$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: 2p2M/4BakWALMIic1tRvCeZGBoP2JS+BJIkfd+EVAj0= Subject key identifier: 4E:EE:0B:4C:AC:04:D6:7F:8C:2F:04:33:58:8E:78:6D:04:6C:36:FC Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 50EE86C74B7C86D775D49BB05BFB31AD25DE3050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 0230 Signing time: Thu 26 Mar 2026 09:41:16 +0000 Manifest this update: Thu 26 Mar 2026 09:36:16 +0000 Manifest next update: Sun 29 Mar 2026 19:44:16 +0000 Files and hashes: 1: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: L8Lwdj123XL2ED49SJFIRzyVdk4WBLnZZPYfg4PazWM=) 2: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) 3: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:44:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:ee:86:c7:4b:7c:86:d7:75:d4:9b:b0:5b:fb:31:ad:25:de:30:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Mar 26 09:36:16 2026 GMT Not After : Mar 29 19:44:16 2026 GMT Subject: CN=4EEE0B4CAC04D67F8C2F0433588E786D046C36FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:a6:60:a5:d3:7f:72:42:6b:0d:e7:c4:13:11: e4:72:8d:dd:a2:ed:b2:d6:7d:f7:cd:a7:f6:09:3b: 38:ae:a8:3c:08:3f:94:24:b6:34:82:3b:96:c8:35: 17:8d:0a:37:ca:fc:0c:90:2f:5a:01:39:66:35:db: 29:75:88:87:c0:ef:c6:8a:a8:89:1f:ee:c1:75:c7: 39:f4:ec:6a:4c:0f:3f:55:37:d0:a7:35:fa:d2:7d: 22:05:ae:c6:f2:7b:3f:bf:93:b8:3f:05:6a:c8:8f: 72:ae:d0:23:5e:a7:34:4b:13:28:ba:78:d6:4f:05: 5c:96:96:e3:f4:72:0c:4d:06:78:28:74:79:db:8f: 65:b6:ce:50:34:11:9f:00:6c:8c:f9:10:bb:c6:0f: 2d:6a:36:0f:a6:f7:30:68:d2:57:da:b6:c1:de:f9: 90:ab:2d:45:1c:2b:31:fb:0e:ce:07:0d:bd:f6:ee: 4e:82:8e:c0:ff:ef:b8:67:1f:58:21:cb:cd:cd:61: 49:1c:9c:9b:54:6a:a6:6e:42:32:23:9d:78:b2:98: c9:33:e8:7a:bb:51:a0:89:43:80:44:f7:e1:0c:30: fa:a1:7e:49:56:8b:4b:c3:6a:2d:6a:da:b0:b2:45: 7a:b5:1d:bd:83:12:d5:a3:4b:da:3c:21:d2:1f:f4: 08:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:EE:0B:4C:AC:04:D6:7F:8C:2F:04:33:58:8E:78:6D:04:6C:36:FC X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:cf:11:09:18:e2:51:b7:4d:3a:3e:7f:52:da:a3:ed:83: 34:99:e6:e7:f6:00:13:e7:63:b8:b2:4f:22:6a:f2:5a:7d:63: 80:11:b3:50:84:fd:dd:aa:2a:dd:ff:1c:94:a7:1e:9b:42:e5: 27:a5:3c:ee:3c:59:30:34:a3:41:ad:b1:20:22:b8:62:7e:3f: 62:98:dc:c8:f2:08:f3:b4:21:0a:83:bf:bd:8e:f1:e5:51:3e: b9:bc:e0:cf:99:79:38:f7:64:d8:59:b4:29:4c:63:29:48:f5: 78:fe:f0:65:b2:e3:76:de:ba:3f:63:a2:e0:02:06:71:61:7e: b8:92:d5:1d:48:83:46:d8:79:fa:58:79:8d:45:c6:bc:d3:86: 63:13:e1:7b:32:24:5d:86:13:ca:86:2e:57:44:65:51:a8:6e: 0e:55:82:aa:8e:27:34:23:2e:3a:f1:c1:aa:1c:03:77:cd:17: 6e:16:eb:a3:02:64:a4:25:fb:84:30:7c:cc:2b:07:a9:11:df: 90:24:67:65:e5:11:2c:bf:d7:38:c4:23:6a:a5:be:1c:b7:63: e6:c1:6a:57:3a:4b:ae:8f:13:be:7e:71:be:a1:9f:35:1e:df: 79:b9:44:6e:0c:1e:23:5e:7b:0e:bb:d9:f2:f6:12:8b:cd:de: 00:67:45:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUO6Gx0t8htd11JuwW/sxrSXeMFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNjAzMjYwOTM2MTZaFw0yNjAzMjkxOTQ0MTZaMDMxMTAvBgNV BAMTKDRFRUUwQjRDQUMwNEQ2N0Y4QzJGMDQzMzU4OEU3ODZEMDQ2QzM2RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVpmCl039yQmsN58QTEeRyjd2i 7bLWfffNp/YJOziuqDwIP5QktjSCO5bINReNCjfK/AyQL1oBOWY12yl1iIfA78aK qIkf7sF1xzn07GpMDz9VN9CnNfrSfSIFrsbyez+/k7g/BWrIj3Ku0CNepzRLEyi6 eNZPBVyWluP0cgxNBngodHnbj2W2zlA0EZ8AbIz5ELvGDy1qNg+m9zBo0lfatsHe +ZCrLUUcKzH7Ds4HDb327k6CjsD/77hnH1ghy83NYUkcnJtUaqZuQjIjnXiymMkz 6Hq7UaCJQ4BE9+EMMPqhfklWi0vDai1q2rCyRXq1Hb2DEtWjS9o8IdIf9AgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTu4LTKwE1n+MLwQzWI54bQRsNvwwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5yzxEJGOJRt006Pn9S2qPtgzSZ5uf2ABPn Y7iyTyJq8lp9Y4ARs1CE/d2qKt3/HJSnHptC5SelPO48WTA0o0GtsSAiuGJ+P2KY 3MjyCPO0IQqDv72O8eVRPrm84M+ZeTj3ZNhZtClMYylI9Xj+8GWy43beuj9jouAC BnFhfriS1R1Ig0bYefpYeY1FxrzThmMT4XsyJF2GE8qGLldEZVGobg5VgqqOJzQj LjrxwaocA3fNF24W66MCZKQl+4QwfMwrB6kR35AkZ2XlESy/1zjEI2qlvhy3Y+bB alc6S66PE75+cb6hnzUe33m5RG4MHiNeew672fL2EovN3gBnRXs= -----END CERTIFICATE-----Generated at Thu Mar 26 21:53:37 2026 by rpki-client