$ rpki-client -vvf repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft File: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft (raw, json) Hash identifier: +DTVnirOBKz5AX+kF2EXkubMlK5bQihVtGCUZgLKkZo= Subject key identifier: E5:CA:B0:A8:30:C2:E9:A8:A3:29:D3:BD:97:8E:96:9D:28:FF:F6:7A Authority key identifier: 4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD Certificate issuer: /CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Certificate serial: 23208CDC2D95019E5736CE6E14EA7B6CF28040C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft Manifest number: 0138 Signing time: Mon 02 Mar 2026 04:11:51 +0000 Manifest this update: Mon 02 Mar 2026 04:06:51 +0000 Manifest next update: Thu 05 Mar 2026 09:57:51 +0000 Files and hashes: 1: 4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl (hash: PKEIxbRZSz0lRAln5HHYpzpe3rr5T09VDue78dQ1ddk=) 2: 3135372e31302e36332e302f32342d3234203d3e20313532303835.roa (hash: L5i/E5G2yR4p96EaiaxVuLqhNScyIzpSwsnYjpL8mEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:20:8c:dc:2d:95:01:9e:57:36:ce:6e:14:ea:7b:6c:f2:80:40:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A37764CC80D1B8A6819E0F0F145466E0BE52CBD Validity Not Before: Mar 2 04:06:51 2026 GMT Not After : Mar 5 09:57:51 2026 GMT Subject: CN=E5CAB0A830C2E9A8A329D3BD978E969D28FFF67A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:46:17:d4:de:4d:23:96:b2:d2:01:6d:16: 01:3d:08:59:b2:18:10:6e:0d:9b:5c:89:2b:46:f2: ac:b2:e6:3a:d8:23:51:fe:10:05:14:89:cc:cc:b1: cc:80:a3:10:28:55:cd:d1:cb:e8:28:1d:c2:30:83: ab:45:b1:61:ff:49:f0:d1:9e:8e:37:08:33:69:6e: f8:9b:ca:90:b0:58:fe:89:c5:e2:12:d1:7c:db:29: 9c:10:1c:4a:70:7c:f3:e3:e1:99:d2:50:4e:d7:a0: 89:30:5b:b9:26:d5:13:e1:57:37:c0:7f:2f:0c:76: 9f:54:0e:2f:b9:d0:89:fa:9a:3d:a7:5d:9c:54:b3: 4b:96:f4:87:fc:f5:4e:e4:a8:fe:f5:3e:12:58:09: 77:10:e9:5a:b5:40:43:d9:2b:19:58:2b:91:63:3f: c2:a1:19:4d:0e:40:4d:8b:90:48:55:3b:11:dc:fa: 2e:a6:39:08:bd:f0:42:43:91:87:f4:17:6e:c9:03: 1f:46:a6:53:ff:4d:af:28:fe:db:a1:c4:1a:29:33: 30:5f:f7:a4:1f:d9:41:32:91:75:ac:d6:d8:e9:31: 51:7d:8f:e9:53:ff:c2:45:8e:a2:d7:7e:78:29:52: 5b:70:75:99:71:16:22:0b:95:d6:16:d0:c7:43:97: 3e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:CA:B0:A8:30:C2:E9:A8:A3:29:D3:BD:97:8E:96:9D:28:FF:F6:7A X509v3 Authority Key Identifier: keyid:4A:37:76:4C:C8:0D:1B:8A:68:19:E0:F0:F1:45:46:6E:0B:E5:2C:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd3a2fdf-bcba-4757-b366-e1a0ad2d374a/0/4A37764CC80D1B8A6819E0F0F145466E0BE52CBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:ae:07:c4:8b:ce:d6:5c:05:81:6f:9b:16:4b:24:76:58:a8: 0b:80:f2:3d:45:bf:cf:d1:5b:64:e1:85:e4:48:f1:2a:d9:b0: ea:5d:ff:3b:f5:5d:db:af:a8:74:60:6a:a8:23:9b:6e:40:35: 1b:4d:2a:ad:7a:2e:95:71:ff:e5:28:7d:73:de:15:3f:8f:47: 65:26:7d:df:0c:da:9e:7b:d1:e8:05:b8:b5:7f:a3:15:6a:9d: 2c:14:2f:00:f7:0b:39:cd:3c:22:57:6a:85:be:90:52:c2:93: 35:20:e5:e5:e9:86:e7:b0:28:f3:48:f3:70:7a:4a:99:17:7f: 5d:e1:11:8f:ac:e1:cd:81:9c:e6:70:68:62:68:52:92:0a:45: 2f:d5:3b:93:9c:26:a0:f6:47:a0:96:84:90:97:f1:b9:a5:e8: fe:3b:e9:7f:a1:4a:54:eb:72:01:70:7d:47:4f:1f:85:db:11: c5:40:54:f9:04:54:b7:c9:3d:e7:d3:22:bf:11:e0:7e:d3:65: 94:e3:d3:90:c3:e6:6c:81:97:23:df:be:3e:f0:45:75:12:33: 9a:c9:22:4f:3d:af:3f:a4:c7:7a:11:f7:23:5d:f0:33:e3:53: 9e:86:5c:88:85:44:02:2b:72:63:de:fd:9f:e7:a0:5a:69:29: b0:d7:fd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIyCM3C2VAZ5XNs5uFOp7bPKAQMUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUw QkU1MkNCRDAeFw0yNjAzMDIwNDA2NTFaFw0yNjAzMDUwOTU3NTFaMDMxMTAvBgNV BAMTKEU1Q0FCMEE4MzBDMkU5QThBMzI5RDNCRDk3OEU5NjlEMjhGRkY2N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBcEYX1N5NI5ay0gFtFgE9CFmy GBBuDZtciStG8qyy5jrYI1H+EAUUiczMscyAoxAoVc3Ry+goHcIwg6tFsWH/SfDR no43CDNpbvibypCwWP6JxeIS0XzbKZwQHEpwfPPj4ZnSUE7XoIkwW7km1RPhVzfA fy8Mdp9UDi+50In6mj2nXZxUs0uW9If89U7kqP71PhJYCXcQ6Vq1QEPZKxlYK5Fj P8KhGU0OQE2LkEhVOxHc+i6mOQi98EJDkYf0F27JAx9GplP/Ta8o/tuhxBopMzBf 96Qf2UEykXWs1tjpMVF9j+lT/8JFjqLXfngpUltwdZlxFiILldYW0MdDlz7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5cqwqDDC6aijKdO9l46WnSj/9nowHwYDVR0j BBgwFoAUSjd2TMgNG4poGeDw8UVGbgvlLL0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ZDNhMmZkZi1iY2JhLTQ3NTctYjM2Ni1lMWEwYWQyZDM3NGEvMC80QTM3NzY0Q0M4 MEQxQjhBNjgxOUUwRjBGMTQ1NDY2RTBCRTUyQ0JELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2NkUwQkU1 MkNCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmQzYTJmZGYtYmNiYS00NzU3LWIz NjYtZTFhMGFkMmQzNzRhLzAvNEEzNzc2NENDODBEMUI4QTY4MTlFMEYwRjE0NTQ2 NkUwQkU1MkNCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMeuB8SLztZcBYFvmxZLJHZYqAuA8j1Fv8/R W2ThheRI8SrZsOpd/zv1XduvqHRgaqgjm25ANRtNKq16LpVx/+UofXPeFT+PR2Um fd8M2p570egFuLV/oxVqnSwULwD3CznNPCJXaoW+kFLCkzUg5eXphuewKPNI83B6 SpkXf13hEY+s4c2BnOZwaGJoUpIKRS/VO5OcJqD2R6CWhJCX8bml6P476X+hSlTr cgFwfUdPH4XbEcVAVPkEVLfJPefTIr8R4H7TZZTj05DD5myBlyPfvj7wRXUSM5rJ Ik89rz+kx3oR9yNd8DPjU56GXIiFRAIrcmPe/Z/noFppKbDX/TQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:21:47 2026 by rpki-client