$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: FsC758L/fT71KhwwXP9+F5sP9WR28PQ+FiJVXMhKuBk= Subject key identifier: FE:A7:35:F9:58:2D:F4:A3:80:B3:84:A6:BA:32:1F:BB:48:7E:5A:19 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 29A47EF1791A3CE22C56DB8CB7D563E9E47B3B12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 0120 Signing time: Wed 25 Mar 2026 10:01:21 +0000 Manifest this update: Wed 25 Mar 2026 09:56:21 +0000 Manifest next update: Sat 28 Mar 2026 13:50:21 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: Soo7TxRf59+y+yPRDNJysf+iPiGuuJz7u2Bi5AcQ3Bg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 13:50:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:a4:7e:f1:79:1a:3c:e2:2c:56:db:8c:b7:d5:63:e9:e4:7b:3b:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Mar 25 09:56:21 2026 GMT Not After : Mar 28 13:50:21 2026 GMT Subject: CN=FEA735F9582DF4A380B384A6BA321FBB487E5A19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:36:30:07:1c:22:11:3e:e0:9a:35:3d:37:46: 4b:99:91:3d:1a:3c:5b:db:c6:ab:cb:62:07:3c:87: 1d:30:17:a3:8f:5b:b8:e0:28:39:27:81:ca:88:4b: 0f:48:7a:4e:a8:e5:33:7e:46:cd:3f:75:2f:37:d1: 28:93:6b:1d:f0:79:9e:87:81:18:47:f9:0f:65:7c: 10:74:87:9b:a2:40:91:7c:95:0c:71:6c:be:02:77: 5f:07:95:af:04:43:3a:d1:ed:7f:0a:43:ab:93:03: 67:5a:68:3f:99:0d:f7:2b:2c:99:17:0f:e1:cd:ec: ea:69:5c:bc:20:69:37:7d:62:c5:ed:a1:7a:22:a0: d7:c5:22:b1:13:80:43:1a:73:9b:58:ad:65:dd:d8: f7:01:fc:58:8c:e5:85:79:6f:6e:3f:71:15:6c:7c: 88:b7:dd:66:49:4f:39:2e:30:4a:20:7d:71:cb:b2: e6:50:15:73:71:81:76:3b:df:a2:ad:a4:fe:37:f0: fc:e4:5b:fb:91:26:ad:17:16:c9:a0:61:8f:a7:76: c1:23:db:0a:c0:02:c1:c1:c8:1a:da:7f:e7:d2:73: 21:b2:0b:ec:f3:af:a8:19:b6:85:76:89:9b:f6:f9: 9b:ad:a9:80:5a:5e:0a:e8:14:48:7b:b6:f3:a6:f3: 92:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:A7:35:F9:58:2D:F4:A3:80:B3:84:A6:BA:32:1F:BB:48:7E:5A:19 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:f5:d5:62:08:fd:35:40:ab:1f:46:97:fc:79:66:66:0f:3a: fb:95:32:94:7e:9b:03:e8:a0:47:78:75:b8:bb:f1:43:0d:b0: cf:e3:a9:48:de:20:43:67:9e:d2:f8:d0:b8:79:9c:32:7c:1e: 14:71:e1:b2:88:8c:51:90:86:28:e0:31:1c:90:25:a3:e3:c1: 5d:2b:a6:71:4a:7a:d9:bf:39:4c:b1:e4:82:5c:f5:04:56:24: c4:be:5d:95:8b:f7:0e:0f:e6:4a:79:9f:ab:55:35:ab:f3:a3: f8:72:fa:be:51:a1:ca:77:f7:e9:3f:18:6f:01:68:a8:03:22: d5:df:c4:54:45:39:ff:10:0c:24:86:3d:b1:80:23:e0:cc:ec: 53:b7:e7:62:63:35:34:2e:3e:61:c0:3a:16:6e:3f:b8:b6:18: 43:5b:e3:b1:c7:b3:ef:4a:c0:06:cc:c0:c3:75:50:87:a7:99: f3:af:6f:fb:8e:9c:2e:6b:63:c6:45:f7:d8:29:89:5d:68:a3: e4:8b:bf:78:f5:31:54:df:6b:f9:3d:ec:59:db:54:02:25:9c: 4f:56:4d:e8:e1:de:fd:79:ff:59:6f:69:12:d8:1a:d2:ee:f4: f8:a2:66:5b:0d:cf:89:83:c3:9a:d5:dc:74:93:e2:a3:55:da: 20:aa:14:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKaR+8XkaPOIsVtuMt9Vj6eR7OxIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNjAzMjUwOTU2MjFaFw0yNjAzMjgxMzUwMjFaMDMxMTAvBgNV BAMTKEZFQTczNUY5NTgyREY0QTM4MEIzODRBNkJBMzIxRkJCNDg3RTVBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwNjAHHCIRPuCaNT03RkuZkT0a PFvbxqvLYgc8hx0wF6OPW7jgKDkngcqISw9Iek6o5TN+Rs0/dS830SiTax3weZ6H gRhH+Q9lfBB0h5uiQJF8lQxxbL4Cd18Hla8EQzrR7X8KQ6uTA2daaD+ZDfcrLJkX D+HN7OppXLwgaTd9YsXtoXoioNfFIrETgEMac5tYrWXd2PcB/FiM5YV5b24/cRVs fIi33WZJTzkuMEogfXHLsuZQFXNxgXY736KtpP438PzkW/uRJq0XFsmgYY+ndsEj 2wrAAsHByBraf+fScyGyC+zzr6gZtoV2iZv2+ZutqYBaXgroFEh7tvOm85JdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/qc1+Vgt9KOAs4SmujIfu0h+WhkwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ711WII/TVAqx9Gl/x5ZmYPOvuVMpR+mwPo oEd4dbi78UMNsM/jqUjeIENnntL40Lh5nDJ8HhRx4bKIjFGQhijgMRyQJaPjwV0r pnFKetm/OUyx5IJc9QRWJMS+XZWL9w4P5kp5n6tVNavzo/hy+r5Rocp39+k/GG8B aKgDItXfxFRFOf8QDCSGPbGAI+DM7FO352JjNTQuPmHAOhZuP7i2GENb47HHs+9K wAbMwMN1UIenmfOvb/uOnC5rY8ZF99gpiV1oo+SLv3j1MVTfa/k97FnbVAIlnE9W Tejh3v15/1lvaRLYGtLu9PiiZlsNz4mDw5rV3HST4qNV2iCqFAo= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:14 2026 by rpki-client