$ rpki-client -vvf repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft File: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft (raw, json) Hash identifier: tP4JTB9yXUSA/GGqgO5etZYKsOUYLXbC4p8vr1V63+M= Subject key identifier: D3:9B:6E:85:24:D6:82:52:1D:4B:47:F2:87:9A:DF:BC:95:C2:10:37 Authority key identifier: 4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A Certificate issuer: /CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Certificate serial: 7C5729BAD49833FBCA661154717522D8C0BE7D28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft Manifest number: 055C Signing time: Wed 25 Mar 2026 19:41:54 +0000 Manifest this update: Wed 25 Mar 2026 19:36:54 +0000 Manifest next update: Sat 28 Mar 2026 19:42:54 +0000 Files and hashes: 1: 4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl (hash: BHhs38LHqPqN1DI2K5luvOBL3fRNo6gB7VD25aiAjio=) 2: 3130332e3231312e34392e302f32342d3234203d3e203633353035.roa (hash: jSA7+l89fySFyM7Bs9jzEHqShE9HEzseLTVhKTYttZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:42:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:57:29:ba:d4:98:33:fb:ca:66:11:54:71:75:22:d8:c0:be:7d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A Validity Not Before: Mar 25 19:36:54 2026 GMT Not After : Mar 28 19:42:54 2026 GMT Subject: CN=D39B6E8524D682521D4B47F2879ADFBC95C21037 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:dc:1f:c3:d6:fa:ea:98:99:c6:f0:67:e8:b4: b0:b7:e4:14:28:e6:48:b4:df:11:3b:bc:20:a5:7e: 25:f6:d7:a2:37:6c:37:57:c9:85:a2:65:5b:40:66: 3c:3b:0b:32:a2:38:cb:97:df:95:16:16:f9:ab:bd: 43:20:5e:31:0b:92:5b:f3:82:46:29:f5:66:32:9f: 14:e2:3d:fc:67:71:e6:71:23:b0:35:fa:38:0d:10: d1:8d:13:c2:7c:bc:59:23:ac:93:91:f9:eb:72:91: 49:28:3f:a4:fb:2a:76:51:0c:e3:1a:5b:a5:6d:51: 3f:b2:90:34:27:4a:80:78:70:78:ca:96:0c:40:66: d7:34:5c:1d:0e:37:99:04:77:da:5d:5c:4a:8c:1f: c4:b1:26:4a:84:94:78:2c:2c:c5:93:04:28:97:0a: b4:d4:9e:02:5e:fd:c4:5c:65:44:32:f3:f1:9c:21: e8:01:82:02:99:ce:f2:a0:c5:a8:35:2f:20:ed:8e: ea:99:b0:e3:1d:e3:89:c5:df:a5:75:0c:33:6c:9a: cc:2e:aa:75:91:17:9d:1d:90:54:39:f6:fa:07:bd: 6d:fb:d1:fa:7e:a6:9f:43:b8:9d:f1:65:31:af:d8: d4:c7:43:9b:9d:7a:79:61:98:40:b8:12:8f:68:55: f7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9B:6E:85:24:D6:82:52:1D:4B:47:F2:87:9A:DF:BC:95:C2:10:37 X509v3 Authority Key Identifier: keyid:4A:6F:D7:E0:79:F5:43:A5:D5:FD:E4:43:3F:7B:D5:3D:CE:42:6E:5A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc09e13c-cea0-47ff-9c96-f49b39d43920/0/4A6FD7E079F543A5D5FDE4433F7BD53DCE426E5A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:aa:53:e4:a0:2e:d3:d1:e1:c3:ae:e8:7c:14:7b:50:76:34: 95:e3:aa:29:7c:d5:97:9f:31:0d:28:00:95:6f:83:bd:d5:33: 77:ee:37:52:0b:1d:39:68:91:60:c6:ce:db:3d:43:ae:0c:d6: 14:42:52:56:71:85:be:26:93:38:90:02:d3:f6:c7:1d:c4:88: a6:b1:2c:0c:62:58:f4:13:ee:93:1a:12:85:9c:6a:bb:1e:ad: f0:1e:c2:70:ab:e3:68:94:4a:b8:0a:c9:54:14:a7:70:6e:96: ee:b9:e5:10:da:0c:d8:a6:61:68:6e:0a:71:2b:29:b1:94:10: 51:13:5a:58:95:9d:54:37:45:e3:37:5b:c8:fa:14:07:fb:b7: 2e:8b:53:f7:3f:9c:c5:01:af:1f:78:a5:54:4a:f0:3f:f8:9c: 11:e0:dc:52:4c:17:ad:55:36:4e:94:64:f7:37:75:92:39:f0: 0b:a8:16:ed:62:2b:a5:36:6a:23:74:18:8d:38:4c:2f:40:f0: 64:3f:17:e6:f6:d2:b3:af:dd:cb:75:c1:21:99:7a:05:42:3d: 01:50:a4:f5:a1:61:80:87:8a:68:70:6e:c8:9a:85:8e:8d:6a: f0:04:05:c5:0d:a8:3d:ee:d5:d5:46:f6:6e:2c:64:e5:fb:3b: e5:87:b0:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfFcputSYM/vKZhFUcXUi2MC+fSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RD RTQyNkU1QTAeFw0yNjAzMjUxOTM2NTRaFw0yNjAzMjgxOTQyNTRaMDMxMTAvBgNV BAMTKEQzOUI2RTg1MjRENjgyNTIxRDRCNDdGMjg3OUFERkJDOTVDMjEwMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK3B/D1vrqmJnG8GfotLC35BQo 5ki03xE7vCClfiX216I3bDdXyYWiZVtAZjw7CzKiOMuX35UWFvmrvUMgXjELklvz gkYp9WYynxTiPfxnceZxI7A1+jgNENGNE8J8vFkjrJOR+etykUkoP6T7KnZRDOMa W6VtUT+ykDQnSoB4cHjKlgxAZtc0XB0ON5kEd9pdXEqMH8SxJkqElHgsLMWTBCiX CrTUngJe/cRcZUQy8/GcIegBggKZzvKgxag1LyDtjuqZsOMd44nF36V1DDNsmswu qnWRF50dkFQ59voHvW370fp+pp9DuJ3xZTGv2NTHQ5udenlhmEC4Eo9oVfeTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU05tuhSTWglIdS0fyh5rfvJXCEDcwHwYDVR0j BBgwFoAUSm/X4Hn1Q6XV/eRDP3vVPc5CblowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YzA5ZTEzYy1jZWEwLTQ3ZmYtOWM5Ni1mNDliMzlkNDM5MjAvMC80QTZGRDdFMDc5 RjU0M0E1RDVGREU0NDMzRjdCRDUzRENFNDI2RTVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1M0RDRTQy NkU1QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2MwOWUxM2MtY2VhMC00N2ZmLTlj OTYtZjQ5YjM5ZDQzOTIwLzAvNEE2RkQ3RTA3OUY1NDNBNUQ1RkRFNDQzM0Y3QkQ1 M0RDRTQyNkU1QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKqU+SgLtPR4cOu6HwUe1B2NJXjqil81Zef MQ0oAJVvg73VM3fuN1ILHTlokWDGzts9Q64M1hRCUlZxhb4mkziQAtP2xx3EiKax LAxiWPQT7pMaEoWcarserfAewnCr42iUSrgKyVQUp3Bulu655RDaDNimYWhuCnEr KbGUEFETWliVnVQ3ReM3W8j6FAf7ty6LU/c/nMUBrx94pVRK8D/4nBHg3FJMF61V Nk6UZPc3dZI58AuoFu1iK6U2aiN0GI04TC9A8GQ/F+b20rOv3ct1wSGZegVCPQFQ pPWhYYCHimhwbsiahY6NavAEBcUNqD3u1dVG9m4sZOX7O+WHsAk= -----END CERTIFICATE-----Generated at Thu Mar 26 19:44:19 2026 by rpki-client