$ rpki-client -vvf repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft File: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft (raw, json) Hash identifier: 1kLJjZ7BawsJVsDHunjh3QWdjcn6y4ztPQyZJyo9+ag= Subject key identifier: 77:AD:2D:CA:A1:4D:90:FD:0E:BF:35:A3:74:29:7E:C4:6E:00:21:B8 Authority key identifier: A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 Certificate issuer: /CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Certificate serial: 6C0A48F83A5D1B3674F482A4ABCCC0DD54A76AE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft Manifest number: 0118 Signing time: Sat 07 Mar 2026 00:51:18 +0000 Manifest this update: Sat 07 Mar 2026 00:46:18 +0000 Manifest next update: Tue 10 Mar 2026 04:02:18 +0000 Files and hashes: 1: 3135372e36362e3234382e302f32332d3234203d3e20313532373937.roa (hash: vC1sLrROQammNbgh64OVHa3goyUf/oRsNt6WGQKKJQo=) 2: A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl (hash: Rcbr6PMT6aipIioI1QKozot9lFnyH+5eZB7OrEdQRcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0a:48:f8:3a:5d:1b:36:74:f4:82:a4:ab:cc:c0:dd:54:a7:6a:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44 Validity Not Before: Mar 7 00:46:18 2026 GMT Not After : Mar 10 04:02:18 2026 GMT Subject: CN=77AD2DCAA14D90FD0EBF35A374297EC46E0021B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:1e:d0:ef:2e:02:81:11:6a:26:81:40:d3:4a: c6:18:68:f8:4a:5c:04:49:15:b4:7f:3f:10:cc:37: 43:4c:32:7c:50:e7:9e:26:99:26:0e:8f:d9:96:59: 4b:45:be:89:78:41:55:71:da:8f:70:fc:6f:24:f9: 00:34:3f:5e:3a:2e:17:ee:6b:b6:d1:9a:dc:be:0a: 23:8a:62:35:ca:bc:08:e7:63:0f:89:51:32:9c:94: ac:e1:de:f2:18:96:57:4f:bb:3e:54:7c:27:78:a3: 68:a7:43:67:b3:70:e4:02:00:76:db:cc:f9:0e:9e: e3:e8:63:48:4c:60:b0:93:1f:22:7d:e8:d2:89:58: f2:f2:6e:06:48:49:f8:9f:48:4d:9b:b7:1b:cd:c1: 4c:a7:0c:96:26:ff:b4:b4:a8:34:10:fc:50:cc:8c: 77:a3:86:5e:5e:53:db:3c:a3:b2:e9:e9:12:91:a6: bb:23:36:3f:ad:d1:2e:44:90:d5:e2:e8:bd:75:c7: e5:fe:d4:90:49:9c:d5:1d:d5:5b:0a:a3:3a:3d:8f: d7:dc:e3:d0:7a:8a:7a:fc:29:2c:18:45:77:86:9b: d9:8a:06:76:e1:56:22:75:17:51:d1:9d:77:a5:23: 43:ff:20:50:e0:6a:fb:f4:b7:0f:d6:dc:9d:15:16: 8b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:AD:2D:CA:A1:4D:90:FD:0E:BF:35:A3:74:29:7E:C4:6E:00:21:B8 X509v3 Authority Key Identifier: keyid:A4:B6:31:C8:CF:E0:EE:72:AC:D5:F2:08:FC:12:39:06:4F:6C:DE:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3991f7a-0a71-4f0d-933f-ecf813530274/0/A4B631C8CFE0EE72ACD5F208FC1239064F6CDE44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f9:df:c4:4b:76:1c:24:35:2a:83:dd:86:72:8c:dd:9a:9f: 5a:68:22:4f:cc:68:00:1b:57:eb:98:f8:6c:6c:b3:ab:38:9b: 2e:58:f2:94:42:99:6e:57:3e:fa:fd:a4:54:c5:12:18:d3:40: 42:25:e7:2c:c8:5a:ec:46:dc:39:69:54:08:2d:aa:3f:28:5d: 64:39:8f:50:e9:c6:6c:d6:5a:f3:03:00:c2:54:4e:21:d4:7a: 84:67:18:29:b1:1b:2f:31:a8:b1:35:a1:9f:d7:8e:29:ff:3c: 82:30:4f:82:33:f7:76:a3:ea:8a:31:eb:61:a5:46:68:13:2c: 49:19:1b:7a:41:5f:20:0b:e5:64:20:cd:5c:c4:5b:19:5d:fd: f5:21:3d:76:56:95:34:22:74:94:8b:d4:c9:bd:30:21:7c:ad: 75:56:99:7d:5c:3b:19:d9:7d:9a:50:4e:69:72:f5:62:59:ec: c7:56:1a:35:06:2d:42:cc:a9:7d:3f:0b:32:ed:fa:53:4d:69: 5a:43:48:7b:86:4a:b5:5b:05:ff:93:b7:00:48:da:b1:96:b5: 7e:78:17:9e:f0:8f:24:d4:71:98:40:b1:2a:ca:e6:ec:f1:84: 9d:ae:e4:7b:94:25:6e:60:8e:0d:dd:a9:f8:e4:b0:4d:bd:5c: be:da:35:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbApI+DpdGzZ09IKkq8zA3VSnauAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0 RjZDREU0NDAeFw0yNjAzMDcwMDQ2MThaFw0yNjAzMTAwNDAyMThaMDMxMTAvBgNV BAMTKDc3QUQyRENBQTE0RDkwRkQwRUJGMzVBMzc0Mjk3RUM0NkUwMDIxQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBHtDvLgKBEWomgUDTSsYYaPhK XARJFbR/PxDMN0NMMnxQ554mmSYOj9mWWUtFvol4QVVx2o9w/G8k+QA0P146Lhfu a7bRmty+CiOKYjXKvAjnYw+JUTKclKzh3vIYlldPuz5UfCd4o2inQ2ezcOQCAHbb zPkOnuPoY0hMYLCTHyJ96NKJWPLybgZISfifSE2btxvNwUynDJYm/7S0qDQQ/FDM jHejhl5eU9s8o7Lp6RKRprsjNj+t0S5EkNXi6L11x+X+1JBJnNUd1VsKozo9j9fc 49B6inr8KSwYRXeGm9mKBnbhViJ1F1HRnXelI0P/IFDgavv0tw/W3J0VFotnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd60tyqFNkP0OvzWjdCl+xG4AIbgwHwYDVR0j BBgwFoAUpLYxyM/g7nKs1fII/BI5Bk9s3kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mzk5MWY3YS0wYTcxLTRmMGQtOTMzZi1lY2Y4MTM1MzAyNzQvMC9BNEI2MzFDOENG RTBFRTcyQUNENUYyMDhGQzEyMzkwNjRGNkNERTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5MDY0RjZD REU0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjM5OTFmN2EtMGE3MS00ZjBkLTkz M2YtZWNmODEzNTMwMjc0LzAvQTRCNjMxQzhDRkUwRUU3MkFDRDVGMjA4RkMxMjM5 MDY0RjZDREU0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT538RLdhwkNSqD3YZyjN2an1poIk/MaAAb V+uY+Gxss6s4my5Y8pRCmW5XPvr9pFTFEhjTQEIl5yzIWuxG3DlpVAgtqj8oXWQ5 j1DpxmzWWvMDAMJUTiHUeoRnGCmxGy8xqLE1oZ/Xjin/PIIwT4Iz93aj6oox62Gl RmgTLEkZG3pBXyAL5WQgzVzEWxld/fUhPXZWlTQidJSL1Mm9MCF8rXVWmX1cOxnZ fZpQTmly9WJZ7MdWGjUGLULMqX0/CzLt+lNNaVpDSHuGSrVbBf+TtwBI2rGWtX54 F57wjyTUcZhAsSrK5uzxhJ2u5HuUJW5gjg3dqfjksE29XL7aNec= -----END CERTIFICATE-----Generated at Sat Mar 7 17:50:33 2026 by rpki-client