$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: pMKCOwHSId1x7PfepcWbrw1vVLlXZDsfa58ayxEoCAU= Subject key identifier: C5:2E:B7:A8:F6:F4:B0:3B:2C:3A:5C:86:BB:78:2F:92:4E:44:59:4B Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: 13B336AAC4C9981D5FA4C008558F357DC3B3831F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 055F Signing time: Tue 24 Mar 2026 00:42:31 +0000 Manifest this update: Tue 24 Mar 2026 00:37:31 +0000 Manifest next update: Fri 27 Mar 2026 05:23:31 +0000 Files and hashes: 1: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) 2: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 3: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: Z3mdGNlcmK8S8Ov4+tVWQEvakNWfdfn3yyhuJuguVEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 05:23:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:b3:36:aa:c4:c9:98:1d:5f:a4:c0:08:55:8f:35:7d:c3:b3:83:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Mar 24 00:37:31 2026 GMT Not After : Mar 27 05:23:31 2026 GMT Subject: CN=C52EB7A8F6F4B03B2C3A5C86BB782F924E44594B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:96:2a:94:b1:db:f0:55:9d:cf:c2:b0:bc:26: 1e:ea:13:28:1c:65:9f:32:59:59:43:92:07:13:32: e8:8b:33:7c:99:c9:b4:a0:b3:4d:15:ef:73:6f:a9: d4:b9:0f:15:89:7b:e3:da:ff:8b:cf:00:1a:ea:d6: d4:08:14:9f:bb:ea:79:1b:c7:e1:9f:72:1b:aa:d1: 0a:67:7b:ab:16:0c:8c:2a:ef:c9:3d:97:d2:49:29: 5a:25:0d:f4:e6:a9:a0:1d:38:3b:2e:87:54:c5:ab: 64:15:8a:1e:5c:28:4c:b8:44:e0:ad:45:32:6a:ef: d7:e5:a9:3e:50:a5:b1:d4:1d:23:21:10:2b:42:aa: 0c:0e:a1:ff:81:ed:16:87:51:f1:a0:74:70:91:ad: 8f:26:39:1b:4e:c4:7d:9c:aa:a8:9d:7a:a5:d1:3e: 76:4b:36:d9:25:29:ab:fc:0f:f4:2b:03:24:7f:d0: fc:8b:52:fe:40:ea:84:0c:86:a4:04:be:6a:a3:c8: cb:ee:3d:82:21:3a:09:b2:ae:fe:48:43:02:45:d8: 66:ce:a5:6f:76:2c:b4:67:de:9f:48:c3:be:3f:c6: 51:c1:cf:bf:a4:cd:82:72:d7:0d:7f:ea:25:51:24: fd:ef:46:78:b6:fc:52:88:06:c1:84:a7:6b:f9:13: db:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:2E:B7:A8:F6:F4:B0:3B:2C:3A:5C:86:BB:78:2F:92:4E:44:59:4B X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:bf:b1:be:6a:33:9b:98:aa:76:1d:d4:10:46:0f:b9:2c:9e: b2:71:98:37:cd:4d:4c:e0:d1:79:c7:2c:e2:f4:2b:65:01:04: 4c:d9:5c:39:b1:94:d1:42:85:20:2f:85:af:2d:5a:4c:76:13: 1d:b1:61:f4:47:52:38:b4:6a:a5:35:11:5d:86:2e:69:c0:9a: 55:aa:90:f6:4c:27:85:e4:87:a4:98:92:e7:fe:87:90:de:8c: a1:39:6f:35:27:f7:d6:2c:52:26:11:72:7d:2f:aa:96:f0:c8: e0:31:15:34:95:90:b4:e0:45:56:16:f3:78:42:dc:ff:3e:06: 9f:c4:b4:0a:4c:2b:ac:da:ba:f8:81:61:64:7d:53:57:5f:44: 32:35:3c:b6:20:d6:b3:0b:45:68:86:6a:82:70:0e:65:40:b2: 7a:32:1e:9f:3a:2b:78:a3:de:96:82:c1:b9:82:a4:22:69:4d: 9d:8a:02:6f:ca:20:da:5e:d0:33:98:1e:6a:78:5e:08:e4:87: da:93:88:b0:04:8e:62:6d:48:5f:02:7d:0e:63:89:c0:ff:7c: 87:ec:ee:96:0b:cf:f3:59:18:56:d9:fe:8c:30:c8:99:f3:15: 8c:ac:29:4c:cd:9e:21:9f:0d:4a:25:f9:a0:4e:ba:d3:be:a3: b6:68:94:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE7M2qsTJmB1fpMAIVY81fcOzgx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNjAzMjQwMDM3MzFaFw0yNjAzMjcwNTIzMzFaMDMxMTAvBgNV BAMTKEM1MkVCN0E4RjZGNEIwM0IyQzNBNUM4NkJCNzgyRjkyNEU0NDU5NEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5liqUsdvwVZ3PwrC8Jh7qEygc ZZ8yWVlDkgcTMuiLM3yZybSgs00V73NvqdS5DxWJe+Pa/4vPABrq1tQIFJ+76nkb x+Gfchuq0Qpne6sWDIwq78k9l9JJKVolDfTmqaAdODsuh1TFq2QVih5cKEy4ROCt RTJq79flqT5QpbHUHSMhECtCqgwOof+B7RaHUfGgdHCRrY8mORtOxH2cqqideqXR PnZLNtklKav8D/QrAyR/0PyLUv5A6oQMhqQEvmqjyMvuPYIhOgmyrv5IQwJF2GbO pW92LLRn3p9Iw74/xlHBz7+kzYJy1w1/6iVRJP3vRni2/FKIBsGEp2v5E9s3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxS63qPb0sDssOlyGu3gvkk5EWUswHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEC/sb5qM5uYqnYd1BBGD7ksnrJxmDfNTUzg 0XnHLOL0K2UBBEzZXDmxlNFChSAvha8tWkx2Ex2xYfRHUji0aqU1EV2GLmnAmlWq kPZMJ4Xkh6SYkuf+h5DejKE5bzUn99YsUiYRcn0vqpbwyOAxFTSVkLTgRVYW83hC 3P8+Bp/EtApMK6zauviBYWR9U1dfRDI1PLYg1rMLRWiGaoJwDmVAsnoyHp86K3ij 3paCwbmCpCJpTZ2KAm/KINpe0DOYHmp4Xgjkh9qTiLAEjmJtSF8CfQ5jicD/fIfs 7pYLz/NZGFbZ/owwyJnzFYysKUzNniGfDUol+aBOutO+o7ZolNk= -----END CERTIFICATE-----Generated at Thu Mar 26 07:43:07 2026 by rpki-client