$ rpki-client -vvf repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft File: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft (raw, json) Hash identifier: okWonseIQIw3FAtpScHm0ak9NeHOguXjv4cP2MsQxNg= Subject key identifier: 53:51:36:AE:C4:3B:DE:D8:AC:B0:CB:22:2B:38:25:3D:A7:0B:63:6D Authority key identifier: 45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 Certificate issuer: /CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Certificate serial: 797E3418FF0802D3C751E7826D513E4A5DCE5BB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject info access: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft Manifest number: 0241 Signing time: Tue 24 Mar 2026 17:41:46 +0000 Manifest this update: Tue 24 Mar 2026 17:36:46 +0000 Manifest next update: Sat 28 Mar 2026 01:54:46 +0000 Files and hashes: 1: 3130332e3139312e35352e302f32342d3234203d3e20313439393133.roa (hash: MzEupSrXlebebmZ66Gd92DusEJ4mRAdQ/8taDo8z+bk=) 2: 323030313a6466303a666534303a3a2f34382d3438203d3e20313439393133.roa (hash: a5a2FZuaU8+YwWyJiNpJaq/a07NXsjnc5SwcHCXziC4=) 3: 458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl (hash: 9uk5fO6mP7VFk7h7cuIrgxsHsUYygTnTaJqB/4y42kc=) 4: 3130332e3139312e35342e302f32342d3234203d3e20313439393133.roa (hash: CllgKLcIRd3lX7KQsM2tAZpeFF8Rj9z8kpx3sCEVEDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:54:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:7e:34:18:ff:08:02:d3:c7:51:e7:82:6d:51:3e:4a:5d:ce:5b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33 Validity Not Before: Mar 24 17:36:46 2026 GMT Not After : Mar 28 01:54:46 2026 GMT Subject: CN=535136AEC43BDED8ACB0CB222B38253DA70B636D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b2:88:c8:af:1a:ea:32:08:bb:05:5f:31:34: 31:10:ee:4c:a4:9e:10:fc:45:96:c4:86:fc:96:e2: 1a:7a:ca:e7:ed:97:0a:04:19:53:a1:ce:b4:08:db: d7:ca:2a:9d:7d:09:8a:e5:b7:fa:e0:ea:a4:20:74: 85:3a:9a:d7:04:b0:b7:dd:8f:c3:85:03:56:6f:a5: 31:7c:d2:04:26:a7:22:6b:b3:e4:16:71:dc:c0:e5: 57:eb:d8:c4:fd:73:df:54:ad:77:67:29:6b:8e:8d: 0c:33:12:19:d7:72:a5:56:7a:80:2d:90:01:97:94: 0a:47:0b:83:00:55:80:3e:05:9e:39:54:7c:37:51: f8:53:b5:73:e6:48:cb:d3:ec:0c:91:62:00:e2:b5: f2:18:aa:f2:8a:c6:e5:70:e1:0b:07:4d:4c:28:47: d6:1d:fc:40:99:e8:b8:f2:69:11:d7:7b:ea:34:1c: b0:81:f1:32:71:f2:40:24:02:26:d1:88:a7:61:92: f9:64:30:56:33:a2:82:0a:91:7b:c9:4f:63:de:c7: 78:73:09:09:f9:70:95:03:9f:ba:ef:99:e1:4a:fa: 86:f5:cd:d7:f5:fe:41:d4:96:51:54:77:eb:c7:d4: 88:76:d3:27:bc:14:65:d6:76:ff:b8:ac:2b:e5:63: ea:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:51:36:AE:C4:3B:DE:D8:AC:B0:CB:22:2B:38:25:3D:A7:0B:63:6D X509v3 Authority Key Identifier: keyid:45:8D:9A:2B:4C:22:FF:50:16:AE:2E:24:72:9D:23:E2:BE:0D:FD:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/386d6ba1-1f73-4776-8a6a-4f45120792b1/0/458D9A2B4C22FF5016AE2E24729D23E2BE0DFD33.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:f4:4f:0c:20:51:04:ed:fc:c5:02:bd:eb:4e:c0:cf:4b:a6: 51:b3:3e:f4:96:eb:bb:77:81:a0:0e:8d:3f:6a:63:a5:3a:d4: a8:e9:dd:dd:5d:74:9b:33:cd:ae:bc:61:da:3e:ad:38:e2:ff: 31:f7:ef:63:07:6f:45:72:2f:0d:ce:fe:6f:e4:7c:a8:8b:bd: 87:89:f0:43:43:ca:a0:c7:5f:50:4b:ae:83:ca:fc:93:0e:58: 72:cb:0f:c6:5d:65:a5:d0:54:1d:57:51:2d:1a:5c:67:bd:59: 83:88:19:f1:12:8b:64:74:1b:16:0d:44:05:a2:5c:80:bf:79: ae:72:a5:99:22:fb:7f:41:cc:c3:e4:bd:6c:cd:d2:4c:80:20: 05:72:00:34:15:07:ca:99:64:36:38:79:41:c3:3a:50:ff:f2: c5:45:92:77:03:52:3e:a7:0f:6a:c4:63:2f:f7:b3:48:cb:c1: ae:5e:5f:b7:c7:01:54:2d:85:cd:02:4b:85:fb:00:69:87:55: 7d:bd:a0:e9:99:7a:d2:75:8a:cc:07:8f:b0:40:53:5c:95:ac: 3b:b2:bc:06:42:0e:31:bc:08:13:bc:26:a7:cc:dc:b4:96:a1: a1:07:2f:6a:61:0c:6c:e0:68:1f:38:a8:60:d0:79:e8:8c:79: 27:1a:10:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeX40GP8IAtPHUeeCbVE+Sl3OW7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJC RTBERkQzMzAeFw0yNjAzMjQxNzM2NDZaFw0yNjAzMjgwMTU0NDZaMDMxMTAvBgNV BAMTKDUzNTEzNkFFQzQzQkRFRDhBQ0IwQ0IyMjJCMzgyNTNEQTcwQjYzNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCusojIrxrqMgi7BV8xNDEQ7kyk nhD8RZbEhvyW4hp6yuftlwoEGVOhzrQI29fKKp19CYrlt/rg6qQgdIU6mtcEsLfd j8OFA1ZvpTF80gQmpyJrs+QWcdzA5Vfr2MT9c99UrXdnKWuOjQwzEhnXcqVWeoAt kAGXlApHC4MAVYA+BZ45VHw3UfhTtXPmSMvT7AyRYgDitfIYqvKKxuVw4QsHTUwo R9Yd/ECZ6LjyaRHXe+o0HLCB8TJx8kAkAibRiKdhkvlkMFYzooIKkXvJT2Pex3hz CQn5cJUDn7rvmeFK+ob1zdf1/kHUllFUd+vH1Ih20ye8FGXWdv+4rCvlY+ozAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUU1E2rsQ73tissMsiKzglPacLY20wHwYDVR0j BBgwFoAURY2aK0wi/1AWri4kcp0j4r4N/TMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ODZkNmJhMS0xZjczLTQ3NzYtOGE2YS00ZjQ1MTIwNzkyYjEvMC80NThEOUEyQjRD MjJGRjUwMTZBRTJFMjQ3MjlEMjNFMkJFMERGRDMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIzRTJCRTBE RkQzMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzg2ZDZiYTEtMWY3My00Nzc2LThh NmEtNGY0NTEyMDc5MmIxLzAvNDU4RDlBMkI0QzIyRkY1MDE2QUUyRTI0NzI5RDIz RTJCRTBERkQzMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAj0TwwgUQTt/MUCvetOwM9LplGzPvSW67t3 gaAOjT9qY6U61Kjp3d1ddJszza68Ydo+rTji/zH372MHb0VyLw3O/m/kfKiLvYeJ 8ENDyqDHX1BLroPK/JMOWHLLD8ZdZaXQVB1XUS0aXGe9WYOIGfESi2R0GxYNRAWi XIC/ea5ypZki+39BzMPkvWzN0kyAIAVyADQVB8qZZDY4eUHDOlD/8sVFkncDUj6n D2rEYy/3s0jLwa5eX7fHAVQthc0CS4X7AGmHVX29oOmZetJ1iswHj7BAU1yVrDuy vAZCDjG8CBO8JqfM3LSWoaEHL2phDGzgaB84qGDQeeiMeScaENw= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:24 2026 by rpki-client