$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: bX4dmdj3lJ2iVTGqx148jRy8NIJ/pGbxMUIN48G5tF8= Subject key identifier: 8C:D5:42:C6:98:3A:9B:74:F8:E4:28:E4:B2:5C:79:15:E5:92:1F:61 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 516F5820290B8F19CEDA7E16A7A59E7F1D84F9A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 017F Signing time: Tue 24 Mar 2026 17:12:08 +0000 Manifest this update: Tue 24 Mar 2026 17:07:08 +0000 Manifest next update: Sat 28 Mar 2026 02:34:08 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: x+QAle5BCV2M9mS/OXxofned8C0LOTo+HgWweORhfkw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:6f:58:20:29:0b:8f:19:ce:da:7e:16:a7:a5:9e:7f:1d:84:f9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Mar 24 17:07:08 2026 GMT Not After : Mar 28 02:34:08 2026 GMT Subject: CN=8CD542C6983A9B74F8E428E4B25C7915E5921F61 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d5:27:97:ee:d2:b2:a8:cd:ff:28:f6:b5:ab: ce:ef:57:a1:d0:95:d9:42:c9:9b:77:8e:1f:07:75: f5:bc:67:60:29:80:b1:be:b0:cf:85:df:09:f3:fb: 02:12:05:12:1e:d6:9b:02:61:d8:be:92:2f:54:12: a2:d9:bc:15:b7:4c:cc:55:04:2b:be:ea:d8:71:2a: 13:15:71:ea:81:d4:e9:33:12:f6:84:d5:e1:4f:f2: b5:29:fb:44:6d:ef:3f:4f:81:a1:2a:64:d3:3e:a8: c5:3c:18:cf:97:f4:8b:80:cb:4c:78:b6:46:6b:eb: 58:86:25:4f:d4:80:97:4c:f3:b1:23:25:fe:0e:27: b1:b8:3f:14:24:f4:2d:03:45:46:e4:08:a1:80:d7: ea:51:0d:4f:af:a4:7d:d0:aa:d6:21:7b:09:78:a1: 0b:e5:8f:84:96:44:9d:32:02:58:a9:29:2d:39:d0: a7:40:10:44:fb:09:8d:2d:55:87:5e:e5:61:03:5e: 0b:51:77:a9:d0:e4:2c:77:b2:dd:c0:23:cd:82:a8: c8:17:92:71:ec:86:47:b4:7e:2b:8a:f2:4c:05:f6: af:68:94:ca:c9:a5:4d:fc:2d:25:a1:8e:88:a7:e6: 28:7f:6c:47:d6:a9:5b:f8:14:46:66:2c:e5:00:f6: b9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:D5:42:C6:98:3A:9B:74:F8:E4:28:E4:B2:5C:79:15:E5:92:1F:61 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:1e:12:0b:36:7b:a1:57:67:39:17:8f:88:6e:58:7f:90:3e: fb:52:14:af:cc:b7:77:07:b6:9c:e5:73:82:57:a3:b1:6a:98: 1e:26:cc:ab:bc:94:6e:95:2b:66:0a:31:51:66:34:ae:03:54: 12:15:93:98:cc:71:09:2e:17:52:8e:b7:4d:ab:e3:20:e0:34: e9:5b:35:f5:ab:64:4b:8f:5a:ea:59:fe:14:87:b8:6c:24:35: 10:5a:b0:8c:fb:e5:f6:8b:8b:a6:a0:76:1c:e6:67:f9:2d:af: a4:00:19:39:2c:cb:1f:63:3b:79:b0:b9:21:5e:13:39:c6:76: 32:87:6a:71:e9:83:3e:37:9d:e7:e7:a8:93:e7:57:bd:9a:88: 1c:5c:b6:63:a0:79:bf:27:47:08:0e:9c:7d:d5:65:47:7e:6a: a9:56:22:e6:63:10:53:ee:33:26:28:2f:ce:06:5b:8a:5d:9f: ec:f8:60:ab:87:b2:a8:5e:5e:2f:b4:07:fa:d8:98:29:1d:56: 34:c2:7d:82:22:af:12:61:94:4c:e7:c9:fd:14:62:38:4d:c4: 74:9d:4e:8a:ee:a4:13:f3:62:b6:5b:8c:58:b1:6d:2c:4a:3c: 13:95:a7:35:20:e9:6d:b8:d1:82:b2:87:39:c4:93:7a:27:44: 28:4d:76:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUW9YICkLjxnO2n4Wp6Wefx2E+aAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNjAzMjQxNzA3MDhaFw0yNjAzMjgwMjM0MDhaMDMxMTAvBgNV BAMTKDhDRDU0MkM2OTgzQTlCNzRGOEU0MjhFNEIyNUM3OTE1RTU5MjFGNjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ1SeX7tKyqM3/KPa1q87vV6HQ ldlCyZt3jh8HdfW8Z2ApgLG+sM+F3wnz+wISBRIe1psCYdi+ki9UEqLZvBW3TMxV BCu+6thxKhMVceqB1OkzEvaE1eFP8rUp+0Rt7z9PgaEqZNM+qMU8GM+X9IuAy0x4 tkZr61iGJU/UgJdM87EjJf4OJ7G4PxQk9C0DRUbkCKGA1+pRDU+vpH3QqtYhewl4 oQvlj4SWRJ0yAlipKS050KdAEET7CY0tVYde5WEDXgtRd6nQ5Cx3st3AI82CqMgX knHshke0fiuK8kwF9q9olMrJpU38LSWhjoin5ih/bEfWqVv4FEZmLOUA9rnZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjNVCxpg6m3T45Cjkslx5FeWSH2EwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkeEgs2e6FXZzkXj4huWH+QPvtSFK/Mt3cH tpzlc4JXo7FqmB4mzKu8lG6VK2YKMVFmNK4DVBIVk5jMcQkuF1KOt02r4yDgNOlb NfWrZEuPWupZ/hSHuGwkNRBasIz75faLi6agdhzmZ/ktr6QAGTksyx9jO3mwuSFe EznGdjKHanHpgz43nefnqJPnV72aiBxctmOgeb8nRwgOnH3VZUd+aqlWIuZjEFPu MyYoL84GW4pdn+z4YKuHsqheXi+0B/rYmCkdVjTCfYIirxJhlEznyf0UYjhNxHSd TorupBPzYrZbjFixbSxKPBOVpzUg6W240YKyhznEk3onRChNdic= -----END CERTIFICATE-----Generated at Thu Mar 26 15:49:50 2026 by rpki-client