$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: om1zp20xOQQ6R7gOL40VW4Y9LYzyBcuW7Q7z2Fpp3A4= Subject key identifier: 72:60:75:F2:B9:3A:26:6B:0D:9A:41:42:91:06:A4:C8:E0:8C:F0:DC Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 2208E0926ED1F1100B0D4FE63F1228F0CF776E7F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 0142 Signing time: Wed 25 Mar 2026 04:41:50 +0000 Manifest this update: Wed 25 Mar 2026 04:36:50 +0000 Manifest next update: Sat 28 Mar 2026 09:09:50 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: Zpp4NK96SJJfmbWoFSW5LzMclnbnT5HC0ab0dKu8dFs=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: L5i/E5G2yR4p96EaiaxVuLqhNScyIzpSwsnYjpL8mEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 09:09:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:08:e0:92:6e:d1:f1:10:0b:0d:4f:e6:3f:12:28:f0:cf:77:6e:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Mar 25 04:36:50 2026 GMT Not After : Mar 28 09:09:50 2026 GMT Subject: CN=726075F2B93A266B0D9A41429106A4C8E08CF0DC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:c9:5b:d2:7c:69:a8:b4:f9:c2:98:42:41:5f: ef:c0:d1:b4:6d:c7:8b:48:a2:21:65:bf:9f:35:30: ed:c6:da:40:e2:ae:f6:2d:27:be:ae:ad:07:3c:d8: 43:56:b5:c1:76:62:99:a9:be:8d:c9:ae:d9:b4:18: da:fa:8c:cc:cf:be:1c:23:f4:b1:83:dd:1a:43:46: 8a:cd:f1:d5:8c:19:f2:3e:db:42:12:75:bf:d9:38: 3a:97:fe:79:6d:a2:84:03:c7:c9:c0:e3:9f:36:37: 3f:48:c2:36:51:fb:05:ef:b7:85:5e:1f:d2:5e:af: 2b:86:59:e9:65:02:0a:7a:47:3e:c1:e2:58:58:ca: 67:6e:cb:12:0c:25:5e:34:75:ba:58:33:89:5d:c2: 8e:40:88:ca:37:fa:eb:3e:c2:d9:46:d8:55:b3:e0: 14:b7:e2:8a:3f:97:b4:6d:3a:95:a8:5d:aa:d4:d3: e4:0d:d8:bb:47:70:dd:8d:17:cd:44:04:34:29:a8: 14:4e:42:ab:88:04:4c:11:bb:3f:b4:3c:1e:ec:57: 4a:07:5e:f3:1c:a6:6b:57:4a:a0:ab:7e:8f:ef:94: 2c:79:80:55:2e:1b:37:18:6d:09:15:d6:e8:3d:64: e7:64:fb:c6:cf:a3:d3:d7:b9:e0:5b:6b:06:be:f6: 38:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:60:75:F2:B9:3A:26:6B:0D:9A:41:42:91:06:A4:C8:E0:8C:F0:DC X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:54:cf:f1:80:36:09:09:2e:19:b0:f2:b5:00:30:1e:0f:94: 7c:79:60:f0:2d:f1:1c:4c:5a:86:c8:ea:a7:46:5d:69:61:a4: bd:14:25:25:0a:d3:17:0c:22:5f:20:3d:20:64:bd:63:22:de: ab:b9:dd:1d:a4:5a:e1:d6:4f:51:f1:57:d2:07:bf:e3:2b:f2: c4:46:83:12:a1:fc:d2:67:95:4c:8e:9a:da:7f:07:77:07:cc: b9:d8:9e:f6:82:a7:ac:bb:14:06:f7:cc:59:7c:ed:c1:6c:ba: 39:00:48:68:21:8e:f3:ba:f5:1e:9e:d5:d7:fd:eb:fc:31:00: d3:34:e7:99:41:ec:ce:9a:ef:7d:58:f8:e3:48:ae:44:ae:61: 0e:83:15:c4:58:12:73:8b:a7:19:2c:c7:e1:28:09:f3:74:c5: 0d:c1:7c:bb:87:4b:b6:0f:d3:4b:1d:b7:8d:cd:5d:5f:12:f8: 8e:3b:87:00:ba:1b:f0:83:c3:5a:3f:ff:2d:61:ee:ec:b0:48: 5c:33:68:13:72:cc:df:1c:db:c0:e7:7e:74:42:3b:b7:4a:d6: a0:99:7d:8d:21:0d:68:9d:2a:62:5b:88:04:af:cf:ac:76:c2: d5:38:97:56:d9:29:10:c1:0a:c3:a4:52:bc:65:28:4c:ca:88: 33:30:f4:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIgjgkm7R8RALDU/mPxIo8M93bn8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNjAzMjUwNDM2NTBaFw0yNjAzMjgwOTA5NTBaMDMxMTAvBgNV BAMTKDcyNjA3NUYyQjkzQTI2NkIwRDlBNDE0MjkxMDZBNEM4RTA4Q0YwREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6yVvSfGmotPnCmEJBX+/A0bRt x4tIoiFlv581MO3G2kDirvYtJ76urQc82ENWtcF2Ypmpvo3Jrtm0GNr6jMzPvhwj 9LGD3RpDRorN8dWMGfI+20ISdb/ZODqX/nltooQDx8nA4582Nz9IwjZR+wXvt4Ve H9JeryuGWellAgp6Rz7B4lhYymduyxIMJV40dbpYM4ldwo5AiMo3+us+wtlG2FWz 4BS34oo/l7RtOpWoXarU0+QN2LtHcN2NF81EBDQpqBROQquIBEwRuz+0PB7sV0oH XvMcpmtXSqCrfo/vlCx5gFUuGzcYbQkV1ug9ZOdk+8bPo9PXueBbawa+9jhHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcmB18rk6JmsNmkFCkQakyOCM8NwwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBUz/GANgkJLhmw8rUAMB4PlHx5YPAt8RxM WobI6qdGXWlhpL0UJSUK0xcMIl8gPSBkvWMi3qu53R2kWuHWT1HxV9IHv+Mr8sRG gxKh/NJnlUyOmtp/B3cHzLnYnvaCp6y7FAb3zFl87cFsujkASGghjvO69R6e1df9 6/wxANM055lB7M6a731Y+ONIrkSuYQ6DFcRYEnOLpxksx+EoCfN0xQ3BfLuHS7YP 00sdt43NXV8S+I47hwC6G/CDw1o//y1h7uywSFwzaBNyzN8c28DnfnRCO7dK1qCZ fY0hDWidKmJbiASvz6x2wtU4l1bZKRDBCsOkUrxlKEzKiDMw9Ps= -----END CERTIFICATE-----Generated at Fri Mar 27 04:59:21 2026 by rpki-client