$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: SPW1s1HM7XT3mACudRS9BPeboYseXkCuiWdNErr9oBk= Subject key identifier: 10:BA:CF:0C:93:D6:78:D4:1E:95:8D:D2:AE:33:A7:70:07:84:FD:4B Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 40C7862A01BA0CDB009DEDAB6D396C2FBE2BEC70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 04ED Signing time: Wed 25 Mar 2026 12:11:40 +0000 Manifest this update: Wed 25 Mar 2026 12:06:40 +0000 Manifest next update: Sat 28 Mar 2026 15:18:40 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: GVzZhpanZmrW7E3/B2ZTQQX2FJDnQCnnyHtp4OmCZco=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:18:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c7:86:2a:01:ba:0c:db:00:9d:ed:ab:6d:39:6c:2f:be:2b:ec:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Mar 25 12:06:40 2026 GMT Not After : Mar 28 15:18:40 2026 GMT Subject: CN=10BACF0C93D678D41E958DD2AE33A7700784FD4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:7b:45:99:ae:d3:57:88:0e:ad:af:e2:23:2c: 4f:cd:90:0a:29:ae:b6:fe:72:d6:5b:27:b9:5d:8a: 4c:17:54:4a:9c:af:9e:f4:67:d9:09:3c:17:24:dd: 9f:f5:64:c1:56:6b:ac:1b:71:ec:7f:54:7a:67:bb: 48:f5:88:e1:4e:65:67:ab:6f:a7:f0:76:b9:25:75: 40:84:56:30:9e:17:b4:1b:d2:16:7a:11:dd:26:e6: b3:c8:e5:d4:a8:2a:a9:b1:ae:48:a1:61:2d:77:0a: f9:4b:d3:6a:04:46:dd:ec:87:fd:b2:f2:08:2c:79: 3b:aa:8c:a5:00:3b:22:32:0c:f6:d7:f4:3a:d7:f2: 95:ba:8c:ef:0b:eb:4e:7e:2e:ab:a6:d3:fa:ff:f0: 4b:b7:da:a3:c3:9c:95:b7:63:0e:fe:68:09:fe:ce: 55:37:ef:07:02:0d:47:77:be:03:92:09:c6:47:c8: cf:51:2e:23:ad:d9:7a:64:a2:8a:95:e5:c4:e5:d7: 8b:92:b1:ab:4c:cf:85:15:e1:0f:37:9d:c0:a1:cf: c5:5c:9c:ef:9e:49:a2:e7:11:cf:2d:1f:37:0d:99: c0:43:f9:ec:67:33:42:c0:02:d5:0f:95:fe:a0:ab: c1:96:24:31:39:cf:d6:e0:06:88:a6:19:0f:60:b1: 4a:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BA:CF:0C:93:D6:78:D4:1E:95:8D:D2:AE:33:A7:70:07:84:FD:4B X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:04:19:5a:ae:93:71:3c:7d:57:de:ac:78:71:89:1a:13:02: 55:e9:5e:a0:3a:48:bc:c7:78:99:6a:83:f7:d3:51:8b:12:df: 8e:33:c1:ed:22:36:f2:be:22:cf:cd:64:88:56:54:80:51:90: 34:45:fc:01:2e:c2:cf:2a:5b:f5:fd:da:92:8b:ef:2b:4e:87: 74:e7:b7:b0:49:41:9f:b1:3c:d4:cb:50:f1:99:ca:00:d3:d3: f0:83:c6:33:a4:f7:59:38:49:f4:81:69:09:88:31:8d:ee:30: 91:a8:85:ff:d2:2e:7d:9a:37:22:43:7c:1f:a9:74:ba:e8:cb: ed:fe:51:ed:32:53:dc:d7:6b:39:4a:8f:a4:f9:e8:19:fa:b8: ea:ae:0a:a7:65:6e:dd:c2:ce:dd:7e:4a:f3:95:73:5d:4f:7f: fa:de:13:3e:fc:da:eb:50:28:82:21:8e:07:c0:51:fc:bb:89: 44:4d:d3:3b:d7:d3:ad:0f:53:70:12:48:7a:40:a1:5b:5b:03: c0:c8:9e:1f:4f:5a:6f:21:4d:79:97:53:f2:cd:7f:19:56:93: 40:87:db:07:bc:47:bb:57:71:84:d4:66:cc:db:7e:9b:84:f7: 3b:e9:06:b8:57:44:d8:6c:3c:6d:fd:ba:1a:6c:75:cb:2c:89: 0b:35:24:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMeGKgG6DNsAne2rbTlsL74r7HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNjAzMjUxMjA2NDBaFw0yNjAzMjgxNTE4NDBaMDMxMTAvBgNV BAMTKDEwQkFDRjBDOTNENjc4RDQxRTk1OEREMkFFMzNBNzcwMDc4NEZENEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0e0WZrtNXiA6tr+IjLE/NkAop rrb+ctZbJ7ldikwXVEqcr570Z9kJPBck3Z/1ZMFWa6wbcex/VHpnu0j1iOFOZWer b6fwdrkldUCEVjCeF7Qb0hZ6Ed0m5rPI5dSoKqmxrkihYS13CvlL02oERt3sh/2y 8ggseTuqjKUAOyIyDPbX9DrX8pW6jO8L605+Lqum0/r/8Eu32qPDnJW3Yw7+aAn+ zlU37wcCDUd3vgOSCcZHyM9RLiOt2XpkooqV5cTl14uSsatMz4UV4Q83ncChz8Vc nO+eSaLnEc8tHzcNmcBD+exnM0LAAtUPlf6gq8GWJDE5z9bgBoimGQ9gsUrjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUELrPDJPWeNQelY3SrjOncAeE/UswHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0EGVquk3E8fVferHhxiRoTAlXpXqA6SLzH eJlqg/fTUYsS344zwe0iNvK+Is/NZIhWVIBRkDRF/AEuws8qW/X92pKL7ytOh3Tn t7BJQZ+xPNTLUPGZygDT0/CDxjOk91k4SfSBaQmIMY3uMJGohf/SLn2aNyJDfB+p dLroy+3+Ue0yU9zXazlKj6T56Bn6uOquCqdlbt3Czt1+SvOVc11Pf/reEz782utQ KIIhjgfAUfy7iURN0zvX060PU3ASSHpAoVtbA8DInh9PWm8hTXmXU/LNfxlWk0CH 2we8R7tXcYTUZszbfpuE9zvpBrhXRNhsPG39uhpsdcssiQs1JJw= -----END CERTIFICATE-----Generated at Thu Mar 26 11:39:41 2026 by rpki-client