$ rpki-client -vvf repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft File: 846D8A4B978C6F595D44EACDB8259295CD43C499.mft (raw, json) Hash identifier: +/PPgt//8v8HrSAczMEELT1y0JJBHTlg/Vg+Na4JxKY= Subject key identifier: A3:EB:E6:96:45:37:7C:9B:9F:E1:A6:9F:CC:32:5D:DE:AC:C7:E6:40 Authority key identifier: 84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 Certificate issuer: /CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Certificate serial: 19A585513027FFC5352DE6A2B5BA328BD32B1E80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft Manifest number: 017A Signing time: Fri 20 Mar 2026 03:00:56 +0000 Manifest this update: Fri 20 Mar 2026 02:55:56 +0000 Manifest next update: Mon 23 Mar 2026 12:50:56 +0000 Files and hashes: 1: 846D8A4B978C6F595D44EACDB8259295CD43C499.crl (hash: wAb3t+AX9UPx+yDpyZCB2QZVYm/YWSt7V6FogebSpr4=) 2: 3130332e3231332e3233352e302f32342d3234203d3e20313531303033.roa (hash: jkC15twdSo2VVxRSy9px5K0BC1HIC59h8vBYUT6CWkg=) 3: 3130332e3231332e3233352e302f32342d3234203d3e20313337333636.roa (hash: Lsn42fS5u6tzmVAFqel+kOrjmVEuvr9qNasBHNEDW8Y=) 4: 3130332e3231332e3233342e302f32342d3234203d3e20313336383733.roa (hash: SVn/IknycpzSOwxi7uz3uMCs0oz5ucYpmEXX6TOqW1w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 23 Mar 2026 12:50:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:a5:85:51:30:27:ff:c5:35:2d:e6:a2:b5:ba:32:8b:d3:2b:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846D8A4B978C6F595D44EACDB8259295CD43C499 Validity Not Before: Mar 20 02:55:56 2026 GMT Not After : Mar 23 12:50:56 2026 GMT Subject: CN=A3EBE69645377C9B9FE1A69FCC325DDEACC7E640 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:75:b7:b0:1d:e8:5e:ea:74:3a:5b:f1:82:fd: 32:83:19:06:ed:7f:b4:1d:18:99:3f:3a:f2:33:bc: b8:fa:5c:d5:84:af:63:02:ce:12:56:a3:ac:7f:c4: 88:7f:2b:d2:f1:b1:3a:f4:93:34:7c:6f:8e:c4:09: 94:93:fd:52:ab:6c:d6:a4:59:83:b6:67:06:e8:60: 04:ec:e9:69:b0:d8:1f:52:5f:5b:05:f5:69:a1:ec: 32:88:ee:20:81:b8:a3:70:61:67:f5:ad:42:fa:f1: 94:1c:a9:20:87:50:7d:b1:33:05:4d:dd:49:7b:7d: 3f:2a:e2:99:6e:0d:9c:30:cd:41:25:e5:b7:29:b3: f2:b9:69:2e:c1:53:1d:a1:37:70:67:bb:68:66:83: fe:7d:ce:e2:f9:86:b2:fb:35:a6:56:42:d6:47:9e: 6a:65:57:ad:93:e1:42:38:06:c2:19:f9:51:f7:b2: 81:b8:fc:7f:d7:5e:28:11:b6:39:f4:bf:25:73:a6: 6a:5f:f9:22:d7:5f:ab:f5:ad:6f:39:37:61:f3:d6: ed:b6:d9:e5:36:61:ef:d6:b6:09:3d:60:5a:cb:49: 16:ce:f8:65:b6:cd:6f:6e:c3:8f:54:a3:96:2f:93: 30:83:ff:6a:46:89:35:28:39:d6:5b:16:9a:7b:d9: b5:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:EB:E6:96:45:37:7C:9B:9F:E1:A6:9F:CC:32:5D:DE:AC:C7:E6:40 X509v3 Authority Key Identifier: keyid:84:6D:8A:4B:97:8C:6F:59:5D:44:EA:CD:B8:25:92:95:CD:43:C4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846D8A4B978C6F595D44EACDB8259295CD43C499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd7fa210-5f25-4f0b-89a5-7d00a354a907/0/846D8A4B978C6F595D44EACDB8259295CD43C499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:06:c0:2c:b0:9c:3e:d0:67:67:ec:f1:0a:be:f6:39:6b:9a: 83:f9:fc:78:5f:d6:73:1b:41:49:3e:58:83:61:b7:5a:d3:18: 4a:b6:5b:6f:cb:51:17:a8:e6:2a:4e:9a:46:2d:87:87:1b:65: 89:d0:09:00:e2:39:67:10:79:8e:b3:20:64:e7:b6:21:f5:29: d8:ee:36:0c:91:5d:06:4e:8d:a3:9e:9f:b1:3d:4f:26:51:7c: f5:5c:62:3e:8f:d1:18:2f:a6:50:a4:1d:17:1c:ca:27:f4:0f: 7a:cf:43:52:99:38:07:f8:f4:c7:60:3a:c4:1a:f1:e5:f2:7d: 72:dd:56:34:1a:11:07:b6:f1:13:b9:61:8a:f5:91:0d:22:75: 4b:3e:a5:8e:d4:ee:91:2f:96:78:b0:5e:49:b0:2e:ac:18:83: d2:94:72:52:ca:f8:6f:7c:20:5e:b7:fc:11:b6:da:e6:e0:04: fa:ab:31:ab:8d:50:7a:8e:30:02:d4:b1:da:3f:cd:0b:42:17: 9d:7f:a7:92:ae:49:c9:c4:4f:99:70:27:05:66:c0:75:4b:ae: 6f:fc:21:1d:72:ad:cd:57:ed:c6:87:fb:52:00:e7:60:5b:83: b0:15:a8:10:34:d0:5e:20:cd:8f:58:3a:ef:c1:f3:e9:20:68: c4:56:1c:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGaWFUTAn/8U1Leaitboyi9MrHoAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVD RDQzQzQ5OTAeFw0yNjAzMjAwMjU1NTZaFw0yNjAzMjMxMjUwNTZaMDMxMTAvBgNV BAMTKEEzRUJFNjk2NDUzNzdDOUI5RkUxQTY5RkNDMzI1RERFQUNDN0U2NDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8dbewHehe6nQ6W/GC/TKDGQbt f7QdGJk/OvIzvLj6XNWEr2MCzhJWo6x/xIh/K9LxsTr0kzR8b47ECZST/VKrbNak WYO2ZwboYATs6Wmw2B9SX1sF9Wmh7DKI7iCBuKNwYWf1rUL68ZQcqSCHUH2xMwVN 3Ul7fT8q4pluDZwwzUEl5bcps/K5aS7BUx2hN3Bnu2hmg/59zuL5hrL7NaZWQtZH nmplV62T4UI4BsIZ+VH3soG4/H/XXigRtjn0vyVzpmpf+SLXX6v1rW85N2Hz1u22 2eU2Ye/Wtgk9YFrLSRbO+GW2zW9uw49Uo5YvkzCD/2pGiTUoOdZbFpp72bU1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo+vmlkU3fJuf4aafzDJd3qzH5kAwHwYDVR0j BBgwFoAUhG2KS5eMb1ldROrNuCWSlc1DxJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDdmYTIxMC01ZjI1LTRmMGItODlhNS03ZDAwYTM1NGE5MDcvMC84NDZEOEE0Qjk3 OEM2RjU5NUQ0NEVBQ0RCODI1OTI5NUNENDNDNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTkyOTVDRDQz QzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQ3ZmEyMTAtNWYyNS00ZjBiLTg5 YTUtN2QwMGEzNTRhOTA3LzAvODQ2RDhBNEI5NzhDNkY1OTVENDRFQUNEQjgyNTky OTVDRDQzQzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADgGwCywnD7QZ2fs8Qq+9jlrmoP5/Hhf1nMb QUk+WINht1rTGEq2W2/LUReo5ipOmkYth4cbZYnQCQDiOWcQeY6zIGTntiH1Kdju NgyRXQZOjaOen7E9TyZRfPVcYj6P0RgvplCkHRccyif0D3rPQ1KZOAf49MdgOsQa 8eXyfXLdVjQaEQe28RO5YYr1kQ0idUs+pY7U7pEvlniwXkmwLqwYg9KUclLK+G98 IF63/BG22ubgBPqrMauNUHqOMALUsdo/zQtCF51/p5KuScnET5lwJwVmwHVLrm/8 IR1yrc1X7caH+1IA52Bbg7AVqBA00F4gzY9YOu/B8+kgaMRWHK0= -----END CERTIFICATE-----Generated at Fri Mar 20 22:52:20 2026 by rpki-client