$ rpki-client -vvf repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft File: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft (raw, json) Hash identifier: PIZEIsS3Ssc6FBbN3Or5ami3il2CGbyzjcwSdWYhpiE= Subject key identifier: 12:05:B7:B9:CF:10:BF:53:5B:6C:CF:A0:C1:94:0E:5B:37:8F:DC:B9 Authority key identifier: 47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 Certificate issuer: /CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Certificate serial: 43B56887F84622CEE4F4B7AE51C19CA15BCCB650 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft Manifest number: 03DA Signing time: Sun 01 Mar 2026 14:41:33 +0000 Manifest this update: Sun 01 Mar 2026 14:36:33 +0000 Manifest next update: Thu 05 Mar 2026 01:04:33 +0000 Files and hashes: 1: 3130332e3132392e36302e302f32342d3234203d3e20313338303538.roa (hash: EdTK4FK3eQfvTaQx0/MnvgXrIsoOGYEeaHZVSWQ/4bY=) 2: 477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl (hash: aeGipi1PDfRW4jUrG1lzDKbNgy1QVsLscGd/jiqHHa8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:04:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:b5:68:87:f8:46:22:ce:e4:f4:b7:ae:51:c1:9c:a1:5b:cc:b6:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=477C72D3EF66E3FE6923E38128D2757CBB2ABE05 Validity Not Before: Mar 1 14:36:33 2026 GMT Not After : Mar 5 01:04:33 2026 GMT Subject: CN=1205B7B9CF10BF535B6CCFA0C1940E5B378FDCB9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:38:d1:9d:82:98:ee:a7:42:24:75:12:c6:07: 44:1a:c7:b1:b6:d6:81:31:22:46:da:07:30:43:24: 5e:55:4a:8a:e5:31:91:b5:ef:24:13:a6:ff:7d:3c: 2b:dc:04:8d:64:d4:b0:3d:37:95:18:0a:3f:32:f7: 38:0d:42:a9:35:3c:cb:6f:68:54:07:e4:8e:4f:a2: df:03:d5:6f:ba:b0:cc:6d:b2:dd:ca:45:7c:d0:6e: 94:bf:e9:2f:27:7e:d3:b9:65:49:ec:1d:c9:f0:5e: d5:9d:c7:c8:5e:64:83:c1:ca:21:1c:ca:cd:bd:15: da:ed:1f:de:d1:6a:08:67:31:68:09:61:3e:df:20: bf:c2:c9:ef:bc:bc:5c:b4:32:8a:2e:34:28:9c:14: 9a:c1:ec:f5:d4:a5:6a:44:d9:f2:23:9f:4a:60:e7: d2:9a:e5:b3:cf:7c:16:48:19:8f:ec:d1:a3:91:a7: 98:fd:54:c5:cf:49:2e:a6:89:3c:e8:48:8b:52:a8: 6e:0c:5e:33:76:88:95:81:03:20:04:9d:50:8b:b0: e7:b6:41:23:50:d5:a8:38:74:25:b3:17:14:3f:42: e6:a4:cc:5e:8a:59:cc:9b:9f:40:15:ba:5a:ed:99: c5:6a:14:54:94:69:96:11:ff:4f:aa:25:dd:f2:e1: d2:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:05:B7:B9:CF:10:BF:53:5B:6C:CF:A0:C1:94:0E:5B:37:8F:DC:B9 X509v3 Authority Key Identifier: keyid:47:7C:72:D3:EF:66:E3:FE:69:23:E3:81:28:D2:75:7C:BB:2A:BE:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2e6bbe4d-3a2b-4e1b-a1aa-593610b3dec9/0/477C72D3EF66E3FE6923E38128D2757CBB2ABE05.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:7f:f6:0d:47:a2:31:41:cf:ed:c7:e6:ed:5c:34:b5:47:ca: 57:f5:23:77:ab:12:0c:8e:84:f7:ef:b4:07:36:d0:75:62:27: 2b:07:a9:1a:41:63:65:f7:80:8e:da:cf:04:92:59:9e:a8:ea: 12:71:03:1c:a5:33:64:5d:cc:00:ff:3d:c9:70:c0:63:c5:8c: 3e:87:cf:72:ff:9a:8b:bb:7f:8d:78:bf:0a:f6:9d:2d:d2:a1: b4:f9:ee:1e:a4:b3:e0:3a:c4:94:ed:10:83:d1:c6:5a:2c:a5: 04:73:f7:92:b3:8b:e0:49:94:56:b8:cd:27:60:98:bd:06:d5: ef:df:ce:1d:06:81:95:0e:73:08:62:6d:d5:b4:f4:0d:b3:e6: e5:6a:64:d0:03:75:11:92:0a:3b:db:88:4b:ee:23:f6:ba:7c: f1:d3:84:ea:e3:d5:77:d4:8f:a0:9e:be:19:f3:1d:09:a3:03: 91:eb:ec:4f:b4:48:fc:bc:7e:fa:7c:a6:f2:ad:b2:af:b5:67: 54:1d:40:59:c1:a9:12:fb:60:69:b2:9c:44:b8:8b:e9:01:b6: ce:a6:4f:fe:b6:62:aa:a0:32:29:3c:7e:2b:01:4c:92:90:17: 8b:e5:c1:bf:5e:a4:ca:ef:d7:10:b7:a9:5d:47:b3:86:5c:bb: 7e:3e:ad:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ7Voh/hGIs7k9LeuUcGcoVvMtlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NC QjJBQkUwNTAeFw0yNjAzMDExNDM2MzNaFw0yNjAzMDUwMTA0MzNaMDMxMTAvBgNV BAMTKDEyMDVCN0I5Q0YxMEJGNTM1QjZDQ0ZBMEMxOTQwRTVCMzc4RkRDQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGONGdgpjup0IkdRLGB0Qax7G2 1oExIkbaBzBDJF5VSorlMZG17yQTpv99PCvcBI1k1LA9N5UYCj8y9zgNQqk1PMtv aFQH5I5Pot8D1W+6sMxtst3KRXzQbpS/6S8nftO5ZUnsHcnwXtWdx8heZIPByiEc ys29FdrtH97RaghnMWgJYT7fIL/Cye+8vFy0MoouNCicFJrB7PXUpWpE2fIjn0pg 59Ka5bPPfBZIGY/s0aORp5j9VMXPSS6miTzoSItSqG4MXjN2iJWBAyAEnVCLsOe2 QSNQ1ag4dCWzFxQ/QuakzF6KWcybn0AVulrtmcVqFFSUaZYR/0+qJd3y4dI5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEgW3uc8Qv1NbbM+gwZQOWzeP3LkwHwYDVR0j BBgwFoAUR3xy0+9m4/5pI+OBKNJ1fLsqvgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZTZiYmU0ZC0zYTJiLTRlMWItYTFhYS01OTM2MTBiM2RlYzkvMC80NzdDNzJEM0VG NjZFM0ZFNjkyM0UzODEyOEQyNzU3Q0JCMkFCRTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1N0NCQjJB QkUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmU2YmJlNGQtM2EyYi00ZTFiLWEx YWEtNTkzNjEwYjNkZWM5LzAvNDc3QzcyRDNFRjY2RTNGRTY5MjNFMzgxMjhEMjc1 N0NCQjJBQkUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9/9g1HojFBz+3H5u1cNLVHylf1I3erEgyO hPfvtAc20HViJysHqRpBY2X3gI7azwSSWZ6o6hJxAxylM2RdzAD/PclwwGPFjD6H z3L/mou7f414vwr2nS3SobT57h6ks+A6xJTtEIPRxlospQRz95Kzi+BJlFa4zSdg mL0G1e/fzh0GgZUOcwhibdW09A2z5uVqZNADdRGSCjvbiEvuI/a6fPHThOrj1XfU j6CevhnzHQmjA5Hr7E+0SPy8fvp8pvKtsq+1Z1QdQFnBqRL7YGmynES4i+kBts6m T/62YqqgMik8fisBTJKQF4vlwb9epMrv1xC3qV1Hs4Zcu34+rcw= -----END CERTIFICATE-----Generated at Mon Mar 2 16:08:53 2026 by rpki-client