$ rpki-client -vvf repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft File: 44106068E5A5FC1973C8043D3B8F00105A9C9710.mft (raw, json) Hash identifier: N22ZBRlW2InGQIQf5dLTo0hBqifJ/KVEH27krmAF93Q= Subject key identifier: 9C:B8:4D:E2:86:DA:0F:42:B4:19:10:AD:AB:8C:08:05:85:C5:9F:9F Authority key identifier: 44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 Certificate issuer: /CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Certificate serial: 31BC45BE4C43A14A92A03886F22851E1CC8B6837 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft Manifest number: 0417 Signing time: Sat 28 Feb 2026 14:21:11 +0000 Manifest this update: Sat 28 Feb 2026 14:16:11 +0000 Manifest next update: Wed 04 Mar 2026 02:17:11 +0000 Files and hashes: 1: 3130332e3135352e3234372e302f32342d3234203d3e20313431303738.roa (hash: NvKxe3HHk9zHNuvCE6DN5lywX6x8QCyX3832DuoeqaY=) 2: 44106068E5A5FC1973C8043D3B8F00105A9C9710.crl (hash: SwRKY24NcKy63G5rEDmYWvgW3fHGAlDhq2+kPapqWbY=) 3: 3130332e3135352e3234362e302f32342d3234203d3e20313431303738.roa (hash: cKBPEdRq2LZ2LdyolV1+vPX464R8Bt40w+RS4c175VU=) 4: 323430363a376163303a3a2f33322d3332203d3e20313431303738.roa (hash: L7IP9MHf9lzBvSIuS3oASd3QVP2r70B7eN+5QUqcHUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:17:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:bc:45:be:4c:43:a1:4a:92:a0:38:86:f2:28:51:e1:cc:8b:68:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44106068E5A5FC1973C8043D3B8F00105A9C9710 Validity Not Before: Feb 28 14:16:11 2026 GMT Not After : Mar 4 02:17:11 2026 GMT Subject: CN=9CB84DE286DA0F42B41910ADAB8C080585C59F9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:3b:df:1f:28:19:53:dd:d1:5b:86:77:35:e8: 96:f4:29:84:ee:4f:8d:a7:24:ef:40:1b:52:e4:af: 51:02:86:a5:e6:da:b8:d0:d3:db:a7:35:55:73:74: d2:a1:39:58:0d:f7:d6:5e:2d:36:5f:f2:ed:bb:a5: 7d:45:3d:00:a9:c7:cd:ed:d6:b8:1f:ab:47:95:50: b3:8c:17:96:bb:4b:72:65:7f:b8:35:cc:f5:34:88: d0:82:aa:41:67:44:9b:0f:27:d4:2c:18:72:52:06: f4:a2:27:66:63:de:ec:60:61:a8:06:2c:ce:71:5d: f9:f6:b0:94:f1:9e:b3:16:30:48:08:33:45:fe:0e: 6d:d1:16:20:90:a8:91:23:1f:66:0f:9b:a7:cf:b5: e5:f5:6c:82:7a:a6:4e:f1:a2:dc:d3:e9:67:e3:35: cd:40:59:25:cf:b3:2c:d2:73:c7:02:9b:64:98:b0: e8:4b:ee:75:b0:68:5b:5d:43:55:d9:4e:27:bb:37: f6:df:c5:9d:5d:29:f6:d3:20:20:04:e7:14:70:08: 28:c9:8a:a7:0e:da:19:b2:e3:ea:dd:b6:23:f9:15: 20:82:72:d2:89:09:61:d8:2d:93:81:7a:44:c0:13: 2d:61:d0:93:88:f0:a2:37:0e:4d:7f:e3:07:60:3f: 8a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:B8:4D:E2:86:DA:0F:42:B4:19:10:AD:AB:8C:08:05:85:C5:9F:9F X509v3 Authority Key Identifier: keyid:44:10:60:68:E5:A5:FC:19:73:C8:04:3D:3B:8F:00:10:5A:9C:97:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44106068E5A5FC1973C8043D3B8F00105A9C9710.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c7d3cbf-24d6-4b1c-86cb-1d48876f3c6b/0/44106068E5A5FC1973C8043D3B8F00105A9C9710.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b1:9a:92:25:75:e1:be:30:df:0c:f7:ab:9f:0c:34:da:52: 5c:9a:37:f0:5e:3d:ec:90:44:89:80:6d:b6:e2:13:7e:a1:c0: f9:d0:ce:04:c4:53:44:34:cd:73:41:a8:ee:37:ae:4a:e6:1c: 85:90:f4:01:0d:81:2c:1e:2e:07:5c:02:f1:6f:e2:c7:83:30: a7:41:73:fc:2e:58:12:4c:c5:d0:94:59:b7:f5:83:b0:1f:7d: d9:f9:8f:74:8c:c5:79:5b:11:fd:e2:b8:77:1e:02:14:0c:cc: 40:02:70:f3:6f:9a:53:16:e6:21:e9:71:02:0f:14:9a:0b:c8: 38:2b:be:0e:6e:9f:28:02:83:13:ea:ca:eb:e2:cd:d0:8c:91: 14:d3:c8:5d:be:6b:58:98:7e:5a:e5:91:aa:c5:f8:2b:5f:03: b3:df:d2:47:81:d5:84:a1:ca:6b:c5:f0:f4:4f:3e:5b:4e:bb: 3e:3f:5a:fe:2a:9e:e1:26:b2:81:2e:4f:41:37:a6:f8:dc:5e: a4:90:3d:85:74:76:93:7d:c4:a1:f6:cd:41:95:52:3e:f7:bc: 1c:f6:75:11:1f:9c:0d:25:4c:4f:85:89:6d:0f:83:f1:77:d9: f5:09:2c:3a:19:ad:b1:1a:46:4c:00:9a:91:ca:a2:c7:44:82: a5:89:af:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMbxFvkxDoUqSoDiG8ihR4cyLaDcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1 QTlDOTcxMDAeFw0yNjAyMjgxNDE2MTFaFw0yNjAzMDQwMjE3MTFaMDMxMTAvBgNV BAMTKDlDQjg0REUyODZEQTBGNDJCNDE5MTBBREFCOEMwODA1ODVDNTlGOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHO98fKBlT3dFbhnc16Jb0KYTu T42nJO9AG1Lkr1EChqXm2rjQ09unNVVzdNKhOVgN99ZeLTZf8u27pX1FPQCpx83t 1rgfq0eVULOMF5a7S3Jlf7g1zPU0iNCCqkFnRJsPJ9QsGHJSBvSiJ2Zj3uxgYagG LM5xXfn2sJTxnrMWMEgIM0X+Dm3RFiCQqJEjH2YPm6fPteX1bIJ6pk7xotzT6Wfj Nc1AWSXPsyzSc8cCm2SYsOhL7nWwaFtdQ1XZTie7N/bfxZ1dKfbTICAE5xRwCCjJ iqcO2hmy4+rdtiP5FSCCctKJCWHYLZOBekTAEy1h0JOI8KI3Dk1/4wdgP4oxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnLhN4obaD0K0GRCtq4wIBYXFn58wHwYDVR0j BBgwFoAURBBgaOWl/BlzyAQ9O48AEFqclxAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YzdkM2NiZi0yNGQ2LTRiMWMtODZjYi0xZDQ4ODc2ZjNjNmIvMC80NDEwNjA2OEU1 QTVGQzE5NzNDODA0M0QzQjhGMDAxMDVBOUM5NzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAwMTA1QTlD OTcxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGM3ZDNjYmYtMjRkNi00YjFjLTg2 Y2ItMWQ0ODg3NmYzYzZiLzAvNDQxMDYwNjhFNUE1RkMxOTczQzgwNDNEM0I4RjAw MTA1QTlDOTcxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyxmpIldeG+MN8M96ufDDTaUlyaN/BePeyQ RImAbbbiE36hwPnQzgTEU0Q0zXNBqO43rkrmHIWQ9AENgSweLgdcAvFv4seDMKdB c/wuWBJMxdCUWbf1g7Affdn5j3SMxXlbEf3iuHceAhQMzEACcPNvmlMW5iHpcQIP FJoLyDgrvg5unygCgxPqyuvizdCMkRTTyF2+a1iYflrlkarF+CtfA7Pf0keB1YSh ymvF8PRPPltOuz4/Wv4qnuEmsoEuT0E3pvjcXqSQPYV0dpN9xKH2zUGVUj73vBz2 dREfnA0lTE+FiW0Pg/F32fUJLDoZrbEaRkwAmpHKosdEgqWJrww= -----END CERTIFICATE-----Generated at Mon Mar 2 04:06:33 2026 by rpki-client