$ rpki-client -vvf repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft File: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft (raw, json) Hash identifier: RBpBjpEHTebxaJQkPlzVaBSVMXbKv1/KaoHBHrxdXdA= Subject key identifier: 83:F5:AD:08:A5:B5:03:4F:94:B4:D5:04:E5:F0:55:8F:EB:E3:FF:83 Authority key identifier: 43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E Certificate issuer: /CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Certificate serial: 303C7A3C98F742F0994FD711C77DE7EF93325417 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft Manifest number: 04A9 Signing time: Wed 25 Mar 2026 09:20:49 +0000 Manifest this update: Wed 25 Mar 2026 09:15:49 +0000 Manifest next update: Sat 28 Mar 2026 14:47:49 +0000 Files and hashes: 1: 3130332e3233332e3130322e302f32332d3234203d3e20313336313037.roa (hash: D5BixYr4AJU/MS7TZCW/5jRqwcOMx/QjB3M/Uu6XanU=) 2: 3130332e3131322e3234342e302f32332d3234203d3e20313336313037.roa (hash: iey0oG1qHYOzJhbqWTH39EDQ0pZ3GLohA4EPTGiKvsg=) 3: 439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl (hash: 4M/rlDcgeHXOQWyus60tEoBPYYQMnlfEs2zSn5VNaVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 14:47:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:3c:7a:3c:98:f7:42:f0:99:4f:d7:11:c7:7d:e7:ef:93:32:54:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=439A4981549ABB151B12D6EC85FC8D0DBF99A81E Validity Not Before: Mar 25 09:15:49 2026 GMT Not After : Mar 28 14:47:49 2026 GMT Subject: CN=83F5AD08A5B5034F94B4D504E5F0558FEBE3FF83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:ee:22:68:ff:cc:9f:f8:a2:d5:8b:7e:ec:13: 1c:f5:68:b0:c7:24:d2:29:00:91:de:f8:0b:7f:8e: ff:28:5e:ce:46:2b:38:ab:d3:86:96:30:4a:4d:59: e8:fb:fd:51:3b:f4:ed:a6:00:57:29:a7:40:31:58: ba:de:27:4f:81:74:a6:e0:c5:00:71:bf:bb:45:5f: c9:a9:9e:2d:54:59:d7:3e:6e:26:5a:0d:0a:61:9f: eb:25:3d:65:79:f1:38:dc:11:ad:d4:45:6f:7d:1f: 5d:14:d0:87:36:7e:2e:e1:71:24:4c:de:ee:ff:39: 11:81:25:2a:a4:c1:f1:4a:31:de:4f:14:db:ae:85: 20:dc:60:7a:48:00:72:ef:67:8f:d7:1d:87:5e:f6: e4:a0:53:70:ab:2e:3d:9f:fd:6f:4d:66:0d:4c:00: 18:c3:8d:e4:69:8d:3d:7a:3b:77:61:52:d1:84:67: a3:b5:23:cd:0e:e8:24:28:ee:85:52:d8:4e:10:61: 49:04:71:4f:46:9b:8e:7d:22:4e:29:6f:63:44:89: a5:1c:1a:ae:a8:8a:2c:cc:d3:c6:f7:93:e4:4a:3c: f4:9f:31:4e:ef:68:67:3b:8d:7f:4b:ce:14:50:6a: a3:15:88:c3:71:b3:be:17:ae:e8:32:e1:85:cf:e9: 70:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:F5:AD:08:A5:B5:03:4F:94:B4:D5:04:E5:F0:55:8F:EB:E3:FF:83 X509v3 Authority Key Identifier: keyid:43:9A:49:81:54:9A:BB:15:1B:12:D6:EC:85:FC:8D:0D:BF:99:A8:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea47231f-02dd-49e8-aa25-2d54c0a999ca/0/439A4981549ABB151B12D6EC85FC8D0DBF99A81E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:17:08:b6:5f:88:a8:6a:8b:76:fc:b7:d9:8e:2b:bc:d9:a5: e9:61:ac:63:22:0c:94:b4:b9:2d:ae:bd:cf:0e:6c:57:95:dd: 71:a7:ab:eb:cb:d7:b5:64:30:11:9e:72:70:bd:0d:15:f6:e1: ed:ce:5e:7f:a6:78:fa:f1:7e:b1:d8:68:88:98:08:e3:80:7f: a5:bd:9d:da:c0:05:ac:a2:03:23:ea:17:ff:48:a5:0d:eb:f5: ab:f2:b4:a8:c2:ea:e5:f6:2b:1f:30:df:0b:f6:31:d5:70:3b: 5c:21:23:c1:10:bb:6e:0b:dd:aa:b9:3a:41:f4:96:9a:54:0a: cd:bc:04:74:5f:2d:5c:e4:2e:4d:de:ef:bc:0c:b7:b1:66:e7: ff:9c:86:9c:22:47:9a:2f:14:01:5e:eb:e6:f6:d0:96:46:12: da:63:78:c3:cd:8a:1b:ba:55:55:76:4a:5e:f1:db:b5:68:52: 81:f5:df:35:62:f8:06:b6:ea:5d:c0:3b:d0:e0:2c:8e:1a:7d: 22:f5:67:f9:fc:9b:cb:b9:4f:5b:d5:8f:15:4b:bb:15:c9:96: 18:27:06:45:6f:65:92:a2:33:f9:58:93:bd:96:0c:d8:81:5b: c8:f1:be:70:7d:eb:09:20:68:22:dd:d1:65:7a:33:1d:57:88: 00:43:bf:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMDx6PJj3QvCZT9cRx33n75MyVBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERC Rjk5QTgxRTAeFw0yNjAzMjUwOTE1NDlaFw0yNjAzMjgxNDQ3NDlaMDMxMTAvBgNV BAMTKDgzRjVBRDA4QTVCNTAzNEY5NEI0RDUwNEU1RjA1NThGRUJFM0ZGODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX7iJo/8yf+KLVi37sExz1aLDH JNIpAJHe+At/jv8oXs5GKzir04aWMEpNWej7/VE79O2mAFcpp0AxWLreJ0+BdKbg xQBxv7tFX8mpni1UWdc+biZaDQphn+slPWV58TjcEa3URW99H10U0Ic2fi7hcSRM 3u7/ORGBJSqkwfFKMd5PFNuuhSDcYHpIAHLvZ4/XHYde9uSgU3CrLj2f/W9NZg1M ABjDjeRpjT16O3dhUtGEZ6O1I80O6CQo7oVS2E4QYUkEcU9Gm459Ik4pb2NEiaUc Gq6oiizM08b3k+RKPPSfMU7vaGc7jX9LzhRQaqMViMNxs74Xrugy4YXP6XCDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg/WtCKW1A0+UtNUE5fBVj+vj/4MwHwYDVR0j BBgwFoAUQ5pJgVSauxUbEtbshfyNDb+ZqB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l YTQ3MjMxZi0wMmRkLTQ5ZTgtYWEyNS0yZDU0YzBhOTk5Y2EvMC80MzlBNDk4MTU0 OUFCQjE1MUIxMkQ2RUM4NUZDOEQwREJGOTlBODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhEMERCRjk5 QTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWE0NzIzMWYtMDJkZC00OWU4LWFh MjUtMmQ1NGMwYTk5OWNhLzAvNDM5QTQ5ODE1NDlBQkIxNTFCMTJENkVDODVGQzhE MERCRjk5QTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIXCLZfiKhqi3b8t9mOK7zZpelhrGMiDJS0 uS2uvc8ObFeV3XGnq+vL17VkMBGecnC9DRX24e3OXn+mePrxfrHYaIiYCOOAf6W9 ndrABayiAyPqF/9IpQ3r9avytKjC6uX2Kx8w3wv2MdVwO1whI8EQu24L3aq5OkH0 lppUCs28BHRfLVzkLk3e77wMt7Fm5/+chpwiR5ovFAFe6+b20JZGEtpjeMPNihu6 VVV2Sl7x27VoUoH13zVi+Aa26l3AO9DgLI4afSL1Z/n8m8u5T1vVjxVLuxXJlhgn BkVvZZKiM/lYk72WDNiBW8jxvnB96wkgaCLd0WV6Mx1XiABDvz0= -----END CERTIFICATE-----Generated at Thu Mar 26 10:10:10 2026 by rpki-client