$ rpki-client -vvf repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft File: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft (raw, json) Hash identifier: 3qIiDgS0ZvVkkxs+KDfrzWZYzZAAGWZHKq6+E/6OJ0w= Subject key identifier: 85:E2:42:67:2E:6E:29:BB:34:B7:7C:9B:DC:18:30:0E:8B:0E:33:34 Authority key identifier: 45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 Certificate issuer: /CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Certificate serial: 7F7E747E64C142553EE03B25AC33110E4EF887AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft Manifest number: 010A Signing time: Thu 05 Mar 2026 13:42:34 +0000 Manifest this update: Thu 05 Mar 2026 13:37:34 +0000 Manifest next update: Sun 08 Mar 2026 18:58:34 +0000 Files and hashes: 1: 3135372e36362e3137342e302f32332d3234203d3e20313532373439.roa (hash: 5hBop//FL91nh6eglb7Afoy10VVM0UIJy8JFCFrZk+s=) 2: 4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl (hash: YopSSE5goDayQYeisa3dfae1ZD/maAK5EQik88q7VJQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Mar 2026 18:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:7e:74:7e:64:c1:42:55:3e:e0:3b:25:ac:33:11:0e:4e:f8:87:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4538753AD01FB91D7B028CC53F5AEC24AD6CD082 Validity Not Before: Mar 5 13:37:34 2026 GMT Not After : Mar 8 18:58:34 2026 GMT Subject: CN=85E242672E6E29BB34B77C9BDC18300E8B0E3334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:f9:65:31:f3:c2:18:c6:ea:a3:9c:30:4f:dc: ab:6d:60:a8:19:24:37:62:2a:3c:9c:12:e2:83:77: fb:b0:79:5c:f8:1f:98:83:41:a7:2f:46:9f:82:44: c8:f8:84:81:74:d0:70:bc:23:7a:f5:7d:ab:84:bc: 38:b8:dc:cc:5f:6e:52:48:39:3b:d3:ab:38:5e:02: a7:cb:d6:c5:1d:66:97:bf:09:32:82:92:96:a5:58: 54:c6:fb:23:1d:24:fd:79:dd:51:bc:66:26:86:0e: 39:83:31:01:bb:1d:df:9a:bf:22:94:5f:70:66:42: c6:84:71:3e:c1:42:1e:f3:7f:7f:4c:ad:65:6e:a0: bc:8f:17:93:80:44:c0:18:3a:00:dc:53:5e:29:e1: e7:92:fa:7c:90:44:53:6d:64:0c:5c:c5:9f:01:5f: f7:e6:08:ed:37:16:fe:44:6f:57:80:32:be:a0:f3: d9:20:a4:43:a9:3c:d8:c5:95:49:ad:72:69:48:35: 0b:d1:61:9d:74:79:8c:b7:89:7c:47:1f:fd:5f:20: cc:58:1b:7f:31:01:81:51:80:e4:9c:38:33:cb:69: 25:17:31:d4:64:55:1f:4b:c1:6a:42:b2:43:f5:30: 6a:10:89:27:80:43:09:ad:ca:fc:28:5e:d5:39:38: 0f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:E2:42:67:2E:6E:29:BB:34:B7:7C:9B:DC:18:30:0E:8B:0E:33:34 X509v3 Authority Key Identifier: keyid:45:38:75:3A:D0:1F:B9:1D:7B:02:8C:C5:3F:5A:EC:24:AD:6C:D0:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9b733dcf-9f5e-4775-9ce7-9dd525b44b86/0/4538753AD01FB91D7B028CC53F5AEC24AD6CD082.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:c2:8d:6f:dc:0b:89:48:65:38:47:9c:29:03:28:7c:0c:bf: 40:95:e9:cc:d3:5f:c3:bb:dd:55:49:f2:0b:5a:f5:d3:c4:71: 78:f7:61:77:ce:82:e3:06:cf:5c:50:a9:9f:a8:94:29:33:b6: 59:89:50:4e:d5:1b:73:ed:02:ab:6b:5d:d0:df:68:21:8a:9f: a6:a2:4e:61:87:b6:60:27:79:08:0b:89:72:1f:9c:1c:7f:ab: 6a:6e:b1:20:ff:51:8b:43:15:28:8c:79:0d:2b:45:46:47:c7: 1a:0c:d0:21:46:c5:c7:28:7b:ae:ae:e7:22:df:b1:10:88:e7: da:16:0c:f3:14:33:4a:ad:c4:7d:f7:ec:35:4f:87:82:a3:7d: 1b:ae:b9:eb:90:6a:76:c0:91:dd:3c:28:1d:4d:87:d0:8d:56: 94:05:c4:a6:76:f3:f8:1c:7f:2c:e4:f8:38:0d:71:44:67:5d: ab:ae:4a:18:cf:f0:ea:7a:59:33:87:e4:08:ca:f9:ea:b2:14: ce:7a:c4:d0:aa:4f:76:5c:5b:7f:1d:f9:6d:12:ab:20:cf:2e: fc:c4:11:cd:b2:43:dd:bd:62:6d:19:08:15:94:a9:3b:6e:9b: e1:d0:99:ab:a4:61:96:c1:1d:6e:a4:52:b7:06:ef:88:bc:f9: 1a:79:71:ca -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf350fmTBQlU+4DslrDMRDk74h6swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRB RDZDRDA4MjAeFw0yNjAzMDUxMzM3MzRaFw0yNjAzMDgxODU4MzRaMDMxMTAvBgNV BAMTKDg1RTI0MjY3MkU2RTI5QkIzNEI3N0M5QkRDMTgzMDBFOEIwRTMzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb+WUx88IYxuqjnDBP3KttYKgZ JDdiKjycEuKDd/uweVz4H5iDQacvRp+CRMj4hIF00HC8I3r1fauEvDi43MxfblJI OTvTqzheAqfL1sUdZpe/CTKCkpalWFTG+yMdJP153VG8ZiaGDjmDMQG7Hd+avyKU X3BmQsaEcT7BQh7zf39MrWVuoLyPF5OARMAYOgDcU14p4eeS+nyQRFNtZAxcxZ8B X/fmCO03Fv5Eb1eAMr6g89kgpEOpPNjFlUmtcmlINQvRYZ10eYy3iXxHH/1fIMxY G38xAYFRgOScODPLaSUXMdRkVR9LwWpCskP1MGoQiSeAQwmtyvwoXtU5OA+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUheJCZy5uKbs0t3yb3BgwDosOMzQwHwYDVR0j BBgwFoAURTh1OtAfuR17AozFP1rsJK1s0IIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YjczM2RjZi05ZjVlLTQ3NzUtOWNlNy05ZGQ1MjViNDRiODYvMC80NTM4NzUzQUQw MUZCOTFEN0IwMjhDQzUzRjVBRUMyNEFENkNEMDgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVDMjRBRDZD RDA4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWI3MzNkY2YtOWY1ZS00Nzc1LTlj ZTctOWRkNTI1YjQ0Yjg2LzAvNDUzODc1M0FEMDFGQjkxRDdCMDI4Q0M1M0Y1QUVD MjRBRDZDRDA4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHDCjW/cC4lIZThHnCkDKHwMv0CV6czTX8O7 3VVJ8gta9dPEcXj3YXfOguMGz1xQqZ+olCkztlmJUE7VG3PtAqtrXdDfaCGKn6ai TmGHtmAneQgLiXIfnBx/q2pusSD/UYtDFSiMeQ0rRUZHxxoM0CFGxccoe66u5yLf sRCI59oWDPMUM0qtxH337DVPh4KjfRuuueuQanbAkd08KB1Nh9CNVpQFxKZ28/gc fyzk+DgNcURnXauuShjP8Op6WTOH5AjK+eqyFM56xNCqT3ZcW38d+W0SqyDPLvzE Ec2yQ929Ym0ZCBWUqTtum+HQmaukYZbBHW6kUrcG74i8+Rp5cco= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:42 2026 by rpki-client