$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: EaATX8CsJlP7NvQX84W3tWQZ7Q5NMJWUPEcjuYKXX7I= Subject key identifier: FA:A6:5E:C4:46:D3:42:12:7C:F5:62:1C:4F:7F:76:41:21:1E:D3:D2 Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 48E4BF50A462BCADE5E62DCA03073DCB7C2A9E6D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 013A Signing time: Fri 06 Mar 2026 21:51:50 +0000 Manifest this update: Fri 06 Mar 2026 21:46:50 +0000 Manifest next update: Tue 10 Mar 2026 01:27:50 +0000 Files and hashes: 1: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: L5i/E5G2yR4p96EaiaxVuLqhNScyIzpSwsnYjpL8mEM=) 2: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: H6De9FWejfs2vMpLLE2NvM48+FEbWSfqWIxgiCxHGVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:e4:bf:50:a4:62:bc:ad:e5:e6:2d:ca:03:07:3d:cb:7c:2a:9e:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Mar 6 21:46:50 2026 GMT Not After : Mar 10 01:27:50 2026 GMT Subject: CN=FAA65EC446D342127CF5621C4F7F7641211ED3D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:0a:8e:03:75:ac:db:9d:f2:2b:55:c7:54:08: 76:83:30:06:6e:d1:12:b8:45:9d:53:93:eb:69:4e: 83:01:a5:de:1a:bd:b9:a6:f9:08:ce:79:23:fa:da: 61:7a:fb:f9:17:d5:d1:41:22:8d:c0:0e:9e:6a:f7: 82:3d:7e:7d:dd:0c:26:84:b1:3f:d7:c1:4a:63:51: b8:ee:c5:7f:b7:94:7b:32:88:3d:30:82:e3:f1:dd: 61:05:68:d6:51:d3:2a:6e:ff:4c:65:6d:c2:f0:e7: 44:1c:85:97:a8:49:ac:69:02:8f:76:6b:51:f3:bf: de:23:52:5d:65:e9:80:03:5a:06:5a:c6:04:93:60: 43:0b:68:8c:4d:bc:af:11:7b:7c:c1:9b:cb:f9:79: 7c:a7:8b:12:12:3d:71:88:ef:f2:0d:0b:72:82:8e: ac:66:b6:46:68:d8:f4:85:0b:5d:0c:79:da:7e:d9: 68:83:ae:21:b7:26:78:06:e6:fd:72:dd:a2:03:5b: 82:99:38:0a:30:36:88:9f:1e:4d:fb:cc:f7:dd:c5: b6:fa:17:1b:f0:6b:6f:47:4f:97:bf:6d:12:8e:7c: 78:04:31:e0:00:88:b1:a6:ec:fb:a1:69:54:cf:24: 3c:7d:e6:77:eb:8b:e5:0c:6b:88:f2:ca:80:b4:68: fa:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A6:5E:C4:46:D3:42:12:7C:F5:62:1C:4F:7F:76:41:21:1E:D3:D2 X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:17:37:a3:73:4c:2d:3e:4b:c1:06:56:cd:7a:30:19:09:3e: 7a:0a:75:b3:18:38:fe:8b:a4:65:f4:86:1f:94:5d:6e:15:a8: f1:4c:12:82:67:1e:1e:30:98:13:8c:7a:12:40:ea:32:86:c4: 42:21:1a:09:ac:b0:c2:29:56:69:82:ec:04:35:94:0f:3d:b7: b0:9b:49:95:15:d8:9e:be:14:da:02:4e:c5:bf:3a:89:3f:dd: b7:18:51:15:f3:db:b8:b1:0b:1c:71:12:6f:2f:47:58:94:01: 80:a5:7f:c7:4f:31:c0:b4:74:ec:a3:33:f8:1d:54:8c:4b:c3: 46:22:00:7b:72:53:69:be:3d:ec:02:70:fd:52:6b:8b:78:aa: ec:6f:6e:f3:2d:8b:26:54:9f:24:4f:d9:79:0d:3c:e4:e8:2b: d5:80:ea:b9:eb:a1:e6:77:bd:e3:3a:aa:50:ee:01:30:68:a1: 30:8a:80:6d:29:0e:92:c6:cd:40:f9:18:85:fa:82:a9:b5:85: c0:61:3b:42:e0:db:a5:ac:98:65:98:a7:fe:a8:68:da:da:3a: 1c:2e:12:b5:d5:c4:ce:f1:c1:f8:e8:6a:7b:b1:82:a5:02:ff: ba:7a:fe:e0:17:0c:64:92:37:25:f8:d2:ed:37:fc:bd:8a:3e: 05:fc:31:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSOS/UKRivK3l5i3KAwc9y3wqnm0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNjAzMDYyMTQ2NTBaFw0yNjAzMTAwMTI3NTBaMDMxMTAvBgNV BAMTKEZBQTY1RUM0NDZEMzQyMTI3Q0Y1NjIxQzRGN0Y3NjQxMjExRUQzRDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaCo4DdazbnfIrVcdUCHaDMAZu 0RK4RZ1Tk+tpToMBpd4avbmm+QjOeSP62mF6+/kX1dFBIo3ADp5q94I9fn3dDCaE sT/XwUpjUbjuxX+3lHsyiD0wguPx3WEFaNZR0ypu/0xlbcLw50QchZeoSaxpAo92 a1Hzv94jUl1l6YADWgZaxgSTYEMLaIxNvK8Re3zBm8v5eXynixISPXGI7/INC3KC jqxmtkZo2PSFC10Medp+2WiDriG3JngG5v1y3aIDW4KZOAowNoifHk37zPfdxbb6 Fxvwa29HT5e/bRKOfHgEMeAAiLGm7PuhaVTPJDx95nfri+UMa4jyyoC0aPodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+qZexEbTQhJ89WIcT392QSEe09IwHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcXN6NzTC0+S8EGVs16MBkJPnoKdbMYOP6L pGX0hh+UXW4VqPFMEoJnHh4wmBOMehJA6jKGxEIhGgmssMIpVmmC7AQ1lA89t7Cb SZUV2J6+FNoCTsW/Ook/3bcYURXz27ixCxxxEm8vR1iUAYClf8dPMcC0dOyjM/gd VIxLw0YiAHtyU2m+PewCcP1Sa4t4quxvbvMtiyZUnyRP2XkNPOToK9WA6rnroeZ3 veM6qlDuATBooTCKgG0pDpLGzUD5GIX6gqm1hcBhO0Lg26WsmGWYp/6oaNraOhwu ErXVxM7xwfjoanuxgqUC/7p6/uAXDGSSNyX40u03/L2KPgX8MbE= -----END CERTIFICATE-----Generated at Sat Mar 7 17:49:17 2026 by rpki-client