$ rpki-client -vvf repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft File: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft (raw, json) Hash identifier: s/JZdp+zKIlkyUxc//yUhTV3fff8BRF/tPAXX/tFyhQ= Subject key identifier: 52:52:DF:48:6E:68:A3:79:1D:2B:62:A4:1F:2F:2D:7B:C1:04:24:0E Authority key identifier: 84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 Certificate issuer: /CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Certificate serial: 03B86AA3B37F827B2BA24DB07921D68F44545025 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft Manifest number: 03BA Signing time: Sun 01 Mar 2026 17:42:06 +0000 Manifest this update: Sun 01 Mar 2026 17:37:06 +0000 Manifest next update: Wed 04 Mar 2026 18:29:06 +0000 Files and hashes: 1: 846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl (hash: vf8HcgumIjkSzbPoCzJ/sYAXjL80qlAfjV4H6wmIqcw=) 2: 3130332e3136392e3133382e302f32332d3234203d3e20313432333433.roa (hash: VrU1SwTl8NTtyMThFSf4hTGqANokx1m/tgJCu2ItF4k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:b8:6a:a3:b3:7f:82:7b:2b:a2:4d:b0:79:21:d6:8f:44:54:50:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0 Validity Not Before: Mar 1 17:37:06 2026 GMT Not After : Mar 4 18:29:06 2026 GMT Subject: CN=5252DF486E68A3791D2B62A41F2F2D7BC104240E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:20:d6:dd:5d:9f:c3:20:31:a1:68:aa:3c:d5: 24:30:69:fe:d9:78:67:9b:2c:42:58:df:f9:28:ec: 6a:ed:be:30:3e:5e:f1:76:db:96:37:c1:03:57:e2: 18:52:f5:39:f1:6b:c8:53:6b:cc:c7:2d:42:76:f1: 84:9a:c9:36:5c:8e:b8:0a:da:cd:99:90:37:a7:0d: fd:7c:74:c2:0f:7b:d2:5d:29:ed:54:45:7c:55:70: 34:16:0a:74:ac:f0:d0:63:fd:db:a5:31:df:f5:c3: d9:e8:76:0e:a2:17:f4:89:2a:77:98:cb:0b:77:d5: 37:d4:4a:ca:f9:6f:8d:1f:6c:47:4f:10:1e:2c:b8: ac:3d:98:e8:1e:80:91:40:02:3f:56:52:c6:08:6c: e1:1b:58:5a:59:d6:52:29:bb:37:49:82:17:4f:0c: 4b:cc:8c:90:a4:ae:0d:1e:06:47:73:48:e8:20:5e: cf:aa:ee:58:d0:62:e7:45:11:a4:70:2d:78:04:06: a2:4a:47:9c:10:ba:5c:85:ac:c8:3c:75:7f:d7:cf: f3:a5:7c:d4:69:1e:d7:e5:95:e9:d4:1c:21:ba:7d: e2:50:04:4d:39:c5:dd:e4:0c:89:f3:04:c3:41:38: 23:96:9f:42:5b:c3:f5:5b:2c:e0:1c:a9:93:31:6f: 2a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:52:DF:48:6E:68:A3:79:1D:2B:62:A4:1F:2F:2D:7B:C1:04:24:0E X509v3 Authority Key Identifier: keyid:84:6B:CB:85:C1:E1:AA:59:03:7B:0A:2A:C5:9E:D1:E8:E7:42:0E:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04ca5868-57e9-49b9-bfe1-48d78334a18c/0/846BCB85C1E1AA59037B0A2AC59ED1E8E7420ED0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:e8:bb:20:03:44:ce:3a:5f:ea:30:90:62:33:8c:2d:3c:e8: ee:58:36:3d:bc:b2:16:8a:60:66:9d:e6:4c:97:b8:df:f3:08: fe:44:78:55:5d:11:1e:93:b9:a4:c9:73:ac:f8:64:c6:6c:d0: 86:1f:7e:bf:66:24:b7:0f:bf:f3:54:e2:4c:30:ac:f7:7a:83: c9:65:e2:32:0a:67:77:d1:b1:72:f8:4e:4c:1a:f5:40:d1:45: eb:2e:2f:76:f3:fd:87:a1:fd:7d:3a:d8:8c:c8:31:ca:04:c6: 15:a5:2a:45:41:e0:b7:98:a5:d8:1a:03:3b:5c:e3:e2:ee:d8: c4:bd:ba:d2:d9:72:74:69:de:09:ee:a0:ba:31:0d:dd:1f:8f: b2:df:a8:62:d2:e0:c3:ad:fe:a4:9a:3c:2f:29:f7:a7:e8:54: 57:b2:a8:b8:1a:cb:17:ee:da:ea:49:85:9d:b3:35:ac:95:f6: 9d:13:a4:da:10:5f:bd:44:34:af:e6:1f:b7:ca:78:ee:4e:6e: ac:49:b3:94:05:5d:ee:e1:40:c2:1b:0a:e4:7d:2f:73:fc:88: 92:f9:aa:5e:2c:f2:70:51:78:50:5a:af:e7:2c:05:0a:be:11: 6f:70:40:d4:22:38:97:a7:3c:3b:b2:ba:2e:ef:1c:d6:5c:ac: a5:8a:96:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA7hqo7N/gnsrok2weSHWj0RUUCUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThF NzQyMEVEMDAeFw0yNjAzMDExNzM3MDZaFw0yNjAzMDQxODI5MDZaMDMxMTAvBgNV BAMTKDUyNTJERjQ4NkU2OEEzNzkxRDJCNjJBNDFGMkYyRDdCQzEwNDI0MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+INbdXZ/DIDGhaKo81SQwaf7Z eGebLEJY3/ko7GrtvjA+XvF225Y3wQNX4hhS9Tnxa8hTa8zHLUJ28YSayTZcjrgK 2s2ZkDenDf18dMIPe9JdKe1URXxVcDQWCnSs8NBj/dulMd/1w9nodg6iF/SJKneY ywt31TfUSsr5b40fbEdPEB4suKw9mOgegJFAAj9WUsYIbOEbWFpZ1lIpuzdJghdP DEvMjJCkrg0eBkdzSOggXs+q7ljQYudFEaRwLXgEBqJKR5wQulyFrMg8dX/Xz/Ol fNRpHtfllenUHCG6feJQBE05xd3kDInzBMNBOCOWn0Jbw/VbLOAcqZMxbyqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUlLfSG5oo3kdK2KkHy8te8EEJA4wHwYDVR0j BBgwFoAUhGvLhcHhqlkDewoqxZ7R6OdCDtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGNhNTg2OC01N2U5LTQ5YjktYmZlMS00OGQ3ODMzNGExOGMvMC84NDZCQ0I4NUMx RTFBQTU5MDM3QjBBMkFDNTlFRDFFOEU3NDIwRUQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQxRThFNzQy MEVEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRjYTU4NjgtNTdlOS00OWI5LWJm ZTEtNDhkNzgzMzRhMThjLzAvODQ2QkNCODVDMUUxQUE1OTAzN0IwQTJBQzU5RUQx RThFNzQyMEVEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACzouyADRM46X+owkGIzjC086O5YNj28shaK YGad5kyXuN/zCP5EeFVdER6TuaTJc6z4ZMZs0IYffr9mJLcPv/NU4kwwrPd6g8ll 4jIKZ3fRsXL4Tkwa9UDRResuL3bz/Yeh/X062IzIMcoExhWlKkVB4LeYpdgaAztc 4+Lu2MS9utLZcnRp3gnuoLoxDd0fj7LfqGLS4MOt/qSaPC8p96foVFeyqLgayxfu 2upJhZ2zNayV9p0TpNoQX71ENK/mH7fKeO5ObqxJs5QFXe7hQMIbCuR9L3P8iJL5 ql4s8nBReFBar+csBQq+EW9wQNQiOJenPDuyui7vHNZcrKWKljo= -----END CERTIFICATE-----Generated at Mon Mar 2 09:33:25 2026 by rpki-client