$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft File: 4A906D4F534B26A0E62898882630292936CEA54A.mft (raw, json) Hash identifier: +1rh4XbnASvdvxyPzH2OwFonK3pX3w0lDh0pJTWTyyU= Subject key identifier: 79:6B:5A:54:15:C8:7D:F0:91:EA:05:02:CD:24:25:05:30:59:57:33 Authority key identifier: 4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A Certificate issuer: /CN=4A906D4F534B26A0E62898882630292936CEA54A Certificate serial: 67A312C5F1696B5326D2D7A2383887A5BAF4950C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft Manifest number: 018E Signing time: Tue 24 Mar 2026 23:51:53 +0000 Manifest this update: Tue 24 Mar 2026 23:46:53 +0000 Manifest next update: Sat 28 Mar 2026 05:36:53 +0000 Files and hashes: 1: 4A906D4F534B26A0E62898882630292936CEA54A.crl (hash: kkwGmKfu14FWkMwyS3okYrfAbj1mp+/hfI6uJe7YABg=) 2: 3130332e3137312e38332e302f32342d3234203d3e20313432333733.roa (hash: 0SClEliKB0AlO5DzEurqFtVJ6yiiJ9eJczPmmj9dw18=) 3: 3130332e3137312e38322e302f32342d3234203d3e20313432333733.roa (hash: WMWtIWXP3rHM6u9VZyFOIHKvW80yliOmPYEco+tmVZQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 05:36:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:a3:12:c5:f1:69:6b:53:26:d2:d7:a2:38:38:87:a5:ba:f4:95:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A906D4F534B26A0E62898882630292936CEA54A Validity Not Before: Mar 24 23:46:53 2026 GMT Not After : Mar 28 05:36:53 2026 GMT Subject: CN=796B5A5415C87DF091EA0502CD24250530595733 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:8e:59:22:e5:af:35:1d:3a:82:87:90:96:ae: b7:06:be:ff:62:4c:58:e9:fc:25:ac:db:3e:e0:c3: 2c:3d:71:2e:0f:ff:63:ad:5e:1e:eb:c4:47:52:d0: 90:5e:69:1c:28:e4:b5:e8:c1:26:7f:67:8e:0b:78: d8:7b:27:38:5b:28:ae:f0:72:08:1d:1a:45:aa:5c: a9:b7:c6:f9:c8:e9:05:4d:a4:87:fb:7c:56:df:93: 17:03:a5:71:1c:c2:5c:61:62:f1:c3:fb:53:bd:da: 52:91:e0:8d:c8:c6:a7:b3:f3:53:17:63:42:fa:39: b1:1b:a2:74:dc:2b:8e:64:22:6e:98:02:b6:3a:67: 05:9e:37:6c:82:60:d9:7f:8b:04:e6:6f:59:a5:71: 02:ba:8c:1a:0a:6f:4c:0e:68:e3:a4:d0:18:c2:bb: cf:88:f3:92:46:12:6a:c9:5f:aa:5b:7d:c5:0e:57: 0e:4c:6d:10:fe:2d:60:ca:2e:95:a9:42:ae:86:7a: 26:e8:f2:e6:24:30:b0:fa:f1:27:fa:31:ad:3e:26: ed:e2:fc:a5:e9:e4:18:bc:76:71:2e:b4:89:50:2f: 77:96:4b:e7:95:9b:7c:ea:e4:91:1e:66:79:09:59: a8:40:13:71:56:4d:fe:68:14:73:1c:db:28:80:ab: 89:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6B:5A:54:15:C8:7D:F0:91:EA:05:02:CD:24:25:05:30:59:57:33 X509v3 Authority Key Identifier: keyid:4A:90:6D:4F:53:4B:26:A0:E6:28:98:88:26:30:29:29:36:CE:A5:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A906D4F534B26A0E62898882630292936CEA54A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89e859-3c2c-4a09-a4a9-37323ea5de22/0/4A906D4F534B26A0E62898882630292936CEA54A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:f1:0a:9a:7f:ad:2a:7c:59:d7:e4:ef:82:a5:ec:48:3b:da: bf:78:3d:93:18:8f:d1:c7:f3:4b:81:cc:3e:42:d0:7b:db:f0: 04:e8:0a:9f:43:e6:5f:33:64:88:71:fb:66:57:e5:40:9c:ce: 23:d0:71:25:a5:47:c9:7f:03:9d:9e:7e:4a:fc:8b:64:a2:6f: 11:de:aa:68:4c:50:ac:f8:53:ed:5a:b0:9d:74:66:6b:93:78: c7:19:ee:b0:f2:67:9e:5c:5a:f1:22:26:30:bb:de:72:e4:ed: 3f:2e:01:04:c7:7a:d7:13:ac:c8:86:45:65:84:bc:ee:72:fa: e3:82:fc:59:23:67:9c:75:de:ab:db:52:a5:68:b7:35:c5:ad: 5e:67:17:b9:18:91:04:39:f7:4b:4a:df:82:ed:20:90:63:e8: bf:3e:79:3b:97:9a:98:9e:8e:25:ef:27:56:3f:a6:f8:ca:8c: 3e:b0:6e:24:10:08:05:f6:96:00:7c:e9:bf:94:c4:53:dd:fb: 56:03:88:b4:20:8b:c2:23:db:3d:19:75:bd:0d:09:1f:90:1b: 21:70:5f:65:43:4f:c4:ff:41:ae:fa:53:b8:73:37:98:71:a0: 82:d3:5b:1c:16:50:b8:82:2a:39:8d:d0:88:28:c7:fc:b2:cb: 62:2c:e3:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ6MSxfFpa1Mm0teiODiHpbr0lQwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5Mjkz NkNFQTU0QTAeFw0yNjAzMjQyMzQ2NTNaFw0yNjAzMjgwNTM2NTNaMDMxMTAvBgNV BAMTKDc5NkI1QTU0MTVDODdERjA5MUVBMDUwMkNEMjQyNTA1MzA1OTU3MzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbjlki5a81HTqCh5CWrrcGvv9i TFjp/CWs2z7gwyw9cS4P/2OtXh7rxEdS0JBeaRwo5LXowSZ/Z44LeNh7JzhbKK7w cggdGkWqXKm3xvnI6QVNpIf7fFbfkxcDpXEcwlxhYvHD+1O92lKR4I3Ixqez81MX Y0L6ObEbonTcK45kIm6YArY6ZwWeN2yCYNl/iwTmb1mlcQK6jBoKb0wOaOOk0BjC u8+I85JGEmrJX6pbfcUOVw5MbRD+LWDKLpWpQq6Geibo8uYkMLD68Sf6Ma0+Ju3i /KXp5Bi8dnEutIlQL3eWS+eVm3zq5JEeZnkJWahAE3FWTf5oFHMc2yiAq4lrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeWtaVBXIffCR6gUCzSQlBTBZVzMwHwYDVR0j BBgwFoAUSpBtT1NLJqDmKJiIJjApKTbOpUowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZTg1OS0zYzJjLTRhMDktYTRhOS0zNzMyM2VhNWRlMjIvMC80QTkwNkQ0RjUz NEIyNkEwRTYyODk4ODgyNjMwMjkyOTM2Q0VBNTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5MjkzNkNF QTU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWU4NTktM2MyYy00YTA5LWE0 YTktMzczMjNlYTVkZTIyLzAvNEE5MDZENEY1MzRCMjZBMEU2Mjg5ODg4MjYzMDI5 MjkzNkNFQTU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7xCpp/rSp8Wdfk74Kl7Eg72r94PZMYj9HH 80uBzD5C0Hvb8AToCp9D5l8zZIhx+2ZX5UCcziPQcSWlR8l/A52efkr8i2SibxHe qmhMUKz4U+1asJ10ZmuTeMcZ7rDyZ55cWvEiJjC73nLk7T8uAQTHetcTrMiGRWWE vO5y+uOC/FkjZ5x13qvbUqVotzXFrV5nF7kYkQQ590tK34LtIJBj6L8+eTuXmpie jiXvJ1Y/pvjKjD6wbiQQCAX2lgB86b+UxFPd+1YDiLQgi8Ij2z0Zdb0NCR+QGyFw X2VDT8T/Qa76U7hzN5hxoILTWxwWULiCKjmN0Igox/yyy2Is4/A= -----END CERTIFICATE-----Generated at Thu Mar 26 21:07:17 2026 by rpki-client