$ rpki-client -vvf repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft File: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft (raw, json) Hash identifier: vrOhEkkQyFSFp2UvuBz5vlEGDeI7D3heIo2Gt0Xvq/c= Subject key identifier: 6A:62:70:06:84:81:99:B0:6E:1F:25:63:E6:A1:8B:C2:0F:4E:73:99 Authority key identifier: 4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD Certificate issuer: /CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Certificate serial: 1759539940465693C824B5960890B45E8F86CB9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft Manifest number: 02D4 Signing time: Sun 01 Mar 2026 03:31:14 +0000 Manifest this update: Sun 01 Mar 2026 03:26:14 +0000 Manifest next update: Wed 04 Mar 2026 13:17:14 +0000 Files and hashes: 1: 4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl (hash: gCiDDX3uibvBR/8ZjzyoWhUymwr6HtzvT8xWLgVE+kU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:17:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:59:53:99:40:46:56:93:c8:24:b5:96:08:90:b4:5e:8f:86:cb:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD Validity Not Before: Mar 1 03:26:14 2026 GMT Not After : Mar 4 13:17:14 2026 GMT Subject: CN=6A627006848199B06E1F2563E6A18BC20F4E7399 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:44:e4:c6:f9:6a:ff:00:da:84:fb:ed:7a:c3: 7c:20:8c:dc:b0:cd:e6:8a:30:3f:6c:af:fd:cc:91: fd:13:44:e8:77:78:c0:8a:65:7f:7e:a6:b2:2b:c1: 8c:e8:59:74:72:8a:fe:f3:69:cf:a6:d3:63:33:20: 5a:05:52:0b:6c:19:9c:26:f0:1d:65:ed:be:57:1b: b5:b1:c6:cf:5b:92:0a:39:d1:3f:0f:5e:1e:b2:02: c0:d2:79:42:6a:a2:04:3c:cf:c2:90:72:89:c5:12: 46:f4:b8:da:55:f6:d2:11:eb:3e:6f:24:d4:c9:88: c9:25:dc:c8:5d:ba:1a:d1:38:d1:10:93:28:cd:5e: ab:08:13:5d:be:4a:46:ac:7f:b4:10:9b:24:a8:d6: 00:07:c8:eb:04:03:06:e0:06:60:e8:2e:e5:25:28: 18:c0:95:05:96:ab:7a:92:aa:ea:35:b6:e5:b9:49: 15:39:37:9e:04:62:78:b5:f0:1f:59:7b:43:f6:70: 71:41:a2:75:bd:51:57:12:fa:bb:3d:c8:08:06:fc: 0e:be:ef:18:5d:68:7c:e6:e9:b5:de:6c:f1:72:bd: 84:ee:08:ab:42:46:52:47:21:3d:b6:d1:e6:84:f5: df:e0:79:71:78:21:7c:a3:01:0a:62:74:ce:48:a2: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:62:70:06:84:81:99:B0:6E:1F:25:63:E6:A1:8B:C2:0F:4E:73:99 X509v3 Authority Key Identifier: keyid:4C:0A:2E:84:DC:0F:6F:30:63:6B:6D:D2:52:7A:B6:CD:6A:B8:AF:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44625621-f00f-4833-bbab-56b269721549/0/4C0A2E84DC0F6F30636B6DD2527AB6CD6AB8AFCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:0c:e2:35:8e:6f:3f:e3:dc:36:e1:3e:68:3d:9e:a8:e9:b4: bf:6e:b3:40:22:27:6d:8b:33:ea:7c:14:62:c0:04:8e:01:d7: ac:88:35:d2:85:e8:e7:c2:35:9d:67:71:52:77:5e:d9:09:1d: 40:87:8a:44:0c:77:99:4e:50:63:38:8f:12:9b:45:b6:dd:17: 07:23:df:4f:ae:a9:9e:be:16:99:45:78:bb:86:7e:8b:e4:a5: c9:4e:f6:7e:e9:d7:bc:1e:26:51:ce:89:12:09:7f:17:dc:1c: 9d:ef:96:99:91:1f:03:36:2c:aa:da:d9:00:2e:10:34:fa:b0: 80:55:69:e3:c8:ed:fb:65:9c:9a:7b:46:5b:1b:8c:36:b4:37: b8:d5:e8:f7:c5:53:36:53:52:a7:75:39:04:65:9b:6b:26:1c: f7:26:2e:76:44:a6:91:99:de:41:f3:25:e5:64:4a:51:b0:07: 9c:a4:6d:c1:ff:5b:ab:cc:e1:98:81:97:45:61:91:85:9b:21: 76:eb:68:ff:04:2c:00:98:8b:69:45:6f:d3:fd:26:14:55:5f: 5f:24:b4:90:37:55:0b:77:93:87:93:17:6f:d4:40:ea:5a:06: 8c:52:b2:da:59:12:81:dc:0e:06:82:44:9f:83:ba:e4:0a:0a: 9b:62:d5:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF1lTmUBGVpPIJLWWCJC0Xo+Gy54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2 QUI4QUZDRDAeFw0yNjAzMDEwMzI2MTRaFw0yNjAzMDQxMzE3MTRaMDMxMTAvBgNV BAMTKDZBNjI3MDA2ODQ4MTk5QjA2RTFGMjU2M0U2QTE4QkMyMEY0RTczOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4ROTG+Wr/ANqE++16w3wgjNyw zeaKMD9sr/3Mkf0TROh3eMCKZX9+prIrwYzoWXRyiv7zac+m02MzIFoFUgtsGZwm 8B1l7b5XG7Wxxs9bkgo50T8PXh6yAsDSeUJqogQ8z8KQconFEkb0uNpV9tIR6z5v JNTJiMkl3MhduhrRONEQkyjNXqsIE12+Skasf7QQmySo1gAHyOsEAwbgBmDoLuUl KBjAlQWWq3qSquo1tuW5SRU5N54EYni18B9Ze0P2cHFBonW9UVcS+rs9yAgG/A6+ 7xhdaHzm6bXebPFyvYTuCKtCRlJHIT220eaE9d/geXF4IXyjAQpidM5IolEzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamJwBoSBmbBuHyVj5qGLwg9Oc5kwHwYDVR0j BBgwFoAUTAouhNwPbzBja23SUnq2zWq4r80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NDYyNTYyMS1mMDBmLTQ4MzMtYmJhYi01NmIyNjk3MjE1NDkvMC80QzBBMkU4NERD MEY2RjMwNjM2QjZERDI1MjdBQjZDRDZBQjhBRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2Q0Q2QUI4 QUZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDQ2MjU2MjEtZjAwZi00ODMzLWJi YWItNTZiMjY5NzIxNTQ5LzAvNEMwQTJFODREQzBGNkYzMDYzNkI2REQyNTI3QUI2 Q0Q2QUI4QUZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACoM4jWObz/j3DbhPmg9nqjptL9us0AiJ22L M+p8FGLABI4B16yINdKF6OfCNZ1ncVJ3XtkJHUCHikQMd5lOUGM4jxKbRbbdFwcj 30+uqZ6+FplFeLuGfovkpclO9n7p17weJlHOiRIJfxfcHJ3vlpmRHwM2LKra2QAu EDT6sIBVaePI7ftlnJp7RlsbjDa0N7jV6PfFUzZTUqd1OQRlm2smHPcmLnZEppGZ 3kHzJeVkSlGwB5ykbcH/W6vM4ZiBl0VhkYWbIXbraP8ELACYi2lFb9P9JhRVX18k tJA3VQt3k4eTF2/UQOpaBoxSstpZEoHcDgaCRJ+DuuQKCpti1dg= -----END CERTIFICATE-----Generated at Mon Mar 2 13:07:00 2026 by rpki-client