$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: HotpZo/CwMlK3Awj/Q61AdUCbG+GrUOdJJ3y6cHABok= Subject key identifier: 33:17:5D:94:B4:43:E3:F0:84:61:87:68:F5:4A:38:76:2B:C9:B2:E1 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 4A9AFFE0529239607FB3A717E91A7C62F91358AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 014D Signing time: Tue 24 Mar 2026 22:11:19 +0000 Manifest this update: Tue 24 Mar 2026 22:06:19 +0000 Manifest next update: Sat 28 Mar 2026 03:13:19 +0000 Files and hashes: 1: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) 2: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 3: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 4: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: BdZMcAdtc7DJ+y0TpxPbCieFzDw/c5zrI3ZzVzivi9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 03:13:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9a:ff:e0:52:92:39:60:7f:b3:a7:17:e9:1a:7c:62:f9:13:58:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Mar 24 22:06:19 2026 GMT Not After : Mar 28 03:13:19 2026 GMT Subject: CN=33175D94B443E3F084618768F54A38762BC9B2E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:fa:2c:64:ad:59:03:0c:a6:34:3b:63:63:ad: 20:64:45:2f:90:9e:f8:f8:d0:b1:c6:95:5d:b2:0a: 84:7d:c8:1a:96:73:92:35:05:26:6b:85:a2:a3:2b: 1a:6d:99:15:44:22:11:78:57:ea:04:5a:e3:a6:37: 56:d4:72:6b:41:6c:08:c0:1b:79:d8:15:94:62:ba: 6b:f7:c1:c3:6c:8f:95:71:7e:70:e1:a0:52:db:53: d2:0e:d8:0a:c1:07:3d:f0:3b:eb:7f:23:fd:82:ba: 2d:a1:95:2e:7b:46:33:5c:04:01:78:15:38:96:36: 91:6c:b4:06:2f:ca:bf:ba:e6:59:0e:e3:fd:63:68: d7:c6:4a:cf:ad:61:1c:24:3f:89:1e:27:ee:14:36: 00:79:62:5c:9e:16:fc:54:d1:12:ab:cf:45:75:76: 33:44:53:79:bc:18:03:42:88:70:61:a4:0f:9f:f6: 09:77:b5:73:b1:24:76:67:6a:95:2e:6e:77:68:ab: ae:53:cf:74:14:d2:5a:46:09:67:bf:f0:05:f1:37: 18:f7:a7:71:4f:05:5d:2a:ea:dc:c2:ae:4b:28:88: 31:62:3d:a2:56:3c:e6:46:1c:3e:e9:8b:6b:bd:ee: fb:3a:34:6e:16:0c:10:b4:91:fa:ec:1a:c7:98:0c: 5e:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:17:5D:94:B4:43:E3:F0:84:61:87:68:F5:4A:38:76:2B:C9:B2:E1 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:3e:d8:e5:91:1c:1d:c8:d4:53:ea:f6:6f:62:00:e7:6c:47: c0:ea:c0:d5:85:8b:b9:2d:a2:37:8f:d5:c8:78:c5:22:0c:66: f1:c8:97:44:32:72:74:ab:e4:d8:39:aa:81:3d:a7:58:62:ac: 94:62:29:1b:a4:be:1f:29:ea:6c:dc:5d:c3:13:75:01:3b:56: 22:db:63:a8:f0:22:7d:96:24:8c:70:36:ba:d1:5f:c0:91:bd: 50:1c:5d:ce:61:5a:9f:e4:16:a4:b6:04:51:6b:db:bd:2a:0c: 5d:cb:bb:20:8a:67:7e:a7:3f:92:1c:da:f4:40:9a:cb:58:67: a0:03:51:e6:fa:6c:38:64:fe:36:fc:b9:f5:e5:4b:04:86:6b: f8:cd:5f:b0:5d:c4:b4:96:6d:07:a9:f9:59:de:d5:3a:5b:8a: f3:61:b2:c5:98:f5:a4:cb:7e:1b:d7:92:3a:25:4e:ea:a8:fc: 7b:7c:a7:21:08:3c:5c:9a:5c:02:a1:9b:53:4b:00:12:2a:45: 0e:5d:f5:39:2a:9a:49:a3:4f:f8:1c:e1:65:36:d7:bc:52:ee: 94:11:6d:8c:4a:e8:cf:e4:ba:e6:60:77:ab:67:0f:ac:59:23: d4:ec:f0:6e:a7:2d:cb:cf:19:7c:35:df:90:2e:d0:54:b1:78: 06:00:40:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSpr/4FKSOWB/s6cX6Rp8YvkTWK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNjAzMjQyMjA2MTlaFw0yNjAzMjgwMzEzMTlaMDMxMTAvBgNV BAMTKDMzMTc1RDk0QjQ0M0UzRjA4NDYxODc2OEY1NEEzODc2MkJDOUIyRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR+ixkrVkDDKY0O2NjrSBkRS+Q nvj40LHGlV2yCoR9yBqWc5I1BSZrhaKjKxptmRVEIhF4V+oEWuOmN1bUcmtBbAjA G3nYFZRiumv3wcNsj5VxfnDhoFLbU9IO2ArBBz3wO+t/I/2Cui2hlS57RjNcBAF4 FTiWNpFstAYvyr+65lkO4/1jaNfGSs+tYRwkP4keJ+4UNgB5YlyeFvxU0RKrz0V1 djNEU3m8GANCiHBhpA+f9gl3tXOxJHZnapUubndoq65Tz3QU0lpGCWe/8AXxNxj3 p3FPBV0q6tzCrksoiDFiPaJWPOZGHD7pi2u97vs6NG4WDBC0kfrsGseYDF5VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMxddlLRD4/CEYYdo9Uo4divJsuEwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw+2OWRHB3I1FPq9m9iAOdsR8DqwNWFi7kt ojeP1ch4xSIMZvHIl0QycnSr5Ng5qoE9p1hirJRiKRukvh8p6mzcXcMTdQE7ViLb Y6jwIn2WJIxwNrrRX8CRvVAcXc5hWp/kFqS2BFFr270qDF3LuyCKZ36nP5Ic2vRA mstYZ6ADUeb6bDhk/jb8ufXlSwSGa/jNX7BdxLSWbQep+Vne1TpbivNhssWY9aTL fhvXkjolTuqo/Ht8pyEIPFyaXAKhm1NLABIqRQ5d9TkqmkmjT/gc4WU217xS7pQR bYxK6M/kuuZgd6tnD6xZI9Ts8G6nLcvPGXw135Au0FSxeAYAQHc= -----END CERTIFICATE-----Generated at Thu Mar 26 13:57:40 2026 by rpki-client