$ rpki-client -vvf repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft File: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft (raw, json) Hash identifier: Douzqidu+XUe8ic+M6KfUixwq0/qXNx2I/H1rq7r+ss= Subject key identifier: 85:CF:B4:8D:7F:8A:4D:31:E5:54:5D:57:59:3D:D4:EF:71:8C:81:9A Authority key identifier: 4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 Certificate issuer: /CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Certificate serial: 4017A61C8316B259C2A9B3F090FE9308459DEEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft Manifest number: 0239 Signing time: Fri 27 Feb 2026 19:31:54 +0000 Manifest this update: Fri 27 Feb 2026 19:26:54 +0000 Manifest next update: Tue 03 Mar 2026 03:41:54 +0000 Files and hashes: 1: 3131382e3135312e3232302e302f32322d3234203d3e2039333236.roa (hash: MqS7xa1gZ4sxYF09hDVlXuThuOKNijdrU/YubMLE0nE=) 2: 4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl (hash: CwJbXfm8aNcjwkEYHsUpEyfQR6nYcdl0CRUzWhGgj+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 03:41:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:17:a6:1c:83:16:b2:59:c2:a9:b3:f0:90:fe:93:08:45:9d:ee:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1 Validity Not Before: Feb 27 19:26:54 2026 GMT Not After : Mar 3 03:41:54 2026 GMT Subject: CN=85CFB48D7F8A4D31E5545D57593DD4EF718C819A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:59:5a:ef:7f:11:57:f9:c0:26:a6:04:a9:fb: 71:f5:4d:d6:d4:7a:f5:b2:a1:a4:f0:51:cb:bd:ca: 64:1d:c1:1b:55:64:a7:8b:4a:71:60:37:a3:3c:71: 2e:6b:a4:bc:01:7b:1e:61:c0:ee:2f:0a:2a:e8:0d: bc:ac:ee:f7:fd:0a:cf:ef:68:b3:4b:fc:10:40:02: 41:ff:07:c0:ca:3f:4f:47:91:8e:18:96:d2:14:66: 39:31:e5:6f:f2:1d:2b:86:50:fa:d4:58:ba:bd:d7: 54:3c:4c:68:d8:c8:d7:6e:af:e2:71:fe:e5:4c:76: 8f:70:e4:05:3c:81:86:b7:99:d2:8b:ef:6e:ed:48: bf:bf:02:52:d8:87:ec:2f:36:c5:1f:95:19:7a:69: 31:83:00:76:b9:5a:00:5b:7e:6e:a3:e5:9e:b0:44: 86:7c:bf:cf:27:47:39:ab:17:33:9d:ea:61:0c:35: 71:87:a8:3f:58:ee:63:f2:ef:97:0a:17:c4:17:37: 82:01:f7:88:db:ea:3b:6e:49:fa:fd:3d:1b:dc:d7: ba:88:4c:b6:19:b4:ec:b8:36:40:7b:c9:5f:72:c0: d4:b8:73:f2:13:0c:d5:86:a4:06:29:aa:8e:49:16: 35:b6:f3:c3:2f:8a:9d:14:8e:58:b0:37:a0:21:80: c0:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:CF:B4:8D:7F:8A:4D:31:E5:54:5D:57:59:3D:D4:EF:71:8C:81:9A X509v3 Authority Key Identifier: keyid:4D:57:27:02:D7:7E:3A:9A:4A:FA:80:33:A2:A3:DC:59:7B:2C:8D:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/68184fab-0fa5-43bb-811c-2eeb0a5fe8d7/0/4D572702D77E3A9A4AFA8033A2A3DC597B2C8DA1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:53:77:ba:6a:16:30:5d:39:c8:28:38:34:ba:f5:a4:a3:05: 0b:8f:88:d5:84:24:72:b8:a8:87:29:cd:44:48:4d:95:d1:7e: 31:fd:0e:36:a5:14:ac:7f:24:b4:c6:38:ec:9d:45:4b:3c:fa: 33:e9:98:b5:ee:70:33:dd:60:21:54:23:01:4c:8c:7a:40:ea: ac:55:d9:4e:58:d3:0a:78:f3:24:97:64:87:4f:df:b4:7f:d4: 36:24:c3:76:b3:ff:ea:e1:1c:e3:89:54:97:47:4c:ca:95:50: 16:ee:e9:c6:b7:1c:4f:fe:cf:ed:e6:b3:b7:da:80:44:df:db: ec:64:93:a9:02:ae:4b:9b:1f:59:46:4b:86:28:4a:58:ee:59: 78:ab:47:66:46:e5:36:50:ad:09:a7:2f:c6:db:be:05:fa:fd: 67:00:83:7b:de:8a:94:d4:05:71:59:f8:5e:3f:73:b1:b7:23: 4e:0a:33:73:65:a6:48:15:c2:14:f7:ed:e9:f6:23:c4:8c:f1: 38:62:d0:2e:84:97:27:e7:55:82:10:f3:a2:c3:2b:e7:58:78: 5e:2f:51:8e:7f:1c:6f:a8:cd:f1:4b:2e:90:df:90:bd:8c:8d: 2c:6f:14:57:4c:b5:3c:83:b0:99:03:d3:f2:22:99:d5:36:41: 3c:7b:0f:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBemHIMWslnCqbPwkP6TCEWd7vYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3 QjJDOERBMTAeFw0yNjAyMjcxOTI2NTRaFw0yNjAzMDMwMzQxNTRaMDMxMTAvBgNV BAMTKDg1Q0ZCNDhEN0Y4QTREMzFFNTU0NUQ1NzU5M0RENEVGNzE4QzgxOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmWVrvfxFX+cAmpgSp+3H1TdbU evWyoaTwUcu9ymQdwRtVZKeLSnFgN6M8cS5rpLwBex5hwO4vCiroDbys7vf9Cs/v aLNL/BBAAkH/B8DKP09HkY4YltIUZjkx5W/yHSuGUPrUWLq911Q8TGjYyNdur+Jx /uVMdo9w5AU8gYa3mdKL727tSL+/AlLYh+wvNsUflRl6aTGDAHa5WgBbfm6j5Z6w RIZ8v88nRzmrFzOd6mEMNXGHqD9Y7mPy75cKF8QXN4IB94jb6jtuSfr9PRvc17qI TLYZtOy4NkB7yV9ywNS4c/ITDNWGpAYpqo5JFjW288Mvip0UjliwN6AhgMAHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhc+0jX+KTTHlVF1XWT3U73GMgZowHwYDVR0j BBgwFoAUTVcnAtd+OppK+oAzoqPcWXssjaEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ODE4NGZhYi0wZmE1LTQzYmItODExYy0yZWViMGE1ZmU4ZDcvMC80RDU3MjcwMkQ3 N0UzQTlBNEFGQTgwMzNBMkEzREM1OTdCMkM4REExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RDNTk3QjJD OERBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjgxODRmYWItMGZhNS00M2JiLTgx MWMtMmVlYjBhNWZlOGQ3LzAvNEQ1NzI3MDJENzdFM0E5QTRBRkE4MDMzQTJBM0RD NTk3QjJDOERBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG1Td7pqFjBdOcgoODS69aSjBQuPiNWEJHK4 qIcpzURITZXRfjH9DjalFKx/JLTGOOydRUs8+jPpmLXucDPdYCFUIwFMjHpA6qxV 2U5Y0wp48ySXZIdP37R/1DYkw3az/+rhHOOJVJdHTMqVUBbu6ca3HE/+z+3ms7fa gETf2+xkk6kCrkubH1lGS4YoSljuWXirR2ZG5TZQrQmnL8bbvgX6/WcAg3veipTU BXFZ+F4/c7G3I04KM3NlpkgVwhT37en2I8SM8Thi0C6ElyfnVYIQ86LDK+dYeF4v UY5/HG+ozfFLLpDfkL2MjSxvFFdMtTyDsJkD0/IimdU2QTx7Dz0= -----END CERTIFICATE-----Generated at Mon Mar 2 04:02:43 2026 by rpki-client