$ rpki-client -vvf repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft File: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft (raw, json) Hash identifier: RmhxvMKdPeI7Q5c4vcMNmJQv2hq28RBuXXPWcXL01fY= Subject key identifier: 23:43:2F:F9:5F:B7:11:9B:C4:18:0C:C1:DF:89:E3:F7:8C:17:56:25 Authority key identifier: 43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 Certificate issuer: /CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Certificate serial: 6A89756C7CA2D6D544CB464C7C1EA6F0125DB8CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft Manifest number: 0331 Signing time: Mon 23 Mar 2026 23:01:21 +0000 Manifest this update: Mon 23 Mar 2026 22:56:21 +0000 Manifest next update: Fri 27 Mar 2026 10:46:21 +0000 Files and hashes: 1: 3130332e3137362e39362e302f32342d3234203d3e20313437313331.roa (hash: wEdCO3YyXLUpfkiKLdOWDdPh+9yeo9Z0D5c9ufB6gOc=) 2: 3130332e3137362e39362e302f32332d3233203d3e20313437313331.roa (hash: RvlNgfW0J+bVY7d2yjeoXrc2sRB1/6Dnvn34DHTz4kU=) 3: 3130332e3137362e39372e302f32342d3234203d3e20313437313331.roa (hash: 0qCM2olgS4oE+YIGItrwN9xQiW2Tx+5S0Vcz+QMGK2k=) 4: 4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl (hash: uYPBzun5JPW6IA9+7YPirOM14rW4nK8XAbN6U4w5bqE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 10:46:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:89:75:6c:7c:a2:d6:d5:44:cb:46:4c:7c:1e:a6:f0:12:5d:b8:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657 Validity Not Before: Mar 23 22:56:21 2026 GMT Not After : Mar 27 10:46:21 2026 GMT Subject: CN=23432FF95FB7119BC4180CC1DF89E3F78C175625 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:c3:79:c5:fc:84:ec:57:cc:fe:2d:5a:cd:75: 4c:f6:30:9f:7e:53:51:44:fb:9f:25:bf:0a:93:b0: ba:2d:6d:10:5c:e8:9b:b3:56:95:93:c5:49:02:c2: cc:2c:e3:a3:f5:4e:a4:41:67:ab:fa:ab:ef:f3:9c: fa:9c:ac:c4:a2:c4:bc:3f:34:d8:b2:36:81:ad:14: f6:4a:e9:0d:a9:7e:cb:1c:20:15:c8:b1:88:b3:e6: 26:21:60:16:14:b3:c5:6e:03:50:43:ed:8f:38:02: 48:61:7b:6b:e0:75:cb:8c:36:48:51:5a:db:95:4a: 36:df:ab:de:d1:a2:ba:30:4d:82:32:89:06:6c:51: 2b:ad:83:af:2f:c0:93:1d:d2:25:9d:80:38:36:18: 0d:97:4c:3f:e7:71:78:85:30:25:10:60:da:70:61: 4e:fd:1d:d4:8b:a0:4d:7b:3c:b1:57:09:db:02:96: 94:5b:24:e8:85:a9:9a:30:0f:fa:a4:47:d0:8a:6b: ed:5e:fe:b7:b1:65:e7:14:bb:53:85:a6:34:df:cc: 0a:38:0f:03:5e:40:41:cb:e2:89:a2:10:9e:72:8e: 60:ee:ee:59:25:c1:b6:1a:af:6b:4d:4b:d6:8d:af: bb:ec:4f:dd:6b:db:55:28:8c:2a:87:75:ba:ff:10: d2:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:43:2F:F9:5F:B7:11:9B:C4:18:0C:C1:DF:89:E3:F7:8C:17:56:25 X509v3 Authority Key Identifier: keyid:43:37:E9:FF:91:A0:CB:65:CE:1E:B8:FA:EB:61:08:F5:E3:7B:B6:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c34dc3f-308f-4de1-a365-701bd9cf1004/0/4337E9FF91A0CB65CE1EB8FAEB6108F5E37BB657.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:65:d4:49:ea:e8:e6:42:04:3d:31:8b:e0:66:fc:b8:6a:0d: 1c:80:5e:2a:09:e9:44:d4:bb:b4:f0:77:52:0b:c7:43:6a:ff: be:01:46:78:7b:4f:03:60:12:73:a7:6c:1a:6c:51:ca:27:ef: a9:36:5a:37:09:b7:4e:1e:64:c2:c5:3e:28:1f:ea:3c:84:72: 43:6d:9e:c8:37:ec:81:3d:b5:bf:0e:11:de:94:cb:cb:af:8d: 00:aa:8b:10:a6:03:19:db:14:d0:22:57:b8:4e:89:c0:f5:ff: ee:ab:07:8f:a6:ed:44:74:b8:3a:1f:42:f7:ed:1c:c3:19:dd: 1f:9b:3d:b5:30:87:0a:7f:c8:7e:26:16:ae:db:3b:f2:f5:2e: 50:02:5f:52:1b:6d:7d:82:5f:bb:f3:90:d6:f2:03:8d:6c:0e: 1d:38:d7:24:4f:85:e7:f7:9f:c3:b4:c4:af:d7:bd:b0:ac:f3: 3a:34:69:10:c8:a0:f6:e3:92:62:d1:34:39:80:ed:2a:27:c4: 42:54:bd:e2:ae:80:38:83:3f:be:df:60:1b:20:c9:0f:11:80: 6d:59:47:97:07:fa:18:5e:00:04:c9:bd:9b:f4:0e:53:70:3f: 8a:ca:df:66:51:ff:40:0f:c1:0e:39:69:8f:d4:c5:fa:84:9b: b1:1e:9a:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaol1bHyi1tVEy0ZMfB6m8BJduM4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVF MzdCQjY1NzAeFw0yNjAzMjMyMjU2MjFaFw0yNjAzMjcxMDQ2MjFaMDMxMTAvBgNV BAMTKDIzNDMyRkY5NUZCNzExOUJDNDE4MENDMURGODlFM0Y3OEMxNzU2MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpw3nF/ITsV8z+LVrNdUz2MJ9+ U1FE+58lvwqTsLotbRBc6JuzVpWTxUkCwsws46P1TqRBZ6v6q+/znPqcrMSixLw/ NNiyNoGtFPZK6Q2pfsscIBXIsYiz5iYhYBYUs8VuA1BD7Y84Akhhe2vgdcuMNkhR WtuVSjbfq97RorowTYIyiQZsUSutg68vwJMd0iWdgDg2GA2XTD/ncXiFMCUQYNpw YU79HdSLoE17PLFXCdsClpRbJOiFqZowD/qkR9CKa+1e/rexZecUu1OFpjTfzAo4 DwNeQEHL4omiEJ5yjmDu7lklwbYar2tNS9aNr7vsT91r21UojCqHdbr/ENL3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI0Mv+V+3EZvEGAzB34nj94wXViUwHwYDVR0j BBgwFoAUQzfp/5Ggy2XOHrj662EI9eN7tlcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzM0ZGMzZi0zMDhmLTRkZTEtYTM2NS03MDFiZDljZjEwMDQvMC80MzM3RTlGRjkx QTBDQjY1Q0UxRUI4RkFFQjYxMDhGNUUzN0JCNjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4RjVFMzdC QjY1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWMzNGRjM2YtMzA4Zi00ZGUxLWEz NjUtNzAxYmQ5Y2YxMDA0LzAvNDMzN0U5RkY5MUEwQ0I2NUNFMUVCOEZBRUI2MTA4 RjVFMzdCQjY1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFl1Enq6OZCBD0xi+Bm/LhqDRyAXioJ6UTU u7Twd1ILx0Nq/74BRnh7TwNgEnOnbBpsUcon76k2WjcJt04eZMLFPigf6jyEckNt nsg37IE9tb8OEd6Uy8uvjQCqixCmAxnbFNAiV7hOicD1/+6rB4+m7UR0uDofQvft HMMZ3R+bPbUwhwp/yH4mFq7bO/L1LlACX1IbbX2CX7vzkNbyA41sDh041yRPhef3 n8O0xK/XvbCs8zo0aRDIoPbjkmLRNDmA7SonxEJUveKugDiDP77fYBsgyQ8RgG1Z R5cH+hheAATJvZv0DlNwP4rK32ZR/0APwQ45aY/UxfqEm7EemnE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:29:33 2026 by rpki-client