$ rpki-client -vvf repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft File: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft (raw, json) Hash identifier: LxLWUP4k3Kir70+A8Zj44/XV2jA6mHGDlkWy5bzCQqY= Subject key identifier: 4E:8A:86:EA:04:36:88:E3:42:FE:00:A4:BE:C5:25:97:1B:16:4C:9D Authority key identifier: 5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD Certificate issuer: /CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Certificate serial: 411C3C6C37003E14D9D98C50D1E44048D8E6499D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft Manifest number: 0231 Signing time: Thu 26 Mar 2026 04:30:51 +0000 Manifest this update: Thu 26 Mar 2026 04:25:51 +0000 Manifest next update: Sun 29 Mar 2026 05:50:51 +0000 Files and hashes: 1: 3130332e35322e362e302f32342d3234203d3e20313530323032.roa (hash: F9qmx8mRsXj/bhLj6hMv0pUBqNdy6+XhyHWthGgCRak=) 2: 5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl (hash: /z46rfptS6QaIjXFhXZRT+kuQtu3kUjeSvz2jmipvws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 05:50:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:1c:3c:6c:37:00:3e:14:d9:d9:8c:50:d1:e4:40:48:d8:e6:49:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD Validity Not Before: Mar 26 04:25:51 2026 GMT Not After : Mar 29 05:50:51 2026 GMT Subject: CN=4E8A86EA043688E342FE00A4BEC525971B164C9D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:51:ca:dc:49:50:6f:18:81:ec:a5:20:07:2e: 4f:35:dc:7d:59:3b:94:6d:d1:f8:75:24:e2:32:d8: bf:03:45:82:9c:ca:57:f1:bc:ce:73:9b:b7:20:bb: 82:e9:6d:02:6c:34:52:43:f0:49:69:1e:00:3e:34: 3a:9a:55:d9:50:da:e9:d9:6f:57:2a:52:48:77:e8: 54:0d:79:1e:a9:94:6f:e4:c4:d7:39:88:43:51:ce: f8:73:80:40:9b:03:f8:55:c9:bb:46:60:84:00:03: 59:2f:60:15:d4:f0:5b:3c:5a:c2:cb:1d:ae:86:99: 81:32:ed:76:56:da:f2:32:62:38:58:39:25:c3:3c: 2b:ef:fd:bd:20:76:a7:a9:d7:68:b0:22:58:3c:fd: f3:cf:25:85:5d:06:dd:cf:94:af:d3:32:98:2e:89: 2d:62:8d:4b:ea:e8:91:80:ba:c9:02:46:95:02:89: b2:74:0f:cf:94:4a:5b:8d:68:22:ec:69:c3:53:1a: 48:be:5f:3c:08:47:b9:04:ab:c1:17:33:d1:3a:49: f9:ca:10:ce:70:69:67:09:49:c5:ab:b4:84:d3:44: f7:38:f3:43:30:93:ed:39:4d:ad:5b:35:b9:c5:1d: 49:d4:70:45:6b:1c:d3:dd:eb:b9:7d:f4:05:97:84: 74:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:8A:86:EA:04:36:88:E3:42:FE:00:A4:BE:C5:25:97:1B:16:4C:9D X509v3 Authority Key Identifier: keyid:5F:49:C4:BD:5D:3F:04:F6:32:DC:CC:6F:C8:B6:54:53:52:0D:93:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/495591b4-2198-4b40-adf2-12cef3bf43a2/0/5F49C4BD5D3F04F632DCCC6FC8B65453520D93AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:a8:e7:db:53:d2:9a:6b:d4:3e:9a:56:13:41:dd:5d:a4:77: d0:02:0d:be:77:57:05:97:10:e5:91:c7:24:3b:f6:b0:cb:0d: a2:f9:af:89:1d:63:92:d5:47:3e:86:ac:6a:f2:5b:66:e0:df: b4:ec:5b:54:de:ed:25:dd:b7:dd:22:c9:9d:b7:9e:8e:17:19: 45:d5:49:36:56:12:36:c4:bd:61:15:c7:89:8c:e1:54:64:32: 9b:ef:10:b1:d6:73:5e:42:bf:f7:b5:60:5b:36:23:86:54:b6: da:d8:74:ac:fd:ba:4b:8e:3e:f6:f5:21:ce:92:73:f6:38:8b: c5:80:c0:d0:2b:e3:32:c1:b0:d1:4b:87:38:43:00:21:42:52: 5c:1f:8c:88:c0:a1:89:77:1d:d1:5d:2a:68:95:1f:b6:b3:d0: f5:41:fe:29:e7:67:53:f4:d7:13:7c:b7:bb:1e:08:dc:87:5b: f1:99:ee:83:a1:98:35:f6:f7:90:99:a8:93:3a:70:d9:85:cd: 30:7c:75:33:8f:6c:af:1f:54:8d:31:27:6b:10:3f:3b:40:9c: e0:c3:d8:3c:48:e8:02:01:14:26:8a:30:54:1b:da:42:78:a8: ab:87:ce:22:c0:60:d4:6b:3f:f9:4b:ca:f3:dd:38:bf:46:49: 5d:0b:33:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQRw8bDcAPhTZ2YxQ0eRASNjmSZ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1 MjBEOTNBRDAeFw0yNjAzMjYwNDI1NTFaFw0yNjAzMjkwNTUwNTFaMDMxMTAvBgNV BAMTKDRFOEE4NkVBMDQzNjg4RTM0MkZFMDBBNEJFQzUyNTk3MUIxNjRDOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJUcrcSVBvGIHspSAHLk813H1Z O5Rt0fh1JOIy2L8DRYKcylfxvM5zm7cgu4LpbQJsNFJD8ElpHgA+NDqaVdlQ2unZ b1cqUkh36FQNeR6plG/kxNc5iENRzvhzgECbA/hVybtGYIQAA1kvYBXU8Fs8WsLL Ha6GmYEy7XZW2vIyYjhYOSXDPCvv/b0gdqep12iwIlg8/fPPJYVdBt3PlK/TMpgu iS1ijUvq6JGAuskCRpUCibJ0D8+USluNaCLsacNTGki+XzwIR7kEq8EXM9E6SfnK EM5waWcJScWrtITTRPc480Mwk+05Ta1bNbnFHUnUcEVrHNPd67l99AWXhHR3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUToqG6gQ2iONC/gCkvsUllxsWTJ0wHwYDVR0j BBgwFoAUX0nEvV0/BPYy3MxvyLZUU1INk60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OTU1OTFiNC0yMTk4LTRiNDAtYWRmMi0xMmNlZjNiZjQzYTIvMC81RjQ5QzRCRDVE M0YwNEY2MzJEQ0NDNkZDOEI2NTQ1MzUyMEQ5M0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0NTM1MjBE OTNBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDk1NTkxYjQtMjE5OC00YjQwLWFk ZjItMTJjZWYzYmY0M2EyLzAvNUY0OUM0QkQ1RDNGMDRGNjMyRENDQzZGQzhCNjU0 NTM1MjBEOTNBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSo59tT0ppr1D6aVhNB3V2kd9ACDb53VwWX EOWRxyQ79rDLDaL5r4kdY5LVRz6GrGryW2bg37TsW1Te7SXdt90iyZ23no4XGUXV STZWEjbEvWEVx4mM4VRkMpvvELHWc15Cv/e1YFs2I4ZUttrYdKz9ukuOPvb1Ic6S c/Y4i8WAwNAr4zLBsNFLhzhDACFCUlwfjIjAoYl3HdFdKmiVH7az0PVB/innZ1P0 1xN8t7seCNyHW/GZ7oOhmDX295CZqJM6cNmFzTB8dTOPbK8fVI0xJ2sQPztAnODD 2DxI6AIBFCaKMFQb2kJ4qKuHziLAYNRrP/lLyvPdOL9GSV0LM9Y= -----END CERTIFICATE-----Generated at Thu Mar 26 07:18:41 2026 by rpki-client