$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: 8fqrZ/1bmrpRUiuvKuYHJikGd2B2ZONRe3AhbS1Ioro= Subject key identifier: 6F:E2:2E:F6:E6:A7:E4:05:3F:EF:DE:F6:23:A0:31:4D:85:58:1F:6F Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 3CBE4F3C878D790872B9101285CF54B4D49A23B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0525 Signing time: Tue 17 Mar 2026 23:30:57 +0000 Manifest this update: Tue 17 Mar 2026 23:25:57 +0000 Manifest next update: Sat 21 Mar 2026 04:12:57 +0000 Files and hashes: 1: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 2: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 4: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: H8lkk0HGU8eGjgzLfVRskpXV9K6hRP3arAZHzPJNGN0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 04:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:be:4f:3c:87:8d:79:08:72:b9:10:12:85:cf:54:b4:d4:9a:23:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Mar 17 23:25:57 2026 GMT Not After : Mar 21 04:12:57 2026 GMT Subject: CN=6FE22EF6E6A7E4053FEFDEF623A0314D85581F6F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:b7:ff:56:2b:68:50:30:c6:e0:ba:0f:3c:a0: df:07:9a:b0:21:fc:ed:49:a6:ec:89:1e:c2:04:71: d7:aa:92:1e:46:f4:4b:84:1f:ae:49:10:2d:7a:6d: 66:52:9d:fc:be:a6:9c:7d:fd:c0:53:bb:78:dd:ee: 00:8e:06:3c:31:80:c2:e0:3d:04:a9:66:8b:9a:f6: b3:c5:28:16:8f:6f:16:52:e0:0d:c3:fe:69:e7:b3: 38:94:99:53:3e:c0:14:c7:e7:69:2a:1a:e0:71:35: be:44:57:a4:e8:88:60:23:71:80:bf:ea:9f:20:7a: 03:f9:e9:41:b4:f7:1e:ac:c1:b5:1e:9f:6f:03:4d: ef:15:a6:e0:27:1c:e8:37:57:24:61:5d:10:65:db: e2:c5:87:79:35:7a:12:a4:14:4d:a2:99:ee:a7:c2: 15:59:5d:21:7e:73:72:fa:53:0c:b7:8d:a4:07:91: 84:9b:fa:bf:c6:36:76:72:36:34:ab:dc:36:c7:45: fd:2b:4c:f7:b4:16:99:f9:7b:8d:b3:90:87:94:78: 84:13:16:a2:79:69:57:ad:3a:23:2f:57:a4:45:7b: 3b:3b:22:a4:52:6d:bb:01:c7:a6:2f:2f:74:01:4f: cd:67:ee:e6:6a:40:24:57:22:7d:1e:86:87:25:30: a3:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:E2:2E:F6:E6:A7:E4:05:3F:EF:DE:F6:23:A0:31:4D:85:58:1F:6F X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:f2:d3:5e:d3:7e:e0:50:4b:a3:ee:c1:c4:bb:cf:31:e0:06: a3:4b:87:3f:61:48:b7:36:97:a3:e4:75:a7:1f:aa:6a:11:d8: db:ae:83:f6:fb:1d:68:8d:c7:ad:8b:d6:b6:e0:91:00:48:75: 1b:4a:a4:b4:55:fc:76:e8:ad:1a:65:07:56:fd:0c:9e:23:9a: 61:cf:1d:35:ea:75:f4:00:85:03:07:50:4e:0e:83:0a:5a:62: 53:34:0d:a2:6f:3d:54:fe:ec:84:49:aa:29:c4:b0:3d:47:1d: 7b:ba:65:ac:34:28:ea:9d:1b:67:00:64:d2:79:ca:b5:ef:c7: 37:3d:81:77:70:81:3a:d9:0f:e2:9b:dc:ce:ed:28:c1:72:1a: 8a:fb:e1:c0:fb:18:d4:c4:1d:80:17:44:12:ba:63:41:0e:f6: 94:80:fc:27:55:88:35:8e:96:bb:56:25:3b:c1:2b:c2:1f:75: a6:90:f0:27:b1:21:d2:3f:98:e7:c1:59:98:d3:99:e5:04:7f: 79:88:18:a5:31:df:ab:b4:49:53:ce:10:45:84:2f:b4:d9:e6: 81:2a:91:db:c9:e5:18:87:06:20:02:ee:2c:6d:8e:e8:32:69: 50:85:2e:f1:0c:58:88:66:d3:6b:cb:b6:a5:7e:29:f7:ef:28: 3f:76:00:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPL5PPIeNeQhyuRAShc9UtNSaI7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNjAzMTcyMzI1NTdaFw0yNjAzMjEwNDEyNTdaMDMxMTAvBgNV BAMTKDZGRTIyRUY2RTZBN0U0MDUzRkVGREVGNjIzQTAzMTREODU1ODFGNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDft/9WK2hQMMbgug88oN8HmrAh /O1JpuyJHsIEcdeqkh5G9EuEH65JEC16bWZSnfy+ppx9/cBTu3jd7gCOBjwxgMLg PQSpZoua9rPFKBaPbxZS4A3D/mnnsziUmVM+wBTH52kqGuBxNb5EV6ToiGAjcYC/ 6p8gegP56UG09x6swbUen28DTe8VpuAnHOg3VyRhXRBl2+LFh3k1ehKkFE2ime6n whVZXSF+c3L6Uwy3jaQHkYSb+r/GNnZyNjSr3DbHRf0rTPe0Fpn5e42zkIeUeIQT FqJ5aVetOiMvV6RFezs7IqRSbbsBx6YvL3QBT81n7uZqQCRXIn0ehoclMKMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb+Iu9uan5AU/7972I6AxTYVYH28wHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIny017TfuBQS6PuwcS7zzHgBqNLhz9hSLc2 l6PkdacfqmoR2Nuug/b7HWiNx62L1rbgkQBIdRtKpLRV/HborRplB1b9DJ4jmmHP HTXqdfQAhQMHUE4OgwpaYlM0DaJvPVT+7IRJqinEsD1HHXu6Zaw0KOqdG2cAZNJ5 yrXvxzc9gXdwgTrZD+Kb3M7tKMFyGor74cD7GNTEHYAXRBK6Y0EO9pSA/CdViDWO lrtWJTvBK8IfdaaQ8CexIdI/mOfBWZjTmeUEf3mIGKUx36u0SVPOEEWEL7TZ5oEq kdvJ5RiHBiAC7ixtjugyaVCFLvEMWIhm02vLtqV+KffvKD92AHo= -----END CERTIFICATE-----Generated at Thu Mar 19 09:41:27 2026 by rpki-client