$ rpki-client -vvf repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft File: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft (raw, json) Hash identifier: tpkqaRG1qIzKVnc4X9Oc8dwm2fIE1kAHtEn5uKxOn/w= Subject key identifier: 38:2A:B0:29:72:91:84:D9:BF:98:E2:35:48:E9:38:89:AA:DD:DA:7E Authority key identifier: 41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 Certificate issuer: /CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Certificate serial: 320CCCFC2045C8AAEA1D2F0F1719EDBA4372BFF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft Manifest number: 0143 Signing time: Fri 06 Mar 2026 13:50:47 +0000 Manifest this update: Fri 06 Mar 2026 13:45:47 +0000 Manifest next update: Mon 09 Mar 2026 17:01:47 +0000 Files and hashes: 1: 3135372e32302e3232302e302f32342d3234203d3e20313532343236.roa (hash: qz1dXSjmkF1AA5Ei88d+aInM4zHfe9p4wjNpf+FYrqI=) 2: 3135372e32302e3232312e302f32342d3234203d3e20313532343236.roa (hash: JrpOhdiy+mBFESSL7rD9ukXYen5fXGnMpvaEHRT8ihU=) 3: 3135372e32302e3232302e302f32332d3233203d3e20313532343236.roa (hash: aIHodB1nz1DhifH6iuPw3Hsr0XqaD481RG1+0C9lrxQ=) 4: 41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl (hash: iTU5GTsi0ACMQrlscSddLvZT0FayIG9FWwLSogx7c0A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:0c:cc:fc:20:45:c8:aa:ea:1d:2f:0f:17:19:ed:ba:43:72:bf:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4 Validity Not Before: Mar 6 13:45:47 2026 GMT Not After : Mar 9 17:01:47 2026 GMT Subject: CN=382AB029729184D9BF98E23548E93889AADDDA7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:40:95:3a:83:7c:31:e8:06:cc:0f:49:59:34: a8:78:40:57:97:d8:8e:c0:9d:ec:ec:b7:e9:8f:93: ae:13:2e:5d:bd:fb:1d:d0:a1:86:67:f1:85:f3:c1: ff:8f:9f:9c:1a:f9:15:9a:7d:de:10:e0:91:64:2f: 62:3f:a4:6d:75:c5:90:ef:66:11:a9:41:2c:49:22: 8b:ec:16:60:71:9e:e0:7d:cc:52:ac:e9:6b:af:59: c7:44:5e:f6:76:01:c3:93:f9:dc:ea:24:5f:fc:15: 01:ad:7f:ea:c2:35:b6:dc:23:ff:f9:86:18:0e:54: ed:f5:4e:c5:26:91:a1:65:8a:9b:72:df:e6:f5:08: 80:e7:c1:a8:06:1a:f7:cf:9a:af:8a:05:c4:eb:40: b1:9b:ac:35:40:ae:7e:57:72:e9:61:e8:24:b3:2c: 59:e3:a2:69:bd:38:73:ce:ce:49:b6:ce:a5:31:bb: 08:f6:eb:c5:96:65:a7:2d:12:93:e6:06:77:dd:2a: 07:ce:5f:56:0b:08:3f:8a:59:68:ae:72:65:fc:6e: 01:b7:bc:18:20:a7:a4:1f:19:90:33:d1:66:1d:e4: fc:54:00:10:45:1b:56:7d:5c:41:bc:62:6f:99:a8: c0:51:4b:e8:bc:de:7d:a5:17:9f:d5:1b:19:a6:83: c0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:2A:B0:29:72:91:84:D9:BF:98:E2:35:48:E9:38:89:AA:DD:DA:7E X509v3 Authority Key Identifier: keyid:41:A4:79:AD:6B:97:4B:50:B9:9A:0D:FC:BE:24:FF:8A:AC:44:18:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0edd4ccb-42e3-4b72-9193-e918e7b3067d/0/41A479AD6B974B50B99A0DFCBE24FF8AAC4418D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:74:30:10:8a:e7:b2:fd:09:82:2b:fc:42:a0:7c:b6:04:92: e7:ee:88:da:d9:38:80:cf:bb:7c:fd:4f:09:14:b9:7f:51:fb: 53:16:4b:0e:9c:c7:18:6d:41:82:9f:5d:5e:46:61:65:ce:cd: 21:ea:91:3a:b1:67:82:0f:e0:51:db:22:d5:32:0a:92:4c:ab: d6:cf:27:8e:6a:57:72:bc:23:6f:a3:a4:74:8d:81:bf:21:e2: 9f:a6:8a:c9:54:08:ba:7f:95:02:f6:e3:65:d8:3a:22:10:2b: 74:c0:19:1a:d4:e4:e5:79:f9:28:5e:14:a0:81:f9:e7:c8:51: 7f:77:72:ec:f2:af:d7:ba:61:5d:ee:33:5f:a1:c1:27:48:81: 43:d2:b3:ce:ca:80:2b:e3:cf:16:5b:5d:00:3f:1a:45:4c:76: b0:18:03:99:8b:f5:01:81:2f:21:4a:89:d8:85:2d:a0:14:8f: a1:1e:fd:10:b2:aa:56:96:38:c8:2f:56:9e:c0:a0:06:03:be: 79:75:a5:ef:52:47:f5:6f:74:3e:eb:4a:b6:a2:7a:03:b1:c9: 4a:a9:53:7c:65:0c:ad:75:c6:57:11:81:73:db:fe:b2:69:79: 87:db:be:e5:a8:5e:d3:7b:65:df:54:3f:f1:e1:d0:9b:49:b2: 80:ad:9c:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMgzM/CBFyKrqHS8PFxntukNyv/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFB QzQ0MThENDAeFw0yNjAzMDYxMzQ1NDdaFw0yNjAzMDkxNzAxNDdaMDMxMTAvBgNV BAMTKDM4MkFCMDI5NzI5MTg0RDlCRjk4RTIzNTQ4RTkzODg5QUFERERBN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7QJU6g3wx6AbMD0lZNKh4QFeX 2I7Anezst+mPk64TLl29+x3QoYZn8YXzwf+Pn5wa+RWafd4Q4JFkL2I/pG11xZDv ZhGpQSxJIovsFmBxnuB9zFKs6WuvWcdEXvZ2AcOT+dzqJF/8FQGtf+rCNbbcI//5 hhgOVO31TsUmkaFlipty3+b1CIDnwagGGvfPmq+KBcTrQLGbrDVArn5Xculh6CSz LFnjomm9OHPOzkm2zqUxuwj268WWZactEpPmBnfdKgfOX1YLCD+KWWiucmX8bgG3 vBggp6QfGZAz0WYd5PxUABBFG1Z9XEG8Ym+ZqMBRS+i83n2lF5/VGxmmg8BbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCqwKXKRhNm/mOI1SOk4iard2n4wHwYDVR0j BBgwFoAUQaR5rWuXS1C5mg38viT/iqxEGNQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWRkNGNjYi00MmUzLTRiNzItOTE5My1lOTE4ZTdiMzA2N2QvMC80MUE0NzlBRDZC OTc0QjUwQjk5QTBERkNCRTI0RkY4QUFDNDQxOEQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZGOEFBQzQ0 MThENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVkZDRjY2ItNDJlMy00YjcyLTkx OTMtZTkxOGU3YjMwNjdkLzAvNDFBNDc5QUQ2Qjk3NEI1MEI5OUEwREZDQkUyNEZG OEFBQzQ0MThENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGF0MBCK57L9CYIr/EKgfLYEkufuiNrZOIDP u3z9TwkUuX9R+1MWSw6cxxhtQYKfXV5GYWXOzSHqkTqxZ4IP4FHbItUyCpJMq9bP J45qV3K8I2+jpHSNgb8h4p+mislUCLp/lQL242XYOiIQK3TAGRrU5OV5+SheFKCB +efIUX93cuzyr9e6YV3uM1+hwSdIgUPSs87KgCvjzxZbXQA/GkVMdrAYA5mL9QGB LyFKidiFLaAUj6Ee/RCyqlaWOMgvVp7AoAYDvnl1pe9SR/VvdD7rSraiegOxyUqp U3xlDK11xlcRgXPb/rJpeYfbvuWoXtN7Zd9UP/Hh0JtJsoCtnN0= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:42 2026 by rpki-client