$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: Kd5Fx79vyJglpE0c+k6oDNZ4QmyOHednzG+Wy9UNSpc= Subject key identifier: A3:64:1D:89:95:B7:01:E2:92:C4:B3:8C:05:F4:EA:2E:A6:4D:EC:5F Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 7453BD34B3D0B36E5582BAB478293A91D129B04C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 0422 Signing time: Thu 26 Mar 2026 02:01:13 +0000 Manifest this update: Thu 26 Mar 2026 01:56:13 +0000 Manifest next update: Sun 29 Mar 2026 11:42:13 +0000 Files and hashes: 1: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: cKBPEdRq2LZ2LdyolV1+vPX464R8Bt40w+RS4c175VU=) 2: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: L7IP9MHf9lzBvSIuS3oASd3QVP2r70B7eN+5QUqcHUk=) 3: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: 6le2cXVLiYTrXpAUy1GeDBwQy0MYqrQycmJP4xjbqIw=) 4: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NvKxe3HHk9zHNuvCE6DN5lywX6x8QCyX3832DuoeqaY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 11:42:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:53:bd:34:b3:d0:b3:6e:55:82:ba:b4:78:29:3a:91:d1:29:b0:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Mar 26 01:56:13 2026 GMT Not After : Mar 29 11:42:13 2026 GMT Subject: CN=A3641D8995B701E292C4B38C05F4EA2EA64DEC5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:aa:18:cb:35:5f:04:2e:07:41:b0:81:7c:13: 68:42:f1:35:82:fc:64:85:01:dd:6f:d1:24:37:2b: 6a:7b:7f:9c:db:74:ee:2b:96:99:47:75:65:c1:24: b8:dd:9b:95:81:53:95:06:47:49:63:37:d9:f1:fe: ed:a1:49:02:f2:b2:cd:a2:e8:14:21:47:0d:e0:9d: 5b:cc:53:db:ee:39:0c:ea:9f:45:e5:a4:f9:84:26: a1:15:cb:74:6a:79:bc:50:61:9e:b6:53:b9:91:57: 06:71:a9:54:4f:d0:be:a8:ef:2a:32:7c:81:ce:b1: 13:95:ed:f9:18:34:b8:4d:e3:9c:2d:c4:be:da:c9: 20:c6:0d:d0:c6:99:80:1f:2a:e5:ba:7a:f9:06:6a: 5c:83:c9:db:56:14:48:8d:4c:6d:08:0d:47:3b:4f: e7:0f:99:6a:ba:61:5e:d5:89:39:a9:76:40:42:1e: 0e:0b:7b:10:2e:e0:10:e2:35:f3:e7:33:d5:16:47: 81:03:36:c8:ea:3d:dc:1b:f5:7c:7b:02:da:40:7a: 2a:7d:cf:c0:71:2a:c6:5b:3c:52:58:f9:44:e8:41: 0b:94:6d:f4:fa:12:00:c1:4b:b4:60:97:07:47:e0: 05:fb:4c:2f:78:18:5a:e0:a5:db:97:41:f2:b8:51: 37:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:64:1D:89:95:B7:01:E2:92:C4:B3:8C:05:F4:EA:2E:A6:4D:EC:5F X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f5:7c:c3:46:3f:56:3d:f3:db:eb:24:08:d9:00:47:5b:07: 4c:bb:ca:b4:90:c8:36:72:7f:e5:8d:17:01:45:8b:20:3c:fe: 9f:d6:ce:1d:8d:76:db:5a:e6:7b:d3:af:a6:7c:fd:68:2f:00: 7a:5c:19:df:b8:3f:4f:b0:15:00:c1:02:ab:68:2d:ca:5f:a8: fa:c6:73:76:57:b0:9e:83:b6:0e:68:36:a3:9e:ed:2d:a8:aa: 76:51:d7:aa:47:cf:8b:6c:f2:e1:88:fb:86:b8:c1:0d:da:41: 57:6f:18:0c:6e:57:81:2a:fa:12:97:a0:2e:d2:08:59:9c:64: 17:f3:de:92:bf:26:8b:b6:9d:90:53:11:24:a2:80:a1:3e:94: 33:e4:6f:dd:e6:37:1f:27:d6:71:5c:97:0f:c4:4d:7c:07:46: 90:8b:ef:b2:03:90:b0:fc:54:e5:47:dc:fb:4a:ed:29:cb:ff: 28:1e:50:50:e6:cf:bc:30:10:3d:61:ba:ca:e6:10:3d:4a:9a: 1b:04:2b:7d:6e:3e:5b:4c:42:67:4b:a0:c4:db:30:11:5d:6d: c3:f6:19:2f:43:5b:bc:66:1e:5d:8e:f8:e1:5d:d8:a6:d9:9d: 89:2b:60:9b:c3:d2:f6:83:84:57:b7:a2:d4:7b:24:f6:ac:39: fc:e4:72:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdFO9NLPQs25Vgrq0eCk6kdEpsEwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNjAzMjYwMTU2MTNaFw0yNjAzMjkxMTQyMTNaMDMxMTAvBgNV BAMTKEEzNjQxRDg5OTVCNzAxRTI5MkM0QjM4QzA1RjRFQTJFQTY0REVDNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDqhjLNV8ELgdBsIF8E2hC8TWC /GSFAd1v0SQ3K2p7f5zbdO4rlplHdWXBJLjdm5WBU5UGR0ljN9nx/u2hSQLyss2i 6BQhRw3gnVvMU9vuOQzqn0XlpPmEJqEVy3RqebxQYZ62U7mRVwZxqVRP0L6o7yoy fIHOsROV7fkYNLhN45wtxL7aySDGDdDGmYAfKuW6evkGalyDydtWFEiNTG0IDUc7 T+cPmWq6YV7ViTmpdkBCHg4LexAu4BDiNfPnM9UWR4EDNsjqPdwb9Xx7AtpAeip9 z8BxKsZbPFJY+UToQQuUbfT6EgDBS7RglwdH4AX7TC94GFrgpduXQfK4UTexAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo2QdiZW3AeKSxLOMBfTqLqZN7F8wHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP1fMNGP1Y989vrJAjZAEdbB0y7yrSQyDZy f+WNFwFFiyA8/p/Wzh2Ndtta5nvTr6Z8/WgvAHpcGd+4P0+wFQDBAqtoLcpfqPrG c3ZXsJ6Dtg5oNqOe7S2oqnZR16pHz4ts8uGI+4a4wQ3aQVdvGAxuV4Eq+hKXoC7S CFmcZBfz3pK/Jou2nZBTESSigKE+lDPkb93mNx8n1nFclw/ETXwHRpCL77IDkLD8 VOVH3PtK7SnL/ygeUFDmz7wwED1husrmED1KmhsEK31uPltMQmdLoMTbMBFdbcP2 GS9DW7xmHl2O+OFd2KbZnYkrYJvD0vaDhFe3otR7JPasOfzkcp8= -----END CERTIFICATE-----Generated at Thu Mar 26 11:35:34 2026 by rpki-client