$ rpki-client -vvf repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft File: 461B039429CF609C76235D70C58DE1D0AB6EA915.mft (raw, json) Hash identifier: rahEnQrVtWCe8cMFVjeAyOPcUjD3RgYCs4SK1fTKK70= Subject key identifier: 7C:E5:EF:73:18:0D:32:13:D6:41:9F:A6:53:4C:1B:14:0C:0F:E0:6E Authority key identifier: 46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 Certificate issuer: /CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Certificate serial: 1FBB5AFB94BCBEBFDC3C30D689E9BD657A5C887C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft Manifest number: 014A Signing time: Tue 24 Mar 2026 14:21:42 +0000 Manifest this update: Tue 24 Mar 2026 14:16:42 +0000 Manifest next update: Fri 27 Mar 2026 22:51:42 +0000 Files and hashes: 1: 461B039429CF609C76235D70C58DE1D0AB6EA915.crl (hash: z+3RxJrCWQa+pMvxSnj/GxOWPyja2uIGluyP//uE93c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:51:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bb:5a:fb:94:bc:be:bf:dc:3c:30:d6:89:e9:bd:65:7a:5c:88:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=461B039429CF609C76235D70C58DE1D0AB6EA915 Validity Not Before: Mar 24 14:16:42 2026 GMT Not After : Mar 27 22:51:42 2026 GMT Subject: CN=7CE5EF73180D3213D6419FA6534C1B140C0FE06E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:ef:27:56:95:02:14:ab:52:89:7a:a5:1d:3c: f3:d1:e7:bb:39:8b:77:3c:63:18:f6:5a:9a:8e:97: 3a:1d:b9:58:d5:73:f5:00:ff:8d:b4:78:25:81:97: 26:b1:e1:91:88:99:8c:c8:80:1b:e7:39:2e:f5:12: 70:44:27:08:2d:d2:47:1a:11:f8:bb:98:6e:f3:90: 3c:e3:e4:42:f5:6a:1f:06:9e:af:25:43:06:49:d9: 58:94:96:b3:45:e5:1f:77:ee:0c:9f:27:03:a1:96: fe:ef:7f:db:85:ac:f6:40:01:9c:84:59:e4:5a:01: b0:c6:6b:bd:94:c7:77:02:94:25:7e:87:60:17:e5: 8d:b9:4b:d4:5d:7c:b5:de:ad:d0:52:c0:90:45:0e: 84:74:22:c5:d8:81:aa:36:c6:b3:ac:cd:bf:c3:94: e6:ce:44:5a:97:fe:05:21:e5:95:33:0e:01:12:ec: eb:94:97:a1:2c:1b:51:ab:ff:8a:a2:a8:12:6a:15: ae:1e:53:ae:77:4e:0b:bd:82:5e:d3:5d:b8:1c:d8: 25:e1:d4:fd:d5:cd:c5:c8:54:6c:ab:9f:15:de:87: 65:58:52:b0:5f:d8:c6:71:f5:13:5e:27:f7:c5:78: 00:a5:f7:61:3d:d4:82:63:3b:05:59:71:84:9d:ff: f8:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:E5:EF:73:18:0D:32:13:D6:41:9F:A6:53:4C:1B:14:0C:0F:E0:6E X509v3 Authority Key Identifier: keyid:46:1B:03:94:29:CF:60:9C:76:23:5D:70:C5:8D:E1:D0:AB:6E:A9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/461B039429CF609C76235D70C58DE1D0AB6EA915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4027fa02-e49f-4215-862b-7faaefd8ab3e/0/461B039429CF609C76235D70C58DE1D0AB6EA915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:b6:80:3f:ca:f4:22:5b:38:51:ea:6b:7a:08:8d:f7:f4:9a: ca:2b:e6:bb:37:ea:e6:95:b4:82:61:0f:69:d3:68:0e:c1:64: 50:6f:b5:a1:3e:23:32:ee:ad:2a:54:4e:06:f2:d5:c2:bb:43: 5e:d6:8a:95:48:ba:39:ab:11:c0:45:f8:91:9c:27:bf:1d:67: 39:60:44:4d:48:7b:d6:ff:fe:6c:8f:8c:87:28:70:30:da:80: da:74:3d:a2:49:dc:f2:70:c7:2a:0b:d5:b6:b4:ae:23:c2:ef: 2c:92:fc:32:02:11:b4:fa:b5:5d:5a:83:8d:39:29:22:9b:bf: 55:1c:42:b5:4e:f7:6b:aa:cd:43:68:a6:41:eb:30:43:f9:f5: b7:77:74:56:41:d3:04:08:97:48:77:a8:1c:43:66:a7:9e:80: 9d:31:19:37:a4:ec:81:a7:0d:4f:44:2d:65:86:36:6c:22:99: 63:f3:83:f2:71:1c:5b:23:da:81:2f:a4:cb:9e:91:70:e3:49: df:9d:fc:98:0c:95:f1:30:0a:e2:04:e8:76:84:b8:e3:93:b2: 8e:d2:d8:2c:6a:13:60:68:75:a6:82:17:76:4a:5d:d1:d0:17: 7c:13:5f:ea:40:48:51:7b:39:a4:01:11:27:f4:be:73:9c:cd: 0b:f9:65:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH7ta+5S8vr/cPDDWiem9ZXpciHwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBB QjZFQTkxNTAeFw0yNjAzMjQxNDE2NDJaFw0yNjAzMjcyMjUxNDJaMDMxMTAvBgNV BAMTKDdDRTVFRjczMTgwRDMyMTNENjQxOUZBNjUzNEMxQjE0MEMwRkUwNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCT7ydWlQIUq1KJeqUdPPPR57s5 i3c8Yxj2WpqOlzoduVjVc/UA/420eCWBlyax4ZGImYzIgBvnOS71EnBEJwgt0kca Efi7mG7zkDzj5EL1ah8Gnq8lQwZJ2ViUlrNF5R937gyfJwOhlv7vf9uFrPZAAZyE WeRaAbDGa72Ux3cClCV+h2AX5Y25S9RdfLXerdBSwJBFDoR0IsXYgao2xrOszb/D lObORFqX/gUh5ZUzDgES7OuUl6EsG1Gr/4qiqBJqFa4eU653Tgu9gl7TXbgc2CXh 1P3VzcXIVGyrnxXeh2VYUrBf2MZx9RNeJ/fFeACl92E91IJjOwVZcYSd//ilAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfOXvcxgNMhPWQZ+mU0wbFAwP4G4wHwYDVR0j BBgwFoAURhsDlCnPYJx2I11wxY3h0KtuqRUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDI3ZmEwMi1lNDlmLTQyMTUtODYyYi03ZmFhZWZkOGFiM2UvMC80NjFCMDM5NDI5 Q0Y2MDlDNzYyMzVENzBDNThERTFEMEFCNkVBOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUxRDBBQjZF QTkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAyN2ZhMDItZTQ5Zi00MjE1LTg2 MmItN2ZhYWVmZDhhYjNlLzAvNDYxQjAzOTQyOUNGNjA5Qzc2MjM1RDcwQzU4REUx RDBBQjZFQTkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFS2gD/K9CJbOFHqa3oIjff0msor5rs36uaV tIJhD2nTaA7BZFBvtaE+IzLurSpUTgby1cK7Q17WipVIujmrEcBF+JGcJ78dZzlg RE1Ie9b//myPjIcocDDagNp0PaJJ3PJwxyoL1ba0riPC7yyS/DICEbT6tV1ag405 KSKbv1UcQrVO92uqzUNopkHrMEP59bd3dFZB0wQIl0h3qBxDZqeegJ0xGTek7IGn DU9ELWWGNmwimWPzg/JxHFsj2oEvpMuekXDjSd+d/JgMlfEwCuIE6HaEuOOTso7S 2CxqE2BodaaCF3ZKXdHQF3wTX+pASFF7OaQBESf0vnOczQv5ZRI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:22:26 2026 by rpki-client