$ rpki-client -vvf repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft File: 4E1C7D0BF891C183458C47AB1134215E797C4165.mft (raw, json) Hash identifier: zaDrAjoziYaX+iwm32/y9A0xpiM77w+ASZHd74Q79C8= Subject key identifier: 87:B3:3D:8F:B6:36:E2:83:19:A6:A6:16:98:6F:01:F1:7B:AB:BB:41 Authority key identifier: 4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 Certificate issuer: /CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Certificate serial: 2EF17DC1B72A0B81F91A413C1803C1AEC4C21E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft Manifest number: 023B Signing time: Thu 26 Mar 2026 05:01:30 +0000 Manifest this update: Thu 26 Mar 2026 04:56:30 +0000 Manifest next update: Sun 29 Mar 2026 10:41:30 +0000 Files and hashes: 1: 4E1C7D0BF891C183458C47AB1134215E797C4165.crl (hash: /9SOrq6EL0vAMUnE16RWR3sly5ie6RAj3Xj/bMw1/Gs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 10:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:f1:7d:c1:b7:2a:0b:81:f9:1a:41:3c:18:03:c1:ae:c4:c2:1e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E1C7D0BF891C183458C47AB1134215E797C4165 Validity Not Before: Mar 26 04:56:30 2026 GMT Not After : Mar 29 10:41:30 2026 GMT Subject: CN=87B33D8FB636E28319A6A616986F01F17BABBB41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:6b:16:6f:22:f9:c4:cf:eb:aa:5c:35:ba:ee: 27:12:1c:9b:f7:25:d1:1a:ac:e1:c7:c6:f0:b6:92: 41:63:a2:c9:14:a3:f0:80:8a:49:c6:1c:e9:22:c6: 55:e2:13:18:fa:82:0a:ed:34:59:f4:78:09:67:88: 33:45:65:a3:18:16:a5:5c:1a:6d:4c:f8:b7:17:1e: 69:3e:e1:be:68:8c:59:67:df:48:71:d2:24:19:87: f6:92:a6:9e:1d:0b:a7:89:01:a1:68:9c:4a:49:3e: 7e:62:90:fd:c7:2e:01:46:f3:41:1c:18:49:36:e0: ea:ec:f4:42:0a:18:d7:a9:b7:5d:2e:99:0d:18:a8: ac:4c:b2:ec:69:df:b3:5e:7d:52:65:4d:ab:2e:81: 4b:f6:35:51:da:23:8c:3e:19:80:b8:17:e5:17:bc: 03:dd:b9:71:81:84:d3:df:cd:72:5d:2c:7b:7b:23: bf:32:fc:6b:d5:ce:c3:c1:26:8e:39:3a:19:6d:7b: f4:44:e6:00:f7:74:4b:2b:00:3f:de:fc:b7:4c:f6: 2e:09:62:8e:d5:91:99:92:50:e7:94:97:bd:6b:ec: b5:83:a1:35:05:69:c6:e7:57:65:76:24:d5:55:3d: 72:fe:4a:b8:7e:fb:4b:f4:38:3c:eb:01:a1:57:b1: bb:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:B3:3D:8F:B6:36:E2:83:19:A6:A6:16:98:6F:01:F1:7B:AB:BB:41 X509v3 Authority Key Identifier: keyid:4E:1C:7D:0B:F8:91:C1:83:45:8C:47:AB:11:34:21:5E:79:7C:41:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E1C7D0BF891C183458C47AB1134215E797C4165.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6bac619b-21e6-41d6-8e94-5804538c543e/0/4E1C7D0BF891C183458C47AB1134215E797C4165.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:c2:71:04:e4:bb:58:7e:36:1d:2e:ce:b4:b8:1f:13:e0:39: ae:ff:4f:9b:f6:36:1d:38:7d:3b:2c:fb:63:c8:92:53:f8:be: 4d:c3:ce:cb:0f:7d:00:f8:69:1d:2c:6c:c7:df:b4:0f:d9:bc: 17:f1:2f:b5:85:6e:1f:43:4f:f2:8c:26:ed:c2:8b:da:84:0d: 11:75:a8:cd:25:dc:f7:c5:3b:12:80:04:4c:ca:1a:52:90:88: ec:9d:4d:f0:d3:0e:3b:69:8b:96:79:ad:52:54:e7:d4:c3:76: 41:3c:1c:bc:d2:9b:5c:2a:9e:b5:23:8f:15:9b:7a:99:ae:ef: e1:3d:4d:27:e6:33:89:81:b8:b7:a7:0d:05:7d:c2:7c:fd:e7: 13:d1:98:6e:d8:f9:09:9f:fc:66:18:6f:d0:0f:b5:7f:c5:4a: 43:f1:b3:88:ec:a2:36:ae:12:30:1b:2c:76:f0:80:f6:e5:b4: 17:0a:73:6a:35:33:32:d3:d9:19:f5:97:3c:d4:dd:cc:4d:b4: 0b:e5:d5:4d:07:0d:25:46:54:fb:85:80:4f:f5:35:bd:72:20: a7:cf:a6:c5:32:f8:bf:9a:af:80:8b:99:04:e7:fb:72:75:d4: f9:f4:67:23:a3:a9:3a:f1:d7:dd:b0:cb:64:50:c6:54:f4:ea: 3d:92:c6:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULvF9wbcqC4H5GkE8GAPBrsTCHn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3 OTdDNDE2NTAeFw0yNjAzMjYwNDU2MzBaFw0yNjAzMjkxMDQxMzBaMDMxMTAvBgNV BAMTKDg3QjMzRDhGQjYzNkUyODMxOUE2QTYxNjk4NkYwMUYxN0JBQkJCNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCraxZvIvnEz+uqXDW67icSHJv3 JdEarOHHxvC2kkFjoskUo/CAiknGHOkixlXiExj6ggrtNFn0eAlniDNFZaMYFqVc Gm1M+LcXHmk+4b5ojFln30hx0iQZh/aSpp4dC6eJAaFonEpJPn5ikP3HLgFG80Ec GEk24Ors9EIKGNept10umQ0YqKxMsuxp37NefVJlTasugUv2NVHaI4w+GYC4F+UX vAPduXGBhNPfzXJdLHt7I78y/GvVzsPBJo45Ohlte/RE5gD3dEsrAD/e/LdM9i4J Yo7VkZmSUOeUl71r7LWDoTUFacbnV2V2JNVVPXL+Srh++0v0ODzrAaFXsbtHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh7M9j7Y24oMZpqYWmG8B8Xuru0EwHwYDVR0j BBgwFoAUThx9C/iRwYNFjEerETQhXnl8QWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YmFjNjE5Yi0yMWU2LTQxZDYtOGU5NC01ODA0NTM4YzU0M2UvMC80RTFDN0QwQkY4 OTFDMTgzNDU4QzQ3QUIxMTM0MjE1RTc5N0M0MTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIxNUU3OTdD NDE2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmJhYzYxOWItMjFlNi00MWQ2LThl OTQtNTgwNDUzOGM1NDNlLzAvNEUxQzdEMEJGODkxQzE4MzQ1OEM0N0FCMTEzNDIx NUU3OTdDNDE2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALPCcQTku1h+Nh0uzrS4HxPgOa7/T5v2Nh04 fTss+2PIklP4vk3DzssPfQD4aR0sbMfftA/ZvBfxL7WFbh9DT/KMJu3Ci9qEDRF1 qM0l3PfFOxKABEzKGlKQiOydTfDTDjtpi5Z5rVJU59TDdkE8HLzSm1wqnrUjjxWb epmu7+E9TSfmM4mBuLenDQV9wnz95xPRmG7Y+Qmf/GYYb9APtX/FSkPxs4jsojau EjAbLHbwgPbltBcKc2o1MzLT2Rn1lzzU3cxNtAvl1U0HDSVGVPuFgE/1Nb1yIKfP psUy+L+ar4CLmQTn+3J11Pn0ZyOjqTrx192wy2RQxlT06j2Sxro= -----END CERTIFICATE-----Generated at Thu Mar 26 20:14:35 2026 by rpki-client