$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: gQ4swzyXqxfuLoO55FRVTnoXS+FS89Hpr+C/+LaDH+g= Subject key identifier: 95:E7:D2:1C:14:6E:BF:D5:D6:7A:37:FB:78:15:6E:B9:47:8E:68:E2 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 6DFF1CF485AA18081DA48B9D3C4728EB53883EF8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 03E4 Signing time: Tue 24 Mar 2026 18:41:33 +0000 Manifest this update: Tue 24 Mar 2026 18:36:33 +0000 Manifest next update: Fri 27 Mar 2026 22:09:33 +0000 Files and hashes: 1: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: v2N5T+TQvnxuvxQScmLGoR06UW2k63OLn870chhrurc=) 2: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: EdTK4FK3eQfvTaQx0/MnvgXrIsoOGYEeaHZVSWQ/4bY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:09:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:ff:1c:f4:85:aa:18:08:1d:a4:8b:9d:3c:47:28:eb:53:88:3e:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Mar 24 18:36:33 2026 GMT Not After : Mar 27 22:09:33 2026 GMT Subject: CN=95E7D21C146EBFD5D67A37FB78156EB9478E68E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:24:26:4d:0d:6d:4a:a3:62:a6:4f:bf:84:5c: 2c:c5:f1:a2:c4:6c:d1:25:dd:c8:02:4a:35:53:35: 41:d5:8f:d4:dd:5a:e8:4f:fc:09:42:9b:3c:b5:c0: 41:33:7f:bb:d8:05:7b:21:1f:79:8d:45:4c:2b:9b: 7a:18:55:f3:6d:13:b0:96:0c:c8:b6:81:12:00:be: e8:59:07:8d:be:cd:c0:69:74:75:75:fe:c6:ee:a8: 66:76:d6:d8:83:04:de:c0:84:c9:0b:66:c0:76:ac: 51:c0:44:a5:87:15:b7:82:97:f0:2a:bb:5f:dd:02: 43:5b:ac:b6:66:22:2d:28:04:77:ff:47:0b:b4:b6: e6:b5:68:38:ec:44:2b:8b:20:a6:4d:af:c3:fe:e9: 55:fd:a6:d9:4f:3a:9e:98:d6:20:fe:c8:d2:02:46: 27:76:46:bb:73:ee:1c:ee:75:d5:f9:1c:6a:32:6d: 82:98:36:27:9b:d4:ee:b8:17:42:ee:8d:aa:c7:d7: 36:37:1a:83:cd:32:f1:5a:16:1f:aa:39:52:6b:a0: ef:01:05:4b:bd:fe:2e:f8:c0:ba:70:6d:2a:f1:35: 59:2d:04:52:43:f4:d9:1d:35:0a:dd:8e:86:31:c1: a3:1c:77:2c:6e:1d:86:40:2d:0a:b7:0a:82:c0:ee: dd:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:E7:D2:1C:14:6E:BF:D5:D6:7A:37:FB:78:15:6E:B9:47:8E:68:E2 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:68:65:f0:4c:34:93:92:5e:56:29:ad:92:4e:f6:c7:0f: 39:c1:1d:d0:30:75:0c:8b:65:aa:fa:49:ad:a3:70:b3:1e:f9: 41:4d:c3:3f:23:4c:1a:6e:0f:ff:ef:c5:99:b1:12:00:e4:99: 26:03:2b:cb:b0:68:e7:22:49:40:a3:24:6d:b1:29:64:9b:88: 2b:fe:64:af:a7:1a:bf:59:ef:05:75:aa:0e:fb:d1:90:77:12: 1a:9d:49:47:04:57:c9:f1:f6:29:83:45:1a:50:5c:2b:85:22: 14:ae:f7:f4:cc:3d:9d:25:e2:ee:8c:9d:c1:fa:5d:c4:ee:36: 28:6a:f6:f6:bc:62:f4:1c:65:a9:06:29:a8:0a:79:85:02:c8: af:d1:d8:a0:ea:e0:bb:84:24:20:a5:db:e8:84:81:cf:66:13: f7:b7:b6:db:78:42:c9:76:b6:bd:6d:77:09:b5:dd:98:30:f7: 4e:07:ed:83:f1:cc:a8:b1:d2:73:f8:df:6b:ea:86:e9:c1:05: 0e:c0:66:b8:86:07:40:01:be:9b:ba:9e:87:03:b7:80:91:ea: da:2a:39:ef:1a:bf:71:07:8a:5a:54:5a:81:c8:fd:25:b0:2b: ff:45:35:da:37:5e:9a:e5:72:1a:cb:7a:45:9e:56:c1:4e:63: ac:7a:1e:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbf8c9IWqGAgdpIudPEco61OIPvgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNjAzMjQxODM2MzNaFw0yNjAzMjcyMjA5MzNaMDMxMTAvBgNV BAMTKDk1RTdEMjFDMTQ2RUJGRDVENjdBMzdGQjc4MTU2RUI5NDc4RTY4RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJCZNDW1Ko2KmT7+EXCzF8aLE bNEl3cgCSjVTNUHVj9TdWuhP/AlCmzy1wEEzf7vYBXshH3mNRUwrm3oYVfNtE7CW DMi2gRIAvuhZB42+zcBpdHV1/sbuqGZ21tiDBN7AhMkLZsB2rFHARKWHFbeCl/Aq u1/dAkNbrLZmIi0oBHf/Rwu0tua1aDjsRCuLIKZNr8P+6VX9ptlPOp6Y1iD+yNIC Rid2Rrtz7hzuddX5HGoybYKYNieb1O64F0LujarH1zY3GoPNMvFaFh+qOVJroO8B BUu9/i74wLpwbSrxNVktBFJD9NkdNQrdjoYxwaMcdyxuHYZALQq3CoLA7t3tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlefSHBRuv9XWejf7eBVuuUeOaOIwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtIaGXwTDSTkl5WKa2STvbHDznBHdAwdQyL Zar6Sa2jcLMe+UFNwz8jTBpuD//vxZmxEgDkmSYDK8uwaOciSUCjJG2xKWSbiCv+ ZK+nGr9Z7wV1qg770ZB3EhqdSUcEV8nx9imDRRpQXCuFIhSu9/TMPZ0l4u6MncH6 XcTuNihq9va8YvQcZakGKagKeYUCyK/R2KDq4LuEJCCl2+iEgc9mE/e3ttt4Qsl2 tr1tdwm13Zgw904H7YPxzKix0nP432vqhunBBQ7AZriGB0ABvpu6nocDt4CR6toq Oe8av3EHilpUWoHI/SWwK/9FNdo3XprlchrLekWeVsFOY6x6HjE= -----END CERTIFICATE-----Generated at Thu Mar 26 20:36:48 2026 by rpki-client