$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: b6C5kPHTcfRzfr0WO9YghKvoLYIySujMsg//3LTeGpI= Subject key identifier: 06:C0:21:1A:3F:C8:2F:E1:E6:A1:A1:28:B5:2F:6F:EB:98:40:C6:0F Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 13315125CE9326A0033D0ABDE2D58894DAEA508F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 0241 Signing time: Wed 18 Mar 2026 11:51:59 +0000 Manifest this update: Wed 18 Mar 2026 11:46:59 +0000 Manifest next update: Sat 21 Mar 2026 13:20:59 +0000 Files and hashes: 1: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: daB3rWLy0hZk+SqIprC8yuqE+4Q6dSLMPmI9ccA3rB0=) 2: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Mar 2026 13:20:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:31:51:25:ce:93:26:a0:03:3d:0a:bd:e2:d5:88:94:da:ea:50:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Mar 18 11:46:59 2026 GMT Not After : Mar 21 13:20:59 2026 GMT Subject: CN=06C0211A3FC82FE1E6A1A128B52F6FEB9840C60F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:17:c0:26:b8:07:ff:77:94:e3:2c:d2:0f:62: 93:16:8c:54:4d:3c:90:69:b5:fa:6c:19:ea:39:e7: cb:98:3f:5b:8f:cb:90:2b:1a:0f:c0:2e:22:45:4d: 29:22:b4:54:69:2c:b2:56:12:e3:8f:80:32:28:41: 41:5d:7d:2f:ff:2e:16:89:1e:f4:19:5e:0d:df:2c: 27:f3:ca:79:8f:8e:5a:3c:d3:e1:a6:7c:ea:a4:35: 49:13:b9:5b:4e:c8:74:fb:5e:48:4b:9e:27:be:97: f2:3d:23:b3:e3:df:a9:36:92:2c:b8:8b:48:a6:36: 55:da:88:88:7d:76:58:4f:b1:09:33:cd:b6:da:64: 3c:5b:60:16:7c:62:2c:af:b7:8c:3a:9c:8e:48:90: d3:1c:ea:77:d4:54:69:7e:29:94:c1:44:5a:2c:f4: d0:ae:13:f0:61:85:33:b5:04:7f:23:fe:f0:71:cc: 7f:f0:50:0d:a6:c4:f0:5e:59:a7:37:6e:df:a2:1c: cf:82:62:e8:93:88:22:58:e3:cf:d2:7d:1e:8d:9d: bb:c0:76:04:7d:01:a3:2a:00:ee:1e:70:96:73:a8: 56:13:35:52:8f:9e:c4:4a:89:6b:7c:97:78:44:6d: f0:4b:08:5d:81:e5:52:10:a1:0f:8b:f0:8c:74:69: f3:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:C0:21:1A:3F:C8:2F:E1:E6:A1:A1:28:B5:2F:6F:EB:98:40:C6:0F X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:41:db:6a:a9:94:01:bd:48:78:61:0d:94:b6:30:2d:db:81: df:5f:5c:9f:50:de:f0:df:6c:fe:7b:41:2e:38:70:bb:22:aa: 2a:90:80:1f:84:b3:37:85:8b:59:4d:18:b5:d4:86:d8:0c:6b: f7:22:d4:be:fa:28:8c:f0:4f:e7:d9:19:82:af:78:7e:dc:d6: 30:48:11:0b:a0:af:e6:5f:af:f4:63:b6:2e:fb:ee:d2:25:f7: a9:eb:8a:e1:2d:72:d1:3f:6b:79:bb:a7:1c:13:25:3a:67:6b: 39:f9:f5:22:b0:76:3f:63:d9:c5:5f:11:43:5a:f9:77:13:6f: 4b:25:e9:66:48:d4:8f:65:32:58:7e:bd:8a:a2:60:04:a4:f9: 4d:8f:69:8f:1f:4c:21:9f:91:d5:80:f2:46:a6:04:18:ad:7a: bb:a8:4f:96:03:11:42:95:b8:27:e2:52:e7:c8:7f:16:33:c5: 19:85:9f:e8:27:cb:38:a0:2c:f4:ea:00:d6:00:58:37:2b:c6: 50:4e:08:f8:e0:da:e8:a9:0a:23:1b:86:19:c1:fe:c1:ec:fd: 26:66:bf:79:7c:2c:ea:7e:4a:3a:6f:47:85:c6:c6:46:97:c9: 38:89:4e:64:12:a7:68:3a:d6:f3:99:3c:d9:b3:9e:7b:17:b0: 7a:92:c9:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEzFRJc6TJqADPQq94tWIlNrqUI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNjAzMTgxMTQ2NTlaFw0yNjAzMjExMzIwNTlaMDMxMTAvBgNV BAMTKDA2QzAyMTFBM0ZDODJGRTFFNkExQTEyOEI1MkY2RkVCOTg0MEM2MEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrF8AmuAf/d5TjLNIPYpMWjFRN PJBptfpsGeo558uYP1uPy5ArGg/ALiJFTSkitFRpLLJWEuOPgDIoQUFdfS//LhaJ HvQZXg3fLCfzynmPjlo80+GmfOqkNUkTuVtOyHT7XkhLnie+l/I9I7Pj36k2kiy4 i0imNlXaiIh9dlhPsQkzzbbaZDxbYBZ8Yiyvt4w6nI5IkNMc6nfUVGl+KZTBRFos 9NCuE/BhhTO1BH8j/vBxzH/wUA2mxPBeWac3bt+iHM+CYuiTiCJY48/SfR6NnbvA dgR9AaMqAO4ecJZzqFYTNVKPnsRKiWt8l3hEbfBLCF2B5VIQoQ+L8Ix0afPxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBsAhGj/IL+HmoaEotS9v65hAxg8wHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ5B22qplAG9SHhhDZS2MC3bgd9fXJ9Q3vDf bP57QS44cLsiqiqQgB+EszeFi1lNGLXUhtgMa/ci1L76KIzwT+fZGYKveH7c1jBI EQugr+Zfr/Rjti777tIl96nriuEtctE/a3m7pxwTJTpnazn59SKwdj9j2cVfEUNa +XcTb0sl6WZI1I9lMlh+vYqiYASk+U2PaY8fTCGfkdWA8kamBBiteruoT5YDEUKV uCfiUufIfxYzxRmFn+gnyzigLPTqANYAWDcrxlBOCPjg2uipCiMbhhnB/sHs/SZm v3l8LOp+SjpvR4XGxkaXyTiJTmQSp2g61vOZPNmznnsXsHqSyRk= -----END CERTIFICATE-----Generated at Thu Mar 19 09:59:58 2026 by rpki-client