$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: ba2cWZLbr82jfB9j5JsQMcd0KQBEl0Lj5SCiU+eWSGQ= Subject key identifier: 11:E9:9D:DD:6A:40:F3:7A:08:32:25:07:A6:19:5F:C2:DB:B4:65:A4 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 15204C196E8512414BEAF6C81E84C7DD5F01DC54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01FD Signing time: Tue 24 Mar 2026 05:51:42 +0000 Manifest this update: Tue 24 Mar 2026 05:46:42 +0000 Manifest next update: Fri 27 Mar 2026 17:03:42 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) 3: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: n5oGrSLB6zgcb3/3buwKWO72n7wBT3ulZymBiC6IBPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 17:03:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:20:4c:19:6e:85:12:41:4b:ea:f6:c8:1e:84:c7:dd:5f:01:dc:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Mar 24 05:46:42 2026 GMT Not After : Mar 27 17:03:42 2026 GMT Subject: CN=11E99DDD6A40F37A08322507A6195FC2DBB465A4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:d8:5d:60:6f:41:cd:1a:79:48:94:ef:37:b5: 1e:70:ff:8f:15:7f:6b:ca:64:af:ba:8f:9d:13:24: c8:aa:12:f8:14:8d:cc:75:84:d7:e6:d0:15:89:93: 3f:64:d1:da:1b:a1:5b:d4:63:c9:39:0d:48:ff:d8: 96:44:05:2f:ab:28:cd:81:58:1c:65:24:57:dd:86: 80:84:1a:13:9e:4a:a9:34:b4:2d:fa:84:61:27:33: f7:97:36:7e:86:f4:fe:f3:c8:d1:59:c1:82:f2:de: ce:da:bf:bd:5f:c5:1f:b8:8c:1c:ee:6f:b5:3c:db: 3c:6d:58:97:72:3a:33:25:77:5f:8a:45:86:be:6c: 43:4d:a8:b0:ba:bc:83:54:0a:f2:71:c7:f0:89:a2: cf:33:31:d4:d9:9e:fe:f2:cc:c1:21:0e:85:ad:46: 90:4d:bb:61:44:27:cd:b7:3f:21:42:8f:ac:f6:f5: 12:8b:05:2d:47:6a:e9:2c:50:0f:90:f0:2e:67:af: 0d:5d:f3:8b:69:58:f1:b1:6a:09:22:cb:88:d0:6b: 11:c1:46:74:5d:c5:80:a5:a0:77:f0:9f:07:4d:f2: 09:f8:96:80:7e:59:84:32:56:27:dc:5d:cc:75:0a: a0:eb:73:94:bd:0e:49:9d:2a:3b:83:ce:ce:b0:1d: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E9:9D:DD:6A:40:F3:7A:08:32:25:07:A6:19:5F:C2:DB:B4:65:A4 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:9e:09:c6:e3:2c:de:aa:54:4d:3a:fb:f8:78:f7:8f:a6:90: ae:57:29:ae:fa:07:84:0b:9e:a8:f6:cf:bf:cd:d9:e9:ba:c5: 08:2d:f5:01:f4:f1:d1:0f:2c:25:0f:54:a0:86:de:b6:0e:77: fc:12:42:5b:76:de:04:ef:b4:34:0b:e5:a3:84:7f:84:39:35: 65:fd:34:48:d0:6f:be:79:95:92:16:66:33:ea:34:f7:60:45: 86:5c:92:e4:34:76:fb:35:ba:cc:c5:e0:d9:f6:97:51:2f:a2: d1:c8:32:8e:5d:59:3f:82:e2:c2:f8:2c:d5:ee:e6:a5:fd:7b: c6:dd:98:55:18:6a:4a:d6:e5:58:48:6d:c1:b3:1b:1b:a2:10: cc:32:b7:11:f6:b1:b1:9b:28:71:26:34:2d:b5:d9:06:d3:2b: fe:ee:8d:83:1d:a8:7c:dd:61:30:97:9d:78:e0:ec:51:65:06: d6:7e:58:7f:80:85:72:1c:9b:60:42:93:2f:b8:b1:ca:2b:c9: ff:90:11:9c:4d:1d:d1:9f:81:d7:77:76:ec:ff:7f:73:c3:87: 8f:30:8c:5b:2c:94:de:e6:73:71:34:7b:77:57:ee:81:d1:92: 94:42:2e:c3:fc:40:39:2a:8a:08:a9:3a:4f:63:f6:3b:0b:cf: 25:a4:f3:30 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFSBMGW6FEkFL6vbIHoTH3V8B3FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNjAzMjQwNTQ2NDJaFw0yNjAzMjcxNzAzNDJaMDMxMTAvBgNV BAMTKDExRTk5RERENkE0MEYzN0EwODMyMjUwN0E2MTk1RkMyREJCNDY1QTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG2F1gb0HNGnlIlO83tR5w/48V f2vKZK+6j50TJMiqEvgUjcx1hNfm0BWJkz9k0doboVvUY8k5DUj/2JZEBS+rKM2B WBxlJFfdhoCEGhOeSqk0tC36hGEnM/eXNn6G9P7zyNFZwYLy3s7av71fxR+4jBzu b7U82zxtWJdyOjMld1+KRYa+bENNqLC6vINUCvJxx/CJos8zMdTZnv7yzMEhDoWt RpBNu2FEJ823PyFCj6z29RKLBS1HauksUA+Q8C5nrw1d84tpWPGxagkiy4jQaxHB RnRdxYCloHfwnwdN8gn4loB+WYQyVifcXcx1CqDrc5S9DkmdKjuDzs6wHVADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEemd3WpA83oIMiUHphlfwtu0ZaQwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC+eCcbjLN6qVE06+/h494+mkK5XKa76B4QL nqj2z7/N2em6xQgt9QH08dEPLCUPVKCG3rYOd/wSQlt23gTvtDQL5aOEf4Q5NWX9 NEjQb755lZIWZjPqNPdgRYZckuQ0dvs1uszF4Nn2l1EvotHIMo5dWT+C4sL4LNXu 5qX9e8bdmFUYakrW5VhIbcGzGxuiEMwytxH2sbGbKHEmNC212QbTK/7ujYMdqHzd YTCXnXjg7FFlBtZ+WH+AhXIcm2BCky+4scoryf+QEZxNHdGfgdd3duz/f3PDh48w jFsslN7mc3E0e3dX7oHRkpRCLsP8QDkqigipOk9j9jsLzyWk8zA= -----END CERTIFICATE-----Generated at Thu Mar 26 05:45:04 2026 by rpki-client