$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft File: 157748842D6BEE36DEE3B1999F10079808FF41C0.mft (raw, json) Hash identifier: QpWdi30mRXH+2cHY6T9PyMEniHvyUjrtCJuClgZXRSM= Subject key identifier: 80:F6:D9:4F:81:2A:F5:5D:9D:E0:CE:E5:00:F6:5D:22:B1:E3:5D:26 Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 Certificate issuer: /CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Certificate serial: 4B9CAA8304D7208A51BE77ABBD697D50EBD7DEA0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft Manifest number: 04C9 Signing time: Wed 25 Mar 2026 15:40:50 +0000 Manifest this update: Wed 25 Mar 2026 15:35:50 +0000 Manifest next update: Sun 29 Mar 2026 00:08:50 +0000 Files and hashes: 1: 3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (hash: CxideEppeSjpo62C99uXU/oA6ba7hNbNjMc3zZT0ZTs=) 2: 323030313a6466323a653738303a3a2f34382d3438203d3e20313430303037.roa (hash: jgb2KRsuI5sH5Sgi65VzcufFYSZmw1Ts7grqbrjUoVw=) 3: 157748842D6BEE36DEE3B1999F10079808FF41C0.crl (hash: y1h/HnTkM9wLroCeiH7AwToTQ4zr85eG97ImYt39mXM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:9c:aa:83:04:d7:20:8a:51:be:77:ab:bd:69:7d:50:eb:d7:de:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0 Validity Not Before: Mar 25 15:35:50 2026 GMT Not After : Mar 29 00:08:50 2026 GMT Subject: CN=80F6D94F812AF55D9DE0CEE500F65D22B1E35D26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:25:b5:6a:d7:85:4d:0b:7c:a4:be:11:47:81: 1d:c8:2f:92:3e:62:75:8a:b6:32:05:24:1c:48:a3: 09:a6:8b:01:38:c1:02:f5:68:1c:18:29:19:89:c2: 0b:92:8a:2b:20:29:6b:08:48:a5:be:71:25:a6:fd: 3f:87:3d:e0:d2:66:47:36:51:a4:ba:68:e6:c4:d2: 0a:98:6c:2f:40:e5:35:5c:e7:6a:e1:96:49:3d:e6: c2:02:83:7d:a6:87:ba:72:eb:2c:9e:1a:b9:ca:ae: ae:0b:66:32:81:9d:8d:f8:79:bd:68:1e:f4:f2:fd: 7f:97:9e:84:eb:0a:a0:9c:a0:63:83:25:0e:04:57: 66:26:36:4c:8e:76:e4:94:dc:b0:46:62:c7:ec:8f: 4f:a0:a8:00:17:90:aa:d9:5e:8b:2f:9f:5c:0e:b1: 9d:db:34:09:9a:47:54:5e:0d:82:ac:4a:5d:46:1b: e0:e1:45:f7:8e:9f:a2:f9:c8:e7:6c:74:9e:85:48: 89:c5:9e:86:aa:03:11:0c:52:71:55:55:76:5b:03: 14:4a:3f:d1:6e:40:62:63:77:df:1b:34:e9:a0:61: 3d:7b:40:12:e3:a1:b7:f5:f3:13:f8:e4:3c:f9:91: 53:24:5d:22:bf:42:9f:02:38:a8:32:08:c7:f1:fe: e7:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:F6:D9:4F:81:2A:F5:5D:9D:E0:CE:E5:00:F6:5D:22:B1:E3:5D:26 X509v3 Authority Key Identifier: keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1d:ea:47:77:5b:1f:f8:39:7e:48:eb:09:7b:1b:7e:f5:ec: 64:71:d3:81:ed:49:20:ae:23:d9:f8:1a:71:a3:31:f8:b4:c8: 7a:fd:e5:93:72:34:aa:72:ca:7c:69:1e:42:56:25:ac:15:3b: 18:62:a1:a3:12:e6:ba:a8:0f:15:79:c4:34:b3:96:c2:c6:cc: c5:80:c9:a3:d9:8b:ef:f0:7a:7b:38:d0:0e:3d:5f:71:61:7d: d4:4c:7e:48:66:ee:bd:be:22:1b:82:bf:79:a7:74:ae:39:34: 5b:5c:71:25:66:33:be:1f:ff:b0:8e:74:43:f2:22:59:c9:0d: b3:3c:32:9e:e1:ce:3c:d4:3b:6f:f1:9c:e4:d4:09:a3:95:a0: 64:87:28:b1:b8:6f:9e:76:fb:b9:3a:62:e9:71:f9:7a:2d:52: 53:01:97:a6:96:0d:96:47:18:12:60:95:fb:9d:ba:32:59:38: bd:e8:1b:cc:66:85:ab:a7:2b:b5:04:ff:38:b5:3b:d0:f2:86: 56:b0:63:4b:0e:ac:1f:9a:93:36:f1:22:35:73:3f:46:38:7b: 4a:02:ef:1a:d0:47:95:d2:05:bf:88:f2:28:83:44:36:8a:82: d5:e0:6c:bc:10:c7:55:fb:f7:30:4c:fd:70:dc:a5:70:bd:39: f0:83:96:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS5yqgwTXIIpRvnervWl9UOvX3qAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw OEZGNDFDMDAeFw0yNjAzMjUxNTM1NTBaFw0yNjAzMjkwMDA4NTBaMDMxMTAvBgNV BAMTKDgwRjZEOTRGODEyQUY1NUQ5REUwQ0VFNTAwRjY1RDIyQjFFMzVEMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGJbVq14VNC3ykvhFHgR3IL5I+ YnWKtjIFJBxIowmmiwE4wQL1aBwYKRmJwguSiisgKWsISKW+cSWm/T+HPeDSZkc2 UaS6aObE0gqYbC9A5TVc52rhlkk95sICg32mh7py6yyeGrnKrq4LZjKBnY34eb1o HvTy/X+XnoTrCqCcoGODJQ4EV2YmNkyOduSU3LBGYsfsj0+gqAAXkKrZXosvn1wO sZ3bNAmaR1ReDYKsSl1GG+DhRfeOn6L5yOdsdJ6FSInFnoaqAxEMUnFVVXZbAxRK P9FuQGJjd98bNOmgYT17QBLjobf18xP45Dz5kVMkXSK/Qp8COKgyCMfx/udRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgPbZT4Eq9V2d4M7lAPZdIrHjXSYwHwYDVR0j BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG NDFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ2ZjVhMDUtMzJiNS00ZDNjLWI0 ZTAtYWJkZGNmNzNmNWU5LzAvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3 OTgwOEZGNDFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEd6kd3Wx/4OX5I6wl7G3717GRx04HtSSCu I9n4GnGjMfi0yHr95ZNyNKpyynxpHkJWJawVOxhioaMS5rqoDxV5xDSzlsLGzMWA yaPZi+/wens40A49X3FhfdRMfkhm7r2+IhuCv3mndK45NFtccSVmM74f/7COdEPy IlnJDbM8Mp7hzjzUO2/xnOTUCaOVoGSHKLG4b552+7k6Yulx+XotUlMBl6aWDZZH GBJglfudujJZOL3oG8xmhaunK7UE/zi1O9DyhlawY0sOrB+akzbxIjVzP0Y4e0oC 7xrQR5XSBb+I8iiDRDaKgtXgbLwQx1X79zBM/XDcpXC9OfCDlro= -----END CERTIFICATE-----Generated at Thu Mar 26 12:56:04 2026 by rpki-client