$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: yfIkbd8/hXsJfep0m6zYhK/su087RMzCB0mTiQsjEFE= Subject key identifier: BF:E4:E1:3F:07:D0:52:FB:72:AB:AD:35:6C:FE:99:04:BF:E2:C7:A7 Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 49AA58DA483D7BF992588E66BDF96FEE30E1AB51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01F7 Signing time: Wed 25 Mar 2026 05:41:11 +0000 Manifest this update: Wed 25 Mar 2026 05:36:11 +0000 Manifest next update: Sat 28 Mar 2026 15:44:11 +0000 Files and hashes: 1: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: BXD0wRHHvZ7tvUsCrEkeYNeQx/wQOvq3rapVAJZzAJs=) 2: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: rH0fN7H5DruW771eActONkR/AVS0U/Pdf7t/pXddG2Q=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: N89QBdgbynlTPf9e92O0WSzi8E87JnEMSvR4tVBmXXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 15:44:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:aa:58:da:48:3d:7b:f9:92:58:8e:66:bd:f9:6f:ee:30:e1:ab:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Mar 25 05:36:11 2026 GMT Not After : Mar 28 15:44:11 2026 GMT Subject: CN=BFE4E13F07D052FB72ABAD356CFE9904BFE2C7A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:f7:32:2b:23:38:89:61:29:71:ff:18:e9:17: 15:67:ea:37:a7:20:25:a5:94:9b:f0:e6:0b:14:89: e9:25:25:b1:1e:4f:a8:8f:04:56:20:ea:35:47:c3: 48:9e:cf:03:46:5b:48:75:35:ce:bb:ec:04:d8:cb: bc:f1:4f:ad:e0:62:88:d7:cc:4f:6f:76:fd:9d:3d: a4:cc:8d:80:2e:7f:59:61:83:c4:39:41:bb:23:20: ea:7b:f0:97:27:57:91:9f:b8:3b:87:04:64:65:09: e8:56:8a:76:45:cb:4c:4a:01:2b:07:31:f5:7d:b2: 32:96:fd:39:db:d8:ec:0a:b3:ce:0d:e4:05:2c:e8: 7d:29:9d:ad:91:4f:63:95:34:5f:ce:5e:7c:69:3d: 08:7b:9c:cf:50:06:63:d2:05:c8:94:41:97:c7:14: b0:70:11:42:04:84:59:6b:fe:5c:0d:96:e6:69:45: a0:a4:ca:39:24:51:a8:6c:4d:6a:37:89:8e:35:79: 68:2e:8f:fa:da:50:de:a0:c8:5e:fe:b9:ce:c3:87: 90:51:3d:96:2a:cb:cc:7e:ca:1f:6b:27:f8:1c:db: 95:8b:43:3b:2e:f4:f2:ec:43:d2:ef:28:9d:e8:a9: 1a:22:e1:b5:4e:2b:ed:9f:dc:8f:fe:c2:23:22:0e: 02:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:E4:E1:3F:07:D0:52:FB:72:AB:AD:35:6C:FE:99:04:BF:E2:C7:A7 X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:ba:1d:fe:f6:0b:99:5e:fd:9d:d2:64:36:01:1e:c8:ad:a3: 9a:95:81:a4:d1:95:90:f2:9b:65:c1:41:b6:1f:7a:99:b7:db: e7:34:26:ae:de:b2:4d:09:17:fb:b1:94:1a:8e:af:b0:f6:8f: b4:e4:2c:01:5e:c9:5e:e1:6a:33:0c:52:c1:6a:5c:d9:9e:3c: eb:48:40:8c:bc:2e:44:a6:32:ad:7b:47:f5:cc:7e:08:83:c9: 6c:e7:3d:b7:cf:14:a2:7a:17:48:a6:1c:eb:17:aa:93:ee:17: 61:a1:b3:ac:9e:8b:fa:5b:46:51:1c:22:3f:9b:f1:f2:bb:c7: 90:76:4f:97:c4:25:dd:8e:5c:97:ec:2d:04:ce:49:db:ce:61: f0:7e:12:3c:f7:7c:05:1c:c8:ea:a0:fe:0e:14:bd:2b:b5:50: 8a:84:47:ac:f5:1d:5e:12:5e:05:d9:29:b8:49:f3:a0:af:0d: fa:66:b1:8c:80:81:c2:9d:b9:39:18:28:ac:c7:5c:fe:fa:1f: d1:3f:be:85:e6:d2:a4:18:22:0e:bb:71:c2:bc:82:92:28:62: 49:4a:d0:a7:3a:3e:95:c7:f1:4f:9b:54:40:ee:d3:b6:f4:f6: a7:31:e2:69:a3:84:fa:74:4d:e7:af:e3:44:cf:6f:74:d0:6c: c1:7f:fe:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSapY2kg9e/mSWI5mvflv7jDhq1EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNjAzMjUwNTM2MTFaFw0yNjAzMjgxNTQ0MTFaMDMxMTAvBgNV BAMTKEJGRTRFMTNGMDdEMDUyRkI3MkFCQUQzNTZDRkU5OTA0QkZFMkM3QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq9zIrIziJYSlx/xjpFxVn6jen ICWllJvw5gsUieklJbEeT6iPBFYg6jVHw0iezwNGW0h1Nc677ATYy7zxT63gYojX zE9vdv2dPaTMjYAuf1lhg8Q5QbsjIOp78JcnV5GfuDuHBGRlCehWinZFy0xKASsH MfV9sjKW/Tnb2OwKs84N5AUs6H0pna2RT2OVNF/OXnxpPQh7nM9QBmPSBciUQZfH FLBwEUIEhFlr/lwNluZpRaCkyjkkUahsTWo3iY41eWguj/raUN6gyF7+uc7Dh5BR PZYqy8x+yh9rJ/gc25WLQzsu9PLsQ9LvKJ3oqRoi4bVOK+2f3I/+wiMiDgLnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv+ThPwfQUvtyq601bP6ZBL/ix6cwHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGW6Hf72C5le/Z3SZDYBHsito5qVgaTRlZDy m2XBQbYfepm32+c0Jq7esk0JF/uxlBqOr7D2j7TkLAFeyV7hajMMUsFqXNmePOtI QIy8LkSmMq17R/XMfgiDyWznPbfPFKJ6F0imHOsXqpPuF2Ghs6yei/pbRlEcIj+b 8fK7x5B2T5fEJd2OXJfsLQTOSdvOYfB+Ejz3fAUcyOqg/g4UvSu1UIqER6z1HV4S XgXZKbhJ86CvDfpmsYyAgcKduTkYKKzHXP76H9E/voXm0qQYIg67ccK8gpIoYklK 0Kc6PpXH8U+bVEDu07b09qcx4mmjhPp0Teev40TPb3TQbMF//rY= -----END CERTIFICATE-----Generated at Thu Mar 26 10:57:00 2026 by rpki-client