$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: DwcLQJvVi1H2eU/L44mt4x9vUE+sQEkNVY1hiADA+s8= Subject key identifier: AD:34:A9:1F:B9:C1:FA:4C:19:BE:46:0C:FD:6D:BC:15:78:71:34:E9 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 350F8F8A75D6C2FC797AD5FA1321970D65B6AE59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01F5 Signing time: Wed 25 Mar 2026 04:31:44 +0000 Manifest this update: Wed 25 Mar 2026 04:26:44 +0000 Manifest next update: Sat 28 Mar 2026 15:16:44 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: UayHVO0AKpUOS24FqQ7C5PdUJRKIGDPIvgTqL/qBi9Y=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: kq+NuC2L3vEb1GZ+wb9CoyHOvi8YFEOs7gaELxt5HT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:16:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:0f:8f:8a:75:d6:c2:fc:79:7a:d5:fa:13:21:97:0d:65:b6:ae:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Mar 25 04:26:44 2026 GMT Not After : Mar 28 15:16:44 2026 GMT Subject: CN=AD34A91FB9C1FA4C19BE460CFD6DBC15787134E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ef:02:38:c1:6a:9c:e3:62:1a:51:f2:18:3d: 3e:59:66:82:4e:59:09:35:25:07:c1:c2:6d:cd:3b: 7d:11:78:99:b4:f0:39:92:f3:91:89:af:d8:41:25: 0c:9d:72:a0:d7:e2:41:4a:10:5c:60:6f:26:b6:0e: e9:92:0f:0e:37:a6:06:32:df:a7:ed:42:61:29:e6: 50:c1:3d:14:cc:7e:9c:b3:2c:1a:e0:d5:b1:93:23: 25:53:1b:ec:fa:48:1a:cc:8b:3e:58:df:ab:e3:a0: 1e:41:a4:8f:1b:03:0c:c2:f7:09:f2:3a:d1:36:5a: 70:34:d7:1b:30:42:5e:97:61:d2:71:15:0c:d7:bf: 25:6f:8f:64:2e:99:81:d0:f5:38:b8:56:d2:9a:71: b6:dc:64:3e:51:16:a3:e5:26:0d:3f:d6:9b:b7:5c: 5f:09:94:44:d2:10:15:75:7d:04:98:53:65:73:21: db:e6:3b:7c:88:e5:11:af:fc:58:7f:ef:d4:c9:b8: e2:ac:43:12:94:83:2e:b2:57:48:86:31:37:a1:8b: 75:6d:39:13:9b:6e:c5:32:3c:1c:aa:a2:c7:00:0f: 31:75:49:3c:8c:81:48:0f:90:0f:ac:be:e8:a8:e7: ed:8b:d2:1c:9b:bb:14:c7:2f:55:64:6b:b6:c7:22: 08:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:34:A9:1F:B9:C1:FA:4C:19:BE:46:0C:FD:6D:BC:15:78:71:34:E9 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:4d:12:2f:6d:e6:35:30:16:a0:e3:1c:5c:43:c3:83:6a:39: e5:dd:e1:eb:63:c4:09:80:bd:45:57:a1:c3:b2:ab:f7:db:94: 5d:5b:92:d9:b7:49:79:47:94:33:98:4d:21:9b:ff:82:42:5f: 7f:84:14:8c:67:d7:85:7c:05:f5:f0:89:07:00:80:1a:73:5a: 27:ee:69:de:b8:75:7b:3a:54:a7:14:f8:0d:dd:b5:b2:22:1d: 78:27:f9:f7:0a:01:76:e6:13:55:74:d4:5c:9e:1b:aa:5c:1d: 35:ea:fc:fa:a3:e3:df:fb:22:da:32:47:67:56:c5:60:c8:7d: e5:ba:60:0a:9d:aa:4a:5e:0e:f0:e1:d7:50:5a:96:da:22:31: bf:ec:5f:69:ca:67:57:08:fe:28:d9:d5:ba:6a:30:53:fc:32: 71:e4:56:0f:97:62:f6:9b:a5:bd:b0:8e:33:f1:9a:87:35:4c: 42:d1:6f:e3:48:0c:f1:bc:37:4a:4c:44:64:ee:e7:ea:10:e3: 36:19:e9:e2:56:9b:ae:ef:c7:a6:97:9a:e6:a5:b2:5e:df:52: 7a:45:68:26:bf:4c:ba:44:a3:ae:f7:f7:25:54:3e:8f:e7:2c: bd:36:4a:67:04:9c:ac:4f:42:44:b2:51:a0:98:a1:a8:9a:df: 52:23:02:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQ+PinXWwvx5etX6EyGXDWW2rlkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNjAzMjUwNDI2NDRaFw0yNjAzMjgxNTE2NDRaMDMxMTAvBgNV BAMTKEFEMzRBOTFGQjlDMUZBNEMxOUJFNDYwQ0ZENkRCQzE1Nzg3MTM0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm7wI4wWqc42IaUfIYPT5ZZoJO WQk1JQfBwm3NO30ReJm08DmS85GJr9hBJQydcqDX4kFKEFxgbya2DumSDw43pgYy 36ftQmEp5lDBPRTMfpyzLBrg1bGTIyVTG+z6SBrMiz5Y36vjoB5BpI8bAwzC9wny OtE2WnA01xswQl6XYdJxFQzXvyVvj2QumYHQ9Ti4VtKacbbcZD5RFqPlJg0/1pu3 XF8JlETSEBV1fQSYU2VzIdvmO3yI5RGv/Fh/79TJuOKsQxKUgy6yV0iGMTehi3Vt ORObbsUyPByqoscADzF1STyMgUgPkA+svuio5+2L0hybuxTHL1Vka7bHIgjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrTSpH7nB+kwZvkYM/W28FXhxNOkwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlNEi9t5jUwFqDjHFxDw4NqOeXd4etjxAmA vUVXocOyq/fblF1bktm3SXlHlDOYTSGb/4JCX3+EFIxn14V8BfXwiQcAgBpzWifu ad64dXs6VKcU+A3dtbIiHXgn+fcKAXbmE1V01FyeG6pcHTXq/Pqj49/7ItoyR2dW xWDIfeW6YAqdqkpeDvDh11BaltoiMb/sX2nKZ1cI/ijZ1bpqMFP8MnHkVg+XYvab pb2wjjPxmoc1TELRb+NIDPG8N0pMRGTu5+oQ4zYZ6eJWm67vx6aXmualsl7fUnpF aCa/TLpEo6739yVUPo/nLL02SmcEnKxPQkSyUaCYoaia31IjAhk= -----END CERTIFICATE-----Generated at Thu Mar 26 16:02:05 2026 by rpki-client