$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft File: 4515472806DD01B59715410103D51C05E4F28B96.mft (raw, json) Hash identifier: WD6oDkz+pD2nBflJ3tsABFIxBAX9ScTTjgyBVgMd03E= Subject key identifier: 5A:C2:5F:FE:52:D2:86:D7:E1:22:A7:19:2F:79:6C:8D:3C:ED:CF:9B Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 Certificate issuer: /CN=4515472806DD01B59715410103D51C05E4F28B96 Certificate serial: 4F91B2A1AF50DB0C856037742B25660479194F70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject info access: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft Manifest number: 0280 Signing time: Sun 01 Mar 2026 09:42:07 +0000 Manifest this update: Sun 01 Mar 2026 09:37:07 +0000 Manifest next update: Wed 04 Mar 2026 15:20:07 +0000 Files and hashes: 1: 4515472806DD01B59715410103D51C05E4F28B96.crl (hash: Zdhce1bBoTbEAP7kS8dwMIW4/tgTs3Mozbvd+297CYc=) 2: 3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (hash: BhcjiBOzkEndpU3BCQBdyWS42pT8Sn5ebga69zofOx4=) 3: 3130332e3137332e3134332e302f32342d3234203d3e20313437303930.roa (hash: FB2w9FFq9iyYkttvd+v5WHr2UrftQkkwfLGbohLA45o=) 4: 3130332e3137332e3134322e302f32332d3233203d3e20313437303930.roa (hash: B1GpwqVmx/ho+gLDfNNDsbyOOI8aLnzd82hh+EFezgY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 15:20:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:91:b2:a1:af:50:db:0c:85:60:37:74:2b:25:66:04:79:19:4f:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96 Validity Not Before: Mar 1 09:37:07 2026 GMT Not After : Mar 4 15:20:07 2026 GMT Subject: CN=5AC25FFE52D286D7E122A7192F796C8D3CEDCF9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e1:6f:86:60:61:cc:c4:c0:f9:bd:50:fa:a9: 95:2e:88:e3:a8:db:12:cc:75:7f:ec:bd:b7:0b:35: 1b:ef:a6:d5:5d:d6:4d:ff:59:96:f8:9f:03:d1:42: 41:1c:ec:2c:72:d7:de:5b:eb:c3:74:e5:c4:ab:ff: cd:15:1b:3d:cf:1a:9e:df:4c:d2:09:d3:66:0e:1b: 65:64:fb:2d:b2:f0:64:e9:b9:83:0b:b2:93:d5:a6: b1:01:53:6e:16:cf:ba:2e:fa:23:42:60:b8:f1:03: 4c:66:16:eb:d8:e4:7d:b4:63:db:87:f1:ef:ba:7c: 9a:1f:60:90:4c:5b:8e:98:f1:79:76:ef:1b:17:bf: ac:b8:70:dd:a3:63:b6:59:5c:52:52:88:c5:c4:65: 33:c8:91:51:05:0b:90:f2:89:37:11:3e:58:2b:0c: 17:6e:80:ba:f2:a5:e5:21:17:b9:f6:8c:f5:1d:84: 62:6d:fe:33:4c:0e:e6:6c:8e:3a:5d:79:80:0b:4c: 9d:03:8b:6c:c3:e3:ca:2b:4e:25:64:6e:bc:21:8a: 25:84:27:28:6d:db:5b:74:a6:a6:28:58:ee:35:8e: 7c:e5:72:7e:ef:2f:fe:a0:0a:6b:cd:1e:d5:ea:25: 7c:3e:7b:65:96:f4:0f:94:64:ff:5a:64:94:41:dd: df:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:C2:5F:FE:52:D2:86:D7:E1:22:A7:19:2F:79:6C:8D:3C:ED:CF:9B X509v3 Authority Key Identifier: keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5a:23:fb:bd:f6:6b:83:80:c4:e2:5e:fc:1d:f5:28:fe:4b: dd:7b:14:7c:46:1f:51:18:d1:c5:35:e6:8e:4d:dd:f3:46:87: 5e:ea:e7:c1:f9:7d:b7:3d:2a:df:84:5b:8c:15:a7:c6:49:10: c9:5a:5d:3d:c3:77:58:1d:1f:2d:05:f1:e8:31:fe:c6:91:55: e2:90:15:a0:d2:d1:98:17:6f:e2:44:22:cb:b4:ac:57:16:f9: 71:b4:5c:0d:d1:ef:7e:7b:df:26:91:95:6b:62:0d:14:15:d2: 44:1e:83:e5:55:1b:d3:9a:fd:91:a8:1a:aa:07:0d:55:93:be: 19:17:6d:c2:33:63:42:6d:be:35:00:38:6e:47:14:6b:a1:f8: d4:fe:15:d1:91:b9:92:c0:d9:9b:60:6e:91:6a:fc:93:87:c2: db:7b:63:cc:5a:c9:2e:2c:42:d5:c1:9c:57:ab:90:42:97:3f: 75:26:3a:42:64:89:8d:40:e0:f1:ed:e6:7b:10:89:10:83:32: 5f:d6:70:19:3d:ba:bd:1f:c5:55:1b:69:8c:d7:c9:7d:16:fc: eb:84:ae:07:6e:5a:12:82:11:db:37:59:8d:e1:ad:5b:34:3c: 9a:e7:87:b2:ca:4b:a5:46:71:e0:04:b2:64:5d:7e:46:d4:36: 97:bd:3b:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT5Gyoa9Q2wyFYDd0KyVmBHkZT3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVF NEYyOEI5NjAeFw0yNjAzMDEwOTM3MDdaFw0yNjAzMDQxNTIwMDdaMDMxMTAvBgNV BAMTKDVBQzI1RkZFNTJEMjg2RDdFMTIyQTcxOTJGNzk2QzhEM0NFRENGOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4W+GYGHMxMD5vVD6qZUuiOOo 2xLMdX/svbcLNRvvptVd1k3/WZb4nwPRQkEc7Cxy195b68N05cSr/80VGz3PGp7f TNIJ02YOG2Vk+y2y8GTpuYMLspPVprEBU24Wz7ou+iNCYLjxA0xmFuvY5H20Y9uH 8e+6fJofYJBMW46Y8Xl27xsXv6y4cN2jY7ZZXFJSiMXEZTPIkVEFC5DyiTcRPlgr DBdugLrypeUhF7n2jPUdhGJt/jNMDuZsjjpdeYALTJ0Di2zD48orTiVkbrwhiiWE Jyht21t0pqYoWO41jnzlcn7vL/6gCmvNHtXqJXw+e2WW9A+UZP9aZJRB3d/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWsJf/lLShtfhIqcZL3lsjTztz5swHwYDVR0j BBgwFoAURRVHKAbdAbWXFUEBA9UcBeTyi5YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NGYxMzcyYy00M2E2LTRmZGEtYjUwZS1kMDFlYjQyYzY4OWYvMC80NTE1NDcyODA2 REQwMUI1OTcxNTQxMDEwM0Q1MUMwNUU0RjI4Qjk2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFDMDVFNEYy OEI5Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTRmMTM3MmMtNDNhNi00ZmRhLWI1 MGUtZDAxZWI0MmM2ODlmLzAvNDUxNTQ3MjgwNkREMDFCNTk3MTU0MTAxMDNENTFD MDVFNEYyOEI5Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxaI/u99muDgMTiXvwd9Sj+S917FHxGH1EY 0cU15o5N3fNGh17q58H5fbc9Kt+EW4wVp8ZJEMlaXT3Dd1gdHy0F8egx/saRVeKQ FaDS0ZgXb+JEIsu0rFcW+XG0XA3R73573yaRlWtiDRQV0kQeg+VVG9Oa/ZGoGqoH DVWTvhkXbcIzY0JtvjUAOG5HFGuh+NT+FdGRuZLA2ZtgbpFq/JOHwtt7Y8xayS4s QtXBnFerkEKXP3UmOkJkiY1A4PHt5nsQiRCDMl/WcBk9ur0fxVUbaYzXyX0W/OuE rgduWhKCEds3WY3hrVs0PJrnh7LKS6VGceAEsmRdfkbUNpe9O+E= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:54 2026 by rpki-client