$ rpki-client -vvf repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft File: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft (raw, json) Hash identifier: 54Ixywxo8P89AGRRle7rztiXZHPoc7NyvFjnEUxLN7c= Subject key identifier: BB:C7:AD:A5:89:80:A6:CE:9B:BB:71:7A:F6:E9:65:49:C8:DA:ED:47 Authority key identifier: 4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F Certificate issuer: /CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Certificate serial: 7FDA322B47C3BEF55111EE5A320A3CF654D677B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft Manifest number: 0255 Signing time: Sun 01 Mar 2026 15:11:13 +0000 Manifest this update: Sun 01 Mar 2026 15:06:13 +0000 Manifest next update: Wed 04 Mar 2026 19:24:13 +0000 Files and hashes: 1: 4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl (hash: ziJ4ArWfik9l1XG9p20/RHAv6SnNEvGN8KTcPiGxnUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:24:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:da:32:2b:47:c3:be:f5:51:11:ee:5a:32:0a:3c:f6:54:d6:77:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F Validity Not Before: Mar 1 15:06:13 2026 GMT Not After : Mar 4 19:24:13 2026 GMT Subject: CN=BBC7ADA58980A6CE9BBB717AF6E96549C8DAED47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e4:32:6c:f7:2d:4e:dd:88:d8:f2:08:2d:51: 07:66:3d:7f:11:32:a9:83:a7:35:b0:82:97:67:df: b1:79:bd:8e:5a:c1:0f:9b:55:04:4b:81:73:4c:be: 3d:61:6a:74:ab:09:0f:bd:df:59:c4:27:cb:8f:a3: 4e:75:a3:a1:9c:77:de:ec:63:06:e0:ab:fa:f5:21: dd:31:da:92:2b:6a:01:f9:7f:e3:cc:5a:98:43:64: bd:8e:ea:e6:53:a5:4c:ec:25:c8:fb:09:86:9f:52: ce:6d:5f:3c:b8:56:50:77:55:06:d2:89:45:71:dc: 9e:1a:1c:37:1b:3f:79:ac:78:ce:3a:57:fb:00:ce: ec:e5:11:10:4e:9a:3d:9e:05:f5:81:1f:7a:44:a8: 1e:41:94:21:4e:ec:b2:3f:2f:3d:d3:1a:18:ab:16: 3e:d2:c6:17:4f:74:8e:9a:ee:01:f7:bc:8a:18:ca: fb:04:1d:93:69:81:5d:b0:79:d4:e7:de:7b:3b:9e: f7:8b:88:d8:67:84:b8:c3:bf:3c:af:70:1c:77:1f: f9:60:aa:ee:1c:60:b1:ad:b0:d5:d4:8e:0d:36:77: cf:e2:5e:2c:58:00:3b:01:10:d5:85:82:87:ea:4d: 02:2e:24:49:de:02:5f:e9:d2:5b:ec:3f:d3:6f:e3: 57:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:C7:AD:A5:89:80:A6:CE:9B:BB:71:7A:F6:E9:65:49:C8:DA:ED:47 X509v3 Authority Key Identifier: keyid:4A:8B:6A:33:95:61:2C:D3:3D:A8:B3:C3:81:D6:ED:CF:A4:A4:5A:1F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a37aec-63c2-45d1-96ae-da16d1018b0f/0/4A8B6A3395612CD33DA8B3C381D6EDCFA4A45A1F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:92:34:f9:88:3a:31:2d:fb:49:a0:c7:a7:85:65:5d:07:9d: 90:9b:b0:87:3c:a9:27:08:07:db:e7:e8:b9:3f:27:33:6e:0a: 56:c1:2a:be:24:8f:3c:5e:70:ee:fb:8b:e9:e6:17:9d:09:0a: de:63:89:c0:6e:f3:8c:f6:81:e3:72:09:66:da:ba:51:99:7e: 58:c1:f4:e0:b4:8d:00:be:ee:39:64:0c:7e:40:9a:f7:ca:6a: 30:d4:be:43:a3:81:c5:2e:ba:20:ea:bd:ea:17:db:22:11:e4: be:ab:9b:5f:df:9c:5e:ca:9d:a2:e6:af:a9:06:74:0e:67:75: c2:53:ef:b5:d5:1b:6c:58:31:d4:5b:37:57:ee:49:36:30:01: 10:35:dd:38:32:6d:1e:75:2b:a7:1a:82:e6:07:8d:1d:05:a8: 41:7e:6e:e0:64:e5:d0:9f:cc:7a:fb:11:30:48:24:1a:d7:24: c0:1a:08:87:29:dd:2e:f4:20:42:3f:b0:7d:85:2c:d1:fb:5d: 68:4a:8a:ea:c7:7a:4c:56:90:68:c4:55:d3:83:b1:0c:f6:b5: be:d5:e8:b3:45:30:80:04:a9:35:69:5e:0d:01:99:30:a2:f1: 8d:9f:2f:3f:9f:2d:62:ae:be:94:63:58:87:1a:43:b8:78:a9: 5d:4d:bd:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf9oyK0fDvvVREe5aMgo89lTWd7gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZB NEE0NUExRjAeFw0yNjAzMDExNTA2MTNaFw0yNjAzMDQxOTI0MTNaMDMxMTAvBgNV BAMTKEJCQzdBREE1ODk4MEE2Q0U5QkJCNzE3QUY2RTk2NTQ5QzhEQUVENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG5DJs9y1O3YjY8ggtUQdmPX8R MqmDpzWwgpdn37F5vY5awQ+bVQRLgXNMvj1hanSrCQ+931nEJ8uPo051o6Gcd97s Ywbgq/r1Id0x2pIragH5f+PMWphDZL2O6uZTpUzsJcj7CYafUs5tXzy4VlB3VQbS iUVx3J4aHDcbP3mseM46V/sAzuzlERBOmj2eBfWBH3pEqB5BlCFO7LI/Lz3TGhir Fj7SxhdPdI6a7gH3vIoYyvsEHZNpgV2wedTn3ns7nveLiNhnhLjDvzyvcBx3H/lg qu4cYLGtsNXUjg02d8/iXixYADsBENWFgofqTQIuJEneAl/p0lvsP9Nv41evAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu8etpYmAps6bu3F69ullScja7UcwHwYDVR0j BBgwFoAUSotqM5VhLNM9qLPDgdbtz6SkWh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWEzN2FlYy02M2MyLTQ1ZDEtOTZhZS1kYTE2ZDEwMThiMGYvMC80QThCNkEzMzk1 NjEyQ0QzM0RBOEIzQzM4MUQ2RURDRkE0QTQ1QTFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVEQ0ZBNEE0 NUExRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlhMzdhZWMtNjNjMi00NWQxLTk2 YWUtZGExNmQxMDE4YjBmLzAvNEE4QjZBMzM5NTYxMkNEMzNEQThCM0MzODFENkVE Q0ZBNEE0NUExRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAeSNPmIOjEt+0mgx6eFZV0HnZCbsIc8qScI B9vn6Lk/JzNuClbBKr4kjzxecO77i+nmF50JCt5jicBu84z2geNyCWbaulGZfljB 9OC0jQC+7jlkDH5AmvfKajDUvkOjgcUuuiDqveoX2yIR5L6rm1/fnF7KnaLmr6kG dA5ndcJT77XVG2xYMdRbN1fuSTYwARA13TgybR51K6caguYHjR0FqEF+buBk5dCf zHr7ETBIJBrXJMAaCIcp3S70IEI/sH2FLNH7XWhKiurHekxWkGjEVdODsQz2tb7V 6LNFMIAEqTVpXg0BmTCi8Y2fLz+fLWKuvpRjWIcaQ7h4qV1NvXo= -----END CERTIFICATE-----Generated at Mon Mar 2 05:56:31 2026 by rpki-client