$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft File: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft (raw, json) Hash identifier: gQ2vyB3kk7lQ3FGgTrUBWzM4kFQyQXr9F18u2uHMVgY= Subject key identifier: 03:DE:64:46:08:14:46:BD:3D:D7:5E:3B:8D:25:4B:57:02:B2:73:4C Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Certificate serial: 64FD46BAD29BBCB0F2C1F4F86216A7FFFE0D83E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft Manifest number: 056D Signing time: Wed 18 Mar 2026 22:21:04 +0000 Manifest this update: Wed 18 Mar 2026 22:16:04 +0000 Manifest next update: Sun 22 Mar 2026 05:11:04 +0000 Files and hashes: 1: 3232332e32352e3130362e302f32342d3234203d3e20313336383733.roa (hash: S8lyObQBOuPDRueBj8YjzK0Yqke0dcnMl7Vcc48vuVs=) 2: 3232332e32352e3130352e302f32342d3234203d3e2034383231.roa (hash: 8gu4g1bdcjin/i0TEIycNgxzwZksIdfr4ERNzQVV1jI=) 3: 3232332e32352e3130382e302f32342d3234203d3e2034383231.roa (hash: kXwkhbJ+oGBQpIPdrmdbXU4UMfG2qJFbyPtaW45RBFo=) 4: 4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl (hash: RCezu9PBU7HyMET2qJkW3rbcPz6MqCV/OIOR05BpSMc=) 5: 3232332e32352e39362e302f32312d3234203d3e2039333431.roa (hash: Qjv/mGfQRB5AB46dWcHhxxNcs3aS1PJFtKLeGoBkxi0=) 6: 3232332e32352e3130342e302f32342d3234203d3e20313530323238.roa (hash: Lkl4hSR7NGSEzKzZzmu1qkwANNNPQYa46Fii80W7KSg=) 7: 3232332e32352e3130372e302f32342d3234203d3e20313439373138.roa (hash: tYzvnm/bKabZ0lC7zrGJWB9MDY8UVJOHdIV1ii9uRtA=) 8: 3232332e32352e3131312e302f32342d3234203d3e20313431363037.roa (hash: hi3RbUon3vVwgiqeI1gyjrmQwwjp0fD8/eAvTLaFma0=) 9: 3232332e32352e3131302e302f32342d3234203d3e20313336383733.roa (hash: zYSXmMIYnVcnyUqfnxKNKO1jJpruvRifzdtqmQbpII4=) 10: 3232332e32352e3130392e302f32342d3234203d3e20313439373138.roa (hash: d3eM98YfiQHd35IoK+KK/VXjFcXTY4k6PTjZu1TQR90=) 11: 323430323a613530303a3a2f33322d3332203d3e2034383231.roa (hash: moNwAWlPkj0rtokbSnZwVDheKPDbut9HTHNYooRQM7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Mar 2026 05:11:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:fd:46:ba:d2:9b:bc:b0:f2:c1:f4:f8:62:16:a7:ff:fe:0d:83:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787 Validity Not Before: Mar 18 22:16:04 2026 GMT Not After : Mar 22 05:11:04 2026 GMT Subject: CN=03DE6446081446BD3DD75E3B8D254B5702B2734C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bb:02:36:af:43:dd:60:70:4c:64:dd:1f:06: bd:37:c9:26:33:b3:52:e6:2e:bc:50:d7:66:a8:1c: 51:da:a1:8e:36:bf:32:e1:67:b4:b9:58:5c:28:b0: c7:64:a1:13:27:b2:b8:57:52:dd:a7:b3:36:85:5f: 8f:c8:0b:c7:8b:f9:27:de:df:2e:e2:30:74:26:57: 30:42:5f:aa:07:ae:08:09:74:bf:90:b7:b3:cb:bc: ec:dd:9b:98:f9:e6:af:d9:a6:34:99:4e:09:fd:ce: 97:ad:84:7c:e0:1f:ef:1b:46:f1:f5:ff:73:04:2d: e2:82:ee:1e:39:28:5c:25:c6:bd:10:e7:1d:5e:aa: a8:97:93:36:75:6f:49:08:62:c9:ac:e8:cb:cb:63: a5:70:30:4d:eb:0c:0d:84:9a:66:53:42:62:5d:92: 8d:f3:e1:ec:07:db:ec:86:c3:0f:b4:0f:f6:df:7e: dc:00:6c:cc:c4:a8:2a:5f:53:72:16:ed:51:86:26: 32:eb:91:32:39:88:23:4a:8c:0d:fb:7b:ef:98:7c: 44:bf:c9:8b:b5:32:7a:14:5d:86:a1:50:8e:4c:1e: e1:23:f3:df:e3:d3:d3:79:2f:4a:9c:54:23:96:f4: 06:2b:e4:21:43:50:c5:5e:10:a2:8b:e1:9b:56:05: fd:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DE:64:46:08:14:46:BD:3D:D7:5E:3B:8D:25:4B:57:02:B2:73:4C X509v3 Authority Key Identifier: keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:8f:09:bd:a9:9f:39:2b:dd:24:77:b4:e8:82:03:89:3c:6e: 6f:de:d5:c1:5d:be:01:17:1e:ef:81:f9:a2:32:ca:55:9b:0d: 34:8d:c4:1b:b2:f9:4e:b5:cb:5e:e1:a4:49:87:95:a2:3f:05: 4f:60:ae:5c:00:f0:19:a0:ed:8a:39:59:65:59:4d:bc:f3:e2: a7:ee:6d:d3:f7:7d:7f:43:78:9b:60:e3:2a:fb:3d:f3:4d:2a: 21:c5:0c:bc:eb:0c:37:56:21:ed:77:ff:26:a1:45:d4:44:cf: 2b:29:29:01:9c:02:7d:4a:ea:ff:47:bd:8b:2d:15:20:c9:37: 9f:ed:fd:19:85:01:f8:45:7d:87:2b:03:60:d1:47:13:ce:c6: cd:3a:5c:57:74:38:d9:06:f4:bb:6d:b3:8b:2d:92:c9:9c:51: 3f:9d:2d:3c:72:f4:57:32:67:66:25:5b:3c:a2:9d:b6:17:dd: e6:17:9c:1b:e9:30:fe:ff:93:a1:d3:63:f8:87:b4:3f:13:d4: a2:2a:0c:7e:fb:05:7a:70:59:e8:b2:83:1b:01:0d:1a:34:db: 92:5e:7c:c4:0e:d3:59:46:91:e3:6b:70:91:8e:bb:a7:92:ae: 7c:65:9c:06:2f:a0:85:a9:27:88:b9:96:d3:e8:41:d9:4a:02: fd:d2:cf:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZP1GutKbvLDywfT4Yhan//4Ng+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3 RkMzODc4NzAeFw0yNjAzMTgyMjE2MDRaFw0yNjAzMjIwNTExMDRaMDMxMTAvBgNV BAMTKDAzREU2NDQ2MDgxNDQ2QkQzREQ3NUUzQjhEMjU0QjU3MDJCMjczNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2uwI2r0PdYHBMZN0fBr03ySYz s1LmLrxQ12aoHFHaoY42vzLhZ7S5WFwosMdkoRMnsrhXUt2nszaFX4/IC8eL+Sfe 3y7iMHQmVzBCX6oHrggJdL+Qt7PLvOzdm5j55q/ZpjSZTgn9zpethHzgH+8bRvH1 /3MELeKC7h45KFwlxr0Q5x1eqqiXkzZ1b0kIYsms6MvLY6VwME3rDA2EmmZTQmJd ko3z4ewH2+yGww+0D/bfftwAbMzEqCpfU3IW7VGGJjLrkTI5iCNKjA37e++YfES/ yYu1MnoUXYahUI5MHuEj89/j09N5L0qcVCOW9AYr5CFDUMVeEKKL4ZtWBf0lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA95kRggURr091147jSVLVwKyc0wwHwYDVR0j BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz ODc4Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGQyNTQ0MTktNTNiZS00YWQ0LWJm N2YtMjlmODkxMjUyM2QwLzAvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMz Mzk3RkMzODc4Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIePCb2pnzkr3SR3tOiCA4k8bm/e1cFdvgEX Hu+B+aIyylWbDTSNxBuy+U61y17hpEmHlaI/BU9grlwA8Bmg7Yo5WWVZTbzz4qfu bdP3fX9DeJtg4yr7PfNNKiHFDLzrDDdWIe13/yahRdREzyspKQGcAn1K6v9HvYst FSDJN5/t/RmFAfhFfYcrA2DRRxPOxs06XFd0ONkG9Ltts4stksmcUT+dLTxy9Fcy Z2YlWzyinbYX3eYXnBvpMP7/k6HTY/iHtD8T1KIqDH77BXpwWeiygxsBDRo025Je fMQO01lGkeNrcJGOu6eSrnxlnAYvoIWpJ4i5ltPoQdlKAv3Szzc= -----END CERTIFICATE-----Generated at Fri Mar 20 12:46:07 2026 by rpki-client