$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft File: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft (raw, json) Hash identifier: 48T1kEO6hK9fv8eBPQTAnONKwPU0zsgcAyDQH6cfsgI= Subject key identifier: D7:DF:DC:C7:35:3B:D2:17:57:C6:52:71:47:01:C5:47:1E:67:62:7E Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Certificate serial: 5CE5B2837E29CA7E58DBFAD0A621506D4EB4C6D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft Manifest number: 0569 Signing time: Tue 24 Mar 2026 18:30:02 +0000 Manifest this update: Tue 24 Mar 2026 18:25:02 +0000 Manifest next update: Sat 28 Mar 2026 02:18:02 +0000 Files and hashes: 1: 4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl (hash: siUsqkHReNbNRjvf+96KBuNn4jmtaVZLXw7C7FWLR7s=) 2: 3130332e3132352e3131372e302f32342d3234203d3e20313338313032.roa (hash: DvXqXB3KDxEUrIvLC7HCxRYW39FKt6kOul7sjWDdzKs=) 3: 3130332e3132352e3131362e302f32322d3232203d3e20313338313032.roa (hash: ap/TAn2i+zkksu9/CGCNCkYifXPZgmxnJOJkOH4ZWr8=) 4: 3130332e3132352e3131382e302f32342d3234203d3e20313338313032.roa (hash: hxX9wVbrBCOouQsOFqq88JkVfKelw0pXrTTftPM/8Pg=) 5: 3130332e3132352e3131362e302f32342d3234203d3e20313338313032.roa (hash: Rijq6K1g57KijomhL6W8vMskGlfJbmrteuOacH80VQM=) 6: 3130332e3132352e3131392e302f32342d3234203d3e20313338313032.roa (hash: yF5QYDSmZl11Br5OhVCNQy6ELbgnz0I3Y8PMUZejcuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 02:18:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:e5:b2:83:7e:29:ca:7e:58:db:fa:d0:a6:21:50:6d:4e:b4:c6:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9 Validity Not Before: Mar 24 18:25:02 2026 GMT Not After : Mar 28 02:18:02 2026 GMT Subject: CN=D7DFDCC7353BD21757C652714701C5471E67627E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:df:40:6d:16:3f:eb:b4:c1:96:9b:b8:6c:f0: 82:b2:ce:89:a9:53:15:44:eb:4f:5a:79:78:9f:26: fa:bf:3a:1b:1c:d8:e6:72:f9:58:2e:bb:45:f1:82: db:02:50:fd:4c:f7:fb:6e:a3:26:db:31:ad:05:09: bd:90:e2:f8:34:ea:3d:45:79:85:e3:cb:71:e5:69: a3:b2:42:30:2c:ca:65:82:0c:be:19:3a:79:51:31: 38:18:0c:6d:25:1f:08:c1:72:18:2d:18:53:d4:45: 35:5a:76:b6:18:ba:fe:9f:db:a4:f1:d4:93:fc:3b: f2:da:f7:7b:8f:2e:d3:8a:3b:c4:24:7f:a4:18:00: fe:9a:be:16:59:a2:54:4f:5f:a5:23:bf:f1:b1:21: e5:b8:50:60:91:73:67:55:95:59:07:28:75:8a:3d: ee:67:81:1d:55:6a:6c:d1:f1:9d:bd:c5:7f:3f:96: 0d:b0:2d:9d:21:0b:56:ef:d5:65:00:29:6e:01:3b: 17:46:86:22:69:d7:5a:6f:95:07:73:6f:7f:e8:ab: 5e:e0:cb:e1:04:47:4e:3c:dd:41:32:33:ef:9c:78: d0:98:3f:7b:b6:50:87:55:db:b7:ad:f9:45:57:04: e1:22:4d:06:a5:55:fc:4b:f1:31:0f:30:88:0b:80: d4:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:DF:DC:C7:35:3B:D2:17:57:C6:52:71:47:01:C5:47:1E:67:62:7E X509v3 Authority Key Identifier: keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:b1:35:69:84:4c:6d:2b:2f:64:0e:d8:d5:69:60:77:98:65: ad:98:fa:a3:ec:74:a4:72:2f:bf:e7:93:14:9b:0b:a5:93:8f: d4:a3:63:b1:a0:a8:13:13:6a:bb:6a:79:e4:6c:de:fd:6b:4d: d0:ec:36:39:34:46:08:d7:55:d3:ab:c5:38:ed:34:5a:b7:9d: 71:f4:df:4c:9c:de:30:7d:3f:57:37:62:2c:a0:57:c8:59:69: 40:9f:75:4b:9c:09:d4:b7:c3:35:93:78:21:68:c6:ea:78:2e: b3:fa:8c:88:2f:f9:b5:94:ed:82:4a:33:90:b5:fa:65:da:18: f5:82:69:cc:a6:1b:42:08:ce:98:35:83:01:ed:1e:68:ee:eb: 00:3a:87:8f:a0:21:a2:79:9f:f8:68:b0:4c:1d:47:4c:8d:2e: 54:6d:eb:f4:fa:26:dc:94:d9:54:4d:08:94:4d:0f:e8:c0:af: cb:36:5e:9d:00:be:f9:a0:f0:91:e8:af:14:82:08:a9:1c:d3: 00:ba:f5:26:97:da:c4:3c:65:5b:d9:7e:13:27:2e:33:f0:f8: f6:3a:b4:b3:34:35:bb:54:a6:80:9a:d1:4f:4f:1c:41:0f:c8: 73:57:9f:f4:35:07:ca:b0:85:ce:91:16:ae:0b:9b:91:2f:f2: 41:aa:6f:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXOWyg34pyn5Y2/rQpiFQbU60xtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNF RTZBRDFGOTAeFw0yNjAzMjQxODI1MDJaFw0yNjAzMjgwMjE4MDJaMDMxMTAvBgNV BAMTKEQ3REZEQ0M3MzUzQkQyMTc1N0M2NTI3MTQ3MDFDNTQ3MUU2NzYyN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo30BtFj/rtMGWm7hs8IKyzomp UxVE609aeXifJvq/Ohsc2OZy+Vguu0XxgtsCUP1M9/tuoybbMa0FCb2Q4vg06j1F eYXjy3HlaaOyQjAsymWCDL4ZOnlRMTgYDG0lHwjBchgtGFPURTVadrYYuv6f26Tx 1JP8O/La93uPLtOKO8Qkf6QYAP6avhZZolRPX6Ujv/GxIeW4UGCRc2dVlVkHKHWK Pe5ngR1VamzR8Z29xX8/lg2wLZ0hC1bv1WUAKW4BOxdGhiJp11pvlQdzb3/oq17g y+EER0483UEyM++ceNCYP3u2UIdV27et+UVXBOEiTQalVfxL8TEPMIgLgNQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU19/cxzU70hdXxlJxRwHFRx5nYn4wHwYDVR0j BBgwFoAUTe+92YVL6NHij3MwoLgCw+5q0fkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MGRlMjMxZi1mYjhhLTQyN2EtYWEzNi0wYTNmYzk3MjMyOGQvMC80REVGQkREOTg1 NEJFOEQxRTI4RjczMzBBMEI4MDJDM0VFNkFEMUY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAyQzNFRTZB RDFGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTBkZTIzMWYtZmI4YS00MjdhLWFh MzYtMGEzZmM5NzIzMjhkLzAvNERFRkJERDk4NTRCRThEMUUyOEY3MzMwQTBCODAy QzNFRTZBRDFGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyxNWmETG0rL2QO2NVpYHeYZa2Y+qPsdKRy L7/nkxSbC6WTj9SjY7GgqBMTartqeeRs3v1rTdDsNjk0RgjXVdOrxTjtNFq3nXH0 30yc3jB9P1c3YiygV8hZaUCfdUucCdS3wzWTeCFoxup4LrP6jIgv+bWU7YJKM5C1 +mXaGPWCacymG0IIzpg1gwHtHmju6wA6h4+gIaJ5n/hosEwdR0yNLlRt6/T6JtyU 2VRNCJRND+jAr8s2Xp0Avvmg8JHorxSCCKkc0wC69SaX2sQ8ZVvZfhMnLjPw+PY6 tLM0NbtUpoCa0U9PHEEPyHNXn/Q1B8qwhc6RFq4Lm5Ev8kGqbyQ= -----END CERTIFICATE-----Generated at Thu Mar 26 11:30:16 2026 by rpki-client