$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft File: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft (raw, json) Hash identifier: f1SpDVJpHw912oBaQ5tSyftqqheDX7VyTtzJtgKrPW8= Subject key identifier: 33:35:D4:B1:80:C9:D0:8A:45:BF:1F:B7:C6:5F:16:4C:97:7A:CA:6A Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA Certificate issuer: /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Certificate serial: 1FBEA640F32659B573DC581E7D50AF058B382239 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft Manifest number: 075E Signing time: Sat 28 Mar 2026 11:10:04 +0000 Manifest this update: Sat 28 Mar 2026 11:05:04 +0000 Manifest next update: Tue 31 Mar 2026 21:20:04 +0000 Files and hashes: 1: AS17885.roa (hash: RX8oo/DiJqJzJBqmubTqeGmmpOVT1csa63gvxFqyKec=) 2: AS24203.roa (hash: kTnkpHL0tm/R/+5OZPbHUWyQPxoSiGsWnevwlqQJQyQ=) 3: AS139994.roa (hash: mQEJNXJ3XVh/s4Uqn72Xq0FcwJo74FkotAw0eOv4kCI=) 4: B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl (hash: BM3qYgZrmy3FwYilFCfis/mnxC3jMCLGmOxRpYC9C9k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 31 Mar 2026 21:20:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:be:a6:40:f3:26:59:b5:73:dc:58:1e:7d:50:af:05:8b:38:22:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA Validity Not Before: Mar 28 11:05:04 2026 GMT Not After : Mar 31 21:20:04 2026 GMT Subject: CN=3335D4B180C9D08A45BF1FB7C65F164C977ACA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:e2:54:07:f4:91:86:b0:d1:5c:40:01:32:c3: e0:a0:6c:55:74:c3:e1:61:99:90:c1:4c:5e:12:a8: 21:ef:13:5d:4a:2a:0e:a8:89:10:6c:9c:53:b1:1e: 4c:18:07:5f:7e:03:06:43:5d:41:c5:c0:26:50:34: 15:67:3c:6c:3d:c4:96:ab:1b:8f:58:d1:f0:a8:bb: a8:6e:6d:b8:8f:89:88:66:5a:9f:89:e4:af:ed:75: 08:72:0d:b5:6f:2f:df:c8:08:ab:b5:c8:99:2e:ef: b3:6c:a7:3b:d3:dc:1c:6b:d0:9d:c2:42:93:ca:95: 94:7b:8c:b3:18:1d:4a:ef:ae:3a:f5:66:38:0e:b4: 79:9f:44:83:4d:5e:5e:1b:ca:38:9c:98:2b:f6:ef: 0c:08:61:45:6e:87:4b:34:44:02:97:64:75:38:b3: c5:81:e1:58:b5:56:01:6e:d4:71:e0:3d:70:a7:2b: 7d:fe:8d:31:6f:26:be:aa:d2:ba:46:59:69:c0:1b: f3:17:e6:92:05:2d:ec:de:1f:f6:fd:f3:7f:ea:98: 3b:d8:8e:b7:0c:fd:cb:89:64:78:78:a7:8e:b3:38: 5f:4d:9f:96:b0:4f:e3:7c:9b:43:a0:12:7c:4a:da: b4:3e:bc:0c:dd:36:bd:88:91:0e:34:d2:3f:a7:38: 54:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:35:D4:B1:80:C9:D0:8A:45:BF:1F:B7:C6:5F:16:4C:97:7A:CA:6A X509v3 Authority Key Identifier: keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:bd:df:5d:84:b0:b1:3d:d0:ec:80:b2:ae:65:d4:2e:6b:a4: 9b:78:23:16:de:b9:57:66:a6:c2:ad:5c:ba:5a:24:4f:81:62: d9:e0:c4:45:8d:be:1d:21:2c:71:d1:fd:d3:b6:05:53:77:48: 28:4a:fb:67:ea:30:27:82:5e:15:17:b4:dc:74:ca:f1:50:a7: eb:e9:3b:36:e4:93:63:39:26:25:dd:a2:78:6e:e6:80:fc:f7: ae:d6:1f:8c:e1:12:bb:5f:20:b0:ab:99:07:61:6f:e9:e8:40: 7e:58:82:bc:d0:9a:77:69:09:86:00:7d:e9:35:f4:e8:9f:e5: 1f:0b:14:3a:fe:89:03:9a:78:4b:95:0e:04:7e:2f:d5:ba:01: e9:42:c6:59:43:9a:b2:21:5d:d8:58:62:7d:6f:62:8b:a4:21: 6c:e4:2c:91:1d:52:ef:c5:89:c1:f6:fb:a8:3a:5d:33:a9:6b: ec:a5:be:3e:84:fd:e4:9e:30:3c:e6:80:c7:64:d6:df:45:05: 19:90:6d:2e:ba:8c:2f:0d:6d:2a:3f:8e:06:17:45:6f:cb:ca: f7:ea:86:67:38:83:1a:65:81:38:f9:0f:79:c6:d5:99:80:7c: bc:9d:01:31:97:90:b1:f4:9d:3f:01:64:44:7d:fd:e0:e6:87: f4:38:fd:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH76mQPMmWbVz3FgefVCvBYs4IjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIw OTU2ODdEQTAeFw0yNjAzMjgxMTA1MDRaFw0yNjAzMzEyMTIwMDRaMDMxMTAvBgNV BAMTKDMzMzVENEIxODBDOUQwOEE0NUJGMUZCN0M2NUYxNjRDOTc3QUNBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC24lQH9JGGsNFcQAEyw+CgbFV0 w+FhmZDBTF4SqCHvE11KKg6oiRBsnFOxHkwYB19+AwZDXUHFwCZQNBVnPGw9xJar G49Y0fCou6hubbiPiYhmWp+J5K/tdQhyDbVvL9/ICKu1yJku77NspzvT3Bxr0J3C QpPKlZR7jLMYHUrvrjr1ZjgOtHmfRINNXl4byjicmCv27wwIYUVuh0s0RAKXZHU4 s8WB4Vi1VgFu1HHgPXCnK33+jTFvJr6q0rpGWWnAG/MX5pIFLezeH/b983/qmDvY jrcM/cuJZHh4p46zOF9Nn5awT+N8m0OgEnxK2rQ+vAzdNr2IkQ400j+nOFS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMzXUsYDJ0IpFvx+3xl8WTJd6ymowHwYDVR0j BBgwFoAUtJOlzr8J4QvDXZrCIR2v0glWh9owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMC9CNDkzQTVDRUJG MDlFMTBCQzM1RDlBQzIyMTFEQUZEMjA5NTY4N0RBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFGRDIwOTU2 ODdEQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl ODktOGQ3ZTdmYzJjMjI3LzAvQjQ5M0E1Q0VCRjA5RTEwQkMzNUQ5QUMyMjExREFG RDIwOTU2ODdEQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK29312EsLE90OyAsq5l1C5rpJt4IxbeuVdm psKtXLpaJE+BYtngxEWNvh0hLHHR/dO2BVN3SChK+2fqMCeCXhUXtNx0yvFQp+vp Ozbkk2M5JiXdonhu5oD8967WH4zhErtfILCrmQdhb+noQH5YgrzQmndpCYYAfek1 9Oif5R8LFDr+iQOaeEuVDgR+L9W6AelCxllDmrIhXdhYYn1vYoukIWzkLJEdUu/F icH2+6g6XTOpa+ylvj6E/eSeMDzmgMdk1t9FBRmQbS66jC8NbSo/jgYXRW/Lyvfq hmc4gxplgTj5D3nG1ZmAfLydATGXkLH0nT8BZER9/eDmh/Q4/YQ= -----END CERTIFICATE-----Generated at Sun Mar 29 12:54:01 2026 by rpki-client