$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: 14uUCNGFETTJ145bVQmn44DjH+/U4JSY2VgaT6x/Q2s= Subject key identifier: B4:A3:D7:23:07:96:EF:43:5C:2F:49:34:D6:D5:80:AF:36:53:2C:B8 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 53D8E5C24DCACE32C208CEB097CD40C9DFF2C094 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 017C Signing time: Tue 24 Mar 2026 21:50:55 +0000 Manifest this update: Tue 24 Mar 2026 21:45:55 +0000 Manifest next update: Fri 27 Mar 2026 23:05:55 +0000 Files and hashes: 1: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: jkC15twdSo2VVxRSy9px5K0BC1HIC59h8vBYUT6CWkg=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: Lsn42fS5u6tzmVAFqel+kOrjmVEuvr9qNasBHNEDW8Y=) 3: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=) 4: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: 3GNt7P7cFcynuTiio0iqMDPnLZbXhjUhriLwsf5KiNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 23:05:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:d8:e5:c2:4d:ca:ce:32:c2:08:ce:b0:97:cd:40:c9:df:f2:c0:94 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Mar 24 21:45:55 2026 GMT Not After : Mar 27 23:05:55 2026 GMT Subject: CN=B4A3D7230796EF435C2F4934D6D580AF36532CB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:83:5e:e1:99:7c:5c:c5:ba:3e:df:bd:b7:66: 0f:62:16:50:bf:58:ea:94:e9:ed:7c:b4:9f:23:75: fd:c1:4e:b5:af:50:73:8a:95:37:e7:84:1a:3b:df: d5:67:47:b0:81:65:0c:76:25:fc:cd:8d:74:c9:8d: e2:0c:42:10:d7:fd:f1:d6:9a:08:7d:b3:37:a9:c4: ef:da:82:ec:2e:6a:18:7a:55:e2:73:24:fe:58:92: 7c:69:7f:62:e0:bd:b7:2f:64:26:39:43:fc:5b:e4: 10:46:7f:3f:48:61:e0:7b:6a:46:0b:4d:75:0a:88: 74:34:3f:af:60:68:3b:49:0b:c6:2e:49:37:8e:94: 0e:21:30:7c:73:6e:de:7d:e0:53:29:16:d8:78:86: 04:83:17:40:e8:2a:15:fc:40:33:f9:f6:3d:fe:4e: 10:e9:78:81:bb:3d:ef:d7:bb:7a:bf:14:61:b1:90: f3:34:83:36:11:fc:d5:2c:5c:2c:e0:fc:3a:ce:51: 38:bc:04:05:70:03:6f:98:f8:0f:f0:6f:ba:43:72: d7:e7:c9:67:53:a1:db:6c:e7:ed:ce:9c:ac:e2:26: 4b:99:9e:51:36:13:95:3d:e7:45:2a:f0:c7:f0:31: 90:78:9c:7c:44:4d:06:3d:bf:80:bf:40:f8:65:75: 2a:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:A3:D7:23:07:96:EF:43:5C:2F:49:34:D6:D5:80:AF:36:53:2C:B8 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:23:ea:55:ed:08:43:09:cb:5d:72:a7:77:12:70:d3:43:ee: 88:0f:7f:59:f4:5b:3c:12:02:ac:5c:fe:30:c0:ae:91:cc:37: f9:fe:f5:94:2f:0b:59:a1:b8:98:e8:eb:de:70:a4:3f:b6:01: 2b:0b:44:5e:ac:c9:d4:15:56:b3:10:92:d0:16:fe:bb:b3:fc: ed:22:7f:ca:c0:7f:74:7c:60:0c:ff:ce:96:9d:99:91:d2:01: 80:61:34:b8:1c:3f:15:97:f0:2f:b6:c2:f6:11:dd:88:57:80: 9a:aa:06:d9:b7:b6:a2:ab:41:4c:29:bd:62:3b:ac:98:7e:fb: 65:4b:0b:8d:f5:1a:43:67:50:bf:21:80:91:03:70:98:5a:50: d1:98:e6:ce:f8:43:9a:33:6e:97:5d:3d:6f:61:2a:64:3c:0c: 74:cc:d2:34:32:3a:67:71:55:3d:44:45:6e:05:ae:96:90:97: b4:bd:f3:56:8d:62:75:e6:5c:20:ca:ad:10:cc:d0:9b:2c:c6: eb:ca:4b:41:4d:84:64:1e:61:a8:4d:a3:61:62:c5:d1:2b:4a: c5:98:14:1b:c0:4d:a7:82:1c:e6:eb:2e:65:c8:a0:67:9b:0c: d0:07:4a:48:2b:82:7c:e0:0a:c6:49:c9:fa:04:e0:7b:f6:0b: 89:a3:b9:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU9jlwk3KzjLCCM6wl81Ayd/ywJQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNjAzMjQyMTQ1NTVaFw0yNjAzMjcyMzA1NTVaMDMxMTAvBgNV BAMTKEI0QTNENzIzMDc5NkVGNDM1QzJGNDkzNEQ2RDU4MEFGMzY1MzJDQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZg17hmXxcxbo+3723Zg9iFlC/ WOqU6e18tJ8jdf3BTrWvUHOKlTfnhBo739VnR7CBZQx2JfzNjXTJjeIMQhDX/fHW mgh9szepxO/aguwuahh6VeJzJP5Yknxpf2LgvbcvZCY5Q/xb5BBGfz9IYeB7akYL TXUKiHQ0P69gaDtJC8YuSTeOlA4hMHxzbt594FMpFth4hgSDF0DoKhX8QDP59j3+ ThDpeIG7Pe/Xu3q/FGGxkPM0gzYR/NUsXCzg/DrOUTi8BAVwA2+Y+A/wb7pDctfn yWdTodts5+3OnKziJkuZnlE2E5U950Uq8MfwMZB4nHxETQY9v4C/QPhldSo/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtKPXIweW70NcL0k01tWArzZTLLgwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHQj6lXtCEMJy11yp3cScNND7ogPf1n0WzwS Aqxc/jDArpHMN/n+9ZQvC1mhuJjo695wpD+2ASsLRF6sydQVVrMQktAW/ruz/O0i f8rAf3R8YAz/zpadmZHSAYBhNLgcPxWX8C+2wvYR3YhXgJqqBtm3tqKrQUwpvWI7 rJh++2VLC431GkNnUL8hgJEDcJhaUNGY5s74Q5ozbpddPW9hKmQ8DHTM0jQyOmdx VT1ERW4FrpaQl7S981aNYnXmXCDKrRDM0JssxuvKS0FNhGQeYahNo2FixdErSsWY FBvATaeCHObrLmXIoGebDNAHSkgrgnzgCsZJyfoE4Hv2C4mjuRs= -----END CERTIFICATE-----Generated at Thu Mar 26 07:13:56 2026 by rpki-client