$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: 5tDKV20IxRUvxNni0WcgB3lafMT0y+nNZcnpT6QTAxs= Subject key identifier: 71:E2:6C:51:7A:8D:03:9C:55:61:DA:E8:E0:05:75:6A:C7:F9:C3:8C Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 1B7C5E3C2B80B4ED6F2F9386008C1EA7710CDA0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 0129 Signing time: Mon 23 Mar 2026 20:50:47 +0000 Manifest this update: Mon 23 Mar 2026 20:45:47 +0000 Manifest next update: Fri 27 Mar 2026 08:06:47 +0000 Files and hashes: 1: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) 2: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: P60xECogeBIomTF69swS3vxx9/DW6XNp0+oxZhiG4cI=) 3: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 08:06:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:7c:5e:3c:2b:80:b4:ed:6f:2f:93:86:00:8c:1e:a7:71:0c:da:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Mar 23 20:45:47 2026 GMT Not After : Mar 27 08:06:47 2026 GMT Subject: CN=71E26C517A8D039C5561DAE8E005756AC7F9C38C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:f9:4f:2e:d4:ec:48:bc:57:0d:19:26:31:45: 6e:36:ac:34:ce:3a:e6:95:01:4b:19:c5:c6:48:25: 85:66:9c:c5:53:1f:a3:ff:81:46:36:d4:17:92:db: 5e:de:1b:14:5f:6c:26:2e:71:4c:96:94:4d:56:ae: e3:b6:6f:0c:ef:6f:04:5a:2e:16:db:78:c9:7d:24: e3:95:9a:ab:39:55:53:3e:8d:d0:d5:bf:4f:f7:1d: b3:e2:13:d1:fd:12:74:12:23:3e:1f:3b:90:5e:cf: 95:3c:21:da:42:68:7a:22:da:66:31:93:1c:fd:65: 39:f0:94:01:e3:64:07:df:86:b4:4a:65:88:a3:39: 62:aa:6f:ed:11:25:e5:96:f2:64:1d:64:ce:bb:ad: 61:fe:fa:00:60:99:6b:7e:35:32:a6:37:f9:c8:2c: 21:8a:b2:bc:e3:31:e8:19:22:03:c3:36:35:0a:31: a5:40:94:64:18:83:f1:00:c5:48:4f:0e:d9:c9:32: c6:66:4c:9e:84:f5:03:3b:46:52:40:ad:66:14:55: 4a:88:b0:22:91:21:fe:4e:8e:66:46:c5:70:33:1a: 09:f9:23:57:27:7e:c2:f3:0e:83:55:92:26:42:7b: ca:af:01:ee:fa:49:29:ea:8c:5b:be:44:86:11:13: fa:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:E2:6C:51:7A:8D:03:9C:55:61:DA:E8:E0:05:75:6A:C7:F9:C3:8C X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:91:e7:dc:e0:7d:30:50:06:db:10:24:27:2d:5a:54:b2:4c: 86:71:ae:ec:1b:ad:c2:7f:06:e2:03:ae:dc:62:f6:25:f2:7e: 05:6a:62:ff:54:88:1d:55:ae:de:cd:e6:79:53:71:da:a9:d3: 84:9b:7e:20:54:19:0b:c6:da:5e:3b:ba:aa:b6:0b:65:28:7b: 17:6d:71:4e:d7:54:57:b5:86:67:2c:6c:65:b6:4b:9b:99:df: 08:be:1d:6c:2e:fb:d8:8e:af:3e:4b:b3:04:f8:42:f0:68:2b: ea:8a:c9:ec:fc:6f:71:d2:52:27:86:3d:58:f7:4c:60:1b:51: 65:3a:e6:94:fa:83:18:7e:77:bd:21:67:f2:5f:4b:06:94:33: 5e:f7:70:5e:bc:ac:69:a1:6e:c4:dc:7b:88:f5:4b:df:82:ca: c4:28:0c:43:a3:31:d0:75:fc:b5:c5:59:56:71:2e:c4:b1:29: 51:b5:a0:cc:55:72:95:85:f2:f4:aa:9e:71:80:f7:2b:b5:4b: 8b:fb:8a:a5:66:22:33:e7:7b:04:b0:52:57:5d:3b:13:8e:4a: 63:df:44:43:79:f0:1e:27:18:25:3d:e3:2b:66:ad:97:c7:69: 6b:49:60:56:bf:e8:96:3e:4d:2e:ac:d1:fa:5f:89:db:c2:e4: 32:11:b6:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG3xePCuAtO1vL5OGAIwep3EM2g0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNjAzMjMyMDQ1NDdaFw0yNjAzMjcwODA2NDdaMDMxMTAvBgNV BAMTKDcxRTI2QzUxN0E4RDAzOUM1NTYxREFFOEUwMDU3NTZBQzdGOUMzOEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc+U8u1OxIvFcNGSYxRW42rDTO OuaVAUsZxcZIJYVmnMVTH6P/gUY21BeS217eGxRfbCYucUyWlE1WruO2bwzvbwRa LhbbeMl9JOOVmqs5VVM+jdDVv0/3HbPiE9H9EnQSIz4fO5Bez5U8IdpCaHoi2mYx kxz9ZTnwlAHjZAffhrRKZYijOWKqb+0RJeWW8mQdZM67rWH++gBgmWt+NTKmN/nI LCGKsrzjMegZIgPDNjUKMaVAlGQYg/EAxUhPDtnJMsZmTJ6E9QM7RlJArWYUVUqI sCKRIf5OjmZGxXAzGgn5I1cnfsLzDoNVkiZCe8qvAe76SSnqjFu+RIYRE/p/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUceJsUXqNA5xVYdro4AV1asf5w4wwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABqR59zgfTBQBtsQJCctWlSyTIZxruwbrcJ/ BuIDrtxi9iXyfgVqYv9UiB1Vrt7N5nlTcdqp04SbfiBUGQvG2l47uqq2C2Uoexdt cU7XVFe1hmcsbGW2S5uZ3wi+HWwu+9iOrz5LswT4QvBoK+qKyez8b3HSUieGPVj3 TGAbUWU65pT6gxh+d70hZ/JfSwaUM173cF68rGmhbsTce4j1S9+CysQoDEOjMdB1 /LXFWVZxLsSxKVG1oMxVcpWF8vSqnnGA9yu1S4v7iqVmIjPnewSwUlddOxOOSmPf REN58B4nGCU94ytmrZfHaWtJYFa/6JY+TS6s0fpfidvC5DIRtlk= -----END CERTIFICATE-----Generated at Thu Mar 26 10:04:50 2026 by rpki-client