$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft File: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft (raw, json) Hash identifier: yPjR0BiOVqGk4FzdjrqAMpwoSdgLp+5Ubq9hpefttaU= Subject key identifier: 6F:F9:97:1C:86:9B:C8:50:BF:5F:02:F4:FE:DB:8A:E6:C0:27:8A:14 Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B Certificate issuer: /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Certificate serial: 17606CFBFA33DCE89D8C42CDBE127B3C7C9E3EBB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft Manifest number: 0553 Signing time: Mon 02 Mar 2026 15:42:21 +0000 Manifest this update: Mon 02 Mar 2026 15:37:21 +0000 Manifest next update: Thu 05 Mar 2026 17:46:21 +0000 Files and hashes: 1: 3130332e3135352e3136372e302f32342d3234203d3e20313431303634.roa (hash: bjlsGk5J7SvEO5IoZ47H9V39bFhtmZq3wwyih52cSks=) 2: 3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (hash: eyzaiFvv4c1HmHtA1p4wBBlGeENQrifGbWD1MbCWveE=) 3: 323430363a373234303a3a2f33322d3332203d3e20313431303634.roa (hash: VY0reLZgneAzg7R84Tad2iOKQP0XACwiXAAd1W212Yc=) 4: 3130332e3135352e3136362e302f32342d3234203d3e20313431303634.roa (hash: sI3bqifKZVIOhDY6Sh1Zbn3Bg29Wg0wSaItyUUWUok4=) 5: C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl (hash: S9yIqJ+AuWFcfP+P2UZeY9POmSyp7u5mzVcx4JqBslQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:60:6c:fb:fa:33:dc:e8:9d:8c:42:cd:be:12:7b:3c:7c:9e:3e:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B Validity Not Before: Mar 2 15:37:21 2026 GMT Not After : Mar 5 17:46:21 2026 GMT Subject: CN=6FF9971C869BC850BF5F02F4FEDB8AE6C0278A14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d0:99:1d:83:91:55:41:c8:c4:6e:b4:15:51: a1:ce:c0:29:ff:00:1a:7c:3b:ae:95:b6:49:08:57: 0d:07:e3:43:3c:9a:67:4d:59:6c:50:ee:e7:ca:87: 6c:23:b7:ee:ff:11:69:52:de:72:d1:20:e0:84:0a: b9:11:9c:58:01:91:ea:de:a3:fa:60:93:f4:49:4a: 7a:b2:fa:ba:23:c3:dd:a9:95:31:ab:84:c0:75:37: 3c:3c:ad:53:86:f1:f8:dc:11:29:bb:b2:08:47:5b: c8:88:c6:8b:32:b2:e7:c6:a1:f7:6a:f3:fc:17:f9: 59:04:46:6d:2d:09:bb:67:30:1c:fb:2e:3e:4f:26: 9b:a8:d1:b0:9c:2e:00:1f:0b:48:a5:09:a1:9c:9f: 34:11:d0:a7:30:a5:f0:86:d6:8c:f3:32:12:33:96: e3:30:49:21:9f:e6:2f:73:07:a1:62:21:85:ce:8c: dc:ec:88:03:36:56:73:f5:f7:39:0b:b6:e7:68:33: 71:d1:6c:9f:71:3a:9f:5c:1a:48:b1:ca:1a:5d:f1: 65:a5:34:e2:2b:95:1c:b5:74:8a:62:17:5b:eb:89: d2:29:9a:2c:e3:66:41:6c:1b:7d:be:ef:e6:07:3a: 2d:83:f9:b2:47:2a:da:3b:90:ef:ef:a6:f6:1e:25: e2:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:F9:97:1C:86:9B:C8:50:BF:5F:02:F4:FE:DB:8A:E6:C0:27:8A:14 X509v3 Authority Key Identifier: keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:91:7f:51:cd:28:fc:d0:92:7e:0d:0b:45:40:4f:36:4a:2d: 57:77:7a:4c:d2:54:d7:e4:07:ba:39:cc:00:ee:19:2b:eb:81: 56:53:13:78:22:9d:38:44:0a:41:76:97:32:af:dd:2d:ab:fa: b3:9c:26:56:4c:8d:12:b8:02:e4:9c:ff:78:f9:f7:2d:33:93: a3:0c:91:9a:97:17:68:52:bd:35:2f:cc:7f:e2:71:8b:66:f1: b3:53:e9:b7:0a:ee:21:14:33:b8:89:ff:a3:c5:53:e1:fa:8a: c3:7e:cc:78:96:02:f2:17:f7:d5:02:21:ed:61:db:5e:aa:96: 8c:d5:6a:2a:57:52:c9:b9:c7:b7:e0:1f:27:93:5a:63:5c:2b: 32:f2:fa:ec:55:60:c8:1b:85:b3:91:2d:8c:53:09:58:fa:20: 64:8c:2d:fb:63:ed:83:94:f0:38:30:ea:7a:eb:4e:e0:ba:9e: cb:fa:88:d2:db:a3:35:bb:15:12:70:5c:64:ef:c5:2b:de:cd: 87:53:26:8b:0d:05:c1:c0:de:3e:98:1a:19:cf:45:07:24:61: 3b:86:9c:61:dc:ea:59:3a:7c:4c:71:71:c9:07:df:43:11:5d: ab:73:91:b5:ab:5d:c9:9d:e4:90:8f:5b:40:b8:fc:e0:ef:32: 34:6a:c7:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2Bs+/oz3OidjELNvhJ7PHyePrswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC QTI2MTg5QjAeFw0yNjAzMDIxNTM3MjFaFw0yNjAzMDUxNzQ2MjFaMDMxMTAvBgNV BAMTKDZGRjk5NzFDODY5QkM4NTBCRjVGMDJGNEZFREI4QUU2QzAyNzhBMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0Jkdg5FVQcjEbrQVUaHOwCn/ ABp8O66VtkkIVw0H40M8mmdNWWxQ7ufKh2wjt+7/EWlS3nLRIOCECrkRnFgBkere o/pgk/RJSnqy+rojw92plTGrhMB1Nzw8rVOG8fjcESm7sghHW8iIxosysufGofdq 8/wX+VkERm0tCbtnMBz7Lj5PJpuo0bCcLgAfC0ilCaGcnzQR0KcwpfCG1ozzMhIz luMwSSGf5i9zB6FiIYXOjNzsiAM2VnP19zkLtudoM3HRbJ9xOp9cGkixyhpd8WWl NOIrlRy1dIpiF1vridIpmizjZkFsG32+7+YHOi2D+bJHKto7kO/vpvYeJeJ1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUb/mXHIabyFC/XwL0/tuK5sAnihQwHwYDVR0j BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2 MTg5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM2YjJiZDctZDdmMS00ODE1LWE2 MGEtY2FkNTQwMjljZTg4LzAvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMx QTZCQTI2MTg5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKORf1HNKPzQkn4NC0VATzZKLVd3ekzSVNfk B7o5zADuGSvrgVZTE3ginThECkF2lzKv3S2r+rOcJlZMjRK4AuSc/3j59y0zk6MM kZqXF2hSvTUvzH/icYtm8bNT6bcK7iEUM7iJ/6PFU+H6isN+zHiWAvIX99UCIe1h 216qlozVaipXUsm5x7fgHyeTWmNcKzLy+uxVYMgbhbORLYxTCVj6IGSMLftj7YOU 8Dgw6nrrTuC6nsv6iNLbozW7FRJwXGTvxSvezYdTJosNBcHA3j6YGhnPRQckYTuG nGHc6lk6fExxcckH30MRXatzkbWrXcmd5JCPW0C4/ODvMjRqx40= -----END CERTIFICATE-----Generated at Mon Mar 2 21:26:11 2026 by rpki-client