$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: uMEOXWX7kNVnN9QY7HfgRh0KXZD0nVwFEgaq1ZuTLUY= Subject key identifier: 5F:0E:E7:4D:5E:37:62:B2:E2:23:F7:14:AD:16:3A:C9:14:09:17:95 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 17FFE0D757D0570D95A73D32FBBC623D8B71D242 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 02DF Signing time: Thu 26 Mar 2026 04:51:13 +0000 Manifest this update: Thu 26 Mar 2026 04:46:13 +0000 Manifest next update: Sun 29 Mar 2026 11:06:13 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: 58F3n74/ZED53oSu/OrlB63dRyJ1hS3x1iHNdgy8h5k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:06:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:ff:e0:d7:57:d0:57:0d:95:a7:3d:32:fb:bc:62:3d:8b:71:d2:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Mar 26 04:46:13 2026 GMT Not After : Mar 29 11:06:13 2026 GMT Subject: CN=5F0EE74D5E3762B2E223F714AD163AC914091795 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:0d:b3:c8:7d:3e:28:30:d1:d3:3a:97:cb:5b: f8:37:22:1d:54:9f:82:2e:47:4e:b6:89:54:f2:4d: 15:62:2a:85:73:d5:d7:ed:b5:52:ab:ec:bd:eb:7c: 2e:15:9f:9c:62:07:98:93:e4:9a:dd:38:a1:ff:3c: 62:ec:2d:51:84:fe:6b:52:1a:b7:99:5e:50:05:3b: ce:ef:77:71:c2:a4:8c:69:31:e2:18:59:df:59:c5: e1:6c:38:45:6e:06:58:16:c7:1e:f8:1f:e6:16:ea: e0:89:98:8d:28:76:04:a5:7a:3e:85:a9:7c:de:52: 19:7e:ce:48:99:51:e4:40:77:06:97:a9:2d:30:40: 28:1b:91:d3:e6:cd:54:bb:aa:26:22:ba:cb:80:06: 00:db:31:88:05:9a:33:e9:e3:63:a9:17:fe:07:74: 09:dd:a2:be:ae:49:cb:34:22:98:b1:ee:45:f0:32: 39:a3:f8:fc:86:64:f7:90:51:3e:6d:52:85:d1:60: 3e:4e:b5:36:22:b5:3d:cb:16:bd:0c:62:7b:f6:76: 89:b6:74:c1:c6:8b:84:a3:67:75:ff:d9:43:78:9c: 74:ee:33:7e:22:45:ae:a5:15:8c:9a:8c:d1:2d:64: a9:8c:71:bd:3e:f8:d9:9f:65:15:2d:88:2a:18:29: 06:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0E:E7:4D:5E:37:62:B2:E2:23:F7:14:AD:16:3A:C9:14:09:17:95 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:70:4e:06:3f:73:6a:ba:97:3e:05:87:f2:f5:1c:92:48:e2: 3b:38:6d:1e:e9:4c:6a:e2:5c:61:31:32:ba:95:26:b7:32:2b: 71:3b:1e:19:25:9f:bc:50:28:ff:ab:24:d1:1c:9f:43:78:4f: a6:34:44:c4:d5:d0:d7:82:f6:3f:3a:a7:8b:51:3a:00:3d:16: e0:48:d9:33:0b:b9:91:5b:f4:ad:14:c8:1f:3c:b4:3b:31:1a: de:ff:91:bc:6f:fb:0a:70:aa:bb:30:04:e4:1e:89:a5:ae:55: 9d:20:6b:58:ea:43:a6:52:f3:60:c7:d4:39:54:20:3f:15:c8: 41:99:de:a7:ed:41:23:05:c2:79:ec:14:ad:f0:17:c7:da:78: 79:d7:42:6e:2d:6d:60:5c:63:85:75:86:e5:aa:38:2d:f0:92: bb:c6:2a:2a:41:c9:c5:0f:9d:f4:be:e8:19:1e:8c:e3:37:fe: 8e:21:10:4e:ba:89:91:8e:a4:c4:85:b1:64:70:c9:74:77:52: 0d:6f:0c:5b:bd:3d:36:ea:ba:04:5e:71:89:b4:13:e6:a5:61: b8:5c:ef:2d:ae:7d:5b:4c:7f:b3:c1:62:a0:75:6e:ee:cf:46: 3b:fd:53:c0:be:96:70:cf:92:0b:e8:dd:3a:07:66:3b:f1:9e: 2a:67:c0:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF//g11fQVw2Vpz0y+7xiPYtx0kIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNjAzMjYwNDQ2MTNaFw0yNjAzMjkxMTA2MTNaMDMxMTAvBgNV BAMTKDVGMEVFNzRENUUzNzYyQjJFMjIzRjcxNEFEMTYzQUM5MTQwOTE3OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqDbPIfT4oMNHTOpfLW/g3Ih1U n4IuR062iVTyTRViKoVz1dfttVKr7L3rfC4Vn5xiB5iT5JrdOKH/PGLsLVGE/mtS GreZXlAFO87vd3HCpIxpMeIYWd9ZxeFsOEVuBlgWxx74H+YW6uCJmI0odgSlej6F qXzeUhl+zkiZUeRAdwaXqS0wQCgbkdPmzVS7qiYiusuABgDbMYgFmjPp42OpF/4H dAndor6uScs0Ipix7kXwMjmj+PyGZPeQUT5tUoXRYD5OtTYitT3LFr0MYnv2dom2 dMHGi4SjZ3X/2UN4nHTuM34iRa6lFYyajNEtZKmMcb0++NmfZRUtiCoYKQZlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXw7nTV43YrLiI/cUrRY6yRQJF5UwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZwTgY/c2q6lz4Fh/L1HJJI4js4bR7pTGri XGExMrqVJrcyK3E7Hhkln7xQKP+rJNEcn0N4T6Y0RMTV0NeC9j86p4tROgA9FuBI 2TMLuZFb9K0UyB88tDsxGt7/kbxv+wpwqrswBOQeiaWuVZ0ga1jqQ6ZS82DH1DlU ID8VyEGZ3qftQSMFwnnsFK3wF8faeHnXQm4tbWBcY4V1huWqOC3wkrvGKipBycUP nfS+6BkejOM3/o4hEE66iZGOpMSFsWRwyXR3Ug1vDFu9PTbqugRecYm0E+alYbhc 7y2ufVtMf7PBYqB1bu7PRjv9U8C+lnDPkgvo3ToHZjvxnipnwDI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:10:03 2026 by rpki-client