$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: E5rHViAq0pow2tnItOaAgEPx7skft1SpyLlLZ/hZYjQ= Subject key identifier: 96:47:60:78:CE:17:55:B7:55:5F:44:D7:D2:B2:23:54:A4:FA:5C:29 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 43B8331313F0C6D8491F11565A786DAC38D4EA4B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 024E Signing time: Wed 25 Mar 2026 11:21:41 +0000 Manifest this update: Wed 25 Mar 2026 11:16:41 +0000 Manifest next update: Sat 28 Mar 2026 19:34:41 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: lEPJD0OmCbgc+4ckYtVTfEdCaRMrimsgZKLxGtyQN3w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:34:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b8:33:13:13:f0:c6:d8:49:1f:11:56:5a:78:6d:ac:38:d4:ea:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Mar 25 11:16:41 2026 GMT Not After : Mar 28 19:34:41 2026 GMT Subject: CN=96476078CE1755B7555F44D7D2B22354A4FA5C29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9b:50:1a:d0:ce:f6:cd:b7:44:09:73:51:12: c6:ab:4a:a3:13:a5:ea:a6:c7:ab:b0:e4:14:ec:45: f6:a4:14:41:35:0b:e1:57:d7:c7:79:00:ae:45:95: 5a:18:1b:ee:e9:09:24:53:67:0c:0d:4b:b0:c3:12: 29:9f:41:f3:b5:9b:0f:99:02:ca:13:09:15:d5:ff: 8d:41:0f:41:c7:40:94:1c:16:0a:35:bd:6c:75:ab: 82:96:bb:2b:87:c8:c8:99:39:3e:82:f3:b0:0b:70: eb:43:44:a4:de:4c:1e:af:2c:ad:3f:39:7c:46:ce: 55:47:14:97:a0:27:fb:1d:5e:0e:88:eb:18:c0:50: f1:4f:dc:6e:53:98:b6:41:0f:a3:77:25:fa:97:e1: 65:2d:75:3c:6e:b4:8f:b4:0c:bc:3c:de:ce:85:31: aa:dd:12:69:45:3a:48:f7:ca:cc:89:71:b6:44:03: ed:37:ad:2c:5c:75:d5:8c:02:c5:dd:29:d4:7e:30: f6:e3:40:23:56:31:ca:77:41:16:2e:57:2c:b9:af: ef:89:b5:bb:a0:1e:00:82:a7:f7:e6:64:f5:b0:49: 63:46:f7:58:e4:65:24:54:c2:2b:50:e5:7c:6c:c8: ab:08:a0:93:90:b2:a5:87:45:dd:e8:cd:f8:94:8b: bb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:47:60:78:CE:17:55:B7:55:5F:44:D7:D2:B2:23:54:A4:FA:5C:29 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:71:5d:93:fd:6a:de:87:87:ae:01:33:3b:57:a0:09:cb:9a: 09:fc:51:fb:50:95:38:24:ee:54:b3:ad:96:73:80:dc:20:9b: a3:72:0a:17:21:47:c4:eb:df:35:28:67:fc:5d:81:74:9d:1b: e0:1e:45:44:b1:98:b3:34:e2:f7:e0:06:5f:2f:25:86:62:0c: 6a:af:dd:33:23:e2:c1:40:dd:1f:47:f3:0c:07:2e:a9:85:fe: 63:b0:12:30:49:19:bc:c1:45:80:18:11:52:2c:a0:2a:05:0c: d2:36:6a:45:c3:0e:20:a4:96:a9:0e:c1:ac:1c:b1:47:b9:d1: 01:3c:75:38:d9:99:b2:aa:61:85:55:b2:aa:83:4b:8c:ba:9e: 5d:f6:99:0b:2e:f0:66:7c:fd:ef:f1:71:d1:42:ea:5f:59:be: a3:5a:77:d8:25:63:bc:04:68:b0:03:af:26:00:2e:15:92:72: a6:81:44:68:3c:b2:1d:ff:18:7a:fa:97:4b:7b:84:01:a3:0a: e2:72:09:2a:7e:99:02:5f:92:cb:ea:27:a6:f7:9d:2e:52:1c: 3e:dd:e1:29:89:cc:0c:68:54:c7:3a:a1:ff:06:18:6a:26:7a: 78:97:2e:fd:ff:88:62:8f:31:dd:98:00:28:7b:fb:20:2e:fe: 78:b1:7a:5b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7gzExPwxthJHxFWWnhtrDjU6kswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNjAzMjUxMTE2NDFaFw0yNjAzMjgxOTM0NDFaMDMxMTAvBgNV BAMTKDk2NDc2MDc4Q0UxNzU1Qjc1NTVGNDREN0QyQjIyMzU0QTRGQTVDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPm1Aa0M72zbdECXNREsarSqMT peqmx6uw5BTsRfakFEE1C+FX18d5AK5FlVoYG+7pCSRTZwwNS7DDEimfQfO1mw+Z AsoTCRXV/41BD0HHQJQcFgo1vWx1q4KWuyuHyMiZOT6C87ALcOtDRKTeTB6vLK0/ OXxGzlVHFJegJ/sdXg6I6xjAUPFP3G5TmLZBD6N3JfqX4WUtdTxutI+0DLw83s6F MardEmlFOkj3ysyJcbZEA+03rSxcddWMAsXdKdR+MPbjQCNWMcp3QRYuVyy5r++J tbugHgCCp/fmZPWwSWNG91jkZSRUwitQ5XxsyKsIoJOQsqWHRd3ozfiUi7sVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlkdgeM4XVbdVX0TX0rIjVKT6XCkwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGtxXZP9at6Hh64BMztXoAnLmgn8UftQlTgk 7lSzrZZzgNwgm6NyChchR8Tr3zUoZ/xdgXSdG+AeRUSxmLM04vfgBl8vJYZiDGqv 3TMj4sFA3R9H8wwHLqmF/mOwEjBJGbzBRYAYEVIsoCoFDNI2akXDDiCklqkOwawc sUe50QE8dTjZmbKqYYVVsqqDS4y6nl32mQsu8GZ8/e/xcdFC6l9ZvqNad9glY7wE aLADryYALhWScqaBRGg8sh3/GHr6l0t7hAGjCuJyCSp+mQJfksvqJ6b3nS5SHD7d 4SmJzAxoVMc6of8GGGomeniXLv3/iGKPMd2YACh7+yAu/nixels= -----END CERTIFICATE-----Generated at Thu Mar 26 10:15:14 2026 by rpki-client