$ rpki-client -vvf repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft File: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft (raw, json) Hash identifier: MeJAROOUbb2F7HgNZxmH6og7EJ16Ao5ILxsyPjmEQek= Subject key identifier: 02:C4:05:AE:43:EE:C9:4F:35:42:2E:8F:1C:4E:DC:91:9A:91:55:75 Authority key identifier: F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C Certificate issuer: /CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Certificate serial: 629C0D0803FDB62942FC6AC91BD3097F06AEC6F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft Manifest number: 012E Signing time: Thu 26 Mar 2026 09:01:13 +0000 Manifest this update: Thu 26 Mar 2026 08:56:13 +0000 Manifest next update: Sun 29 Mar 2026 18:29:13 +0000 Files and hashes: 1: F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl (hash: 8nLnE5IOIpw4LO6vg7mFv1Yj1Nmhp4JVknUp9KDhcTQ=) 2: 3135372e36362e38342e302f32332d3234203d3e20313339393831.roa (hash: e0KMuAk3wKVRfXy4hiXD02tyuukRyMl2I0WHnvKBFvM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:23:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:9c:0d:08:03:fd:b6:29:42:fc:6a:c9:1b:d3:09:7f:06:ae:c6:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C Validity Not Before: Mar 26 08:56:13 2026 GMT Not After : Mar 29 18:29:13 2026 GMT Subject: CN=02C405AE43EEC94F35422E8F1C4EDC919A915575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:4c:47:d6:ea:14:fe:a8:36:49:90:98:63:c6: df:79:7d:4a:1a:90:27:be:f6:0e:d1:a4:96:a7:a2: f5:81:52:d2:06:ac:9d:91:8b:b0:b0:19:bb:21:38: 0c:cd:df:aa:0f:24:8c:63:cd:55:96:3c:2d:ea:df: a3:b7:02:b4:56:7e:80:6c:5e:c1:95:0c:10:61:d4: 69:e6:9b:af:56:b8:81:6d:cf:17:af:1e:89:21:64: cd:98:b1:b7:ff:f4:77:fd:b1:61:1a:44:94:2d:cc: 15:36:41:7c:02:fc:89:68:be:1c:6c:aa:de:0c:0a: 4b:6a:e7:88:ac:96:db:20:91:40:1a:92:7c:91:21: 7a:99:57:11:c4:6f:4d:50:5a:c1:de:a8:85:39:db: f8:7b:a8:29:73:cb:db:26:ac:75:8d:c0:d5:34:70: cd:cb:65:1f:b4:8b:ad:43:17:35:97:11:34:60:34: ec:09:41:a3:72:98:62:aa:36:59:55:ac:e7:d9:82: bf:eb:ad:43:63:7d:cd:ec:27:03:36:30:5f:0e:5a: 25:f7:e8:c8:24:c1:59:f7:5a:34:c1:cc:52:9d:98: bf:9f:f8:a3:d0:54:39:ea:0a:92:26:b3:77:e7:e4: 09:3c:76:32:04:42:fa:a2:94:53:7e:54:9e:29:02: 1e:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C4:05:AE:43:EE:C9:4F:35:42:2E:8F:1C:4E:DC:91:9A:91:55:75 X509v3 Authority Key Identifier: keyid:F4:D9:C6:C3:E2:65:3E:53:E4:54:9E:CD:7B:0E:43:26:FE:95:6B:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e97c682a-448b-40e2-a88f-16df83dd3337/0/F4D9C6C3E2653E53E4549ECD7B0E4326FE956B4C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:72:69:93:55:87:ac:62:4e:49:6a:06:f2:36:59:c1:bc:92: 4e:a0:6f:50:11:91:47:70:3d:f2:3b:6c:58:3e:d1:37:a4:30: eb:ff:aa:8b:28:9e:13:29:93:69:09:75:d0:32:63:3d:79:b0: 23:bd:b2:37:d3:b4:f2:7a:d0:13:2b:51:55:2e:d4:32:b7:ef: 35:06:e9:fa:92:06:9e:6d:33:7e:b2:e1:d9:d0:82:1b:b3:58: 55:b7:a9:9a:e4:57:c7:0b:9b:03:e5:d2:95:c3:40:a2:03:be: c6:23:2a:29:2e:d4:5e:27:05:16:b5:d0:0a:b5:95:71:a8:ff: 71:ef:76:e9:d8:98:4d:ea:04:da:ab:fe:58:94:a8:3a:50:8f: f8:ad:b8:c4:a5:eb:0f:cb:5d:48:39:14:96:ff:f4:13:a9:e6: af:b8:70:e7:85:d8:35:ca:63:80:dd:b3:c7:8c:bd:e0:ac:01: 2a:3c:96:ef:01:b8:7c:cf:df:83:f9:73:75:d2:e0:51:a0:3c: f8:62:3b:53:4f:83:e8:cf:d9:bb:9e:62:7b:48:4a:3d:a3:eb: d7:2a:f7:3e:d0:0f:32:0b:8c:19:28:bb:a3:08:2c:34:10:73: 89:27:d5:d9:ff:3b:9f:df:60:8a:7a:18:1a:6c:cd:19:1f:f2: 9b:e1:74:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpwNCAP9tilC/GrJG9MJfwauxvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZG RTk1NkI0QzAeFw0yNjAzMjYwODU2MTNaFw0yNjAzMjkxODI5MTNaMDMxMTAvBgNV BAMTKDAyQzQwNUFFNDNFRUM5NEYzNTQyMkU4RjFDNEVEQzkxOUE5MTU1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdTEfW6hT+qDZJkJhjxt95fUoa kCe+9g7RpJanovWBUtIGrJ2Ri7CwGbshOAzN36oPJIxjzVWWPC3q36O3ArRWfoBs XsGVDBBh1Gnmm69WuIFtzxevHokhZM2Ysbf/9Hf9sWEaRJQtzBU2QXwC/Ilovhxs qt4MCktq54isltsgkUAaknyRIXqZVxHEb01QWsHeqIU52/h7qClzy9smrHWNwNU0 cM3LZR+0i61DFzWXETRgNOwJQaNymGKqNllVrOfZgr/rrUNjfc3sJwM2MF8OWiX3 6MgkwVn3WjTBzFKdmL+f+KPQVDnqCpIms3fn5Ak8djIEQvqilFN+VJ4pAh41AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsQFrkPuyU81Qi6PHE7ckZqRVXUwHwYDVR0j BBgwFoAU9NnGw+JlPlPkVJ7New5DJv6Va0wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OTdjNjgyYS00NDhiLTQwZTItYTg4Zi0xNmRmODNkZDMzMzcvMC9GNEQ5QzZDM0Uy NjUzRTUzRTQ1NDlFQ0Q3QjBFNDMyNkZFOTU2QjRDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQzMjZGRTk1 NkI0Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTk3YzY4MmEtNDQ4Yi00MGUyLWE4 OGYtMTZkZjgzZGQzMzM3LzAvRjREOUM2QzNFMjY1M0U1M0U0NTQ5RUNEN0IwRTQz MjZGRTk1NkI0Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADpyaZNVh6xiTklqBvI2WcG8kk6gb1ARkUdw PfI7bFg+0TekMOv/qosonhMpk2kJddAyYz15sCO9sjfTtPJ60BMrUVUu1DK37zUG 6fqSBp5tM36y4dnQghuzWFW3qZrkV8cLmwPl0pXDQKIDvsYjKiku1F4nBRa10Aq1 lXGo/3HvdunYmE3qBNqr/liUqDpQj/ituMSl6w/LXUg5FJb/9BOp5q+4cOeF2DXK Y4Dds8eMveCsASo8lu8BuHzP34P5c3XS4FGgPPhiO1NPg+jP2bueYntISj2j69cq 9z7QDzILjBkou6MILDQQc4kn1dn/O5/fYIp6GBpszRkf8pvhdIA= -----END CERTIFICATE-----Generated at Thu Mar 26 18:29:16 2026 by rpki-client