$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: qxF8i23V4OXgq0uaRcs2g7Y7V2GoQJdsQAi8REiDX40= Subject key identifier: 33:88:A7:30:E3:2F:3A:79:94:F3:65:13:C6:F2:CF:F7:20:F7:73:A8 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 2808D5B54B48D87686DF71C4BF27D5D7E19DA7EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01EF Signing time: Tue 24 Mar 2026 23:02:06 +0000 Manifest this update: Tue 24 Mar 2026 22:57:06 +0000 Manifest next update: Fri 27 Mar 2026 23:02:06 +0000 Files and hashes: 1: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: g0sdVkYHqT7+TP+Qvgty23TxUvrunC376VvA4P4f5TA=) 2: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: mFejQ+rZMYWI2e2oK1mVjUKVpb9d3Kj3eFkk7uGq9z8=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 1puyNHEGNNhGWrQg/vX5HkRvqQmry57OCK++TTBuetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:02:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:08:d5:b5:4b:48:d8:76:86:df:71:c4:bf:27:d5:d7:e1:9d:a7:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Mar 24 22:57:06 2026 GMT Not After : Mar 27 23:02:06 2026 GMT Subject: CN=3388A730E32F3A7994F36513C6F2CFF720F773A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c9:cf:d7:67:67:ac:79:b8:3e:e6:36:c8:8b: 06:01:7f:a7:67:f4:7a:36:28:43:3f:6a:63:2f:0f: 19:ca:b8:a1:50:db:87:00:c2:65:30:89:71:de:d3: a0:76:4d:57:d6:26:5a:e8:00:1d:03:a5:21:ab:e8: 67:b8:0a:c2:8e:ff:36:8c:a3:a1:b5:a1:40:6e:2f: ee:0a:b4:30:ac:ce:85:7f:6b:f4:ee:03:e1:07:34: 69:11:70:12:c2:7e:a4:f9:5a:00:f4:5c:bd:36:c3: 17:eb:33:7b:91:8d:c2:af:54:8e:a2:4e:e7:a3:a5: 65:8e:55:1e:4b:d2:6b:e5:ee:15:8d:de:41:07:e6: ee:d5:d3:12:31:18:2c:7c:d0:5b:58:df:b2:de:51: c3:3c:94:d8:76:ca:f1:84:c9:57:10:cd:4a:57:76: 92:68:ae:67:62:3c:f3:fc:ac:8c:f4:ee:89:48:6e: 77:46:e9:3a:40:eb:b9:4a:f4:1a:1b:ff:b1:9a:d7: ed:ee:d7:5a:b3:c2:83:e7:0a:18:8b:23:19:be:ba: c4:9a:aa:58:e8:e9:1a:d6:61:f9:81:fa:37:06:80: 76:a9:03:67:4a:ba:30:b8:2c:1d:93:8e:5b:00:f9: 82:9f:e0:7f:ee:e4:a8:92:e5:1a:09:e3:21:96:00: 0a:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:88:A7:30:E3:2F:3A:79:94:F3:65:13:C6:F2:CF:F7:20:F7:73:A8 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:a1:ea:a3:5c:82:fb:93:c6:35:b8:ab:86:76:09:1e:4d:0e: 96:a9:f5:89:90:3a:e9:22:42:9a:7c:e0:6d:38:2b:b7:18:7d: 10:60:98:a1:76:bc:9d:10:79:ed:48:25:43:45:a3:5a:33:a3: a0:d0:da:94:a7:3b:4a:13:eb:a7:86:cf:79:86:91:23:4f:f3: 64:a6:2c:6a:32:8d:1f:ae:41:38:6d:b3:c1:23:b6:9e:fe:0d: 1f:f7:15:25:58:9a:5b:ca:59:73:4e:58:0e:6c:f0:a4:64:49: ef:f1:b7:8d:2a:e7:c6:2f:15:ea:75:a2:2b:68:60:2c:55:c6: ab:8d:d2:69:0a:8e:97:ec:f0:52:50:f3:22:34:6a:ea:b0:c0: 29:8b:56:0d:1b:49:41:0d:4c:b6:66:ff:4d:e9:a6:c5:0d:35: ae:63:1e:5c:d8:0b:1c:9c:08:66:84:a1:a2:f6:e7:e1:cf:df: 9f:62:29:20:12:03:c8:d1:a3:68:bc:21:ed:c4:c3:3e:20:81: 7b:3a:cb:8c:93:a7:c9:ea:55:ea:74:74:40:3d:42:21:b8:21: cd:d7:0e:95:32:84:0b:8e:e7:d0:87:37:18:a4:b8:a0:e2:f4: 4a:2d:3d:cb:e2:d2:53:c4:c3:f4:c3:2f:46:1e:da:db:e3:14: f6:60:1d:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAjVtUtI2HaG33HEvyfV1+Gdp+8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNjAzMjQyMjU3MDZaFw0yNjAzMjcyMzAyMDZaMDMxMTAvBgNV BAMTKDMzODhBNzMwRTMyRjNBNzk5NEYzNjUxM0M2RjJDRkY3MjBGNzczQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeyc/XZ2esebg+5jbIiwYBf6dn 9Ho2KEM/amMvDxnKuKFQ24cAwmUwiXHe06B2TVfWJlroAB0DpSGr6Ge4CsKO/zaM o6G1oUBuL+4KtDCszoV/a/TuA+EHNGkRcBLCfqT5WgD0XL02wxfrM3uRjcKvVI6i TuejpWWOVR5L0mvl7hWN3kEH5u7V0xIxGCx80FtY37LeUcM8lNh2yvGEyVcQzUpX dpJormdiPPP8rIz07olIbndG6TpA67lK9Bob/7Ga1+3u11qzwoPnChiLIxm+usSa qljo6RrWYfmB+jcGgHapA2dKujC4LB2TjlsA+YKf4H/u5KiS5RoJ4yGWAAo7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM4inMOMvOnmU82UTxvLP9yD3c6gwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIuh6qNcgvuTxjW4q4Z2CR5NDpap9YmQOuki Qpp84G04K7cYfRBgmKF2vJ0Qee1IJUNFo1ozo6DQ2pSnO0oT66eGz3mGkSNP82Sm LGoyjR+uQThts8Ejtp7+DR/3FSVYmlvKWXNOWA5s8KRkSe/xt40q58YvFep1oito YCxVxquN0mkKjpfs8FJQ8yI0auqwwCmLVg0bSUENTLZm/03ppsUNNa5jHlzYCxyc CGaEoaL25+HP359iKSASA8jRo2i8Ie3Ewz4ggXs6y4yTp8nqVep0dEA9QiG4Ic3X DpUyhAuO59CHNxikuKDi9EotPcvi0lPEw/TDL0Ye2tvjFPZgHZw= -----END CERTIFICATE-----Generated at Thu Mar 26 08:30:19 2026 by rpki-client