$ rpki-client -vvf repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft File: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft (raw, json) Hash identifier: cSLyq+jTL8i0mymTvGDpib5wjn6vaJi0L+kEGkWue+g= Subject key identifier: 72:C1:1C:B7:FF:8D:C1:5D:58:07:96:BC:E5:0F:C6:3C:48:E7:11:50 Authority key identifier: 4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B Certificate issuer: /CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Certificate serial: 70767188A40027B1EA1EC7E743FDDC0B807353A1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft Manifest number: 018D Signing time: Wed 25 Mar 2026 12:22:10 +0000 Manifest this update: Wed 25 Mar 2026 12:17:10 +0000 Manifest next update: Sat 28 Mar 2026 20:58:10 +0000 Files and hashes: 1: 3130332e3233392e32332e302f32342d3234203d3e20313336383635.roa (hash: fDXMTAj/S8oQs6LhTEcvx+m4yd6GabWyid1nJ3v2IOc=) 2: 3130332e3233392e32322e302f32342d3234203d3e20313336383635.roa (hash: s9YO6rgovPFygVKDvxvdCQqCqWD4vEgIZoUoDmMCbHA=) 3: 4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl (hash: 2ysFBVdR3Qw9624AkfXfO1dlOw03DwgiCKWm28aIR8A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 20:58:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:76:71:88:a4:00:27:b1:ea:1e:c7:e7:43:fd:dc:0b:80:73:53:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E054E064DCDF2E49F7282D7370B9EAFF42A944B Validity Not Before: Mar 25 12:17:10 2026 GMT Not After : Mar 28 20:58:10 2026 GMT Subject: CN=72C11CB7FF8DC15D580796BCE50FC63C48E71150 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ee:8f:8c:6b:0e:bb:84:28:e9:e0:65:ef:30: ed:3e:b7:7e:33:48:7a:4d:c2:c8:2f:85:56:e0:df: 6b:d2:45:06:6c:d7:d4:04:9f:83:1b:5d:eb:f7:45: 5e:d9:3a:27:31:9d:0c:90:8a:58:b3:0a:ea:09:01: ed:cf:8d:fd:0a:05:fd:23:71:c2:55:e1:04:39:04: e5:d2:8f:f0:48:ac:68:be:9e:d4:b4:27:12:0f:30: df:4c:8d:df:34:0d:3e:91:28:5e:cd:4c:f6:8e:49: ae:51:38:93:32:16:99:0e:04:84:07:63:a0:02:89: b8:49:52:36:d8:29:e6:b6:1b:08:3c:11:67:37:dc: 84:4f:7a:5d:d0:db:3f:d5:07:66:00:65:c0:09:67: ea:56:82:6a:fa:f1:ec:c9:3d:ab:77:5a:8a:bf:f0: d2:00:31:20:77:a3:4e:f9:ee:1b:2a:1a:14:e1:92: ff:c9:9e:da:9b:6d:83:80:6e:d5:db:a4:7b:7d:6e: a4:72:60:9c:13:eb:7e:10:a5:f6:32:53:86:25:c2: 24:eb:3f:2e:a7:5e:b9:65:44:b6:eb:ce:cd:22:eb: 3e:25:7f:61:c6:66:b6:2c:fb:24:38:27:07:6c:60: 48:f9:c9:da:e3:19:eb:02:65:09:23:4f:21:d2:6f: 3d:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:C1:1C:B7:FF:8D:C1:5D:58:07:96:BC:E5:0F:C6:3C:48:E7:11:50 X509v3 Authority Key Identifier: keyid:4E:05:4E:06:4D:CD:F2:E4:9F:72:82:D7:37:0B:9E:AF:F4:2A:94:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f398063e-57a1-40f2-8527-4d0a69c5d647/0/4E054E064DCDF2E49F7282D7370B9EAFF42A944B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:a9:33:9f:6f:d3:a9:50:0e:6f:c1:4d:4e:ce:89:fd:bc:ae: b0:54:d0:07:4f:bf:bf:6a:59:5f:ab:2d:51:a3:2f:3a:46:3e: ad:33:34:b2:52:9a:94:dc:f7:3f:37:97:54:31:cd:b2:35:04: 9a:f6:23:0b:d8:f7:d9:14:4a:5b:12:6b:3c:af:77:b3:83:72: 16:7c:77:c7:34:60:1a:7e:43:13:5c:d3:d9:41:7d:f6:81:b9: e8:58:70:3a:c2:ca:b7:b3:b9:ec:98:3c:69:c2:4e:7f:40:8f: 6c:42:f2:0b:75:f8:0b:12:68:df:45:7f:e4:d9:7e:50:e7:a0: cd:58:15:70:37:e9:68:cd:fd:0b:d2:be:b3:6d:af:bd:3b:3c: ee:b7:9b:a9:5f:6b:71:17:7f:fc:95:f3:e1:d1:53:f6:ee:58: 10:86:4b:bb:15:f8:c3:c7:7c:2f:c6:3b:3b:b8:98:99:e3:66: d7:63:ce:17:8d:76:15:9a:44:e3:79:07:f6:78:71:14:f7:b0: e1:7a:56:01:77:ad:40:f4:1f:47:a1:0f:03:92:ce:f4:52:66: 75:d4:cf:d3:a0:d7:e7:99:5e:51:e3:fc:65:23:e8:a7:dc:31: ab:50:58:c1:56:c6:43:53:4f:cc:9a:12:e0:17:3f:6d:b7:89: d6:71:b9:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcHZxiKQAJ7HqHsfnQ/3cC4BzU6EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZG NDJBOTQ0QjAeFw0yNjAzMjUxMjE3MTBaFw0yNjAzMjgyMDU4MTBaMDMxMTAvBgNV BAMTKDcyQzExQ0I3RkY4REMxNUQ1ODA3OTZCQ0U1MEZDNjNDNDhFNzExNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA7o+Maw67hCjp4GXvMO0+t34z SHpNwsgvhVbg32vSRQZs19QEn4MbXev3RV7ZOicxnQyQilizCuoJAe3Pjf0KBf0j ccJV4QQ5BOXSj/BIrGi+ntS0JxIPMN9Mjd80DT6RKF7NTPaOSa5ROJMyFpkOBIQH Y6ACibhJUjbYKea2Gwg8EWc33IRPel3Q2z/VB2YAZcAJZ+pWgmr68ezJPat3Woq/ 8NIAMSB3o0757hsqGhThkv/JntqbbYOAbtXbpHt9bqRyYJwT634QpfYyU4YlwiTr Py6nXrllRLbrzs0i6z4lf2HGZrYs+yQ4JwdsYEj5ydrjGesCZQkjTyHSbz1vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcsEct/+NwV1YB5a85Q/GPEjnEVAwHwYDVR0j BBgwFoAUTgVOBk3N8uSfcoLXNwuer/QqlEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m Mzk4MDYzZS01N2ExLTQwZjItODUyNy00ZDBhNjljNWQ2NDcvMC80RTA1NEUwNjRE Q0RGMkU0OUY3MjgyRDczNzBCOUVBRkY0MkE5NDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlFQUZGNDJB OTQ0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM5ODA2M2UtNTdhMS00MGYyLTg1 MjctNGQwYTY5YzVkNjQ3LzAvNEUwNTRFMDY0RENERjJFNDlGNzI4MkQ3MzcwQjlF QUZGNDJBOTQ0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJOpM59v06lQDm/BTU7Oif28rrBU0AdPv79q WV+rLVGjLzpGPq0zNLJSmpTc9z83l1QxzbI1BJr2IwvY99kUSlsSazyvd7ODchZ8 d8c0YBp+QxNc09lBffaBuehYcDrCyrezueyYPGnCTn9Aj2xC8gt1+AsSaN9Ff+TZ flDnoM1YFXA36WjN/QvSvrNtr707PO63m6lfa3EXf/yV8+HRU/buWBCGS7sV+MPH fC/GOzu4mJnjZtdjzheNdhWaRON5B/Z4cRT3sOF6VgF3rUD0H0ehDwOSzvRSZnXU z9Og1+eZXlHj/GUj6KfcMatQWMFWxkNTT8yaEuAXP223idZxuT0= -----END CERTIFICATE-----Generated at Thu Mar 26 20:10:05 2026 by rpki-client