$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: qvvK7zuaPMY9etrJrImoZcGcP6WaYIymIQXZ1KkrTHg= Subject key identifier: 00:3B:7B:BD:8E:A8:39:1D:D7:57:E4:C7:59:B6:E7:0C:DF:38:0B:A9 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 50D2DF6485DDE4853F61ACFD511C8E651379F27A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 055C Signing time: Sun 22 Mar 2026 03:42:18 +0000 Manifest this update: Sun 22 Mar 2026 03:37:18 +0000 Manifest next update: Wed 25 Mar 2026 13:53:18 +0000 Files and hashes: 1: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 2: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 3: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: FHYBxdXOrHJtwXAugjsZyFtRqI+BkL/OH1FA4PLoEzs=) 4: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 5: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 25 Mar 2026 13:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d2:df:64:85:dd:e4:85:3f:61:ac:fd:51:1c:8e:65:13:79:f2:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Mar 22 03:37:18 2026 GMT Not After : Mar 25 13:53:18 2026 GMT Subject: CN=003B7BBD8EA8391DD757E4C759B6E70CDF380BA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:1e:2c:87:f6:10:92:9c:78:f7:12:2a:15:c9: fe:f4:e9:85:6d:48:88:86:b6:8d:b3:2e:ea:08:12: b2:ac:05:d7:6c:c8:6f:4f:fc:ec:62:ff:96:b2:0f: 58:e8:d0:b5:e6:68:cd:29:f8:76:6b:50:e7:89:6e: 34:47:cf:0c:20:02:3f:4b:ae:48:83:a6:36:ea:6c: 20:76:84:76:c2:32:ec:35:fa:ad:9a:9a:07:fd:58: 6d:11:59:cb:a2:d2:7d:38:f9:01:13:40:a7:c7:a9: 1d:79:4e:4b:4f:6c:7a:8e:be:3e:ea:57:b9:23:13: 5f:b7:5e:92:9f:63:fe:72:90:0a:fb:4c:ab:48:fb: 6a:cc:16:c1:0d:8a:4c:d6:74:b7:99:44:e2:88:2b: b2:28:87:ae:c8:d3:ed:51:71:f6:c0:73:44:e3:1f: f8:68:c0:bf:05:9b:38:6b:54:09:19:68:75:cf:1e: cb:f8:31:e8:c1:9d:73:94:28:87:14:89:ff:9d:b5: 4b:86:ce:a0:3c:42:a2:96:40:3c:61:26:36:05:d5: d3:27:f4:a0:9e:ae:b8:8d:fd:8d:27:57:96:d9:7a: 68:46:90:f9:f9:a2:90:ab:64:0c:e2:7e:f4:23:b5: 56:66:0c:87:af:15:21:69:6c:5d:33:72:51:77:07: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:3B:7B:BD:8E:A8:39:1D:D7:57:E4:C7:59:B6:E7:0C:DF:38:0B:A9 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:d1:1b:08:e6:fa:54:8e:72:ec:5d:a0:a9:77:74:e9:4f:a7: 7f:ec:15:d5:9e:7d:75:79:87:56:cd:0a:35:5b:a0:e4:44:6b: 71:9d:3d:a2:7d:ed:92:ea:8f:22:a9:02:f1:78:b6:36:7f:07: 66:f9:49:ed:f8:e1:64:92:f9:7e:1f:8c:38:1e:62:e3:9f:e7: ae:75:bd:de:df:26:72:ae:b4:e1:15:38:e7:2f:6f:05:2f:c3: 7d:eb:90:89:d5:13:63:20:0c:e0:f4:0f:d6:26:c0:a1:49:aa: 65:f6:04:fd:4e:ad:27:8c:83:1e:d2:e1:6c:fd:b8:93:95:61: f2:bb:03:d3:9e:dc:dc:24:24:4b:06:4f:c9:af:33:76:36:49: df:b7:b3:e4:1b:bd:3d:b5:1c:ce:2c:06:e7:9d:5b:39:aa:14: c3:1b:42:28:ec:e6:64:18:fa:90:c5:3e:98:2d:e2:f8:58:4d: 4e:e6:cf:c3:bf:a4:2d:cb:d7:f1:b5:d2:a9:e3:64:23:23:d8: 8e:d6:30:15:1d:bf:a5:fb:fe:61:52:27:ab:8f:2b:c1:f0:85: 8d:f8:08:c9:e7:d0:ff:c0:14:5b:50:80:81:aa:32:fa:6a:1b: ba:45:a4:49:f0:71:39:2d:7b:0f:14:b8:49:72:45:e2:89:9d: ad:ab:9d:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNLfZIXd5IU/Yaz9URyOZRN58nowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNjAzMjIwMzM3MThaFw0yNjAzMjUxMzUzMThaMDMxMTAvBgNV BAMTKDAwM0I3QkJEOEVBODM5MURENzU3RTRDNzU5QjZFNzBDREYzODBCQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsHiyH9hCSnHj3EioVyf706YVt SIiGto2zLuoIErKsBddsyG9P/Oxi/5ayD1jo0LXmaM0p+HZrUOeJbjRHzwwgAj9L rkiDpjbqbCB2hHbCMuw1+q2amgf9WG0RWcui0n04+QETQKfHqR15TktPbHqOvj7q V7kjE1+3XpKfY/5ykAr7TKtI+2rMFsENikzWdLeZROKIK7Ioh67I0+1RcfbAc0Tj H/howL8FmzhrVAkZaHXPHsv4MejBnXOUKIcUif+dtUuGzqA8QqKWQDxhJjYF1dMn 9KCerriN/Y0nV5bZemhGkPn5opCrZAzifvQjtVZmDIevFSFpbF0zclF3BxJHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUADt7vY6oOR3XV+THWbbnDN84C6kwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI/RGwjm+lSOcuxdoKl3dOlPp3/sFdWefXV5 h1bNCjVboOREa3GdPaJ97ZLqjyKpAvF4tjZ/B2b5Se344WSS+X4fjDgeYuOf5651 vd7fJnKutOEVOOcvbwUvw33rkInVE2MgDOD0D9YmwKFJqmX2BP1OrSeMgx7S4Wz9 uJOVYfK7A9Oe3NwkJEsGT8mvM3Y2Sd+3s+QbvT21HM4sBuedWzmqFMMbQijs5mQY +pDFPpgt4vhYTU7mz8O/pC3L1/G10qnjZCMj2I7WMBUdv6X7/mFSJ6uPK8HwhY34 CMnn0P/AFFtQgIGqMvpqG7pFpEnwcTktew8UuElyReKJna2rnUY= -----END CERTIFICATE-----Generated at Mon Mar 23 06:41:11 2026 by rpki-client