$ rpki-client -vvf repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft File: 454DBC52C30315358534B20532037D549238F4C9.mft (raw, json) Hash identifier: yzQ4G4KC8u4zMx3+kMcQiMKwsVJsEzPQJJqE2GFAr6w= Subject key identifier: D9:11:B2:F3:BE:17:03:79:E9:41:B4:0E:44:31:19:69:CD:0A:11:FB Authority key identifier: 45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 Certificate issuer: /CN=454DBC52C30315358534B20532037D549238F4C9 Certificate serial: 5026D10AC89CE9FAC68E74E88855C31B7C88F2F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft Manifest number: A7 Signing time: Sun 01 Mar 2026 19:21:44 +0000 Manifest this update: Sun 01 Mar 2026 19:16:44 +0000 Manifest next update: Thu 05 Mar 2026 03:18:44 +0000 Files and hashes: 1: 454DBC52C30315358534B20532037D549238F4C9.crl (hash: fRYRK9HZa8qpUBsTp4dUiXZ6qkbEW/0WM+sh3miKFls=) 2: 3130332e3137372e3134342e302f32332d3234203d3e20313437313535.roa (hash: cRyxMvmFtzFnzkX6p3+m20AP50Q1pUuPcCw+HlXCJgU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 03:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:26:d1:0a:c8:9c:e9:fa:c6:8e:74:e8:88:55:c3:1b:7c:88:f2:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=454DBC52C30315358534B20532037D549238F4C9 Validity Not Before: Mar 1 19:16:44 2026 GMT Not After : Mar 5 03:18:44 2026 GMT Subject: CN=D911B2F3BE170379E941B40E44311969CD0A11FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:19:04:b8:69:25:b1:6f:68:78:ab:4e:33:12: 3f:42:21:3c:f6:29:bb:20:3f:0d:42:33:96:72:e9: 93:8c:b7:a5:66:00:89:6d:7b:64:47:69:88:c2:56: 4a:b3:40:95:27:1c:38:7f:ec:e1:08:07:a3:16:31: 2e:c5:87:2e:f7:d5:e2:b4:a3:d2:cc:3c:d6:5e:c9: 75:b7:8f:45:9c:b7:c6:ef:e4:1f:01:a0:7c:5f:ca: ba:12:9f:ca:61:60:74:53:df:db:fe:c3:5c:bf:41: cb:39:c9:4d:ad:97:f6:ff:eb:b9:64:4d:2c:b5:01: 61:99:66:c9:6b:e1:84:75:5a:80:67:37:c3:05:70: e3:7d:da:f7:58:f8:fc:4e:32:5e:0c:5b:0e:9a:d2: 5f:6a:5c:87:b9:30:78:11:5e:71:2c:30:39:53:3a: 78:50:6a:eb:d8:8d:6e:ef:5b:bd:22:3c:ce:e0:a6: 00:30:e3:05:e4:8b:96:f5:17:1c:39:3e:19:12:9b: b4:0a:5e:b1:3f:25:18:7c:ea:ef:7c:87:73:5e:20: c2:92:f1:cf:a9:ac:2d:c1:d0:e4:63:62:cb:0f:a7: 7a:1b:7d:69:3e:a1:0d:59:e7:17:3e:b6:ed:38:62: a4:1f:f8:33:a1:5e:92:8b:dc:6d:41:a9:c4:64:9f: 27:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:11:B2:F3:BE:17:03:79:E9:41:B4:0E:44:31:19:69:CD:0A:11:FB X509v3 Authority Key Identifier: keyid:45:4D:BC:52:C3:03:15:35:85:34:B2:05:32:03:7D:54:92:38:F4:C9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/454DBC52C30315358534B20532037D549238F4C9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/217795b6-0df5-471b-b788-725f9ef7c08d/0/454DBC52C30315358534B20532037D549238F4C9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:1e:7b:2f:90:19:44:23:2a:a2:7e:08:cb:65:c3:67:25:18: cc:38:83:ee:f8:d4:e6:f5:49:a9:fc:46:b9:fd:f4:cc:20:19: 5f:ca:39:6f:02:bd:3f:17:49:93:25:28:78:05:cd:4a:3e:1b: 6d:55:87:26:20:94:96:f4:e4:64:19:92:21:75:1c:3c:7e:7a: 36:29:74:44:71:85:69:c0:68:b1:2e:92:4f:a7:e7:01:ed:3d: 17:a8:a3:0b:01:ea:83:eb:82:82:58:2b:15:8b:00:67:44:e0: 77:d8:50:09:92:c4:77:8f:85:1a:bb:66:58:af:b6:5b:55:04: 91:13:a8:9e:9f:93:71:97:50:97:55:72:81:0a:1c:e2:43:9e: 36:bc:a3:9d:a0:7a:59:25:b3:d2:d3:11:09:f4:5d:cc:d6:06: 4f:b2:35:04:11:9e:f9:09:d3:c0:d8:5b:fa:a6:36:22:86:0b: ea:26:74:f8:0f:88:06:a0:f8:e0:23:01:80:13:c7:8c:09:63: f7:af:57:a8:7e:d3:20:4d:7c:0e:6d:2e:96:e6:c8:aa:73:25: b7:d3:ff:2e:e6:6e:3a:e9:c3:f9:9a:02:3f:d4:00:7f:b9:be: 8a:3e:c6:eb:71:b0:58:3e:b7:90:7f:aa:98:7b:d4:2e:94:f2: 12:d1:01:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUCbRCsic6frGjnToiFXDG3yI8vkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5 MjM4RjRDOTAeFw0yNjAzMDExOTE2NDRaFw0yNjAzMDUwMzE4NDRaMDMxMTAvBgNV BAMTKEQ5MTFCMkYzQkUxNzAzNzlFOTQxQjQwRTQ0MzExOTY5Q0QwQTExRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEGQS4aSWxb2h4q04zEj9CITz2 KbsgPw1CM5Zy6ZOMt6VmAIlte2RHaYjCVkqzQJUnHDh/7OEIB6MWMS7Fhy731eK0 o9LMPNZeyXW3j0Wct8bv5B8BoHxfyroSn8phYHRT39v+w1y/Qcs5yU2tl/b/67lk TSy1AWGZZslr4YR1WoBnN8MFcON92vdY+PxOMl4MWw6a0l9qXIe5MHgRXnEsMDlT OnhQauvYjW7vW70iPM7gpgAw4wXki5b1Fxw5PhkSm7QKXrE/JRh86u98h3NeIMKS 8c+prC3B0ORjYssPp3obfWk+oQ1Z5xc+tu04YqQf+DOhXpKL3G1BqcRknyfVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2RGy874XA3npQbQORDEZac0KEfswHwYDVR0j BBgwFoAURU28UsMDFTWFNLIFMgN9VJI49MkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MTc3OTViNi0wZGY1LTQ3MWItYjc4OC03MjVmOWVmN2MwOGQvMC80NTREQkM1MkMz MDMxNTM1ODUzNEIyMDUzMjAzN0Q1NDkyMzhGNEM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdENTQ5MjM4 RjRDOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjE3Nzk1YjYtMGRmNS00NzFiLWI3 ODgtNzI1ZjllZjdjMDhkLzAvNDU0REJDNTJDMzAzMTUzNTg1MzRCMjA1MzIwMzdE NTQ5MjM4RjRDOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYeey+QGUQjKqJ+CMtlw2clGMw4g+741Ob1 San8Rrn99MwgGV/KOW8CvT8XSZMlKHgFzUo+G21VhyYglJb05GQZkiF1HDx+ejYp dERxhWnAaLEukk+n5wHtPReoowsB6oPrgoJYKxWLAGdE4HfYUAmSxHePhRq7Zliv tltVBJETqJ6fk3GXUJdVcoEKHOJDnja8o52gelkls9LTEQn0XczWBk+yNQQRnvkJ 08DYW/qmNiKGC+omdPgPiAag+OAjAYATx4wJY/evV6h+0yBNfA5tLpbmyKpzJbfT /y7mbjrpw/maAj/UAH+5voo+xutxsFg+t5B/qph71C6U8hLRAUE= -----END CERTIFICATE-----Generated at Mon Mar 2 15:42:18 2026 by rpki-client