$ rpki-client -vvf repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft File: 4ED16B9231905A1C7A353DF749BF99487E69E313.mft (raw, json) Hash identifier: BLxJQDZ0ouUpixWF3E4OyqyjeMRPCK6mNnRfZKG0rIw= Subject key identifier: B1:2A:99:3E:8A:89:6E:B5:4B:C5:95:0D:A0:16:4E:2D:85:4B:C9:16 Authority key identifier: 4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 Certificate issuer: /CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Certificate serial: 31FAE6A657B164ACEECCF92845CD092A02C54C3C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft Manifest number: 0143 Signing time: Wed 25 Mar 2026 03:51:37 +0000 Manifest this update: Wed 25 Mar 2026 03:46:37 +0000 Manifest next update: Sat 28 Mar 2026 05:02:37 +0000 Files and hashes: 1: 4ED16B9231905A1C7A353DF749BF99487E69E313.crl (hash: MtplpS0SEWFd4VlCPcLwBM3thjKl3DKtw0d34aSwpwo=) 2: 3135372e32302e3130302e302f32342d3234203d3e20313532343235.roa (hash: 7VTB88vseP1qaXg78jeUQOCaADrxTcbc/a9UTrZD8c0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:fa:e6:a6:57:b1:64:ac:ee:cc:f9:28:45:cd:09:2a:02:c5:4c:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ED16B9231905A1C7A353DF749BF99487E69E313 Validity Not Before: Mar 25 03:46:37 2026 GMT Not After : Mar 28 05:02:37 2026 GMT Subject: CN=B12A993E8A896EB54BC5950DA0164E2D854BC916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:b3:ec:86:18:f6:dc:2e:3e:3d:11:d9:47:29: 9a:1d:a7:ed:9d:13:71:88:c7:d5:a8:d5:ba:62:be: c9:ca:98:69:d2:36:62:e4:9c:aa:67:0d:52:76:6d: 6b:56:5c:4d:44:ed:57:a7:f3:c0:49:d6:6a:c9:e1: dc:42:be:8a:97:c4:09:3f:7c:82:da:96:44:09:8e: 5d:64:42:df:ca:ff:0b:7e:2d:69:02:b3:b8:31:0c: ed:86:1f:f2:ae:40:78:e9:25:c4:93:80:07:a7:e3: 1d:a4:8c:8e:48:f3:48:60:84:13:5f:e8:1c:d0:80: 82:da:75:76:30:33:88:38:c6:28:08:5b:94:06:67: bb:ca:4a:cf:5f:ed:16:b4:99:00:5c:60:34:75:3d: 31:29:f9:e9:48:08:1a:d3:d7:ec:75:16:92:79:c2: 0a:42:83:b6:90:7e:89:28:6a:6e:58:fb:75:e6:39: d6:6a:c7:ae:88:1d:1d:a3:b3:38:36:99:ea:30:45: 08:39:fc:4b:e2:e4:e1:0f:96:09:39:a2:e8:78:a4: cb:76:10:7d:ea:a5:c0:71:33:85:3e:b9:51:ea:17: d2:dc:4f:70:f2:7a:9f:6d:9e:d1:47:a7:38:5b:9f: f1:f0:3d:72:42:b9:e2:73:8f:da:ab:c7:30:7e:d5: dd:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:2A:99:3E:8A:89:6E:B5:4B:C5:95:0D:A0:16:4E:2D:85:4B:C9:16 X509v3 Authority Key Identifier: keyid:4E:D1:6B:92:31:90:5A:1C:7A:35:3D:F7:49:BF:99:48:7E:69:E3:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4ED16B9231905A1C7A353DF749BF99487E69E313.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ab88d2ca-229b-4aac-9b5c-42c15105bb82/0/4ED16B9231905A1C7A353DF749BF99487E69E313.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:23:53:83:84:1d:62:c7:ab:4c:00:cf:5b:01:c5:a7:5b:41: 65:d2:cd:88:19:01:6b:2e:39:1f:6a:88:4e:c1:b2:62:a3:83: 87:06:18:ec:ea:14:02:a8:06:e4:1f:1a:af:7d:25:d6:80:89: 54:e8:a3:45:72:9a:fd:00:e1:69:15:1e:bf:d4:72:95:28:26: b2:51:9a:3c:19:56:04:39:a8:8d:9f:9d:dc:6e:33:69:6d:b9: e7:bb:2e:b2:17:1f:9b:73:a9:47:45:a4:b3:af:52:62:1b:f2: 0f:0b:66:b8:f9:69:75:d9:04:2d:8f:98:cb:d7:fa:f4:0b:5a: c8:39:3b:15:9a:aa:e5:63:1e:44:88:ee:2b:f0:78:50:d7:44: d2:9a:04:18:6b:46:d6:30:21:6d:99:6a:90:a7:2f:ad:52:b5: 05:7b:8d:22:bb:cb:1a:6f:d0:00:aa:29:b8:97:35:14:3b:62: c6:0e:5d:fc:31:01:b8:a2:51:9e:df:69:10:d0:9c:6c:8b:d1: ab:a9:3f:0a:13:ff:4a:c0:e1:ea:f2:c2:53:f1:3c:5d:95:19: 54:e5:2c:2b:8d:8a:ea:a9:9e:e2:3c:ed:16:2a:7e:d5:d3:0e: 3f:a8:2a:1d:49:a1:3b:82:c4:3e:b1:dc:c4:3a:d9:c8:37:a7: f9:c5:48:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMfrmplexZKzuzPkoRc0JKgLFTDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3 RTY5RTMxMzAeFw0yNjAzMjUwMzQ2MzdaFw0yNjAzMjgwNTAyMzdaMDMxMTAvBgNV BAMTKEIxMkE5OTNFOEE4OTZFQjU0QkM1OTUwREEwMTY0RTJEODU0QkM5MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0s+yGGPbcLj49EdlHKZodp+2d E3GIx9Wo1bpivsnKmGnSNmLknKpnDVJ2bWtWXE1E7Ven88BJ1mrJ4dxCvoqXxAk/ fILalkQJjl1kQt/K/wt+LWkCs7gxDO2GH/KuQHjpJcSTgAen4x2kjI5I80hghBNf 6BzQgILadXYwM4g4xigIW5QGZ7vKSs9f7Ra0mQBcYDR1PTEp+elICBrT1+x1FpJ5 wgpCg7aQfokoam5Y+3XmOdZqx66IHR2jszg2meowRQg5/Evi5OEPlgk5ouh4pMt2 EH3qpcBxM4U+uVHqF9LcT3Dyep9tntFHpzhbn/HwPXJCueJzj9qrxzB+1d0vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsSqZPoqJbrVLxZUNoBZOLYVLyRYwHwYDVR0j BBgwFoAUTtFrkjGQWhx6NT33Sb+ZSH5p4xMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Yjg4ZDJjYS0yMjliLTRhYWMtOWI1Yy00MmMxNTEwNWJiODIvMC80RUQxNkI5MjMx OTA1QTFDN0EzNTNERjc0OUJGOTk0ODdFNjlFMzEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5NDg3RTY5 RTMxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWI4OGQyY2EtMjI5Yi00YWFjLTli NWMtNDJjMTUxMDViYjgyLzAvNEVEMTZCOTIzMTkwNUExQzdBMzUzREY3NDlCRjk5 NDg3RTY5RTMxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4jU4OEHWLHq0wAz1sBxadbQWXSzYgZAWsu OR9qiE7BsmKjg4cGGOzqFAKoBuQfGq99JdaAiVToo0Vymv0A4WkVHr/UcpUoJrJR mjwZVgQ5qI2fndxuM2ltuee7LrIXH5tzqUdFpLOvUmIb8g8LZrj5aXXZBC2PmMvX +vQLWsg5OxWaquVjHkSI7ivweFDXRNKaBBhrRtYwIW2ZapCnL61StQV7jSK7yxpv 0ACqKbiXNRQ7YsYOXfwxAbiiUZ7faRDQnGyL0aupPwoT/0rA4erywlPxPF2VGVTl LCuNiuqpnuI87RYqftXTDj+oKh1JoTuCxD6x3MQ62cg3p/nFSPA= -----END CERTIFICATE-----Generated at Thu Mar 26 15:50:03 2026 by rpki-client