$ rpki-client -vvf repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft File: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft (raw, json) Hash identifier: o0ejaOPq9AC+x64kNq3Z0LYJ8variYFxF2J8kGf2VSw= Subject key identifier: D7:2D:CA:16:3B:86:9D:00:46:35:03:98:CC:78:E0:5A:C9:4B:F5:C8 Authority key identifier: 4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 Certificate issuer: /CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Certificate serial: D764590A91C5DB6139505F2E9EB9435AD1BA3A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 02:12:35 +0000 Manifest this update: Sun 01 Mar 2026 02:07:35 +0000 Manifest next update: Wed 04 Mar 2026 12:21:35 +0000 Files and hashes: 1: 323430353a396363303a3a2f33322d3438203d3e20313339393637.roa (hash: M/EH2rI4ldQhZaUe9MI4EQP0BkiCCMhjU2Ci0XOya8Q=) 2: 4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl (hash: UuhZYOkcP5nflv0+uDxNGddLWYSHDmc5t26fbLEaU34=) 3: 3130332e3134362e3138342e302f32332d3234203d3e20313339393637.roa (hash: RvVL0eKqhvW5Nd9pF2jqsL2iAerie+UOp2Ou6UGubqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:21:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d7:64:59:0a:91:c5:db:61:39:50:5f:2e:9e:b9:43:5a:d1:ba:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48 Validity Not Before: Mar 1 02:07:35 2026 GMT Not After : Mar 4 12:21:35 2026 GMT Subject: CN=D72DCA163B869D0046350398CC78E05AC94BF5C8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:74:1e:4f:ae:ee:2c:f0:21:72:58:34:92:34: f8:43:c1:f1:88:e0:e8:39:e0:b6:ca:f9:ec:46:7e: d4:a1:75:13:db:0b:1f:b7:69:05:9e:aa:c4:71:62: 79:0e:a2:52:65:9e:62:0d:da:8f:dc:d7:91:ca:ce: 5a:59:2c:d7:d5:48:f3:21:e3:e1:2e:51:1b:bb:6f: cb:d5:d0:4d:3c:ff:6d:50:70:08:4d:2a:86:9c:23: 0a:1e:e5:82:35:ad:3a:e1:d3:5c:f2:ca:6d:f8:88: 1a:08:67:56:85:81:f5:4c:ed:07:dc:6a:62:e2:1f: 8f:49:ca:96:60:a6:d2:a4:72:b5:e2:3c:41:65:d5: b1:a0:dd:ca:16:b7:59:80:5b:8d:0f:d1:9c:72:b7: a3:20:e0:ad:f3:0b:a1:5b:99:f1:c0:51:b0:e7:bc: f3:b3:f9:69:b6:88:24:b6:61:62:45:ac:7b:39:34: 47:da:d1:94:be:c1:37:58:4d:df:7d:56:56:3e:61: f2:33:fe:68:23:0e:ed:53:48:4d:98:d9:a7:55:a3: 0c:0b:d7:5e:fa:54:8b:66:09:bd:ed:7c:c8:5d:27: 4f:61:86:f8:3f:43:9b:1d:bb:db:38:7c:0b:a7:c3: 31:99:53:53:e5:aa:1c:2e:23:28:a9:85:99:1f:98: 0d:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:2D:CA:16:3B:86:9D:00:46:35:03:98:CC:78:E0:5A:C9:4B:F5:C8 X509v3 Authority Key Identifier: keyid:4F:29:04:EA:E6:6A:DD:5D:3A:C5:3C:6A:CC:B9:21:33:B4:26:DF:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/29c5327f-10fd-4cf0-851c-0cfcd3c3c697/0/4F2904EAE66ADD5D3AC53C6ACCB92133B426DF48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:68:6e:a2:32:43:55:67:4e:9d:92:c7:62:a8:2a:50:60:55: e8:3f:02:38:5c:d8:0f:62:1e:7c:cf:a5:5a:6c:1a:e6:09:a6: e5:66:02:28:17:15:89:05:ad:36:0f:3c:a7:24:e4:1d:ca:5b: cf:17:2c:44:89:76:b2:ca:8f:7a:94:6a:e7:b0:3a:22:4c:40: 82:d3:75:1f:62:b8:a8:d1:4d:06:34:ad:21:31:db:70:9b:f2: ee:fe:86:f5:a6:1c:b5:f0:54:b1:0d:8b:90:70:7f:d1:ed:65: 6b:29:c8:f7:8d:4e:57:ed:ed:ec:8c:5c:20:cd:3d:78:9d:15: 70:79:41:f6:7b:23:d2:b8:d9:af:28:81:07:d8:c4:37:c5:fb: 03:db:31:60:83:d0:2a:a5:42:7c:41:ec:d9:e2:f1:55:49:0f: 39:68:c9:97:25:b5:c7:a8:2a:30:32:dd:69:95:e7:81:83:b4: 46:f5:44:60:b5:10:19:dd:42:ac:6e:56:6d:75:66:0c:72:ce: ab:0f:c1:44:19:98:16:71:da:31:64:ce:4d:51:e7:9a:e8:f7: 20:fc:2b:5e:34:6b:72:8b:6f:9a:b6:3e:5d:a4:52:8d:11:76: 89:fb:63:75:a9:1c:6f:f1:d8:72:53:de:f8:dc:0e:20:f2:be: 6b:80:6c:3c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUANdkWQqRxdthOVBfLp65Q1rRujowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNC NDI2REY0ODAeFw0yNjAzMDEwMjA3MzVaFw0yNjAzMDQxMjIxMzVaMDMxMTAvBgNV BAMTKEQ3MkRDQTE2M0I4NjlEMDA0NjM1MDM5OENDNzhFMDVBQzk0QkY1QzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDdB5Pru4s8CFyWDSSNPhDwfGI 4Og54LbK+exGftShdRPbCx+3aQWeqsRxYnkOolJlnmIN2o/c15HKzlpZLNfVSPMh 4+EuURu7b8vV0E08/21QcAhNKoacIwoe5YI1rTrh01zyym34iBoIZ1aFgfVM7Qfc amLiH49JypZgptKkcrXiPEFl1bGg3coWt1mAW40P0Zxyt6Mg4K3zC6FbmfHAUbDn vPOz+Wm2iCS2YWJFrHs5NEfa0ZS+wTdYTd99VlY+YfIz/mgjDu1TSE2Y2adVowwL 1176VItmCb3tfMhdJ09hhvg/Q5sdu9s4fAunwzGZU1PlqhwuIyiphZkfmA13AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1y3KFjuGnQBGNQOYzHjgWslL9cgwHwYDVR0j BBgwFoAUTykE6uZq3V06xTxqzLkhM7Qm30gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OWM1MzI3Zi0xMGZkLTRjZjAtODUxYy0wY2ZjZDNjM2M2OTcvMC80RjI5MDRFQUU2 NkFERDVEM0FDNTNDNkFDQ0I5MjEzM0I0MjZERjQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIxMzNCNDI2 REY0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjljNTMyN2YtMTBmZC00Y2YwLTg1 MWMtMGNmY2QzYzNjNjk3LzAvNEYyOTA0RUFFNjZBREQ1RDNBQzUzQzZBQ0NCOTIx MzNCNDI2REY0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJobqIyQ1VnTp2Sx2KoKlBgVeg/Ajhc2A9i HnzPpVpsGuYJpuVmAigXFYkFrTYPPKck5B3KW88XLESJdrLKj3qUauewOiJMQILT dR9iuKjRTQY0rSEx23Cb8u7+hvWmHLXwVLENi5Bwf9HtZWspyPeNTlft7eyMXCDN PXidFXB5QfZ7I9K42a8ogQfYxDfF+wPbMWCD0CqlQnxB7Nni8VVJDzloyZcltceo KjAy3WmV54GDtEb1RGC1EBndQqxuVm11ZgxyzqsPwUQZmBZx2jFkzk1R55ro9yD8 K140a3KLb5q2Pl2kUo0Rdon7Y3WpHG/x2HJT3vjcDiDyvmuAbDw= -----END CERTIFICATE-----Generated at Mon Mar 2 06:52:46 2026 by rpki-client