$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: X6XoW7y1um3zTokjsXwYfVhEIy1B9Iq9k6iJTdG02Ec= Subject key identifier: 66:5F:90:C8:9A:06:C3:7B:2B:48:D9:09:3F:3A:F5:41:7B:EA:C4:D6 Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 24235AFACDDD1099372025150399D847AF16096E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 0570 Signing time: Wed 25 Mar 2026 17:11:05 +0000 Manifest this update: Wed 25 Mar 2026 17:06:05 +0000 Manifest next update: Sun 29 Mar 2026 03:23:05 +0000 Files and hashes: 1: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0=) 2: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: tYzvnm/bKabZ0lC7zrGJWB9MDY8UVJOHdIV1ii9uRtA=) 3: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: uDEQ9UmUEH8E26kBT7S7vw//GF9066weYRFtu/Bc+PQ=) 4: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) 5: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 6: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 7: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=) 8: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: zYSXmMIYnVcnyUqfnxKNKO1jJpruvRifzdtqmQbpII4=) 9: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 10: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 11: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 03:23:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:23:5a:fa:cd:dd:10:99:37:20:25:15:03:99:d8:47:af:16:09:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Mar 25 17:06:05 2026 GMT Not After : Mar 29 03:23:05 2026 GMT Subject: CN=665F90C89A06C37B2B48D9093F3AF5417BEAC4D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7a:5b:65:c4:9b:d7:6f:fb:41:02:00:04:74: ea:00:f0:1a:cd:6c:68:42:84:7b:02:41:88:75:11: af:53:5f:1a:02:4b:22:7d:7c:d8:5a:9d:c8:6e:d9: 79:df:e2:7e:1e:d3:36:7c:c8:69:5b:49:6e:99:f2: eb:b7:07:d5:bd:3a:db:a2:1e:26:19:6d:c4:db:1f: 3b:eb:2e:a8:0f:da:7e:12:a9:c9:7a:86:84:88:2c: 02:80:7a:4e:86:51:52:45:dc:97:25:e8:53:63:e5: 38:f0:d1:d5:c1:46:d3:49:a6:0e:86:d7:36:a7:e6: a1:b7:04:d8:1e:d3:3a:98:1f:3b:d7:22:56:64:24: c8:32:03:f3:2f:4c:e7:80:9d:d1:78:bc:04:2b:98: e2:13:ca:89:60:4a:58:0f:38:78:1f:e4:b4:e9:ec: b1:ea:f5:b8:11:bf:ae:39:4b:c3:4d:c1:c1:f5:23: 8a:d0:07:8e:85:2f:7e:52:a7:6b:3f:43:8d:8c:73: 89:4e:e8:53:e3:f0:ad:8b:92:32:d0:1c:ea:4c:13: ec:57:61:c6:1e:80:cf:ca:30:ec:d9:a3:67:08:79: 7c:c5:c8:8b:6c:48:f9:64:15:64:84:d8:f9:5a:c6: 04:3d:d3:66:ea:d0:a4:68:d5:f0:e6:10:1f:2d:fb: da:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:5F:90:C8:9A:06:C3:7B:2B:48:D9:09:3F:3A:F5:41:7B:EA:C4:D6 X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:5b:8b:43:f2:ca:0b:30:99:e8:57:6e:e8:09:15:da:73:9b: a5:07:cf:4c:ce:02:1f:d8:1b:ab:f7:52:b4:27:e4:03:28:3b: 74:78:81:5c:01:b7:a5:a8:19:a0:8b:6f:7e:8d:7e:1d:75:c3: 12:46:cd:ac:14:bf:99:56:92:6f:30:31:c7:93:45:e3:7c:b7: 31:d3:ea:12:b9:c2:67:fb:08:6b:62:85:81:5a:ee:31:05:6f: 99:60:e0:32:ba:5f:83:27:d1:ed:a9:d0:d6:7c:00:44:49:eb: 2d:b9:b3:26:87:7d:c8:a6:07:29:25:3c:31:4b:40:30:77:1d: 21:4f:b7:65:47:d1:9f:75:86:9b:8c:c0:82:4e:11:2c:f7:24: b5:4f:8f:c3:e9:11:81:69:02:a3:3c:dc:cb:02:39:de:73:3e: 5b:1a:ed:06:b1:de:6d:19:33:9e:fb:67:8f:42:bc:a7:f6:46: d7:bc:ad:2d:3a:f4:a2:3b:90:5d:0e:f5:61:39:86:9e:ea:82: 37:08:d6:89:70:90:e0:dd:d1:5c:2e:ee:de:36:d4:3f:c5:a3: 6d:47:99:b5:ba:38:8c:1f:10:e4:e3:b2:ff:5a:31:df:79:83: 10:f8:41:c4:b7:57:de:cf:c6:d9:3b:b0:f8:45:c5:bc:ac:16: 96:d1:8c:36 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJCNa+s3dEJk3ICUVA5nYR68WCW4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjAzMjUxNzA2MDVaFw0yNjAzMjkwMzIzMDVaMDMxMTAvBgNV BAMTKDY2NUY5MEM4OUEwNkMzN0IyQjQ4RDkwOTNGM0FGNTQxN0JFQUM0RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveltlxJvXb/tBAgAEdOoA8BrN bGhChHsCQYh1Ea9TXxoCSyJ9fNhanchu2Xnf4n4e0zZ8yGlbSW6Z8uu3B9W9Otui HiYZbcTbHzvrLqgP2n4Sqcl6hoSILAKAek6GUVJF3Jcl6FNj5Tjw0dXBRtNJpg6G 1zan5qG3BNge0zqYHzvXIlZkJMgyA/MvTOeAndF4vAQrmOITyolgSlgPOHgf5LTp 7LHq9bgRv645S8NNwcH1I4rQB46FL35Sp2s/Q42Mc4lO6FPj8K2LkjLQHOpME+xX YcYegM/KMOzZo2cIeXzFyItsSPlkFWSE2PlaxgQ902bq0KRo1fDmEB8t+9p9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZl+QyJoGw3srSNkJPzr1QXvqxNYwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFNbi0PyygswmehXbugJFdpzm6UHz0zOAh/Y G6v3UrQn5AMoO3R4gVwBt6WoGaCLb36Nfh11wxJGzawUv5lWkm8wMceTReN8tzHT 6hK5wmf7CGtihYFa7jEFb5lg4DK6X4Mn0e2p0NZ8AERJ6y25syaHfcimByklPDFL QDB3HSFPt2VH0Z91hpuMwIJOESz3JLVPj8PpEYFpAqM83MsCOd5zPlsa7Qax3m0Z M577Z49CvKf2Rte8rS069KI7kF0O9WE5hp7qgjcI1olwkODd0Vwu7t421D/Fo21H mbW6OIwfEOTjsv9aMd95gxD4QcS3V97Pxtk7sPhFxbysFpbRjDY= -----END CERTIFICATE-----Generated at Thu Mar 26 18:30:03 2026 by rpki-client