$ rpki-client -vvf repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft File: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft (raw, json) Hash identifier: nqf0Ih/MuPzvd75xT5N8gh0F2PKMRHiDzQXCMo8yl0Q= Subject key identifier: EB:1E:4F:27:A1:97:9F:BE:E5:39:6E:C0:56:F5:49:86:3F:EC:3C:B9 Authority key identifier: A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 Certificate issuer: /CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Certificate serial: 4BF34E8FA582027BAB09362C0CB6167B733B2B9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft Manifest number: 0144 Signing time: Wed 25 Mar 2026 05:52:42 +0000 Manifest this update: Wed 25 Mar 2026 05:47:42 +0000 Manifest next update: Sat 28 Mar 2026 08:29:42 +0000 Files and hashes: 1: A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl (hash: T8vBWflAG6T76qOrZOZrR/TOmvtgnpVhO8RJ0WjiV1Y=) 2: 3130332e3235352e3136342e302f32332d3233203d3e20313531393934.roa (hash: /Pah/oIgxRUN6pNGWVw40iRqNCV4jcOrtmfTg1sD+qo=) 3: 3130332e3235352e3136342e302f32342d3234203d3e20313531393934.roa (hash: iPd5Vsp7SJIqCGaHzuts8q6s6srq4ptesMqUjdGpaik=) 4: 3130332e3235352e3136352e302f32342d3234203d3e20313531393934.roa (hash: BQ0H7gi4SJV0y+7S/QlaiH+pulhKQ9utlluA/Qrt3EM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:29:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f3:4e:8f:a5:82:02:7b:ab:09:36:2c:0c:b6:16:7b:73:3b:2b:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4D9099C365D8BB9FA96A2A51FA4C61F105EF848 Validity Not Before: Mar 25 05:47:42 2026 GMT Not After : Mar 28 08:29:42 2026 GMT Subject: CN=EB1E4F27A1979FBEE5396EC056F549863FEC3CB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:64:37:1c:9b:e6:dc:13:8d:a2:df:b8:ad:0f: 75:63:a1:8d:35:72:23:f6:43:64:73:ae:1d:16:78: 19:ad:82:9a:83:ac:a7:52:80:3b:d5:d7:23:a5:c7: e1:3b:b7:78:a9:95:16:66:f4:46:2f:ab:30:b3:90: 03:aa:9f:bb:43:e4:c4:c0:eb:0c:a6:57:7b:6b:27: 68:a6:55:4d:f8:52:36:05:c2:58:a2:2a:dc:76:ae: 06:e1:5f:43:ee:c2:0a:73:a1:1a:72:7e:64:c8:1d: 88:6a:e7:1e:26:05:d0:2a:ce:45:4d:58:78:03:33: cc:ed:a6:62:9d:03:6f:9b:25:68:1d:ba:d6:d9:e4: bb:81:34:64:2f:ce:2b:31:e2:30:31:9b:ca:2f:24: 40:2f:16:61:13:17:bd:f3:ae:0d:06:6f:b5:f6:c2: c8:52:cb:dc:a1:ce:b5:1c:9c:bf:3a:13:53:38:ca: 49:a0:53:d9:21:af:0a:1e:2a:76:95:55:4f:c8:83: 60:d4:b7:a8:2c:aa:dc:6c:1c:1f:1d:5f:22:6a:0b: b6:84:26:69:e1:1a:80:fa:01:6b:cd:7b:14:00:33: f4:da:50:56:a5:06:e6:97:f5:7f:4f:97:11:c9:15: 91:18:6e:e1:75:86:49:42:95:32:7f:d9:eb:67:99: 0b:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:1E:4F:27:A1:97:9F:BE:E5:39:6E:C0:56:F5:49:86:3F:EC:3C:B9 X509v3 Authority Key Identifier: keyid:A4:D9:09:9C:36:5D:8B:B9:FA:96:A2:A5:1F:A4:C6:1F:10:5E:F8:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c47ef5c-5bba-4cd1-8dc9-173e2751f4f4/0/A4D9099C365D8BB9FA96A2A51FA4C61F105EF848.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:57:b9:2e:42:72:fb:a4:60:1b:3a:3d:a9:35:17:80:1b:14: 19:5d:0b:14:76:31:fd:11:28:6e:35:7f:e9:4c:9e:00:34:cb: b6:d2:ae:7c:60:1b:cf:06:91:ad:62:55:7c:d0:41:e9:e6:2d: 18:61:b9:bc:d8:45:83:fd:47:21:4d:67:e0:5f:fd:d3:1e:0a: e7:81:0c:63:58:be:ee:5c:b3:9e:35:ae:b0:85:6c:7d:94:75: 00:a2:1a:bd:b5:e9:cf:74:a9:8c:e2:47:1c:73:4f:d9:a6:df: 7a:88:c0:9c:cd:ac:f2:46:90:70:ec:86:49:d0:46:ee:27:09: 4a:14:c4:32:18:6d:3c:59:d6:09:2d:86:11:38:44:b7:bc:eb: d5:a8:de:9e:72:d4:2c:69:f9:45:27:b2:12:b4:ac:2d:19:ff: 7a:9d:65:ce:c7:b3:d7:44:4b:77:e9:bc:ce:d6:bf:e1:0b:a1: ea:5e:a2:7a:d1:74:c0:66:43:8b:e3:e4:7a:66:2e:df:f4:cb: 53:62:f7:3b:4c:fc:33:3c:b4:74:f1:6a:ac:37:dc:07:7f:1c: 99:a7:e5:81:85:35:08:d2:90:9e:21:f9:11:22:f1:a5:82:48: 23:24:dd:df:65:32:1c:9a:df:f0:47:9d:d5:a9:0c:0f:83:36: e6:a7:75:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/NOj6WCAnurCTYsDLYWe3M7K58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYx MDVFRjg0ODAeFw0yNjAzMjUwNTQ3NDJaFw0yNjAzMjgwODI5NDJaMDMxMTAvBgNV BAMTKEVCMUU0RjI3QTE5NzlGQkVFNTM5NkVDMDU2RjU0OTg2M0ZFQzNDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnZDccm+bcE42i37itD3VjoY01 ciP2Q2Rzrh0WeBmtgpqDrKdSgDvV1yOlx+E7t3iplRZm9EYvqzCzkAOqn7tD5MTA 6wymV3trJ2imVU34UjYFwliiKtx2rgbhX0PuwgpzoRpyfmTIHYhq5x4mBdAqzkVN WHgDM8ztpmKdA2+bJWgdutbZ5LuBNGQvzisx4jAxm8ovJEAvFmETF73zrg0Gb7X2 wshSy9yhzrUcnL86E1M4ykmgU9khrwoeKnaVVU/Ig2DUt6gsqtxsHB8dXyJqC7aE JmnhGoD6AWvNexQAM/TaUFalBuaX9X9PlxHJFZEYbuF1hklClTJ/2etnmQs5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6x5PJ6GXn77lOW7AVvVJhj/sPLkwHwYDVR0j BBgwFoAUpNkJnDZdi7n6lqKlH6TGHxBe+EgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzQ3ZWY1Yy01YmJhLTRjZDEtOGRjOS0xNzNlMjc1MWY0ZjQvMC9BNEQ5MDk5QzM2 NUQ4QkI5RkE5NkEyQTUxRkE0QzYxRjEwNUVGODQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2MUYxMDVF Rjg0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M0N2VmNWMtNWJiYS00Y2QxLThk YzktMTczZTI3NTFmNGY0LzAvQTREOTA5OUMzNjVEOEJCOUZBOTZBMkE1MUZBNEM2 MUYxMDVFRjg0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdXuS5CcvukYBs6Pak1F4AbFBldCxR2Mf0R KG41f+lMngA0y7bSrnxgG88Gka1iVXzQQenmLRhhubzYRYP9RyFNZ+Bf/dMeCueB DGNYvu5cs541rrCFbH2UdQCiGr216c90qYziRxxzT9mm33qIwJzNrPJGkHDshknQ Ru4nCUoUxDIYbTxZ1gkthhE4RLe869Wo3p5y1Cxp+UUnshK0rC0Z/3qdZc7Hs9dE S3fpvM7Wv+ELoepeonrRdMBmQ4vj5HpmLt/0y1Ni9ztM/DM8tHTxaqw33Ad/HJmn 5YGFNQjSkJ4h+REi8aWCSCMk3d9lMhya3/BHndWpDA+DNuandTs= -----END CERTIFICATE-----Generated at Thu Mar 26 20:41:37 2026 by rpki-client