:B4:38:1C:63:67:4B:5D:9A:9B:8C:44:C1:3C:F1:9E:7D:D3:21:F7:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29b3be62-3597-4fe8-a795-fc9ba1202344/0/B4381C63674B5D9A9B8C44C13CF19E7DD321F7C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ce:6e:5e:86:05:c5:46:5d:9d:97:39:fb:87:f0:c4:8f:11:38: 17:b1:ba:67:f5:7b:e8:1b:ac:56:90:18:56:94:f5:07:d3:42: 98:13:3d:90:de:5a:ae:10:e2:74:20:94:fc:76:c8:1d:54:18: 7d:9e:e2:2a:8e:05:4a:49:fd:9d:51:1a:a6:7f:5a:1c:62:af: 66:70:72:03:20:61:d0:0a:a3:79:44:88:9c:c3:84:3e:99:aa: 3c:15:d1:a0:8a:08:98:0d:9e:46:7e:25:6f:ed:ed:57:ba:39: a6:c7:cb:f5:72:51:e5:b1:0e:41:fd:eb:87:20:9e:45:45:b1: 83:0f:82:d0:ba:df:50:bb:85:a8:b1:ee:0f:d3:94:1c:b0:78: 0b:b2:50:6c:2f:47:0a:48:ec:08:67:ee:9d:83:b4:b3:04:17: 09:f3:cd:21:66:ee:e1:7b:73:1a:fa:d6:59:fa:b1:40:bc:e6: 2d:43:bf:df:a5:c4:ce:a2:24:e4:61:87:b5:0f:92:d1:33:af: 71:40:b8:e4:63:65:ee:b7:48:b5:03:ba:18:d8:5f:83:cc:3b: 2e:ca:bd:35:29:6f:b8:65:c4:84:65:f1:9b:7c:7a:fb:7a:6c: 0b:48:92:84:87:ec:3b:cb:03:c4:d4:f1:34:41:80:a5:cb:8b: 54:70:d7:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGvlUEbRm2cdmGJUrYhYaSg4/1Q0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0RE MzIxRjdDMDAeFw0yNjAzMjUxNjU2MzdaFw0yNjAzMjgyMTQ5MzdaMDMxMTAvBgNV BAMTKDZENzI5NDkzNkJGRDUxREI3QTcyQTQ1RjkxQThFRTlCMzBENjc3MEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCovqbnhu9aeF3+OV8aRb5wv7w6 wB/+a6WkP6KCkc68UixDiuKSAAJ8Xb5mp5ebX2HnOaEVEwe1EUtWHmE7G0y2xuAG WXFMKgl/he0u+B2cbgOAqg5dtIaBOwFMDbu6PMSrk+UxrnEQH0bpSIr4RjMeg7zU Fl47FLd026GWmrpgr+1ZHt3FPiqn14GvFnkUKSzDxPNUobqKF2oe3Y96lrXr/Laq atOSbyulY7Aghfgce8mgrOVytI5KayIXOsSoiiFLgA1TIPmJkOsRmYzbonpLLZSK X1Vlf2pF4Tn/cyKxah17sBqESfM6ZB/PAFNWpZsfQu3BFQudEFDc0j+a5USbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbXKUk2v9Udt6cqRfkajumzDWdwwwHwYDVR0j BBgwFoAUtDgcY2dLXZqbjETBPPGefdMh98AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWIzYmU2Mi0zNTk3LTRmZTgtYTc5NS1mYzliYTEyMDIzNDQvMC9CNDM4MUM2MzY3 NEI1RDlBOUI4QzQ0QzEzQ0YxOUU3REQzMjFGN0MwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlFN0REMzIx RjdDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjliM2JlNjItMzU5Ny00ZmU4LWE3 OTUtZmM5YmExMjAyMzQ0LzAvQjQzODFDNjM2NzRCNUQ5QTlCOEM0NEMxM0NGMTlF N0REMzIxRjdDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM5uXoYFxUZdnZc5+4fwxI8ROBexumf1e+gb rFaQGFaU9QfTQpgTPZDeWq4Q4nQglPx2yB1UGH2e4iqOBUpJ/Z1RGqZ/Whxir2Zw cgMgYdAKo3lEiJzDhD6ZqjwV0aCKCJgNnkZ+JW/t7Ve6OabHy/VyUeWxDkH964cg nkVFsYMPgtC631C7haix7g/TlByweAuyUGwvRwpI7Ahn7p2DtLMEFwnzzSFm7uF7 cxr61ln6sUC85i1Dv9+lxM6iJORhh7UPktEzr3FAuORjZe63SLUDuhjYX4PMOy7K vTUpb7hlxIRl8Zt8evt6bAtIkoSH7DvLA8TU8TRBgKXLi1Rw13M= -----END CERTIFICATE-----Generated at Thu Mar 26 21:44:58 2026 by rpki-client