$ rpki-client -vvf repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft File: 4AA75AF77EC48924696455B9F02192353D9C4014.mft (raw, json) Hash identifier: LGTIjc+65Aa2Agcp3TxLBTseUBX94979hdYsUvkLSp8= Subject key identifier: 14:75:0C:14:90:BB:C7:A9:8A:31:B6:AE:F7:02:9A:71:30:D5:C8:57 Authority key identifier: 4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 Certificate issuer: /CN=4AA75AF77EC48924696455B9F02192353D9C4014 Certificate serial: 4B2C6EC844F5F177B49C8E14F05543250E9154BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft Manifest number: 0112 Signing time: Tue 24 Mar 2026 13:41:26 +0000 Manifest this update: Tue 24 Mar 2026 13:36:26 +0000 Manifest next update: Fri 27 Mar 2026 16:05:26 +0000 Files and hashes: 1: 3130332e3136322e37322e302f32342d3234203d3e20313431363436.roa (hash: AbwriW0SgoijAVFc1a2C3A7Illyl/gL1e8q6s9TC+bw=) 2: 4AA75AF77EC48924696455B9F02192353D9C4014.crl (hash: ZJE8OxKFPIHXCv9OLN/RQ2IqbsNaOGYfNOQSbXuUrlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 16:05:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:2c:6e:c8:44:f5:f1:77:b4:9c:8e:14:f0:55:43:25:0e:91:54:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA75AF77EC48924696455B9F02192353D9C4014 Validity Not Before: Mar 24 13:36:26 2026 GMT Not After : Mar 27 16:05:26 2026 GMT Subject: CN=14750C1490BBC7A98A31B6AEF7029A7130D5C857 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:d4:f1:2f:dd:ff:71:38:19:a8:9a:3c:79: 4d:59:e6:bc:9c:45:2d:72:50:55:1d:91:79:de:23: 1a:83:55:28:1c:60:cc:3a:71:96:14:81:7d:48:d2: c2:a2:f2:46:2d:9a:45:ab:28:5e:1e:1d:70:d4:a6: 28:9e:6e:44:75:a1:c0:96:ab:3e:ef:4a:7f:d2:cd: d9:b4:25:50:71:ff:e5:5f:56:3c:80:98:33:ce:75: 62:59:6d:23:49:e0:27:85:55:9e:07:de:7a:50:1b: b9:33:88:b8:c2:14:00:56:aa:c4:e3:4e:aa:29:5f: 1b:81:98:08:71:5e:81:ce:f2:32:b1:7c:24:23:a9: 37:7f:91:0b:46:e7:ed:e2:c1:9b:90:52:e5:7c:f7: 2f:c8:e6:93:5e:1a:53:89:b9:38:f8:ec:5e:39:51: 8f:16:af:9c:d8:94:bd:c8:08:1c:e1:5e:ac:b8:9e: e7:ce:f8:3f:11:2b:91:ab:b5:ca:bd:98:51:9d:d0: 2c:6e:f5:24:db:d7:e5:fe:ba:f1:bf:9e:bc:b4:9c: 38:be:be:bd:2a:68:97:a6:fa:ce:cd:70:d3:58:65: 5c:bf:98:43:b2:72:8e:0b:b8:89:e4:43:c6:11:35: 9b:e2:19:f7:e0:99:44:92:8c:c0:7f:91:b3:7f:34: af:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:75:0C:14:90:BB:C7:A9:8A:31:B6:AE:F7:02:9A:71:30:D5:C8:57 X509v3 Authority Key Identifier: keyid:4A:A7:5A:F7:7E:C4:89:24:69:64:55:B9:F0:21:92:35:3D:9C:40:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA75AF77EC48924696455B9F02192353D9C4014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1f29aba-6d7c-4435-953c-604988731596/0/4AA75AF77EC48924696455B9F02192353D9C4014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:41:71:2e:ed:72:6c:83:2a:ba:21:8c:07:61:f5:ae:4f:57: 13:0c:be:43:51:e1:9c:97:3e:46:01:1d:f2:f7:8a:05:68:da: fe:a4:12:25:95:8d:1b:4c:75:6a:7a:d9:aa:ff:9c:1c:be:16: 37:32:c2:5c:d5:ce:2d:3d:26:27:2a:27:93:65:2d:9d:17:72: d0:ad:ff:d9:1c:bd:33:b3:88:c5:eb:9d:32:f2:b2:f8:86:7e: 1e:11:7f:e7:3f:0c:f0:47:ad:66:57:56:b9:76:95:f9:63:42: 55:03:20:59:60:b6:1a:d2:03:bf:d7:d0:d0:dc:a4:4b:5c:aa: b7:d4:df:44:65:d4:8a:14:8e:fa:45:73:b4:7c:17:d5:2e:68: dc:2a:92:9a:e1:cc:5d:e6:47:8f:d8:e2:d2:15:56:03:6d:0f: 5c:45:a7:bf:75:34:74:cf:d5:e3:9a:f8:4e:80:73:e0:e0:16: 20:45:fb:26:c8:b4:0f:db:41:e5:75:74:3c:3d:5b:61:07:9d: 54:b7:4f:bc:10:3b:e7:93:a3:cf:6f:97:1a:83:c9:6d:ec:c0: 1f:87:94:5a:e6:0e:f7:ac:d9:66:01:c9:7b:f6:69:05:6c:64: 89:b5:14:12:ae:bf:54:ec:13:ff:ec:63:bb:0b:74:0b:50:6e: a9:21:e9:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyxuyET18Xe0nI4U8FVDJQ6RVLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUz RDlDNDAxNDAeFw0yNjAzMjQxMzM2MjZaFw0yNjAzMjcxNjA1MjZaMDMxMTAvBgNV BAMTKDE0NzUwQzE0OTBCQkM3QTk4QTMxQjZBRUY3MDI5QTcxMzBENUM4NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPdTxL93/cTgZqJo8eU1Z5ryc RS1yUFUdkXneIxqDVSgcYMw6cZYUgX1I0sKi8kYtmkWrKF4eHXDUpiiebkR1ocCW qz7vSn/Szdm0JVBx/+VfVjyAmDPOdWJZbSNJ4CeFVZ4H3npQG7kziLjCFABWqsTj TqopXxuBmAhxXoHO8jKxfCQjqTd/kQtG5+3iwZuQUuV89y/I5pNeGlOJuTj47F45 UY8Wr5zYlL3ICBzhXqy4nufO+D8RK5Grtcq9mFGd0Cxu9STb1+X+uvG/nry0nDi+ vr0qaJem+s7NcNNYZVy/mEOyco4LuInkQ8YRNZviGffgmUSSjMB/kbN/NK+zAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFHUMFJC7x6mKMbau9wKacTDVyFcwHwYDVR0j BBgwFoAUSqda937EiSRpZFW58CGSNT2cQBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWYyOWFiYS02ZDdjLTQ0MzUtOTUzYy02MDQ5ODg3MzE1OTYvMC80QUE3NUFGNzdF QzQ4OTI0Njk2NDU1QjlGMDIxOTIzNTNEOUM0MDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTkyMzUzRDlD NDAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFmMjlhYmEtNmQ3Yy00NDM1LTk1 M2MtNjA0OTg4NzMxNTk2LzAvNEFBNzVBRjc3RUM0ODkyNDY5NjQ1NUI5RjAyMTky MzUzRDlDNDAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJBcS7tcmyDKrohjAdh9a5PVxMMvkNR4ZyX PkYBHfL3igVo2v6kEiWVjRtMdWp62ar/nBy+FjcywlzVzi09JicqJ5NlLZ0XctCt /9kcvTOziMXrnTLysviGfh4Rf+c/DPBHrWZXVrl2lfljQlUDIFlgthrSA7/X0NDc pEtcqrfU30Rl1IoUjvpFc7R8F9UuaNwqkprhzF3mR4/Y4tIVVgNtD1xFp791NHTP 1eOa+E6Ac+DgFiBF+ybItA/bQeV1dDw9W2EHnVS3T7wQO+eTo89vlxqDyW3swB+H lFrmDves2WYByXv2aQVsZIm1FBKuv1TsE//sY7sLdAtQbqkh6SM= -----END CERTIFICATE-----Generated at Thu Mar 26 16:08:24 2026 by rpki-client