$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: BnE0aUfjk3g7L/RuWI0XL6z2ojeUo3s+7b6HdW1ha8M= Subject key identifier: 1F:86:E2:AF:8E:02:0D:F7:F6:64:40:35:99:36:27:45:06:BA:5A:F0 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 2305A70BFDFE57524EC2D2F20D2A1F5BA58A291B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0189 Signing time: Wed 25 Mar 2026 08:02:42 +0000 Manifest this update: Wed 25 Mar 2026 07:57:42 +0000 Manifest next update: Sat 28 Mar 2026 09:55:42 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 2: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: /dNg9MBchauvmLQEYHkq7101lBqcvirGX9tat1iEI4g=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:55:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:05:a7:0b:fd:fe:57:52:4e:c2:d2:f2:0d:2a:1f:5b:a5:8a:29:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Mar 25 07:57:42 2026 GMT Not After : Mar 28 09:55:42 2026 GMT Subject: CN=1F86E2AF8E020DF7F66440359936274506BA5AF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:43:76:8e:b0:10:78:d5:2e:d6:75:71:13:d3: 09:df:80:74:81:56:f9:6d:58:b8:a3:d4:db:12:d0: 4d:e3:64:44:fa:07:84:1d:18:a5:6a:d3:24:9b:ec: 28:89:07:d9:51:88:2f:0a:98:db:d8:b6:3a:13:b1: 28:6e:e2:8f:ae:be:61:48:ed:2f:18:d8:88:7a:bc: 62:fb:ae:84:46:c5:ad:fb:ff:ad:55:5f:11:1a:c1: 90:dc:c5:b6:8b:da:e3:a4:66:1a:f1:20:0f:f4:cc: 6e:25:1c:ce:e1:71:2d:55:f6:ef:88:2f:e1:b4:21: 1f:9c:ce:d0:93:13:bc:a7:9e:ab:6f:48:cc:d2:15: 74:43:2c:4e:8c:91:d4:dd:c8:46:f8:73:77:26:a3: a1:a5:d9:07:90:70:90:2b:4a:6c:84:14:44:22:e9: 68:fb:c1:03:81:11:cb:d4:d7:4e:5c:f5:0d:78:d7: 6f:a5:a8:70:ad:02:fc:dd:c3:31:b4:3b:83:4d:40: bf:e7:6b:98:a3:db:96:1c:dc:42:ac:19:00:98:cb: ce:aa:06:31:8d:2a:ed:99:e1:10:0a:3c:d2:d3:bc: 8c:5a:84:17:d4:43:95:89:e6:96:71:16:33:23:7c: 33:5e:6b:0d:21:44:24:7e:5e:fa:46:a4:93:bb:a7: ff:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:86:E2:AF:8E:02:0D:F7:F6:64:40:35:99:36:27:45:06:BA:5A:F0 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:a0:5f:1c:a7:cf:8a:98:35:f7:ba:22:13:ac:8a:2a:d8:74: f9:c3:c4:5a:86:cc:76:51:8a:7a:b6:d2:3e:30:bd:b1:79:1e: 15:ca:58:68:ef:42:46:4f:d9:a8:79:83:60:bd:90:c5:31:4d: 00:6e:07:cb:ee:80:fc:aa:c8:18:7c:8b:46:83:4e:15:99:5b: e2:d5:fb:6b:9b:84:34:4e:06:0d:31:d0:da:44:84:6b:69:22: 1a:8f:b2:db:8a:ad:9f:57:e6:a6:ee:4d:d3:ca:53:52:52:f1: a2:38:b4:1d:f8:7e:85:43:14:f9:ac:3a:5d:f6:5f:6a:f5:21: 5f:60:62:c4:e7:2d:19:74:4a:c7:c3:03:06:3a:42:8b:7d:56: 7b:e1:67:b1:5f:da:74:1c:c5:aa:59:ec:00:c2:a7:26:4a:9b: 45:7c:f6:e0:c5:3e:10:c7:f5:e3:96:5d:4d:7e:6e:42:77:c8: 11:4d:df:bf:2e:e4:49:c7:8e:81:13:43:0a:6b:bc:70:d7:37: 85:6c:e8:95:1e:1b:f9:bc:f6:90:b9:21:84:21:3e:d3:88:87: 23:96:38:0d:65:fd:67:af:e4:87:a9:39:09:e8:42:d7:79:2e: 1d:78:17:a0:d6:23:76:a5:c1:d3:e8:64:c2:3e:81:fe:b7:6c: a1:b7:69:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwWnC/3+V1JOwtLyDSofW6WKKRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNjAzMjUwNzU3NDJaFw0yNjAzMjgwOTU1NDJaMDMxMTAvBgNV BAMTKDFGODZFMkFGOEUwMjBERjdGNjY0NDAzNTk5MzYyNzQ1MDZCQTVBRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNQ3aOsBB41S7WdXET0wnfgHSB VvltWLij1NsS0E3jZET6B4QdGKVq0ySb7CiJB9lRiC8KmNvYtjoTsShu4o+uvmFI 7S8Y2Ih6vGL7roRGxa37/61VXxEawZDcxbaL2uOkZhrxIA/0zG4lHM7hcS1V9u+I L+G0IR+cztCTE7ynnqtvSMzSFXRDLE6MkdTdyEb4c3cmo6Gl2QeQcJArSmyEFEQi 6Wj7wQOBEcvU105c9Q1412+lqHCtAvzdwzG0O4NNQL/na5ij25Yc3EKsGQCYy86q BjGNKu2Z4RAKPNLTvIxahBfUQ5WJ5pZxFjMjfDNeaw0hRCR+XvpGpJO7p/+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH4bir44CDff2ZEA1mTYnRQa6WvAwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+gXxynz4qYNfe6IhOsiirYdPnDxFqGzHZR inq20j4wvbF5HhXKWGjvQkZP2ah5g2C9kMUxTQBuB8vugPyqyBh8i0aDThWZW+LV +2ubhDROBg0x0NpEhGtpIhqPstuKrZ9X5qbuTdPKU1JS8aI4tB34foVDFPmsOl32 X2r1IV9gYsTnLRl0SsfDAwY6Qot9VnvhZ7Ff2nQcxapZ7ADCpyZKm0V89uDFPhDH 9eOWXU1+bkJ3yBFN378u5EnHjoETQwprvHDXN4Vs6JUeG/m89pC5IYQhPtOIhyOW OA1l/Wev5IepOQnoQtd5Lh14F6DWI3alwdPoZMI+gf63bKG3aQY= -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:11 2026 by rpki-client