$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: 2hmy5ybJwUowPa0wgqBCA8Ri3WTLg6LTFLpHRCzxfuY= Subject key identifier: 49:9C:35:3A:41:13:37:1C:16:93:E4:A2:77:A9:56:F2:A2:44:14:58 Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 41AA40930B59EEED3F3D3CA27BAA32C52F7FD2FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 055E Signing time: Thu 26 Mar 2026 02:02:10 +0000 Manifest this update: Thu 26 Mar 2026 01:57:10 +0000 Manifest next update: Sun 29 Mar 2026 07:15:10 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 2: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: HMAUgkJy6jS6C0q/bwmY5ni7dKTqNTPB+1nLtzmIN0E=) 3: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 4: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 5: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) 6: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:15:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:aa:40:93:0b:59:ee:ed:3f:3d:3c:a2:7b:aa:32:c5:2f:7f:d2:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Mar 26 01:57:10 2026 GMT Not After : Mar 29 07:15:10 2026 GMT Subject: CN=499C353A4113371C1693E4A277A956F2A2441458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e7:d2:b4:01:4d:2f:79:fa:37:85:7f:1b:ee: 7b:1d:96:47:fe:bc:71:ef:ae:43:a8:e8:58:7e:f4: 8c:80:b0:1b:e6:e6:11:71:51:52:11:f6:76:08:8f: 9d:d8:40:52:c6:f4:c5:3c:23:89:e9:af:25:51:03: 21:46:49:fc:ca:c2:8a:23:d5:c7:84:17:65:37:a2: a6:f8:91:98:98:8f:09:bf:1c:86:3f:26:9a:d1:95: 9a:52:56:c4:62:96:7a:11:ed:c4:a2:5b:e2:f3:68: 67:be:d2:f2:c1:82:bd:eb:0c:01:b0:c1:4e:c5:5e: 87:d8:ad:b6:86:57:ff:57:9d:b4:db:21:c9:cd:b8: d9:92:e6:61:17:5a:43:eb:55:b3:84:34:58:21:d9: c9:95:67:13:b7:92:a8:95:1a:6a:22:19:d1:77:38: 68:db:d2:78:0e:65:93:9c:1f:4e:91:8a:a8:86:55: 3c:a0:47:2c:8b:88:1b:cb:77:68:7f:44:c6:35:f8: 32:12:1e:29:34:48:a5:37:03:4b:94:cc:d5:a7:be: 66:9b:2c:c7:a5:8d:6c:32:50:f0:31:45:b4:59:cd: 78:54:6a:da:55:4d:57:0d:4f:bf:b7:3f:89:1a:3d: a9:94:54:ff:b3:ac:15:65:c9:2f:48:a8:0e:c6:2e: ae:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:9C:35:3A:41:13:37:1C:16:93:E4:A2:77:A9:56:F2:A2:44:14:58 X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:ee:06:3a:3d:91:ca:cd:2e:6d:87:0b:f5:b3:38:09:bc:31: 49:30:34:38:69:3f:dc:a0:54:4e:2b:aa:84:ff:65:a6:6c:85: 59:8e:a5:3c:d8:68:ed:e3:e0:72:7a:d8:13:9d:e5:09:62:4d: 77:8a:36:9f:10:dc:22:5b:32:28:f6:b2:b4:ec:2e:1b:38:91: e3:26:7d:79:58:7c:65:75:3b:90:31:20:da:a9:b1:19:c8:98: 4c:07:0c:de:23:00:54:6f:08:18:13:85:db:01:20:7e:57:7d: 30:34:f7:be:88:af:b0:b3:2c:da:92:98:91:e3:a7:a7:b3:78: f8:55:ed:19:57:78:38:6d:3d:cf:23:23:1b:0e:ca:3d:ab:87: 99:c5:76:31:e1:62:2e:36:65:c0:db:9c:b6:54:41:63:49:40: e8:08:8f:dd:0c:fe:40:bf:17:e5:5a:d3:fb:6a:ed:f2:84:2b: b5:3d:4a:9e:99:2c:7c:51:1e:58:79:5a:d9:02:a9:5b:a9:10: 22:d5:a2:bc:d9:14:87:2a:2c:25:01:98:73:16:f7:11:d0:e7: 95:d2:45:5a:ab:e3:98:47:de:a1:9f:43:cb:59:9e:a3:4e:ae: 4e:95:c0:72:5c:59:f0:ff:0b:bc:bd:78:d7:ad:c9:ea:93:4d: 3b:ac:4b:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQapAkwtZ7u0/PTyie6oyxS9/0v0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNjAzMjYwMTU3MTBaFw0yNjAzMjkwNzE1MTBaMDMxMTAvBgNV BAMTKDQ5OUMzNTNBNDExMzM3MUMxNjkzRTRBMjc3QTk1NkYyQTI0NDE0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF59K0AU0vefo3hX8b7nsdlkf+ vHHvrkOo6Fh+9IyAsBvm5hFxUVIR9nYIj53YQFLG9MU8I4npryVRAyFGSfzKwooj 1ceEF2U3oqb4kZiYjwm/HIY/JprRlZpSVsRilnoR7cSiW+LzaGe+0vLBgr3rDAGw wU7FXofYrbaGV/9XnbTbIcnNuNmS5mEXWkPrVbOENFgh2cmVZxO3kqiVGmoiGdF3 OGjb0ngOZZOcH06RiqiGVTygRyyLiBvLd2h/RMY1+DISHik0SKU3A0uUzNWnvmab LMeljWwyUPAxRbRZzXhUatpVTVcNT7+3P4kaPamUVP+zrBVlyS9IqA7GLq4HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSZw1OkETNxwWk+Sid6lW8qJEFFgwHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDuBjo9kcrNLm2HC/WzOAm8MUkwNDhpP9yg VE4rqoT/ZaZshVmOpTzYaO3j4HJ62BOd5QliTXeKNp8Q3CJbMij2srTsLhs4keMm fXlYfGV1O5AxINqpsRnImEwHDN4jAFRvCBgThdsBIH5XfTA0976Ir7CzLNqSmJHj p6ezePhV7RlXeDhtPc8jIxsOyj2rh5nFdjHhYi42ZcDbnLZUQWNJQOgIj90M/kC/ F+Va0/tq7fKEK7U9Sp6ZLHxRHlh5WtkCqVupECLVorzZFIcqLCUBmHMW9xHQ55XS RVqr45hH3qGfQ8tZnqNOrk6VwHJcWfD/C7y9eNetyeqTTTusSxI= -----END CERTIFICATE-----Generated at Thu Mar 26 08:43:38 2026 by rpki-client