$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: lcyx7z9ehkimE3dY3QKQ6VQZJPy9mFh/dUtIYL4AYf0= Subject key identifier: F2:BD:49:FA:B4:EA:DD:E9:57:CC:E6:2A:0C:3B:B8:C1:AB:5E:4B:5D Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 32AA26CABEC5631D15F20CCAEED57F0AC200FE28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 055D Signing time: Tue 24 Mar 2026 14:02:23 +0000 Manifest this update: Tue 24 Mar 2026 13:57:23 +0000 Manifest next update: Fri 27 Mar 2026 16:48:23 +0000 Files and hashes: 1: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: ZY+OOf0nLFlasqSeBwkznrngrmRk6KGdstl8H87rX0k=) 2: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 3: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 5: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:48:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:aa:26:ca:be:c5:63:1d:15:f2:0c:ca:ee:d5:7f:0a:c2:00:fe:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Mar 24 13:57:23 2026 GMT Not After : Mar 27 16:48:23 2026 GMT Subject: CN=F2BD49FAB4EADDE957CCE62A0C3BB8C1AB5E4B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:6c:f3:32:42:af:49:9b:74:92:91:29:4f: 17:00:63:57:c7:81:14:5a:cd:3c:36:78:6a:84:10: ff:44:3f:c7:3e:e6:09:0d:c1:24:1d:69:43:0e:47: 45:11:e7:41:eb:22:c1:37:8d:6f:f2:0c:99:6c:4f: 91:b5:5a:d2:05:77:d0:91:3a:2c:b8:82:62:ff:1b: ce:45:81:83:52:e0:22:fa:c1:d0:0a:7f:4a:fe:86: f1:67:3f:cd:b9:9b:5e:f2:69:98:73:71:f7:23:bf: f5:44:4b:80:55:fe:6a:39:12:16:ea:de:fb:35:42: c8:62:94:d0:39:00:f5:f7:76:6e:c1:82:72:73:73: 8e:ae:f3:25:83:c1:41:b2:d1:7a:b7:42:81:cb:1a: 50:90:47:d2:2f:4d:3f:5b:43:45:e3:39:5d:4a:34: 8a:ea:f2:8f:79:a8:ff:2a:e4:9d:b8:2e:a8:19:55: 7a:8d:3d:30:86:8b:d3:ce:4c:9c:da:e9:85:af:1b: f7:7e:b0:cc:c1:a8:bf:e5:5d:2e:8f:7d:9b:58:b7: 6c:7c:d6:f4:26:f4:0b:e1:47:fe:08:65:bb:99:8d: 55:c4:1a:5b:c0:6a:61:c5:4b:3e:83:19:c8:f2:3d: 6b:de:0f:b6:36:e2:fd:c8:04:fd:cd:83:c8:35:06: d5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:BD:49:FA:B4:EA:DD:E9:57:CC:E6:2A:0C:3B:B8:C1:AB:5E:4B:5D X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:87:56:9b:4c:c8:41:50:9d:f6:6b:fa:d6:0d:97:f1:c5:68: c8:36:ce:7b:29:9a:33:da:10:1b:30:ce:80:c3:7f:4c:a5:fb: ff:e0:fc:f1:0e:03:a3:d0:c5:c7:e5:41:81:8f:86:e2:a6:13: 33:e4:63:0e:da:9c:d3:a0:8e:a2:75:d8:80:e6:09:b8:86:a4: 7f:09:bd:b8:17:67:17:99:e7:10:53:5b:14:99:06:29:39:9d: 3f:15:49:61:6e:bc:e2:f0:61:f7:9c:d1:47:41:f3:68:af:8c: 15:87:86:05:34:b2:49:bc:65:3a:6d:10:b0:77:51:b5:2f:4e: 29:18:d3:3e:8a:99:0d:9e:06:df:c8:37:f2:aa:a5:53:de:1b: c8:c2:b6:71:20:4f:2c:d3:87:f4:8a:48:3a:d0:a3:b9:b4:e5: c7:48:10:ef:d1:56:e9:b3:a7:43:55:ac:4e:3c:2d:93:b6:46: 4c:d5:33:81:ca:18:bd:78:39:55:34:eb:2f:53:07:03:d2:f7: 4f:11:a3:91:3e:16:9a:ed:d2:b3:d2:5f:9e:e9:14:c5:5c:54: 65:85:78:7e:cc:35:22:83:16:8e:7f:1b:27:56:4c:dc:de:f2: a2:3b:2e:48:e7:68:5a:b5:dd:1c:fb:cc:ba:ab:52:dd:a0:b7: d8:c2:1d:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqomyr7FYx0V8gzK7tV/CsIA/igwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNjAzMjQxMzU3MjNaFw0yNjAzMjcxNjQ4MjNaMDMxMTAvBgNV BAMTKEYyQkQ0OUZBQjRFQURERTk1N0NDRTYyQTBDM0JCOEMxQUI1RTRCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7F2zzMkKvSZt0kpEpTxcAY1fH gRRazTw2eGqEEP9EP8c+5gkNwSQdaUMOR0UR50HrIsE3jW/yDJlsT5G1WtIFd9CR Oiy4gmL/G85FgYNS4CL6wdAKf0r+hvFnP825m17yaZhzcfcjv/VES4BV/mo5Ehbq 3vs1QshilNA5APX3dm7BgnJzc46u8yWDwUGy0Xq3QoHLGlCQR9IvTT9bQ0XjOV1K NIrq8o95qP8q5J24LqgZVXqNPTCGi9POTJza6YWvG/d+sMzBqL/lXS6PfZtYt2x8 1vQm9AvhR/4IZbuZjVXEGlvAamHFSz6DGcjyPWveD7Y24v3IBP3Ng8g1BtUVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8r1J+rTq3elXzOYqDDu4wateS10wHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESHVptMyEFQnfZr+tYNl/HFaMg2znspmjPa EBswzoDDf0yl+//g/PEOA6PQxcflQYGPhuKmEzPkYw7anNOgjqJ12IDmCbiGpH8J vbgXZxeZ5xBTWxSZBik5nT8VSWFuvOLwYfec0UdB82ivjBWHhgU0skm8ZTptELB3 UbUvTikY0z6KmQ2eBt/IN/KqpVPeG8jCtnEgTyzTh/SKSDrQo7m05cdIEO/RVumz p0NVrE48LZO2RkzVM4HKGL14OVU06y9TBwPS908Ro5E+Fprt0rPSX57pFMVcVGWF eH7MNSKDFo5/GydWTNze8qI7LkjnaFq13Rz7zLqrUt2gt9jCHV0= -----END CERTIFICATE-----Generated at Thu Mar 26 15:07:02 2026 by rpki-client