$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: mNulOsnK8Ol2tSNXPrVGhlnG8xrusu3c04T4q4+vwB8= Subject key identifier: 23:D5:4A:6C:1A:E1:E5:43:C7:8F:DE:26:F8:E2:AB:BB:35:C7:A3:51 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 7A7455E18BE8544D8A10114BE21FA06A9E0F80BA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 0181 Signing time: Sat 07 Mar 2026 14:32:40 +0000 Manifest this update: Sat 07 Mar 2026 14:27:40 +0000 Manifest next update: Tue 10 Mar 2026 17:59:40 +0000 Files and hashes: 1: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: ZR9extkcLG82qeVBQS4GMXbLMrbwX3w7sgq3w42th8Q=) 2: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) 3: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 22:43:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:74:55:e1:8b:e8:54:4d:8a:10:11:4b:e2:1f:a0:6a:9e:0f:80:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Mar 7 14:27:40 2026 GMT Not After : Mar 10 17:59:40 2026 GMT Subject: CN=23D54A6C1AE1E543C78FDE26F8E2ABBB35C7A351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2a:e0:b0:dc:6c:b8:91:4d:32:ea:2c:87:de: bf:87:39:ec:49:0d:77:b3:cc:d3:b7:b3:f4:39:7e: 62:8d:05:10:63:fd:b5:a5:8b:e3:71:37:6d:74:24: 35:a5:30:33:30:d7:97:5a:5b:99:78:95:a8:5b:14: a8:a3:51:ba:3a:06:f6:8b:99:dd:96:af:63:cf:90: 5a:e7:3c:62:73:3e:4d:3d:cd:b8:e0:80:ee:9c:33: 3c:2a:27:97:3c:de:20:93:01:a4:f4:cf:e8:b5:be: 1c:9d:f7:da:52:6e:7f:07:74:b4:df:3f:8b:47:7f: 37:b0:0d:ce:a1:f6:1d:6c:af:a4:e2:71:d8:17:4d: 48:ba:d0:bc:d2:c2:14:30:e3:8c:e2:d3:68:46:38: 69:db:78:71:98:83:e3:1b:bb:9a:73:a6:50:2a:e1: bc:cb:a1:a5:a6:7b:66:13:3e:83:80:5d:ab:3f:f9: da:24:37:0a:94:7d:db:1f:8f:94:43:6f:47:96:7c: 23:b5:2e:37:70:63:9f:26:8b:a6:e2:11:62:32:37: 6c:e6:63:c1:4b:53:c5:f5:e9:92:df:e7:14:13:d8: 27:d7:26:ee:62:63:ea:b0:26:63:14:2a:c1:da:6c: bb:78:03:53:93:4a:5f:2a:e3:6f:3d:25:c9:7f:03: 0a:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D5:4A:6C:1A:E1:E5:43:C7:8F:DE:26:F8:E2:AB:BB:35:C7:A3:51 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:cd:16:f4:59:d6:d5:b7:65:04:20:9f:0f:49:e0:dc:93:64: d2:6c:6d:c9:db:84:f4:14:67:7a:01:bd:d4:d6:1c:24:56:b7: 21:43:d9:ca:ad:28:74:ef:8f:8b:d2:0c:30:a0:55:17:76:66: 25:0b:5f:21:d4:8b:a2:ec:95:a3:7a:60:82:16:ed:6f:ac:40: 2e:8c:52:94:d4:7b:63:dc:c3:40:4a:5f:55:fe:fc:93:8c:b0: 39:74:a7:df:f3:11:6c:cc:3b:2a:5a:9e:22:86:09:89:97:1a: 19:4e:b8:87:ff:aa:40:e5:ae:31:e4:b8:d8:55:a8:73:e7:a4: 60:80:04:42:16:6d:ee:cb:49:e6:78:f4:34:3d:12:6b:09:85: 9a:c9:23:62:b3:8d:f5:38:e0:fa:ee:54:ea:9d:c7:40:9f:ad: a2:ae:1f:0b:6d:5f:1d:5e:fb:ea:ec:51:6e:11:2e:44:b2:5e: 63:1d:5e:87:89:37:44:e8:02:79:74:e7:77:20:03:1b:c4:f1: 44:5c:e2:91:a4:20:80:8b:46:30:ff:07:8f:44:88:0e:0d:36: 46:90:d7:b4:9b:86:60:93:a2:f2:d4:0c:be:60:21:df:20:43: 31:48:84:f6:fa:93:b0:c4:ae:b8:e4:29:12:c9:ac:17:0c:5a: 06:b3:83:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenRV4YvoVE2KEBFL4h+gap4PgLowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNjAzMDcxNDI3NDBaFw0yNjAzMTAxNzU5NDBaMDMxMTAvBgNV BAMTKDIzRDU0QTZDMUFFMUU1NDNDNzhGREUyNkY4RTJBQkJCMzVDN0EzNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZKuCw3Gy4kU0y6iyH3r+HOexJ DXezzNO3s/Q5fmKNBRBj/bWli+NxN210JDWlMDMw15daW5l4lahbFKijUbo6BvaL md2Wr2PPkFrnPGJzPk09zbjggO6cMzwqJ5c83iCTAaT0z+i1vhyd99pSbn8HdLTf P4tHfzewDc6h9h1sr6TicdgXTUi60LzSwhQw44zi02hGOGnbeHGYg+Mbu5pzplAq 4bzLoaWme2YTPoOAXas/+dokNwqUfdsfj5RDb0eWfCO1LjdwY58mi6biEWIyN2zm Y8FLU8X16ZLf5xQT2CfXJu5iY+qwJmMUKsHabLt4A1OTSl8q4289Jcl/AwoVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9VKbBrh5UPHj94m+OKruzXHo1EwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK3NFvRZ1tW3ZQQgnw9J4NyTZNJsbcnbhPQU Z3oBvdTWHCRWtyFD2cqtKHTvj4vSDDCgVRd2ZiULXyHUi6LslaN6YIIW7W+sQC6M UpTUe2Pcw0BKX1X+/JOMsDl0p9/zEWzMOypaniKGCYmXGhlOuIf/qkDlrjHkuNhV qHPnpGCABEIWbe7LSeZ49DQ9EmsJhZrJI2KzjfU44PruVOqdx0CfraKuHwttXx1e ++rsUW4RLkSyXmMdXoeJN0ToAnl053cgAxvE8URc4pGkIICLRjD/B49EiA4NNkaQ 17SbhmCTovLUDL5gId8gQzFIhPb6k7DErrjkKRLJrBcMWgazg/c= -----END CERTIFICATE-----Generated at Sun Mar 8 00:39:52 2026 by rpki-client