$ rpki-client -vvf repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft File: 4AA76DED689FD4420809D0962087A03BCF018FEA.mft (raw, json) Hash identifier: XSy3MQ0EIclW/cJelDnhoI75mh77l+w2w8P1wl0tanY= Subject key identifier: 81:A3:82:24:C9:C5:58:DE:27:8E:E4:B5:D3:76:DA:58:52:EC:D7:36 Authority key identifier: 4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA Certificate issuer: /CN=4AA76DED689FD4420809D0962087A03BCF018FEA Certificate serial: 10BC16E3470157F1B4E23DD3ABF593CC6F647F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft Manifest number: 0112 Signing time: Sun 01 Mar 2026 03:21:55 +0000 Manifest this update: Sun 01 Mar 2026 03:16:55 +0000 Manifest next update: Wed 04 Mar 2026 04:17:55 +0000 Files and hashes: 1: 3130332e39392e3133362e302f32332d3233203d3e20313531353735.roa (hash: bYo0zSG/Y+l/kRQWqzhvCy7R5Romzqih1iDCz89t3mk=) 2: 3130332e39392e3133372e302f32342d3234203d3e20313531353735.roa (hash: qGUv354O5bgjhTMZ45JMcvyFGWQg1EdVxERPegJoKCQ=) 3: 4AA76DED689FD4420809D0962087A03BCF018FEA.crl (hash: /6LnQrEcKmgcJSM5DOGTmXcE2wkuSaOkFCGu/wHOcJE=) 4: 323030313a6466343a3763303a3a2f34382d3438203d3e20313531353735.roa (hash: khEVLFQtH+a45cc9yGf67pi2XkwhJ0LBpc+mc2azWiQ=) 5: 3130332e39392e3133362e302f32342d3234203d3e20313531353735.roa (hash: 2CpAucK+rvU21eAZmyDV5IqqR6dCAIafzExn8g2LOMw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:17:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:bc:16:e3:47:01:57:f1:b4:e2:3d:d3:ab:f5:93:cc:6f:64:7f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AA76DED689FD4420809D0962087A03BCF018FEA Validity Not Before: Mar 1 03:16:55 2026 GMT Not After : Mar 4 04:17:55 2026 GMT Subject: CN=81A38224C9C558DE278EE4B5D376DA5852ECD736 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d8:e7:56:39:95:ed:18:dc:b6:cc:bb:83:e2: 37:39:2f:72:eb:bc:c6:39:b0:2d:3b:85:c5:01:90: 27:fc:39:c7:e3:c1:37:c4:9c:92:85:ee:ac:93:55: ce:88:a2:ed:af:0d:c8:15:8e:36:46:3c:aa:70:a6: e5:29:d6:a8:a4:a4:14:cc:69:00:d8:9e:aa:78:14: bc:73:26:49:b2:7a:2f:ae:68:d1:a7:91:28:05:c9: 33:60:78:77:05:10:63:2a:8f:85:43:97:fe:76:65: ab:03:51:b6:8d:7a:1c:7d:ec:7f:d7:3f:d6:7c:3d: f1:ba:e3:81:77:cb:7b:24:7b:74:7a:cd:2d:43:1c: a7:06:b0:22:21:be:22:25:b2:45:c9:a2:dc:61:31: 64:64:83:9c:06:5a:93:f5:3f:ef:18:e3:d9:0c:44: dd:67:c8:0f:d3:21:6e:95:d1:78:27:fc:d1:c7:0a: ff:49:8d:34:06:4c:14:f7:86:1a:01:26:ae:60:8f: e4:e9:e6:be:b5:dd:07:36:26:0e:a8:8b:81:00:2d: d4:34:5d:53:4c:a2:87:f0:56:21:09:a2:82:cb:23: a9:14:42:02:9b:e7:d0:fd:63:5a:db:ef:a3:03:73: f5:cd:bd:4e:b8:7a:90:fc:9f:ef:42:4b:38:cb:b3: b9:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:A3:82:24:C9:C5:58:DE:27:8E:E4:B5:D3:76:DA:58:52:EC:D7:36 X509v3 Authority Key Identifier: keyid:4A:A7:6D:ED:68:9F:D4:42:08:09:D0:96:20:87:A0:3B:CF:01:8F:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AA76DED689FD4420809D0962087A03BCF018FEA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2c280af3-aa1d-4271-8c06-a3fa28898426/0/4AA76DED689FD4420809D0962087A03BCF018FEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5f:16:db:1a:68:45:72:10:d6:7c:3a:2e:9c:7d:fa:b4:7d: 5f:a9:1b:63:5f:e9:4c:04:b2:9f:ec:c9:8f:fc:09:79:7b:d7: 15:04:9d:3d:00:a5:39:9d:44:51:b3:2d:54:4a:a1:6a:04:37: 0a:ab:10:76:c1:fa:57:79:ce:4a:a4:01:67:cd:9d:2f:78:a6: 7b:a1:ab:35:8b:b1:fc:4b:80:63:9f:15:f8:76:fb:9b:63:26: d1:63:0b:6e:8d:95:03:4d:d6:56:ce:bc:fd:c9:c1:6e:38:fd: 98:dc:00:ca:72:2e:97:c0:19:1f:0b:48:21:82:be:a3:a9:d5: f5:11:e9:54:1a:25:1e:0c:57:4e:4c:72:f6:df:92:c6:b7:79: f8:78:b0:c0:8f:75:fa:88:13:ca:02:70:80:a5:ba:1f:2b:54: 2a:27:e9:19:1e:f9:b8:a9:2a:f6:53:a8:19:79:2f:72:ef:8b: 2a:e3:ff:5b:1c:14:ec:94:05:02:50:99:12:1f:de:73:0b:da: 8c:24:f1:fe:bb:e4:f1:85:d0:cc:08:84:05:7b:5b:2b:38:83: eb:c7:fd:eb:43:f8:95:ab:f8:92:a6:8e:03:14:ae:12:b8:03: 59:69:94:87:67:47:38:77:fb:de:08:a2:f6:1d:09:40:0f:29: 7e:ef:7b:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUELwW40cBV/G04j3Tq/WTzG9kfw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JD RjAxOEZFQTAeFw0yNjAzMDEwMzE2NTVaFw0yNjAzMDQwNDE3NTVaMDMxMTAvBgNV BAMTKDgxQTM4MjI0QzlDNTU4REUyNzhFRTRCNUQzNzZEQTU4NTJFQ0Q3MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2OdWOZXtGNy2zLuD4jc5L3Lr vMY5sC07hcUBkCf8OcfjwTfEnJKF7qyTVc6Iou2vDcgVjjZGPKpwpuUp1qikpBTM aQDYnqp4FLxzJkmyei+uaNGnkSgFyTNgeHcFEGMqj4VDl/52ZasDUbaNehx97H/X P9Z8PfG644F3y3ske3R6zS1DHKcGsCIhviIlskXJotxhMWRkg5wGWpP1P+8Y49kM RN1nyA/TIW6V0Xgn/NHHCv9JjTQGTBT3hhoBJq5gj+Tp5r613Qc2Jg6oi4EALdQ0 XVNMoofwViEJooLLI6kUQgKb59D9Y1rb76MDc/XNvU64epD8n+9CSzjLs7kxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgaOCJMnFWN4njuS103baWFLs1zYwHwYDVR0j BBgwFoAUSqdt7Wif1EIICdCWIIegO88Bj+owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YzI4MGFmMy1hYTFkLTQyNzEtOGMwNi1hM2ZhMjg4OTg0MjYvMC80QUE3NkRFRDY4 OUZENDQyMDgwOUQwOTYyMDg3QTAzQkNGMDE4RkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0EwM0JDRjAx OEZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmMyODBhZjMtYWExZC00MjcxLThj MDYtYTNmYTI4ODk4NDI2LzAvNEFBNzZERUQ2ODlGRDQ0MjA4MDlEMDk2MjA4N0Ew M0JDRjAxOEZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNfFtsaaEVyENZ8Oi6cffq0fV+pG2Nf6UwE sp/syY/8CXl71xUEnT0ApTmdRFGzLVRKoWoENwqrEHbB+ld5zkqkAWfNnS94pnuh qzWLsfxLgGOfFfh2+5tjJtFjC26NlQNN1lbOvP3JwW44/ZjcAMpyLpfAGR8LSCGC vqOp1fUR6VQaJR4MV05Mcvbfksa3efh4sMCPdfqIE8oCcICluh8rVCon6Rke+bip KvZTqBl5L3Lviyrj/1scFOyUBQJQmRIf3nML2owk8f675PGF0MwIhAV7Wys4g+vH /etD+JWr+JKmjgMUrhK4A1lplIdnRzh3+94IovYdCUAPKX7ve3Q= -----END CERTIFICATE-----Generated at Tue Mar 3 02:11:31 2026 by rpki-client