$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: pTi+UigkoFXxoNA5HJpp1Eo49HGiHOUKrKTFJ1qR1lE= Subject key identifier: 29:5F:88:BF:2C:DD:1C:E3:BE:5F:FE:DB:16:62:9E:AA:13:B6:3D:3F Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 50F80856BFB95D217D725CD5CF8B6C7F544A6BF3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 0244 Signing time: Tue 24 Mar 2026 02:00:44 +0000 Manifest this update: Tue 24 Mar 2026 01:55:44 +0000 Manifest next update: Fri 27 Mar 2026 13:53:44 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: a6WJ2r56XyjHgoHt+8ZJ2eEVrnycVaLCpPxVaVTMMUo=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: LgRRVJRfV+/ns4q13d+YqlNlGcgqnMAnfg10KVI19ag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 13:53:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f8:08:56:bf:b9:5d:21:7d:72:5c:d5:cf:8b:6c:7f:54:4a:6b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Mar 24 01:55:44 2026 GMT Not After : Mar 27 13:53:44 2026 GMT Subject: CN=295F88BF2CDD1CE3BE5FFEDB16629EAA13B63D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:2c:62:b9:01:95:58:7a:7e:89:34:ba:cc:51: 01:c6:1b:ff:75:38:1f:69:f0:c7:f0:b6:1c:05:56: 58:36:47:bf:58:53:27:d5:78:55:43:6d:3a:a6:2b: d6:c3:b5:99:46:d9:32:1a:7f:43:f7:5c:70:51:1b: 59:68:0a:f2:86:70:b3:03:66:63:10:98:ba:e1:f2: 90:02:0a:6b:c7:f0:8c:84:60:91:80:08:68:0e:1d: c8:e7:73:2e:78:79:cd:81:68:b1:19:f3:8f:80:2e: 89:7f:53:b8:41:23:a7:5c:c6:36:b3:37:47:db:60: e0:b4:54:5c:53:bd:5c:cc:1c:05:d0:58:d9:e9:43: 39:e9:90:26:4a:2f:bf:a6:c5:47:d0:3a:8a:ad:d4: 93:36:e8:2a:94:7e:4a:0c:22:86:f5:eb:47:6f:61: c7:ca:be:4e:5b:b8:ce:69:b5:94:bb:fb:dc:d7:93: f7:13:41:47:38:0e:ef:8b:b9:1d:2b:95:3f:a3:99: 4c:b7:45:96:69:ae:3d:fe:9d:fd:e9:da:76:73:f9: b2:ea:e6:1a:f2:73:59:00:0f:e2:9e:bc:38:c5:c8: 3d:f8:14:ca:d0:55:f7:73:66:3c:99:7e:8c:cd:3a: 79:e9:a0:3d:53:36:f3:72:c4:5d:46:5e:fb:7f:f8: 08:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:5F:88:BF:2C:DD:1C:E3:BE:5F:FE:DB:16:62:9E:AA:13:B6:3D:3F X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8a:a6:6b:68:a3:f7:2d:e2:03:f8:9b:98:33:5c:2d:77:0d: 00:bd:dd:6b:84:77:62:aa:7d:fc:16:9b:0d:3e:f7:94:94:20: 14:90:85:f3:04:a3:3c:88:a6:42:fa:63:72:07:2b:9d:be:45: bb:2b:f4:0f:00:b9:a8:a7:83:6a:fd:e2:ba:07:a4:52:54:52: fe:52:16:1a:d0:4f:4f:80:2c:d4:8a:05:77:c4:a1:38:69:60: f7:ff:9e:25:85:bf:19:cc:ae:75:5c:bd:a3:e8:c3:70:91:6d: 30:88:9e:b0:e1:6c:64:cd:6a:1b:b6:cb:1a:42:3c:37:05:3d: d7:9d:79:05:bd:30:bd:96:6a:eb:70:42:05:fa:55:15:bf:ab: b4:86:6e:a2:1d:43:f0:41:57:c4:99:dc:36:95:10:bc:1a:c9: 4c:91:52:52:67:cf:cc:93:0f:b0:ac:72:ca:d8:f9:8f:9b:6d: 61:b5:d7:f0:50:ab:a0:d4:00:47:cc:4b:f8:39:6a:84:f4:b6: ff:0b:84:22:7d:53:27:8b:f2:10:df:70:1d:30:25:e5:02:ae: 32:d3:64:0c:95:f5:36:fc:a2:a0:53:d9:05:34:0a:11:ba:07: f4:8c:fb:b0:56:c4:16:5f:c3:11:04:d8:40:89:36:d3:67:eb: ed:4f:0a:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUPgIVr+5XSF9clzVz4tsf1RKa/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNjAzMjQwMTU1NDRaFw0yNjAzMjcxMzUzNDRaMDMxMTAvBgNV BAMTKDI5NUY4OEJGMkNERDFDRTNCRTVGRkVEQjE2NjI5RUFBMTNCNjNEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1LGK5AZVYen6JNLrMUQHGG/91 OB9p8MfwthwFVlg2R79YUyfVeFVDbTqmK9bDtZlG2TIaf0P3XHBRG1loCvKGcLMD ZmMQmLrh8pACCmvH8IyEYJGACGgOHcjncy54ec2BaLEZ84+ALol/U7hBI6dcxjaz N0fbYOC0VFxTvVzMHAXQWNnpQznpkCZKL7+mxUfQOoqt1JM26CqUfkoMIob160dv YcfKvk5buM5ptZS7+9zXk/cTQUc4Du+LuR0rlT+jmUy3RZZprj3+nf3p2nZz+bLq 5hryc1kAD+KevDjFyD34FMrQVfdzZjyZfozNOnnpoD1TNvNyxF1GXvt/+AhnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKV+IvyzdHOO+X/7bFmKeqhO2PT8wHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeKpmtoo/ct4gP4m5gzXC13DQC93WuEd2Kq ffwWmw0+95SUIBSQhfMEozyIpkL6Y3IHK52+Rbsr9A8Auaing2r94roHpFJUUv5S FhrQT0+ALNSKBXfEoThpYPf/niWFvxnMrnVcvaPow3CRbTCInrDhbGTNahu2yxpC PDcFPdedeQW9ML2WautwQgX6VRW/q7SGbqIdQ/BBV8SZ3DaVELwayUyRUlJnz8yT D7CscsrY+Y+bbWG11/BQq6DUAEfMS/g5aoT0tv8LhCJ9UyeL8hDfcB0wJeUCrjLT ZAyV9Tb8oqBT2QU0ChG6B/SM+7BWxBZfwxEE2ECJNtNn6+1PCjs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:17:03 2026 by rpki-client