$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft File: 4FA812FE6A4A85F790CB2740EF08836883716912.mft (raw, json) Hash identifier: dzWCgf/4Oh19eO+hom/x/6ts7TqM/e6sVABqBYNSOWY= Subject key identifier: CC:9B:00:4B:B3:1F:24:3B:1D:35:D7:21:B2:AB:87:B6:4F:A1:74:6B Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 Certificate issuer: /CN=4FA812FE6A4A85F790CB2740EF08836883716912 Certificate serial: 538B6CC593FF65EE51B99E2F979E77497D208B81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject info access: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft Manifest number: 051E Signing time: Mon 02 Mar 2026 08:20:57 +0000 Manifest this update: Mon 02 Mar 2026 08:15:57 +0000 Manifest next update: Thu 05 Mar 2026 14:34:57 +0000 Files and hashes: 1: 3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (hash: 0If+6/mMOFFyP2FqyKGK3txMDLzFU3f4sqXMr4WKhzY=) 2: 4FA812FE6A4A85F790CB2740EF08836883716912.crl (hash: RIdN8NlUV5x5ccBh2LxpAgSelyTp5+n2MMC8uYgdHQg=) 3: 3137352e3130362e31362e302f32322d3234203d3e20313331373637.roa (hash: FSa5jhvEvK/r9qXQQGlnZIm8LVRjHW9YNMDzzN5f0xI=) 4: 323430303a386238303a3a2f33322d3332203d3e20313331373637.roa (hash: WzhaKVVHhW/0GGZkiM6FBwtbr9n3QYlgPERNMN1x09w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:8b:6c:c5:93:ff:65:ee:51:b9:9e:2f:97:9e:77:49:7d:20:8b:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912 Validity Not Before: Mar 2 08:15:57 2026 GMT Not After : Mar 5 14:34:57 2026 GMT Subject: CN=CC9B004BB31F243B1D35D721B2AB87B64FA1746B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:f3:0b:90:5c:f9:3f:61:b2:d9:07:3c:c6:bf: 21:75:b7:cb:9d:06:dc:3c:a7:c6:f6:56:97:1f:0d: cb:a3:dd:c6:bc:6d:60:33:b0:cc:49:41:72:b4:55: 01:7d:a9:d0:7b:f0:9c:b5:49:48:71:94:ef:69:3a: 69:01:9e:1f:a4:84:fc:ea:d7:05:39:2f:f2:6c:12: 7e:c5:a9:af:a2:ed:be:b7:b6:08:42:01:3e:c4:86: 4f:0e:e3:bb:2e:4b:85:bc:31:5f:17:5c:40:8a:fc: e9:45:85:1a:46:92:1f:5f:eb:3c:56:82:0e:81:6e: df:9c:49:d1:23:68:ad:02:10:30:f9:ba:81:5a:e4: c3:cb:46:12:0d:42:f3:08:eb:d1:53:f4:78:13:77: d2:da:e7:ba:d0:de:1c:c0:bb:23:dd:cc:98:ab:90: 5d:32:10:35:b6:e7:d8:4e:1a:f9:d5:df:71:95:d1: 36:52:f0:4d:5d:a5:20:91:b2:87:df:e6:63:ab:66: bd:da:b6:bc:d9:ac:8d:1c:55:9e:3a:6a:e0:65:23: 0c:79:96:c0:ad:fe:d3:1f:b4:0c:e2:18:d5:54:17: a2:95:7d:c9:39:fe:9d:a9:a3:3f:c5:3c:4d:6f:63: 72:f9:30:06:f2:cb:9c:84:68:bd:7e:e9:d8:bb:7b: 8d:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:9B:00:4B:B3:1F:24:3B:1D:35:D7:21:B2:AB:87:B6:4F:A1:74:6B X509v3 Authority Key Identifier: keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:e7:f5:03:2a:17:e3:48:73:20:37:71:a5:5f:ed:f8:b7:04: be:8a:29:b3:33:47:82:31:c8:9f:4e:39:6f:7a:48:f8:8d:78: 95:02:d0:55:c8:d5:3f:b0:70:2a:e3:d1:95:06:f5:7e:02:b0: 56:5c:0d:65:3c:24:63:70:07:a3:a7:4e:6f:55:d2:59:12:15: 2e:cb:46:03:e7:ff:af:29:65:db:72:98:b4:f0:79:85:63:fc: 07:4d:04:d3:21:7b:c4:52:64:e3:d2:62:cc:de:93:25:3b:96: c9:d6:31:08:ba:39:a3:76:ac:5a:e3:27:1e:83:9e:4e:63:f0: 93:b5:ef:66:4e:2c:a2:4f:2a:4c:8b:51:54:cb:4a:07:65:79: d0:f1:23:02:51:76:9b:87:12:1c:06:a9:9c:a4:dc:27:92:3c: aa:ec:0d:3b:7e:37:79:34:2f:7c:89:d8:12:de:90:84:7b:8e: 16:29:d9:a1:76:bc:94:90:48:67:5f:bd:5c:17:f2:e5:d1:b4: 4e:30:73:ef:36:78:0a:d9:5c:e2:10:06:f4:a1:d1:7e:24:1e: 1e:59:c6:0f:b4:9b:31:6b:ef:17:07:83:0b:57:11:1f:4b:82: 78:16:c2:bb:ea:bf:55:aa:66:1a:92:c3:2d:ed:42:0a:40:f6: a4:29:58:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4tsxZP/Ze5RuZ4vl553SX0gi4EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4 MzcxNjkxMjAeFw0yNjAzMDIwODE1NTdaFw0yNjAzMDUxNDM0NTdaMDMxMTAvBgNV BAMTKENDOUIwMDRCQjMxRjI0M0IxRDM1RDcyMUIyQUI4N0I2NEZBMTc0NkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK8wuQXPk/YbLZBzzGvyF1t8ud Btw8p8b2VpcfDcuj3ca8bWAzsMxJQXK0VQF9qdB78Jy1SUhxlO9pOmkBnh+khPzq 1wU5L/JsEn7Fqa+i7b63tghCAT7Ehk8O47suS4W8MV8XXECK/OlFhRpGkh9f6zxW gg6Bbt+cSdEjaK0CEDD5uoFa5MPLRhINQvMI69FT9HgTd9La57rQ3hzAuyPdzJir kF0yEDW259hOGvnV33GV0TZS8E1dpSCRsoff5mOrZr3atrzZrI0cVZ46auBlIwx5 lsCt/tMftAziGNVUF6KVfck5/p2poz/FPE1vY3L5MAbyy5yEaL1+6di7e435AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzJsAS7MfJDsdNdchsquHtk+hdGswHwYDVR0j BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx NjkxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjRkMTA4ZjctMDhiMi00MDlmLThh NzAtYTljNjdhZTVlZDIyLzAvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgz Njg4MzcxNjkxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDn9QMqF+NIcyA3caVf7fi3BL6KKbMzR4Ix yJ9OOW96SPiNeJUC0FXI1T+wcCrj0ZUG9X4CsFZcDWU8JGNwB6OnTm9V0lkSFS7L RgPn/68pZdtymLTweYVj/AdNBNMhe8RSZOPSYszekyU7lsnWMQi6OaN2rFrjJx6D nk5j8JO172ZOLKJPKkyLUVTLSgdledDxIwJRdpuHEhwGqZyk3CeSPKrsDTt+N3k0 L3yJ2BLekIR7jhYp2aF2vJSQSGdfvVwX8uXRtE4wc+82eArZXOIQBvSh0X4kHh5Z xg+0mzFr7xcHgwtXER9LgngWwrvqv1WqZhqSwy3tQgpA9qQpWOY= -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:22 2026 by rpki-client