$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft File: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft (raw, json) Hash identifier: xRVseF9z85A9TIdy7gM27+1BbwpG2+h8Bfe7anR7QXs= Subject key identifier: 95:C9:D0:5D:78:D0:F1:D3:82:F0:35:50:8E:84:F5:6E:56:B5:C4:94 Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F Certificate issuer: /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Certificate serial: 5D85F6BCA8D3D96FD9415A4B56C5E09D825E1B2B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft Manifest number: 04D9 Signing time: Wed 25 Mar 2026 19:52:41 +0000 Manifest this update: Wed 25 Mar 2026 19:47:41 +0000 Manifest next update: Sun 29 Mar 2026 00:27:41 +0000 Files and hashes: 1: 3130332e37312e34342e302f32332d3233203d3e203436303232.roa (hash: V3QHQK/gWQFy09rLOPxob5SyVyg/wx9t2yimUS9bwPY=) 2: 4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl (hash: /WtSzGYBJExafSJg8ETQ9yMn84tuY2cnkfEWrPb3iS8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:27:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:85:f6:bc:a8:d3:d9:6f:d9:41:5a:4b:56:c5:e0:9d:82:5e:1b:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F Validity Not Before: Mar 25 19:47:41 2026 GMT Not After : Mar 29 00:27:41 2026 GMT Subject: CN=95C9D05D78D0F1D382F035508E84F56E56B5C494 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:66:48:e5:c9:15:ed:7d:8c:54:55:ad:3e:8c: 89:f1:c6:a0:bc:0d:b4:7e:c1:54:8d:f0:cd:63:eb: 52:ea:64:18:a4:91:3f:73:8c:72:f8:62:8a:40:28: d4:5b:e8:a1:03:d5:5d:24:88:49:95:fc:60:19:8d: 2a:e8:2e:02:44:a7:5f:e0:64:43:a3:e6:55:48:6a: 22:91:70:95:03:18:68:3f:5c:b5:c8:c4:7b:71:05: 9a:37:e3:53:b6:2c:0b:ae:7a:f5:2a:7c:87:7e:62: 26:d9:1f:1e:ee:93:10:05:ba:c5:cf:e3:06:d3:19: 6d:dc:52:0e:f6:dd:7b:11:31:f9:05:19:fb:ce:c4: f4:d0:ae:32:fe:ce:b1:a0:e2:6b:bb:f7:10:80:dc: 11:e2:7a:da:e1:bb:10:13:fd:cb:44:f5:1a:6c:3c: 56:02:29:61:5d:5c:98:91:49:df:07:9b:8b:95:db: ec:eb:13:1a:45:24:f3:54:23:5d:01:b9:b2:bb:0d: d7:71:10:91:2a:a5:df:0e:6b:77:17:cc:fb:1e:e3: 45:50:31:04:04:17:5f:17:ad:37:a4:8a:ea:93:8c: 9d:7a:99:18:31:20:3d:0c:3f:d2:b4:d3:61:e2:6d: 77:c5:95:ce:26:ae:1c:91:a8:e7:72:bf:b2:c0:0a: 54:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:C9:D0:5D:78:D0:F1:D3:82:F0:35:50:8E:84:F5:6E:56:B5:C4:94 X509v3 Authority Key Identifier: keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7a:6c:cc:4e:2c:64:53:28:fa:99:2b:bc:94:8d:c1:29:bf: 2a:95:7f:68:1a:ad:77:de:2d:7d:69:48:2d:13:63:4d:ed:59: 93:d0:af:ec:bb:67:70:cd:f8:8c:c5:6b:93:82:13:16:04:57: ea:4d:89:6a:5c:ff:90:a7:d4:cc:c9:e9:14:69:28:98:4e:cd: be:f5:2d:10:59:59:52:87:77:fa:64:52:d0:1c:c4:7a:df:7c: 4b:12:36:6e:a8:cb:45:84:1b:15:b8:a3:ad:ce:aa:45:51:a2: 1f:f7:92:c5:26:0e:83:e9:fa:54:ac:14:49:6f:9d:d5:4e:f9: 64:1b:25:55:38:3a:f9:f9:d0:d2:78:39:8d:a6:1c:aa:a4:7c: 7b:59:57:b5:fd:eb:0b:b5:7b:29:74:4d:d3:07:eb:9b:ea:62: 1b:88:12:b1:ac:67:43:45:78:0f:4d:0e:6a:85:ef:9e:66:7f: fa:ed:67:ea:dd:d5:18:65:a5:28:ab:2d:22:3e:60:9b:86:4d: c2:a9:1d:64:98:78:50:a9:32:35:e2:d6:52:8d:67:ea:cd:78: 5b:2b:67:3f:25:23:c1:4c:1d:ec:f9:68:14:e0:a3:03:4b:50: 44:5b:f1:5a:a2:c8:32:6c:f6:4a:df:44:0a:93:53:54:7d:08: 86:e6:0e:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXYX2vKjT2W/ZQVpLVsXgnYJeGyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0Ix RkJEMkEzRjAeFw0yNjAzMjUxOTQ3NDFaFw0yNjAzMjkwMDI3NDFaMDMxMTAvBgNV BAMTKDk1QzlEMDVENzhEMEYxRDM4MkYwMzU1MDhFODRGNTZFNTZCNUM0OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZkjlyRXtfYxUVa0+jInxxqC8 DbR+wVSN8M1j61LqZBikkT9zjHL4YopAKNRb6KED1V0kiEmV/GAZjSroLgJEp1/g ZEOj5lVIaiKRcJUDGGg/XLXIxHtxBZo341O2LAuuevUqfId+YibZHx7ukxAFusXP 4wbTGW3cUg723XsRMfkFGfvOxPTQrjL+zrGg4mu79xCA3BHietrhuxAT/ctE9Rps PFYCKWFdXJiRSd8Hm4uV2+zrExpFJPNUI10BubK7DddxEJEqpd8Oa3cXzPse40VQ MQQEF18XrTekiuqTjJ16mRgxID0MP9K002HibXfFlc4mrhyRqOdyv7LAClSNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlcnQXXjQ8dOC8DVQjoT1bla1xJQwHwYDVR0j BBgwFoAUTDQItuCCVCLcLQceSQvXyx+9Kj8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MWM5Y2U1YS02NjkwLTQ5MDEtOWUwYS1jMjdiMzE5MzE2YmUvMC80QzM0MDhCNkUw ODI1NDIyREMyRDA3MUU0OTBCRDdDQjFGQkQyQTNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3Q0IxRkJE MkEzRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODFjOWNlNWEtNjY5MC00OTAxLTll MGEtYzI3YjMxOTMxNmJlLzAvNEMzNDA4QjZFMDgyNTQyMkRDMkQwNzFFNDkwQkQ3 Q0IxRkJEMkEzRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF96bMxOLGRTKPqZK7yUjcEpvyqVf2garXfe LX1pSC0TY03tWZPQr+y7Z3DN+IzFa5OCExYEV+pNiWpc/5Cn1MzJ6RRpKJhOzb71 LRBZWVKHd/pkUtAcxHrffEsSNm6oy0WEGxW4o63OqkVRoh/3ksUmDoPp+lSsFElv ndVO+WQbJVU4Ovn50NJ4OY2mHKqkfHtZV7X96wu1eyl0TdMH65vqYhuIErGsZ0NF eA9NDmqF755mf/rtZ+rd1RhlpSirLSI+YJuGTcKpHWSYeFCpMjXi1lKNZ+rNeFsr Zz8lI8FMHez5aBTgowNLUERb8VqiyDJs9krfRAqTU1R9CIbmDio= -----END CERTIFICATE-----Generated at Thu Mar 26 18:57:41 2026 by rpki-client