$ rpki-client -vvf repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft File: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft (raw, json) Hash identifier: d+ASX5ohs9QefoODeEQQtCTqigdUi5D3JkOHAfCtB9U= Subject key identifier: 8D:9A:9F:72:13:5E:8D:04:5F:14:34:3C:14:7E:1B:2F:86:AA:FE:26 Authority key identifier: 48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 Certificate issuer: /CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Certificate serial: 594C3C73645BCCF6A2B7E87E4DD7B4CDBE21B8BD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft Manifest number: 0212 Signing time: Sun 01 Mar 2026 06:32:55 +0000 Manifest this update: Sun 01 Mar 2026 06:27:55 +0000 Manifest next update: Wed 04 Mar 2026 12:23:55 +0000 Files and hashes: 1: 3130332e3134372e3134382e302f32332d3234203d3e203137373639.roa (hash: n1vxqT01MHNJQCue1F/8LHi9S+iotjvGE4Enfb7Gpo0=) 2: 4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl (hash: nFDOrTEyi0hCAxoqkYGU+RIRDsFDhtMnI4tsgsufXHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:23:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:4c:3c:73:64:5b:cc:f6:a2:b7:e8:7e:4d:d7:b4:cd:be:21:b8:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4846B9B0D6B1DEDADE4A9C1BB6F913695D261585 Validity Not Before: Mar 1 06:27:55 2026 GMT Not After : Mar 4 12:23:55 2026 GMT Subject: CN=8D9A9F72135E8D045F14343C147E1B2F86AAFE26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:7b:78:2b:ca:08:93:39:61:42:c7:e7:bb:40: e7:61:4e:e8:07:fa:5e:b6:c9:d5:d1:2e:88:5f:e7: e8:e8:8c:46:39:8e:7d:66:ce:61:68:b1:8f:4f:95: fe:65:4c:23:31:d2:f0:37:5c:f5:45:3e:f9:76:16: d7:0d:75:40:f8:1c:ab:1e:c4:8f:ca:2e:59:3f:83: 78:50:2c:3f:df:a5:d3:8e:68:7e:22:32:8a:82:d8: f7:ac:aa:96:91:0b:36:1b:69:f0:81:b4:42:14:99: f9:44:f1:46:d3:3e:1b:1d:7f:c5:73:82:a2:00:58: 79:de:d5:44:b4:ea:eb:b4:4a:88:42:36:a5:94:31: 23:32:e7:01:39:e1:65:23:f4:43:bf:c2:b6:4e:55: 73:62:3c:05:f5:03:98:6b:19:26:8b:95:0f:09:16: ff:fe:a5:b4:c6:56:a4:f3:3a:68:1c:5c:6d:83:a5: d5:b3:36:0a:0f:d5:52:80:1c:59:e4:09:29:69:1a: 9f:eb:08:0a:d1:73:2e:e4:9a:46:79:38:da:0c:4a: 96:d6:2b:72:63:e1:c3:12:71:74:1d:01:86:f4:0a: 80:71:e2:ca:31:a5:2e:e7:00:44:6a:80:1a:bc:a1: 1b:05:3a:d5:1d:1f:8c:90:19:97:af:ba:b9:be:b5: d4:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:9A:9F:72:13:5E:8D:04:5F:14:34:3C:14:7E:1B:2F:86:AA:FE:26 X509v3 Authority Key Identifier: keyid:48:46:B9:B0:D6:B1:DE:DA:DE:4A:9C:1B:B6:F9:13:69:5D:26:15:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3931fae9-627a-4a08-be5c-44a0c1571487/0/4846B9B0D6B1DEDADE4A9C1BB6F913695D261585.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:e4:b0:40:02:34:d0:ea:de:cd:21:50:25:3a:e2:b0:54: ea:51:3e:d9:d8:82:68:aa:2f:04:39:de:31:25:f3:92:6e:32: 14:0b:46:7f:5f:00:d2:78:08:ff:06:1e:61:f5:ea:28:27:92: b1:f2:d1:e5:d5:69:98:b2:8f:68:fd:65:6d:e1:d3:27:a1:3a: 3e:fb:6e:c0:73:50:58:be:4a:55:c3:b5:db:1d:32:71:5f:f9: 48:16:26:56:bc:d1:0d:20:2f:3f:3d:1f:82:2a:70:bf:e5:38: 17:13:77:97:4e:66:1a:d4:49:ca:45:30:2f:f4:98:91:73:03: a5:48:c0:9a:10:e9:d5:29:5c:4f:26:84:55:ff:5b:d9:82:75: 36:f4:0b:b8:7b:c9:c9:42:0f:2e:2c:8d:e0:74:ad:48:8c:0c: 84:71:57:93:b5:59:b6:72:12:5a:18:33:dc:b4:b9:80:5f:6a: 62:01:9e:6a:8a:29:0c:d0:ab:f2:db:c5:17:fa:9f:f0:a0:51: 25:cb:5d:e0:b1:2f:15:d2:de:eb:4b:40:cc:f0:39:90:a3:e4: 9b:25:49:92:4e:2a:23:c9:40:c9:ce:a5:ef:e7:5b:c4:2c:1f: 7d:a1:b6:aa:8f:7b:9c:a2:38:d1:09:7f:ab:7b:00:e6:9d:42: 28:35:ef:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWUw8c2RbzPait+h+Tde0zb4huL0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1 RDI2MTU4NTAeFw0yNjAzMDEwNjI3NTVaFw0yNjAzMDQxMjIzNTVaMDMxMTAvBgNV BAMTKDhEOUE5RjcyMTM1RThEMDQ1RjE0MzQzQzE0N0UxQjJGODZBQUZFMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/e3grygiTOWFCx+e7QOdhTugH +l62ydXRLohf5+jojEY5jn1mzmFosY9Plf5lTCMx0vA3XPVFPvl2FtcNdUD4HKse xI/KLlk/g3hQLD/fpdOOaH4iMoqC2PesqpaRCzYbafCBtEIUmflE8UbTPhsdf8Vz gqIAWHne1US06uu0SohCNqWUMSMy5wE54WUj9EO/wrZOVXNiPAX1A5hrGSaLlQ8J Fv/+pbTGVqTzOmgcXG2DpdWzNgoP1VKAHFnkCSlpGp/rCArRcy7kmkZ5ONoMSpbW K3Jj4cMScXQdAYb0CoBx4soxpS7nAERqgBq8oRsFOtUdH4yQGZevurm+tdRRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjZqfchNejQRfFDQ8FH4bL4aq/iYwHwYDVR0j BBgwFoAUSEa5sNax3treSpwbtvkTaV0mFYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OTMxZmFlOS02MjdhLTRhMDgtYmU1Yy00NGEwYzE1NzE0ODcvMC80ODQ2QjlCMEQ2 QjFERURBREU0QTlDMUJCNkY5MTM2OTVEMjYxNTg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEzNjk1RDI2 MTU4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzkzMWZhZTktNjI3YS00YTA4LWJl NWMtNDRhMGMxNTcxNDg3LzAvNDg0NkI5QjBENkIxREVEQURFNEE5QzFCQjZGOTEz Njk1RDI2MTU4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5n5LBAAjTQ6t7NIVAlOuKwVOpRPtnYgmiq LwQ53jEl85JuMhQLRn9fANJ4CP8GHmH16ignkrHy0eXVaZiyj2j9ZW3h0yehOj77 bsBzUFi+SlXDtdsdMnFf+UgWJla80Q0gLz89H4IqcL/lOBcTd5dOZhrUScpFMC/0 mJFzA6VIwJoQ6dUpXE8mhFX/W9mCdTb0C7h7yclCDy4sjeB0rUiMDIRxV5O1WbZy EloYM9y0uYBfamIBnmqKKQzQq/LbxRf6n/CgUSXLXeCxLxXS3utLQMzwOZCj5Jsl SZJOKiPJQMnOpe/nW8QsH32htqqPe5yiONEJf6t7AOadQig175A= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:38 2026 by rpki-client