$ rpki-client -vvf repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft File: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft (raw, json) Hash identifier: 3R7JnAvoazvMJlhpJUNXfYwCphfo0fLf+1S9aWjeWN8= Subject key identifier: 39:A9:C1:01:80:96:E9:6F:07:29:D3:0F:0C:89:DE:FC:12:B6:2A:26 Authority key identifier: 44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 Certificate issuer: /CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Certificate serial: 4BC259A99F72B24642DD529CC77CB9F5FD810264 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft Manifest number: FE Signing time: Tue 24 Mar 2026 12:12:12 +0000 Manifest this update: Tue 24 Mar 2026 12:07:12 +0000 Manifest next update: Fri 27 Mar 2026 14:17:12 +0000 Files and hashes: 1: 323430353a356534303a3a2f33322d3332203d3e20313339343038.roa (hash: sRyhu6fDfcemdhV/NAA1n4G4NdnybRSnokvW0ioWtBY=) 2: 4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl (hash: RP0bTGJJzdRP2jpxb2VvkTGXT4ITkEs7E+nR5P9FzAE=) 3: 3130332e3134332e3233322e302f32342d3234203d3e20313339343038.roa (hash: IGC+YzF7hbNTh+lU4Xp4ZN99v7lUHzjLqU8mpRmWZMw=) 4: 3130332e3134332e3233332e302f32342d3234203d3e20313339343038.roa (hash: mDFd08tPILLw1T3gAXQau9nwubN6g+t2GLdqlL1NiMc=) 5: 3130332e3134332e3233322e302f32332d3233203d3e20313339343038.roa (hash: Sds95Ss3ilJlMKDO38Rkj40VQdzRD9GgP564MrRxXGU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 14:17:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:c2:59:a9:9f:72:b2:46:42:dd:52:9c:c7:7c:b9:f5:fd:81:02:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4443E43239D3F5B9674F2F5B5A37711434C48AF2 Validity Not Before: Mar 24 12:07:12 2026 GMT Not After : Mar 27 14:17:12 2026 GMT Subject: CN=39A9C1018096E96F0729D30F0C89DEFC12B62A26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:7a:3a:ab:ff:19:2b:47:02:67:7d:e3:30:20: bc:9d:76:df:c3:61:2a:40:07:07:26:8d:0b:22:4a: 30:74:b4:68:a3:8a:9e:50:44:1c:0d:5a:c5:ab:0f: 34:f4:2e:3e:e1:78:e1:8e:e6:3d:d6:45:fb:0f:ed: 7a:1d:16:b0:0c:af:96:9a:95:a0:b7:6f:55:8c:58: 77:2c:57:32:5c:76:cd:d1:dd:e3:bf:ff:9c:cd:1c: 1d:48:85:93:06:17:39:8c:40:64:9e:32:2d:47:f3: fc:e2:d5:9a:d7:f5:ba:3e:e6:8a:ed:12:8a:7a:6a: 2d:80:6c:6f:8e:49:56:5e:1a:54:9c:0b:b1:d8:36: 68:53:67:00:4b:af:98:85:1e:13:0d:ce:8c:bc:c0: 50:4c:6c:21:dc:50:88:cd:03:86:14:9b:13:ca:62: f4:2a:2b:13:ad:b0:af:0d:ea:2d:fc:5a:75:ad:07: e8:76:14:6b:cc:cd:13:6a:61:0e:b0:df:c6:a9:cf: 89:eb:88:b0:2e:83:fd:37:58:e3:ad:9c:8a:10:4c: 60:6b:60:f4:5b:6e:40:bf:4c:c5:8b:6f:5a:0f:b2: f0:d3:70:a9:c0:ab:97:dc:6b:d9:c4:4f:18:40:ae: da:4a:e2:a1:cf:ce:7e:00:83:21:21:bd:5c:35:16: 8c:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:A9:C1:01:80:96:E9:6F:07:29:D3:0F:0C:89:DE:FC:12:B6:2A:26 X509v3 Authority Key Identifier: keyid:44:43:E4:32:39:D3:F5:B9:67:4F:2F:5B:5A:37:71:14:34:C4:8A:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4443E43239D3F5B9674F2F5B5A37711434C48AF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6c8b3a9-4eff-460d-b01d-6ba5d99dadb9/0/4443E43239D3F5B9674F2F5B5A37711434C48AF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:e7:05:e7:3d:e2:2f:5f:56:23:1f:19:47:f5:a7:7a:af:c4: 7e:66:77:89:75:59:73:65:64:33:37:fa:e7:21:57:a6:c6:7e: 6d:5c:2d:7a:7d:16:e8:25:da:22:d1:ab:16:29:21:43:4f:6d: 39:36:6a:d7:41:a9:78:c1:40:06:20:6a:46:25:9b:07:4c:55: b9:f5:25:d1:3c:0a:9b:de:ab:74:8c:81:25:33:2f:f7:d4:f3: 0f:82:d3:08:12:15:e1:66:5f:71:5f:60:6d:fb:d9:42:bd:31: 07:81:3c:88:a1:4b:be:15:73:42:c4:e9:64:66:4e:4a:ea:9f: 7f:cb:15:8b:66:f9:f0:3f:3a:9d:ba:4c:a7:ab:99:52:54:2e: 8a:98:18:1b:a1:03:10:d0:6e:da:92:22:1a:ac:17:96:0d:5a: bd:e0:82:56:b9:7c:68:d6:53:2d:69:46:5a:a2:84:7a:f1:54: c0:89:4f:08:3d:eb:ad:f7:23:be:e2:ba:a8:89:82:dd:5f:4b: 7e:7b:d4:15:70:b1:cb:65:5f:5c:86:d3:fb:81:ee:8d:69:22: e7:61:92:05:79:7c:26:d0:c7:15:96:7f:24:8a:70:84:d1:25: c2:15:58:61:c1:d7:fc:5e:a6:82:27:c0:2d:d8:fb:10:db:0c: 60:6e:e4:27 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS8JZqZ9yskZC3VKcx3y59f2BAmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQz NEM0OEFGMjAeFw0yNjAzMjQxMjA3MTJaFw0yNjAzMjcxNDE3MTJaMDMxMTAvBgNV BAMTKDM5QTlDMTAxODA5NkU5NkYwNzI5RDMwRjBDODlERUZDMTJCNjJBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrejqr/xkrRwJnfeMwILyddt/D YSpABwcmjQsiSjB0tGijip5QRBwNWsWrDzT0Lj7heOGO5j3WRfsP7XodFrAMr5aa laC3b1WMWHcsVzJcds3R3eO//5zNHB1IhZMGFzmMQGSeMi1H8/zi1ZrX9bo+5ort Eop6ai2AbG+OSVZeGlScC7HYNmhTZwBLr5iFHhMNzoy8wFBMbCHcUIjNA4YUmxPK YvQqKxOtsK8N6i38WnWtB+h2FGvMzRNqYQ6w38apz4nriLAug/03WOOtnIoQTGBr YPRbbkC/TMWLb1oPsvDTcKnAq5fca9nETxhArtpK4qHPzn4AgyEhvVw1FoxFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOanBAYCW6W8HKdMPDIne/BK2KiYwHwYDVR0j BBgwFoAUREPkMjnT9blnTy9bWjdxFDTEivIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmM4YjNhOS00ZWZmLTQ2MGQtYjAxZC02YmE1ZDk5ZGFkYjkvMC80NDQzRTQzMjM5 RDNGNUI5Njc0RjJGNUI1QTM3NzExNDM0QzQ4QUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcxMTQzNEM0 OEFGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZjOGIzYTktNGVmZi00NjBkLWIw MWQtNmJhNWQ5OWRhZGI5LzAvNDQ0M0U0MzIzOUQzRjVCOTY3NEYyRjVCNUEzNzcx MTQzNEM0OEFGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjnBec94i9fViMfGUf1p3qvxH5md4l1WXNl ZDM3+uchV6bGfm1cLXp9Fugl2iLRqxYpIUNPbTk2atdBqXjBQAYgakYlmwdMVbn1 JdE8Cpveq3SMgSUzL/fU8w+C0wgSFeFmX3FfYG372UK9MQeBPIihS74Vc0LE6WRm Tkrqn3/LFYtm+fA/Op26TKermVJULoqYGBuhAxDQbtqSIhqsF5YNWr3ggla5fGjW Uy1pRlqihHrxVMCJTwg96633I77iuqiJgt1fS3571BVwsctlX1yG0/uB7o1pIudh kgV5fCbQxxWWfySKcITRJcIVWGHB1/xepoInwC3Y+xDbDGBu5Cc= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:43 2026 by rpki-client