$ rpki-client -vvf repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft File: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft (raw, json) Hash identifier: J0Q50YNpm7idDk/IRKnDQhb5HgklEmNEWmSeyFx8QPY= Subject key identifier: FA:A9:C0:6D:BC:42:1B:EF:96:9A:E2:D8:55:1A:54:03:D7:B3:CD:E6 Authority key identifier: 49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 Certificate issuer: /CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Certificate serial: 0D407E3BC30DA58CBEC2ECC9CD2412957C7E8A23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject info access: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft Manifest number: EF Signing time: Sun 01 Mar 2026 02:02:23 +0000 Manifest this update: Sun 01 Mar 2026 01:57:23 +0000 Manifest next update: Wed 04 Mar 2026 03:01:23 +0000 Files and hashes: 1: 3130332e3233302e3138382e302f32332d3234203d3e20313333333439.roa (hash: BoTluS9h9fXmYVG5ixZmkF8QGw01I8U2x/hhTczYeKA=) 2: 4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl (hash: aQYeMZDJ1dycNjPnK7xfuIjcbo1VTw64puEzfrxU/jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:01:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:40:7e:3b:c3:0d:a5:8c:be:c2:ec:c9:cd:24:12:95:7c:7e:8a:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4960A8427FEA5814EF9E80EF3786E0CAAE063745 Validity Not Before: Mar 1 01:57:23 2026 GMT Not After : Mar 4 03:01:23 2026 GMT Subject: CN=FAA9C06DBC421BEF969AE2D8551A5403D7B3CDE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:4d:b2:8c:80:9b:00:b2:45:7b:a1:2d:8f:56: 0b:44:6e:ce:aa:10:e3:2c:b9:0f:0f:02:ff:56:45: 34:8c:4b:4a:d7:a1:08:11:7f:c2:27:6a:56:0e:02: 13:ec:a2:45:15:86:68:f5:bb:36:4f:23:cf:1b:53: 0c:08:b7:96:be:02:ab:8a:af:28:9c:0a:98:1f:fd: 02:3b:02:53:41:40:4b:d7:8e:09:c5:f9:57:c2:89: 9c:c8:0d:f5:cd:bf:4b:be:aa:45:6e:0c:43:2e:9d: b5:75:f4:b6:4d:62:23:e2:d4:06:5f:59:4e:14:64: 9a:b9:5b:86:db:7f:2f:1e:7a:d0:61:37:b5:52:ee: f8:36:c5:44:ca:eb:76:2c:1f:17:bf:3e:17:ce:e8: 32:91:87:a9:34:c0:aa:4e:bd:6b:61:d3:15:53:f8: 9e:d0:01:0b:71:76:01:74:f3:11:76:dc:60:d1:64: a6:e9:88:af:f8:52:d7:c7:25:63:94:72:ec:45:c1: 85:0e:08:3f:06:67:fa:c0:32:9f:39:e6:96:9f:f3: a6:4b:49:11:5f:68:9d:3c:db:1f:da:23:46:7f:dc: c3:7d:c9:16:a8:1e:b5:f8:74:fd:86:94:80:93:9d: 91:73:7f:4f:c4:13:ed:03:b4:87:ba:fa:a6:4f:25: e8:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:A9:C0:6D:BC:42:1B:EF:96:9A:E2:D8:55:1A:54:03:D7:B3:CD:E6 X509v3 Authority Key Identifier: keyid:49:60:A8:42:7F:EA:58:14:EF:9E:80:EF:37:86:E0:CA:AE:06:37:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4960A8427FEA5814EF9E80EF3786E0CAAE063745.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/40457d20-023a-4509-bb4a-62c86929dd97/0/4960A8427FEA5814EF9E80EF3786E0CAAE063745.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:d9:8e:4c:e5:1d:50:c3:e6:b4:8f:53:c8:60:65:ed:cc:4d: 8d:59:7e:a5:1f:c2:89:31:06:37:18:22:08:40:a7:64:5a:1d: 98:30:1b:e2:a6:cb:8f:3d:05:b2:70:1a:7d:b3:45:9c:3a:d8: f7:24:26:a0:1e:93:52:1c:e4:95:3d:a5:97:fa:6d:60:22:ea: d0:05:31:32:97:ff:1c:4e:c7:29:a8:94:60:e5:27:7f:4c:16: 24:ed:3d:dd:f3:e2:19:a1:f3:07:6f:27:7b:76:21:62:d2:e9: ff:da:6f:ad:bb:88:ef:13:9a:3a:ca:87:d4:77:f2:7f:5a:80: d3:21:02:a9:0f:18:8e:c4:c3:a7:dc:49:be:70:97:1d:f2:bc: 5d:f3:a0:7b:f4:78:df:22:30:f7:40:81:af:02:ff:c7:b1:01: d2:48:b4:e8:1b:28:09:96:a6:05:8d:2d:ed:6c:1f:7a:24:45: ac:b8:de:b8:2e:de:7f:74:4b:26:5f:ba:de:64:0e:0b:73:c1: d6:b7:2c:99:de:e9:57:55:1b:79:47:7f:4c:c5:66:44:de:4e: d0:de:b4:e7:c5:9f:42:4d:a3:c2:40:1d:ea:7e:e9:fe:14:97: 96:3a:af:2f:0f:d1:4a:14:27:81:22:bd:98:bb:17:85:35:5e: 93:ee:06:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDUB+O8MNpYy+wuzJzSQSlXx+iiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FB RTA2Mzc0NTAeFw0yNjAzMDEwMTU3MjNaFw0yNjAzMDQwMzAxMjNaMDMxMTAvBgNV BAMTKEZBQTlDMDZEQkM0MjFCRUY5NjlBRTJEODU1MUE1NDAzRDdCM0NERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4TbKMgJsAskV7oS2PVgtEbs6q EOMsuQ8PAv9WRTSMS0rXoQgRf8InalYOAhPsokUVhmj1uzZPI88bUwwIt5a+AquK ryicCpgf/QI7AlNBQEvXjgnF+VfCiZzIDfXNv0u+qkVuDEMunbV19LZNYiPi1AZf WU4UZJq5W4bbfy8eetBhN7VS7vg2xUTK63YsHxe/PhfO6DKRh6k0wKpOvWth0xVT +J7QAQtxdgF08xF23GDRZKbpiK/4UtfHJWOUcuxFwYUOCD8GZ/rAMp855paf86ZL SRFfaJ082x/aI0Z/3MN9yRaoHrX4dP2GlICTnZFzf0/EE+0DtIe6+qZPJej5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+qnAbbxCG++WmuLYVRpUA9ezzeYwHwYDVR0j BBgwFoAUSWCoQn/qWBTvnoDvN4bgyq4GN0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDQ1N2QyMC0wMjNhLTQ1MDktYmI0YS02MmM4NjkyOWRkOTcvMC80OTYwQTg0MjdG RUE1ODE0RUY5RTgwRUYzNzg2RTBDQUFFMDYzNzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUwQ0FBRTA2 Mzc0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDA0NTdkMjAtMDIzYS00NTA5LWJi NGEtNjJjODY5MjlkZDk3LzAvNDk2MEE4NDI3RkVBNTgxNEVGOUU4MEVGMzc4NkUw Q0FBRTA2Mzc0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFjZjkzlHVDD5rSPU8hgZe3MTY1ZfqUfwokx BjcYIghAp2RaHZgwG+Kmy489BbJwGn2zRZw62PckJqAek1Ic5JU9pZf6bWAi6tAF MTKX/xxOxymolGDlJ39MFiTtPd3z4hmh8wdvJ3t2IWLS6f/ab627iO8TmjrKh9R3 8n9agNMhAqkPGI7Ew6fcSb5wlx3yvF3zoHv0eN8iMPdAga8C/8exAdJItOgbKAmW pgWNLe1sH3okRay43rgu3n90SyZfut5kDgtzwda3LJne6VdVG3lHf0zFZkTeTtDe tOfFn0JNo8JAHep+6f4Ul5Y6ry8P0UoUJ4EivZi7F4U1XpPuBiE= -----END CERTIFICATE-----Generated at Tue Mar 3 03:49:35 2026 by rpki-client