$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: LvU5jT1IHtMYi89hZdtotHq1Yx5GVDX6W0ANyhQYde8= Subject key identifier: 19:D7:80:17:44:0A:7D:06:5D:FE:A1:BD:38:85:22:2F:A3:D2:05:E4 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 118D7140C2EB96C751C2C272A950D679690ACC3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 026C Signing time: Wed 25 Mar 2026 19:41:34 +0000 Manifest this update: Wed 25 Mar 2026 19:36:34 +0000 Manifest next update: Sun 29 Mar 2026 03:48:34 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: ZY6/yTzTB0VPLAu2EmeaFz398YorukpRHSOffB+JUQQ=) 2: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: AFw9toPIVQ6Leb0JqOXRRH2rZGOM9FgC9fHxwgy8Mt0=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: 82YqFhb4/ZH/TVttJfl2TXhpxvQiL0hSWz60Ovq6qlE=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: 7aywUIXFUEuMUfYXXNrXCaHCS72hzYp6TKpPIt+Y3+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:48:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:8d:71:40:c2:eb:96:c7:51:c2:c2:72:a9:50:d6:79:69:0a:cc:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Mar 25 19:36:34 2026 GMT Not After : Mar 29 03:48:34 2026 GMT Subject: CN=19D78017440A7D065DFEA1BD3885222FA3D205E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1f:e3:b0:55:e1:db:15:45:04:55:e6:0d:07: 5b:25:a6:8d:ed:1c:8e:31:0a:34:91:76:d7:1f:2c: 3e:1a:04:ac:c7:73:dc:10:d3:15:0d:68:8e:ed:b8: 82:70:ff:a7:7c:0a:d7:a9:b4:bd:53:e3:79:20:c7: b1:e6:66:c3:44:1d:3c:b5:86:82:fe:2a:95:74:7d: f2:c5:46:df:79:a0:33:ed:60:c2:02:ab:c9:c2:5f: 3c:07:a1:22:42:15:41:e5:2b:2d:0e:86:1b:73:c2: 59:0c:6f:4a:c4:96:8d:4e:c4:dd:44:19:a9:b1:64: de:be:4e:33:5d:d2:b6:ac:0b:55:be:0d:e4:b2:66: 9b:5c:6c:74:22:3c:99:0a:90:c4:86:47:f6:c7:6f: f5:0c:0c:22:4d:e2:4f:66:03:15:ee:ee:77:3a:17: e8:62:a0:59:57:ce:5b:78:ae:dd:fe:ae:ef:4d:4c: de:43:73:4b:0d:b0:a3:f2:62:e7:54:60:fb:54:5c: 45:01:57:97:5c:93:1b:e4:2b:3c:e9:ab:1d:c0:3d: 71:ff:dc:a0:48:1d:20:2b:97:4b:ae:b2:16:4b:52: b9:28:55:7e:56:34:a0:61:11:b0:48:d1:6f:d1:7b: 0b:b8:7b:f9:78:2c:4e:b8:38:64:f4:c5:b5:b5:68: 35:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D7:80:17:44:0A:7D:06:5D:FE:A1:BD:38:85:22:2F:A3:D2:05:E4 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:b3:6b:22:c6:c4:7e:8e:12:d8:b4:ea:a2:7b:d7:f4:98:38: dc:bd:53:0e:53:9d:6a:93:75:69:79:3b:18:80:83:b8:3e:27: 53:91:8c:33:a2:ff:36:28:b1:18:2c:d0:88:49:32:a7:06:8e: b3:d9:ed:01:4a:c5:ff:06:cb:3c:4e:7a:09:77:d3:ba:b9:58: 32:6b:88:6e:d9:d4:a1:41:23:d4:56:bd:82:cd:1f:39:b9:95: 3b:6a:6a:fc:cb:3d:44:18:b7:0f:8b:ca:e5:0d:6f:1f:f6:27: b0:dd:64:c3:97:4b:61:a2:d5:3c:08:f7:63:fd:06:4b:2f:7f: 32:dc:40:dc:a9:f5:78:39:20:17:d7:d4:02:8b:8d:f4:0e:68: 0f:f9:dc:b1:5a:e2:98:2a:11:da:c1:85:da:99:8c:9d:e0:50: 3c:03:38:61:8a:8b:e4:a2:98:09:0e:d7:eb:5b:30:48:05:94: 29:b1:95:75:d6:2d:cc:7d:4a:89:af:37:d1:97:cb:8a:27:8b: 56:4a:95:c4:e6:30:e3:df:49:41:79:b3:16:72:ec:cb:53:7a: a0:ee:54:5c:0a:fb:36:b2:45:43:10:84:ed:d4:b6:e9:e9:c6: d4:b8:a8:93:49:95:3b:6a:5f:33:11:2e:47:ca:73:31:18:3b: 26:37:41:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEY1xQMLrlsdRwsJyqVDWeWkKzDowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNjAzMjUxOTM2MzRaFw0yNjAzMjkwMzQ4MzRaMDMxMTAvBgNV BAMTKDE5RDc4MDE3NDQwQTdEMDY1REZFQTFCRDM4ODUyMjJGQTNEMjA1RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6H+OwVeHbFUUEVeYNB1slpo3t HI4xCjSRdtcfLD4aBKzHc9wQ0xUNaI7tuIJw/6d8CteptL1T43kgx7HmZsNEHTy1 hoL+KpV0ffLFRt95oDPtYMICq8nCXzwHoSJCFUHlKy0OhhtzwlkMb0rElo1OxN1E GamxZN6+TjNd0rasC1W+DeSyZptcbHQiPJkKkMSGR/bHb/UMDCJN4k9mAxXu7nc6 F+hioFlXzlt4rt3+ru9NTN5Dc0sNsKPyYudUYPtUXEUBV5dckxvkKzzpqx3APXH/ 3KBIHSArl0uushZLUrkoVX5WNKBhEbBI0W/Rewu4e/l4LE64OGT0xbW1aDUDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGdeAF0QKfQZd/qG9OIUiL6PSBeQwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqzayLGxH6OEti06qJ71/SYONy9Uw5TnWqT dWl5OxiAg7g+J1ORjDOi/zYosRgs0IhJMqcGjrPZ7QFKxf8GyzxOegl307q5WDJr iG7Z1KFBI9RWvYLNHzm5lTtqavzLPUQYtw+LyuUNbx/2J7DdZMOXS2Gi1TwI92P9 BksvfzLcQNyp9Xg5IBfX1AKLjfQOaA/53LFa4pgqEdrBhdqZjJ3gUDwDOGGKi+Si mAkO1+tbMEgFlCmxlXXWLcx9SomvN9GXy4oni1ZKlcTmMOPfSUF5sxZy7MtTeqDu VFwK+zayRUMQhO3UtunpxtS4qJNJlTtqXzMRLkfKczEYOyY3QeA= -----END CERTIFICATE-----Generated at Thu Mar 26 07:28:29 2026 by rpki-client