$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: Qb1XJGYnqtwr41gQ77HTWBTu6nMAVRrSSiMNtRwo/28= Subject key identifier: 3E:C8:86:19:4A:0A:8C:DB:0E:4C:AF:D7:4D:3E:67:84:75:30:B8:2F Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 34C8128CABD186BB98DB6F71D569BCD1DF1D680D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 0250 Signing time: Thu 26 Mar 2026 06:50:59 +0000 Manifest this update: Thu 26 Mar 2026 06:45:59 +0000 Manifest next update: Sun 29 Mar 2026 18:43:59 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: NScXOn+gLAXWMWr4iPw5EVwUVSRgp+epdrLF8UqRb+E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 16:25:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 34:c8:12:8c:ab:d1:86:bb:98:db:6f:71:d5:69:bc:d1:df:1d:68:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Mar 26 06:45:59 2026 GMT Not After : Mar 29 18:43:59 2026 GMT Subject: CN=3EC886194A0A8CDB0E4CAFD74D3E67847530B82F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:bf:76:36:dc:2d:3b:e9:0e:89:e9:3c:ff:c6: ab:b9:b5:1d:81:c0:4a:ab:54:b0:fd:5d:ae:3d:2e: 2c:57:ec:55:41:3c:53:e0:53:db:18:d2:ce:9f:05: d9:e8:0e:81:f8:b8:c8:7e:40:07:93:65:6a:9f:8a: ab:99:eb:63:8f:57:63:ad:93:99:e3:cd:c8:6b:8b: 1a:6a:83:1b:26:8a:19:d4:14:1a:e8:d6:16:72:0d: 67:d5:ef:6f:9e:0b:6f:da:95:09:d9:3f:cc:67:0d: c8:a8:5d:90:84:0e:f0:cf:fc:73:bf:ab:3d:fd:28: c7:a2:ec:68:55:04:23:85:8b:ef:91:63:50:42:8a: 54:0d:f2:4b:36:2b:d7:2b:cc:b3:9c:20:8e:35:bf: 2d:72:1a:48:8c:d9:91:1b:ed:4e:03:3a:ab:d3:57: 38:42:9b:2b:45:3d:d7:85:77:65:94:22:00:e1:b8: 5e:99:b2:f6:b7:64:a8:39:b3:fa:52:f9:94:da:fe: 59:8e:f4:c6:87:54:e2:43:c9:9d:f1:5e:fa:6a:28: 9b:d3:c3:0d:37:15:60:71:12:c7:9c:fd:f2:bb:99: 2f:e8:69:28:88:0e:07:4d:80:ec:8b:81:97:e6:d1: cf:69:e4:13:d6:00:87:16:bd:d4:40:fa:72:77:44: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:C8:86:19:4A:0A:8C:DB:0E:4C:AF:D7:4D:3E:67:84:75:30:B8:2F X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:41:40:26:b0:66:cb:ca:e9:40:95:20:e1:a9:28:03:e6:3c: df:6a:71:11:b5:61:55:3c:8f:d5:5c:e7:9a:46:04:80:9c:87: 05:e1:61:08:e5:ec:96:07:56:eb:bb:f5:72:58:dc:21:a1:9f: 60:ed:41:81:5a:81:9f:fa:32:ab:93:14:eb:9e:8d:be:68:d4: f8:33:a6:46:00:b1:79:e3:d5:d9:74:d7:cd:11:22:21:5a:85: 3a:76:e2:ce:71:04:82:d7:7a:0f:db:42:6f:35:81:76:f6:0d: ce:d7:53:3a:ef:41:fd:86:e9:25:e0:4e:d3:d7:9b:2f:03:6d: d4:61:8f:68:f7:28:48:6a:34:c6:42:49:e4:d7:97:46:b8:04: 78:b5:50:d4:72:bb:0d:3e:41:59:b1:81:4d:d6:1a:35:a6:fa: 7b:5b:ac:16:12:85:5e:1f:f2:bf:d1:9f:47:21:ee:4b:85:41: c4:60:84:df:ca:56:fe:ef:0e:df:93:96:e1:71:06:89:d9:49: 8b:1f:5a:68:26:11:b2:d2:f0:d4:5c:91:c0:30:fd:00:e3:7f: dd:25:85:91:3e:33:f4:8f:d5:30:50:e9:90:a4:51:f9:51:5d: e2:b3:9c:8f:5b:9e:3e:20:70:29:45:4c:1c:aa:a9:22:2d:be: ad:f0:4a:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNMgSjKvRhruY229x1Wm80d8daA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNjAzMjYwNjQ1NTlaFw0yNjAzMjkxODQzNTlaMDMxMTAvBgNV BAMTKDNFQzg4NjE5NEEwQThDREIwRTRDQUZENzREM0U2Nzg0NzUzMEI4MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqv3Y23C076Q6J6Tz/xqu5tR2B wEqrVLD9Xa49LixX7FVBPFPgU9sY0s6fBdnoDoH4uMh+QAeTZWqfiquZ62OPV2Ot k5njzchrixpqgxsmihnUFBro1hZyDWfV72+eC2/alQnZP8xnDcioXZCEDvDP/HO/ qz39KMei7GhVBCOFi++RY1BCilQN8ks2K9crzLOcII41vy1yGkiM2ZEb7U4DOqvT VzhCmytFPdeFd2WUIgDhuF6Zsva3ZKg5s/pS+ZTa/lmO9MaHVOJDyZ3xXvpqKJvT ww03FWBxEsec/fK7mS/oaSiIDgdNgOyLgZfm0c9p5BPWAIcWvdRA+nJ3RAtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPsiGGUoKjNsOTK/XTT5nhHUwuC8wHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpBQCawZsvK6UCVIOGpKAPmPN9qcRG1YVU8 j9Vc55pGBICchwXhYQjl7JYHVuu79XJY3CGhn2DtQYFagZ/6MquTFOuejb5o1Pgz pkYAsXnj1dl0180RIiFahTp24s5xBILXeg/bQm81gXb2Dc7XUzrvQf2G6SXgTtPX my8DbdRhj2j3KEhqNMZCSeTXl0a4BHi1UNRyuw0+QVmxgU3WGjWm+ntbrBYShV4f 8r/Rn0ch7kuFQcRghN/KVv7vDt+TluFxBonZSYsfWmgmEbLS8NRckcAw/QDjf90l hZE+M/SP1TBQ6ZCkUflRXeKznI9bnj4gcClFTByqqSItvq3wSso= -----END CERTIFICATE-----Generated at Thu Mar 26 14:33:10 2026 by rpki-client