$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: U5T0HtLcoJeg7TYDL7zFwAbeW5qoNBYvC4pT4EvXFQU= Subject key identifier: 09:83:0F:9F:59:59:20:C6:B0:A9:64:C5:95:DB:BB:26:E5:C0:AF:17 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 68880A86066C82301D9DD9EF9EC651A64CCF8A7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 021D Signing time: Thu 26 Mar 2026 01:21:47 +0000 Manifest this update: Thu 26 Mar 2026 01:16:47 +0000 Manifest next update: Sun 29 Mar 2026 08:13:47 +0000 Files and hashes: 1: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: YocausaXZPrv2bbAMehQ9tYHQjkPZdRz8XV4ORjD90g=) 2: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 08:13:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:88:0a:86:06:6c:82:30:1d:9d:d9:ef:9e:c6:51:a6:4c:cf:8a:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Mar 26 01:16:47 2026 GMT Not After : Mar 29 08:13:47 2026 GMT Subject: CN=09830F9F595920C6B0A964C595DBBB26E5C0AF17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:e5:03:44:d3:c3:9e:39:c2:7d:57:52:b3:98: 9f:07:ca:a6:1d:a6:3f:34:8c:07:92:9e:a7:91:7b: 17:c7:61:bb:82:1f:b7:2f:ae:86:59:f0:32:56:77: 37:cf:de:ef:91:a0:71:d3:59:68:4c:56:4c:c8:b3: b5:66:9c:c9:a0:a6:ff:70:94:ac:2a:c3:c6:45:6c: 56:b5:e1:7f:4a:fe:50:05:06:44:cc:16:5f:78:07: 7d:da:bf:a4:21:c0:a9:23:9f:45:2b:85:40:ea:0f: fa:04:3d:78:42:6c:16:f5:0a:84:01:1b:ea:c1:73: ce:35:0b:d3:99:b8:92:93:ac:c8:b2:64:b4:97:41: 5b:83:49:2c:bb:db:70:ef:cf:06:b7:77:51:59:ac: e1:80:ed:e9:d7:a7:61:09:84:a0:72:5e:8a:5c:35: 7b:56:a3:33:24:d7:12:50:35:6c:0a:e6:95:b1:fa: 23:59:1f:6d:fe:af:9c:8e:af:cb:45:4c:c1:9b:06: 55:96:29:69:34:73:57:01:9a:3e:f5:fd:a4:aa:94: fe:07:c4:66:fa:e0:9b:9d:7e:c7:fc:95:ed:b4:91: 2b:a4:c7:72:d3:ef:5f:f0:19:84:f3:bf:dc:45:77: 27:9e:dc:a0:c0:db:e8:ca:db:72:41:46:ec:a4:1a: 5a:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:83:0F:9F:59:59:20:C6:B0:A9:64:C5:95:DB:BB:26:E5:C0:AF:17 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:1f:2c:0e:ad:45:ba:a3:e5:fd:77:33:24:73:c2:3c:29:9b: 98:c1:31:48:0c:a3:7d:ec:f1:a1:40:c4:98:22:e2:d3:99:b7: 91:1a:7d:36:02:cb:0c:dd:0d:1f:75:a2:bb:c1:43:d3:8f:7c: b8:53:c7:c8:ab:c9:98:dc:93:b3:76:64:69:f4:57:46:1d:c1: e6:2d:35:ec:70:da:82:5d:f3:c2:5f:1c:a3:9d:b6:58:e6:53: 4f:54:ec:fa:44:30:65:02:c5:0d:e1:a4:48:47:f7:47:95:a5: 8a:af:9f:40:36:71:cc:92:f6:5e:25:79:2d:2e:ef:5b:98:4d: 97:af:f7:10:25:98:be:b5:0d:74:a8:06:c4:86:d5:23:33:09: 1d:64:05:90:13:b1:4e:6b:81:0e:f6:43:a8:7d:2d:c3:2b:8a: 51:c4:db:00:d8:9a:d9:68:f0:d6:86:19:a7:8d:2e:85:36:12: 9e:36:79:35:1f:47:87:af:bc:bd:e6:38:58:1a:94:3c:5d:44: b3:79:22:b3:b9:9d:96:a8:04:ce:36:b4:3e:8b:30:fa:e6:2e: 64:8f:aa:63:fb:5c:f3:d0:2b:d9:2c:bb:08:c8:a1:0f:27:06: 6c:e9:28:9e:63:0b:75:3e:6a:80:49:5a:0e:a7:03:54:9b:6d: d8:71:5b:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaIgKhgZsgjAdndnvnsZRpkzPinowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNjAzMjYwMTE2NDdaFw0yNjAzMjkwODEzNDdaMDMxMTAvBgNV BAMTKDA5ODMwRjlGNTk1OTIwQzZCMEE5NjRDNTk1REJCQjI2RTVDMEFGMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC35QNE08OeOcJ9V1KzmJ8HyqYd pj80jAeSnqeRexfHYbuCH7cvroZZ8DJWdzfP3u+RoHHTWWhMVkzIs7VmnMmgpv9w lKwqw8ZFbFa14X9K/lAFBkTMFl94B33av6QhwKkjn0UrhUDqD/oEPXhCbBb1CoQB G+rBc841C9OZuJKTrMiyZLSXQVuDSSy723Dvzwa3d1FZrOGA7enXp2EJhKByXopc NXtWozMk1xJQNWwK5pWx+iNZH23+r5yOr8tFTMGbBlWWKWk0c1cBmj71/aSqlP4H xGb64Judfsf8le20kSukx3LT71/wGYTzv9xFdyee3KDA2+jK23JBRuykGloFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCYMPn1lZIMawqWTFldu7JuXArxcwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAUfLA6tRbqj5f13MyRzwjwpm5jBMUgMo33s 8aFAxJgi4tOZt5EafTYCywzdDR91orvBQ9OPfLhTx8iryZjck7N2ZGn0V0YdweYt Nexw2oJd88JfHKOdtljmU09U7PpEMGUCxQ3hpEhH90eVpYqvn0A2ccyS9l4leS0u 71uYTZev9xAlmL61DXSoBsSG1SMzCR1kBZATsU5rgQ72Q6h9LcMrilHE2wDYmtlo 8NaGGaeNLoU2Ep42eTUfR4evvL3mOFgalDxdRLN5IrO5nZaoBM42tD6LMPrmLmSP qmP7XPPQK9ksuwjIoQ8nBmzpKJ5jC3U+aoBJWg6nA1SbbdhxW+E= -----END CERTIFICATE-----Generated at Thu Mar 26 17:00:39 2026 by rpki-client