$ rpki-client -vvf repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft File: C453630F1ABE5FF992F948A75DB4587776AD02EC.mft (raw, json) Hash identifier: CHkcuorWTF2NAHfK8WuGpBxnwzByuDjyNSPSd8YxOF0= Subject key identifier: 0F:13:31:47:6F:33:96:83:19:CA:E4:AB:59:5E:B8:81:43:4F:ED:E9 Authority key identifier: C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC Certificate issuer: /CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Certificate serial: 5ACBFF0F883E7C34A7104D591114440A816052D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft Manifest number: 0133 Signing time: Tue 24 Mar 2026 16:41:14 +0000 Manifest this update: Tue 24 Mar 2026 16:36:14 +0000 Manifest next update: Fri 27 Mar 2026 18:08:14 +0000 Files and hashes: 1: C453630F1ABE5FF992F948A75DB4587776AD02EC.crl (hash: yVNolW6e4WuWkYNKlGVIqoWQdbt5zqC28mGiCPdaVVQ=) 2: 3135372e32302e3230382e302f32332d3233203d3e20313532343136.roa (hash: kFM9XagTLVeF/sGlDUCUZ14HVmzZMiKnu7+2SeflELY=) 3: 3135372e32302e3230392e302f32342d3234203d3e20313532343136.roa (hash: oaGKSe8JVRVzK0Nu05QTTqIcQUaDRBiTc2piICJ18a4=) 4: 3135372e32302e3230382e302f32342d3234203d3e20313532343136.roa (hash: 716vJM2cf1KmVSltZ4kdYkr5L+szjmzfPhlXQuleSzI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:08:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:cb:ff:0f:88:3e:7c:34:a7:10:4d:59:11:14:44:0a:81:60:52:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C453630F1ABE5FF992F948A75DB4587776AD02EC Validity Not Before: Mar 24 16:36:14 2026 GMT Not After : Mar 27 18:08:14 2026 GMT Subject: CN=0F1331476F33968319CAE4AB595EB881434FEDE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:b1:6e:dd:0a:b2:51:3d:b4:08:31:57:28:37: 94:f5:90:b3:03:c1:0c:d1:bc:3c:21:c2:8c:28:07: 39:51:a6:6d:03:a2:bf:74:91:ac:ab:69:bd:7e:21: bb:c5:56:3c:1a:16:63:0b:6d:f8:b5:35:aa:5a:44: d6:74:87:01:af:06:0a:58:de:ec:e7:de:62:66:b6: ef:d5:fe:b2:d6:52:77:af:1c:9b:3f:0d:77:4a:1d: cd:9d:dc:f4:35:e6:fd:ea:a2:11:c5:5a:4a:41:85: d4:8c:34:75:cd:58:17:c8:b7:46:65:99:ee:50:82: c5:fd:b0:14:4e:03:22:e8:a7:37:11:2b:32:2e:7e: 6d:95:f5:e8:1d:2d:fc:a7:fc:54:e9:48:07:1e:06: fa:8a:bc:cb:3d:25:c3:47:82:54:ef:60:29:42:c1: fc:65:df:20:f8:7c:a5:84:21:ec:0d:cd:d7:f3:6d: b1:01:43:5e:52:27:dd:48:b5:aa:db:53:c2:38:08: 79:24:8f:47:47:83:97:52:2a:c4:18:82:f9:07:df: 21:a7:8b:88:26:20:3d:4a:ce:c9:e0:40:4b:ad:d5: f9:ca:10:b7:a7:7b:a5:e1:aa:eb:52:34:b0:18:db: b1:12:35:e3:a7:43:47:7e:5e:f4:9b:52:94:7f:43: 71:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:13:31:47:6F:33:96:83:19:CA:E4:AB:59:5E:B8:81:43:4F:ED:E9 X509v3 Authority Key Identifier: keyid:C4:53:63:0F:1A:BE:5F:F9:92:F9:48:A7:5D:B4:58:77:76:AD:02:EC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C453630F1ABE5FF992F948A75DB4587776AD02EC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dc4094d2-e18d-4840-84fa-c5757af580f1/0/C453630F1ABE5FF992F948A75DB4587776AD02EC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:38:9b:b2:f3:4e:d5:98:a9:3a:c9:19:07:43:77:da:39:df: b8:b8:07:f1:b7:42:b9:0b:b6:d4:02:f8:65:42:6a:2a:8f:fe: b1:65:68:86:44:e1:8b:aa:93:84:ea:c8:19:e4:94:9c:5c:d3: d9:f9:70:3e:c0:9c:75:4a:05:25:46:83:58:04:fe:b8:67:fe: 3d:20:52:e7:1d:e0:c3:0c:80:ff:d5:88:7b:e3:bb:53:79:ab: 83:9b:66:e0:97:4d:0d:d8:45:c7:f7:f5:c9:15:ca:66:cd:7d: 98:f2:b2:f6:b3:5b:d5:74:dc:1e:ab:13:c9:ee:a8:d2:1e:5f: 7c:5e:87:9f:84:8c:b5:78:4d:59:89:bc:78:46:b4:75:dd:8e: 7b:44:80:60:dd:b6:7d:0e:03:06:30:d4:34:ce:63:c7:a4:92: 97:1a:8f:4c:64:cc:e0:66:96:5b:17:87:3d:02:19:af:92:bf: 6a:88:a1:26:15:a8:6c:1a:f5:87:50:c8:35:d8:5d:b4:17:f4: 60:fa:e4:dd:ac:fd:59:bb:36:a1:0f:1f:69:5e:57:df:4d:f8: 3a:8f:ad:04:80:31:19:d8:56:db:63:6e:86:b5:bb:06:30:86: 97:5f:ba:d1:cb:a1:69:8d:4b:72:c2:77:84:57:67:99:18:75: 38:e1:f9:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWsv/D4g+fDSnEE1ZERRECoFgUtIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3 NkFEMDJFQzAeFw0yNjAzMjQxNjM2MTRaFw0yNjAzMjcxODA4MTRaMDMxMTAvBgNV BAMTKDBGMTMzMTQ3NkYzMzk2ODMxOUNBRTRBQjU5NUVCODgxNDM0RkVERTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXsW7dCrJRPbQIMVcoN5T1kLMD wQzRvDwhwowoBzlRpm0Dor90kayrab1+IbvFVjwaFmMLbfi1NapaRNZ0hwGvBgpY 3uzn3mJmtu/V/rLWUnevHJs/DXdKHc2d3PQ15v3qohHFWkpBhdSMNHXNWBfIt0Zl me5QgsX9sBROAyLopzcRKzIufm2V9egdLfyn/FTpSAceBvqKvMs9JcNHglTvYClC wfxl3yD4fKWEIewNzdfzbbEBQ15SJ91ItarbU8I4CHkkj0dHg5dSKsQYgvkH3yGn i4gmID1KzsngQEut1fnKELene6XhqutSNLAY27ESNeOnQ0d+XvSbUpR/Q3EbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDxMxR28zloMZyuSrWV64gUNP7ekwHwYDVR0j BBgwFoAUxFNjDxq+X/mS+UinXbRYd3atAuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YzQwOTRkMi1lMThkLTQ4NDAtODRmYS1jNTc1N2FmNTgwZjEvMC9DNDUzNjMwRjFB QkU1RkY5OTJGOTQ4QTc1REI0NTg3Nzc2QUQwMkVDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4Nzc3NkFE MDJFQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGM0MDk0ZDItZTE4ZC00ODQwLTg0 ZmEtYzU3NTdhZjU4MGYxLzAvQzQ1MzYzMEYxQUJFNUZGOTkyRjk0OEE3NURCNDU4 Nzc3NkFEMDJFQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE84m7LzTtWYqTrJGQdDd9o537i4B/G3QrkL ttQC+GVCaiqP/rFlaIZE4Yuqk4TqyBnklJxc09n5cD7AnHVKBSVGg1gE/rhn/j0g Uucd4MMMgP/ViHvju1N5q4ObZuCXTQ3YRcf39ckVymbNfZjysvazW9V03B6rE8nu qNIeX3xeh5+EjLV4TVmJvHhGtHXdjntEgGDdtn0OAwYw1DTOY8ekkpcaj0xkzOBm llsXhz0CGa+Sv2qIoSYVqGwa9YdQyDXYXbQX9GD65N2s/Vm7NqEPH2leV99N+DqP rQSAMRnYVttjboa1uwYwhpdfutHLoWmNS3LCd4RXZ5kYdTjh+c0= -----END CERTIFICATE-----Generated at Thu Mar 26 21:15:38 2026 by rpki-client