$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: nXKk7nm/clEmzpi55CgJha+NeS3WfVxWgHfQqS9342k= Subject key identifier: CC:61:48:C0:69:9B:3C:1A:2D:52:94:04:9A:C0:34:55:A7:A3:D6:94 Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 45FF871B2EF48B9EB4E1B13F3FA31697A059224F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 0532 Signing time: Thu 16 Apr 2026 17:50:57 +0000 Manifest this update: Thu 16 Apr 2026 17:45:57 +0000 Manifest next update: Mon 20 Apr 2026 03:12:57 +0000 Files and hashes: 1: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) 2: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: sBdEKLAdllLfAsUI+8EKHf87LZCaP4AzE+qCn+bSicY=) 3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 4: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 20 Apr 2026 03:12:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:ff:87:1b:2e:f4:8b:9e:b4:e1:b1:3f:3f:a3:16:97:a0:59:22:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Apr 16 17:45:57 2026 GMT Not After : Apr 20 03:12:57 2026 GMT Subject: CN=CC6148C0699B3C1A2D5294049AC03455A7A3D694 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:09:8f:d9:2f:89:9d:8c:28:5a:ee:10:76:10: 55:70:e9:8f:77:c0:e9:23:ac:77:bb:60:0d:6d:8c: 34:53:3a:49:53:80:25:45:45:67:5e:01:20:69:eb: 06:f1:4f:c0:e0:a7:05:19:82:f7:3f:55:19:96:32: c5:3c:6c:ef:92:37:97:98:02:5d:e2:12:d0:eb:fe: 0f:66:f4:38:e7:2a:30:79:a4:dc:5f:c8:ff:0a:10: e5:64:f7:73:90:75:aa:ef:c7:99:38:22:26:3b:ec: 03:fe:a4:2d:fb:8b:81:13:46:89:28:e3:c1:35:9b: 12:ff:8e:d5:fe:b9:ec:58:cd:15:08:58:ee:24:0c: 1e:ba:6f:dd:ef:d6:fd:31:a7:71:1c:52:7c:c5:85: 9d:95:b9:f3:55:0e:a8:ab:7d:95:3d:3d:fe:52:0f: 7d:c3:07:ae:35:86:d7:07:35:57:fd:67:b9:7d:90: 8b:a4:4f:16:e5:5f:56:9d:9f:c1:2a:d0:4a:e5:e5: f6:d2:34:64:84:e2:1a:24:83:f5:69:19:ca:c8:8a: c1:94:ac:f4:e7:58:33:51:4d:1e:ec:72:30:a5:2c: 82:0a:fc:59:86:28:31:11:57:aa:e2:4c:16:4a:1f: 6f:0e:85:e5:4e:21:07:24:13:e4:d0:df:a7:13:e6: 4f:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:61:48:C0:69:9B:3C:1A:2D:52:94:04:9A:C0:34:55:A7:A3:D6:94 X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:7d:ed:7a:7d:a4:36:5f:3f:e8:a0:ee:28:de:a6:10:71:0f: d6:1b:9b:59:f6:5f:07:65:02:34:7e:52:f1:ee:5f:85:8f:a3: c3:6b:a2:07:55:73:4f:62:05:70:fc:51:fd:e4:98:a4:c3:99: 39:9b:b4:11:b2:de:da:a1:67:f8:83:a4:55:9b:7b:c9:65:1e: e6:e5:83:63:ae:9f:59:23:42:f3:e5:14:85:2c:b1:bf:d9:59: d1:33:4d:e4:9e:55:3f:a6:32:b6:58:38:44:07:4a:97:b7:14: 1c:9a:ae:53:1c:81:d0:e5:cb:ba:8b:76:ef:fd:49:ad:37:72: ae:69:19:86:a8:f4:b0:d8:d0:fb:f0:1d:dd:80:7f:f2:81:c9: 56:a1:1e:f4:cb:4a:91:e1:05:bb:b0:d7:24:9b:e9:6a:19:58: 81:66:bc:b0:ba:c7:8d:c3:10:68:d3:00:7c:85:b9:99:17:eb: be:0a:52:3f:de:d4:8b:a5:9a:24:c6:12:b0:de:a9:8a:fb:88: 7e:19:cf:1b:f3:dd:63:cc:bc:9f:db:c4:85:2e:59:ae:58:5b: 17:52:47:e2:bb:c2:c5:21:3c:f6:a7:62:7e:63:63:c6:42:f0: 55:8f:b0:37:d4:42:02:e4:cc:92:56:56:0c:7a:80:e9:79:08: c8:c9:59:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURf+HGy70i5604bE/P6MWl6BZIk8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNjA0MTYxNzQ1NTdaFw0yNjA0MjAwMzEyNTdaMDMxMTAvBgNV BAMTKENDNjE0OEMwNjk5QjNDMUEyRDUyOTQwNDlBQzAzNDU1QTdBM0Q2OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCY/ZL4mdjCha7hB2EFVw6Y93 wOkjrHe7YA1tjDRTOklTgCVFRWdeASBp6wbxT8DgpwUZgvc/VRmWMsU8bO+SN5eY Al3iEtDr/g9m9DjnKjB5pNxfyP8KEOVk93OQdarvx5k4IiY77AP+pC37i4ETRoko 48E1mxL/jtX+uexYzRUIWO4kDB66b93v1v0xp3EcUnzFhZ2VufNVDqirfZU9Pf5S D33DB641htcHNVf9Z7l9kIukTxblX1adn8Eq0Erl5fbSNGSE4hokg/VpGcrIisGU rPTnWDNRTR7scjClLIIK/FmGKDERV6riTBZKH28OheVOIQckE+TQ36cT5k/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzGFIwGmbPBotUpQEmsA0Vaej1pQwHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACV97Xp9pDZfP+ig7ijephBxD9Ybm1n2Xwdl AjR+UvHuX4WPo8NrogdVc09iBXD8Uf3kmKTDmTmbtBGy3tqhZ/iDpFWbe8llHubl g2Oun1kjQvPlFIUssb/ZWdEzTeSeVT+mMrZYOEQHSpe3FByarlMcgdDly7qLdu/9 Sa03cq5pGYao9LDY0PvwHd2Af/KByVahHvTLSpHhBbuw1ySb6WoZWIFmvLC6x43D EGjTAHyFuZkX674KUj/e1IulmiTGErDeqYr7iH4Zzxvz3WPMvJ/bxIUuWa5YWxdS R+K7wsUhPPanYn5jY8ZC8FWPsDfUQgLkzJJWVgx6gOl5CMjJWQg= -----END CERTIFICATE-----Generated at Fri Apr 17 19:45:26 2026 by rpki-client