$ rpki-client -vvf repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft File: 4A688B72A804A426A9096ECA60105A4D831C5FA8.mft (raw, json) Hash identifier: jEBesYfe8+7Cmq7ZMkOsLbgbrnsrQG5WFBw8QPw+c5g= Subject key identifier: F7:D5:3E:14:D9:88:F5:02:C1:FC:32:A8:17:B2:EB:78:02:AB:5A:38 Authority key identifier: 4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 Certificate issuer: /CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Certificate serial: 33A8B63A5FBEF07B63219F667EAB35F194BBA078 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft Manifest number: 033D Signing time: Wed 25 Mar 2026 17:21:55 +0000 Manifest this update: Wed 25 Mar 2026 17:16:55 +0000 Manifest next update: Sat 28 Mar 2026 17:52:55 +0000 Files and hashes: 1: 3130332e3137352e3230372e302f32342d3234203d3e20313437313234.roa (hash: aQ3bZ8U/53lOgq6IbJ4jaeEks7cypqeVb0bEi+y+Pus=) 2: 4A688B72A804A426A9096ECA60105A4D831C5FA8.crl (hash: NAGEtNxvzk1aL1sfvcdiqm4c0lq0Nv+pMu0pvQVBQTw=) 3: 3130332e3137352e3230362e302f32332d3234203d3e20313437313234.roa (hash: eGEsrGBto/hQncn3YcGePX27GH/UT48OX+sETIcZ17o=) 4: 3130332e3137352e3230362e302f32342d3234203d3e20313437313234.roa (hash: eQ2W59Sl25b9+tbhRBYK+eiWkdxaKDr4YfWFXlk9jXI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:52:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:a8:b6:3a:5f:be:f0:7b:63:21:9f:66:7e:ab:35:f1:94:bb:a0:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A688B72A804A426A9096ECA60105A4D831C5FA8 Validity Not Before: Mar 25 17:16:55 2026 GMT Not After : Mar 28 17:52:55 2026 GMT Subject: CN=F7D53E14D988F502C1FC32A817B2EB7802AB5A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:3b:08:2b:ea:2a:4d:5b:54:81:64:31:a8:48: 80:a7:e4:7c:29:82:32:c5:af:30:3a:e2:11:04:a9: 48:e6:7f:84:cd:3f:9f:b7:53:9a:26:93:d8:c2:4f: 82:47:54:ea:58:28:e3:cc:74:e1:2d:9b:3c:2c:0d: 39:2d:e7:7a:2e:3b:16:99:2d:05:1c:b3:e1:13:f4: e9:82:de:ea:2a:e9:f0:e7:24:a4:41:79:2d:cc:89: 62:e5:b4:25:d1:35:93:3a:e3:43:ad:8d:82:c9:7a: 5c:93:0e:4a:48:dc:0e:37:96:63:df:11:7d:e6:fa: 68:90:d0:cc:15:9b:31:28:81:22:c7:89:be:b3:4a: 26:f2:c9:99:35:75:00:a6:1a:1d:a4:10:b0:be:ae: f6:65:79:be:a3:82:12:d5:30:0a:b9:16:14:01:95: 19:51:6e:67:fd:fd:75:65:72:04:92:33:b2:1c:0f: 11:34:4c:62:94:dd:a2:29:a6:8c:19:0b:48:f2:1d: 48:9e:ef:81:3d:d2:aa:fa:b4:c2:fe:77:92:ba:88: c3:b2:f4:65:a9:a1:05:ff:8a:e5:a1:84:d2:ba:09: c4:c1:32:c4:84:42:4b:39:f3:dc:bd:41:be:2d:82: ac:a5:ef:a0:5a:ab:cb:3c:b7:5c:36:69:c2:11:29: 40:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:D5:3E:14:D9:88:F5:02:C1:FC:32:A8:17:B2:EB:78:02:AB:5A:38 X509v3 Authority Key Identifier: keyid:4A:68:8B:72:A8:04:A4:26:A9:09:6E:CA:60:10:5A:4D:83:1C:5F:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A688B72A804A426A9096ECA60105A4D831C5FA8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/faa6a67d-cba3-427b-9055-5f528f2d232f/0/4A688B72A804A426A9096ECA60105A4D831C5FA8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:31:01:03:d3:2a:2e:33:99:1a:30:a5:a8:1c:37:a6:6b:6f: 22:13:f8:41:e9:9e:c7:6d:bc:5b:1d:9b:59:8d:f8:02:e6:6a: 03:2c:a2:be:94:6d:c6:36:e2:1d:f5:92:6a:35:d1:78:1c:98: 95:e8:ee:5e:9e:ff:0c:15:fc:d7:43:c1:df:8f:43:a0:aa:10: 28:aa:82:b6:c3:d7:13:95:98:34:e2:89:ce:63:01:b9:e8:af: 4f:5e:57:b8:26:39:66:71:4a:dd:66:fc:9b:d0:a6:8b:67:f9: f5:64:bb:ab:a6:79:e3:d6:d9:75:f5:7c:60:fa:a1:a2:30:1c: 7e:65:32:4e:39:cc:4b:6c:a0:a0:4e:9f:f7:de:19:39:ff:f6: cb:88:5e:6c:87:8f:7e:4f:a5:30:85:cb:1e:77:9d:50:ff:b5: d0:30:a9:47:52:b3:16:f0:13:b2:e4:f7:58:93:74:92:c3:e1: 1a:dc:e2:5b:c7:2f:1c:9b:db:ab:68:1f:06:38:0d:e6:2f:a9: e4:13:ff:10:75:6e:2f:34:a7:e0:ea:95:02:0e:51:a9:95:ce: de:ff:ec:11:0a:3d:ce:70:46:92:af:4a:18:4a:b2:b0:ea:30: 1f:93:54:5d:4a:3f:1a:2e:5b:45:66:51:85:50:14:ca:f8:6f: de:f0:7d:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6i2Ol++8HtjIZ9mfqs18ZS7oHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4 MzFDNUZBODAeFw0yNjAzMjUxNzE2NTVaFw0yNjAzMjgxNzUyNTVaMDMxMTAvBgNV BAMTKEY3RDUzRTE0RDk4OEY1MDJDMUZDMzJBODE3QjJFQjc4MDJBQjVBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1Owgr6ipNW1SBZDGoSICn5Hwp gjLFrzA64hEEqUjmf4TNP5+3U5omk9jCT4JHVOpYKOPMdOEtmzwsDTkt53ouOxaZ LQUcs+ET9OmC3uoq6fDnJKRBeS3MiWLltCXRNZM640OtjYLJelyTDkpI3A43lmPf EX3m+miQ0MwVmzEogSLHib6zSibyyZk1dQCmGh2kELC+rvZleb6jghLVMAq5FhQB lRlRbmf9/XVlcgSSM7IcDxE0TGKU3aIppowZC0jyHUie74E90qr6tML+d5K6iMOy 9GWpoQX/iuWhhNK6CcTBMsSEQks589y9Qb4tgqyl76Baq8s8t1w2acIRKUClAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU99U+FNmI9QLB/DKoF7LreAKrWjgwHwYDVR0j BBgwFoAUSmiLcqgEpCapCW7KYBBaTYMcX6gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m YWE2YTY3ZC1jYmEzLTQyN2ItOTA1NS01ZjUyOGYyZDIzMmYvMC80QTY4OEI3MkE4 MDRBNDI2QTkwOTZFQ0E2MDEwNUE0RDgzMUM1RkE4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVBNEQ4MzFD NUZBOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmFhNmE2N2QtY2JhMy00MjdiLTkw NTUtNWY1MjhmMmQyMzJmLzAvNEE2ODhCNzJBODA0QTQyNkE5MDk2RUNBNjAxMDVB NEQ4MzFDNUZBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC0xAQPTKi4zmRowpagcN6ZrbyIT+EHpnsdt vFsdm1mN+ALmagMsor6UbcY24h31kmo10XgcmJXo7l6e/wwV/NdDwd+PQ6CqECiq grbD1xOVmDTiic5jAbnor09eV7gmOWZxSt1m/JvQpotn+fVku6umeePW2XX1fGD6 oaIwHH5lMk45zEtsoKBOn/feGTn/9suIXmyHj35PpTCFyx53nVD/tdAwqUdSsxbw E7Lk91iTdJLD4Rrc4lvHLxyb26toHwY4DeYvqeQT/xB1bi80p+DqlQIOUamVzt7/ 7BEKPc5wRpKvShhKsrDqMB+TVF1KPxouW0VmUYVQFMr4b97wfYs= -----END CERTIFICATE-----Generated at Thu Mar 26 18:26:55 2026 by rpki-client