$ rpki-client -vvf repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft File: 4496E0D8274284254DC2307A2633342BE95C0DD3.mft (raw, json) Hash identifier: 2Aepl6KCs1NldhXniXAhMu7yVUE7JAbM05rPh1ACGN4= Subject key identifier: 98:5A:39:55:5C:24:C4:96:E6:C0:41:EE:A8:DE:14:BB:B2:3B:DC:53 Authority key identifier: 44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 Certificate issuer: /CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Certificate serial: 1DFD412F89BEDAFD0930AEA7639DCD14771D01AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft Manifest number: 0175 Signing time: Mon 02 Mar 2026 04:02:04 +0000 Manifest this update: Mon 02 Mar 2026 03:57:04 +0000 Manifest next update: Thu 05 Mar 2026 15:30:04 +0000 Files and hashes: 1: 4496E0D8274284254DC2307A2633342BE95C0DD3.crl (hash: 6HQemMfleGsTpOJjEAs93SB3dbEcpFUmBNAyNCUx35A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:fd:41:2f:89:be:da:fd:09:30:ae:a7:63:9d:cd:14:77:1d:01:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4496E0D8274284254DC2307A2633342BE95C0DD3 Validity Not Before: Mar 2 03:57:04 2026 GMT Not After : Mar 5 15:30:04 2026 GMT Subject: CN=985A39555C24C496E6C041EEA8DE14BBB23BDC53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0f:2b:4c:37:2b:2a:d3:72:1a:13:31:1e:dc: 5a:7b:7c:af:9e:a0:6d:1c:7e:4c:e8:af:29:f2:f7: 9a:e1:5d:a5:ae:d4:09:7d:d4:98:20:62:b2:29:3c: 7f:83:46:4c:06:b5:f3:29:b1:52:32:6d:e2:02:4b: 25:0f:ba:a4:ea:bf:12:ad:87:40:0c:4a:e3:06:45: d7:0f:04:92:64:c3:33:64:d9:4c:90:78:5f:ea:d0: 47:31:d4:8b:b4:c0:ec:5e:26:b8:bf:2d:9a:bb:d9: 7b:f4:9b:f7:ff:71:f5:47:25:f4:2d:ad:58:83:a5: 89:3f:05:0e:39:60:7d:27:25:0f:6e:fc:65:bd:b1: dc:f6:52:e1:a1:17:fe:39:d7:02:7f:87:cc:60:3d: 71:61:53:57:54:a8:31:a3:29:88:c4:75:fb:db:c1: 0f:fc:e8:0d:21:60:61:31:c3:f1:5c:ee:01:c6:21: 09:cf:1b:d7:c9:64:8b:08:56:36:20:e3:49:60:b0: 18:2a:1e:64:86:be:f5:ae:0f:53:e7:e6:6b:3d:84: 99:89:15:35:45:47:9a:62:a3:c9:5c:54:91:0d:2c: a2:94:1e:41:d2:0f:b7:7a:4e:6e:56:e1:16:d9:86: 5e:ad:24:8a:a2:ca:13:38:a5:de:7e:2b:8b:aa:cf: c8:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:5A:39:55:5C:24:C4:96:E6:C0:41:EE:A8:DE:14:BB:B2:3B:DC:53 X509v3 Authority Key Identifier: keyid:44:96:E0:D8:27:42:84:25:4D:C2:30:7A:26:33:34:2B:E9:5C:0D:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4496E0D8274284254DC2307A2633342BE95C0DD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7466b005-1721-4945-85c0-b0399cedccfe/0/4496E0D8274284254DC2307A2633342BE95C0DD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:35:ef:4a:32:44:bc:e5:66:20:63:fa:d3:6e:3f:5e:13:4d: 51:99:37:9d:76:cd:f4:6e:1c:f8:38:9d:0c:80:0b:17:26:08: 78:40:9e:8e:dd:43:2e:2b:7b:c5:7d:da:ee:3c:f3:b4:80:97: 1f:d8:cc:31:30:9c:44:aa:cd:f2:b2:1e:2d:0f:9a:6a:1e:7f: 77:31:e8:eb:58:bd:e3:14:0b:41:1d:53:ed:1b:d5:40:4d:96: a2:ae:f1:e6:ad:4d:09:8d:34:6b:ec:fe:a0:ab:90:74:3c:ea: 91:73:4e:66:20:ab:49:e8:81:20:6c:bd:52:94:34:6c:48:05: 07:1e:c0:01:1a:4f:05:b4:96:91:33:bc:b4:48:db:c4:7a:f6: 83:eb:4c:37:0f:e4:bb:49:b7:dd:c4:7f:54:6a:41:f6:57:e1: 26:33:58:04:38:67:8a:97:2a:68:f2:42:80:88:2b:9f:17:f7: 2e:38:61:9a:c8:e8:87:8c:aa:46:e3:1c:8a:33:89:28:aa:a4: 9e:37:4f:8c:65:33:06:87:17:5d:be:f2:ff:6c:10:a4:fa:29: 19:e1:62:21:94:19:86:ee:58:f0:d7:8a:67:52:3b:ad:fe:a8: f8:2c:7c:e8:f4:e3:39:cd:cd:4b:9f:2c:cb:33:e7:e0:01:64: 0c:bd:f3:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHf1BL4m+2v0JMK6nY53NFHcdAa0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJF OTVDMEREMzAeFw0yNjAzMDIwMzU3MDRaFw0yNjAzMDUxNTMwMDRaMDMxMTAvBgNV BAMTKDk4NUEzOTU1NUMyNEM0OTZFNkMwNDFFRUE4REUxNEJCQjIzQkRDNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADytMNysq03IaEzEe3Fp7fK+e oG0cfkzoryny95rhXaWu1Al91JggYrIpPH+DRkwGtfMpsVIybeICSyUPuqTqvxKt h0AMSuMGRdcPBJJkwzNk2UyQeF/q0Ecx1Iu0wOxeJri/LZq72Xv0m/f/cfVHJfQt rViDpYk/BQ45YH0nJQ9u/GW9sdz2UuGhF/451wJ/h8xgPXFhU1dUqDGjKYjEdfvb wQ/86A0hYGExw/Fc7gHGIQnPG9fJZIsIVjYg40lgsBgqHmSGvvWuD1Pn5ms9hJmJ FTVFR5pio8lcVJENLKKUHkHSD7d6Tm5W4RbZhl6tJIqiyhM4pd5+K4uqz8j3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmFo5VVwkxJbmwEHuqN4Uu7I73FMwHwYDVR0j BBgwFoAURJbg2CdChCVNwjB6JjM0K+lcDdMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NDY2YjAwNS0xNzIxLTQ5NDUtODVjMC1iMDM5OWNlZGNjZmUvMC80NDk2RTBEODI3 NDI4NDI1NERDMjMwN0EyNjMzMzQyQkU5NUMwREQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0MkJFOTVD MEREMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzQ2NmIwMDUtMTcyMS00OTQ1LTg1 YzAtYjAzOTljZWRjY2ZlLzAvNDQ5NkUwRDgyNzQyODQyNTREQzIzMDdBMjYzMzM0 MkJFOTVDMEREMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEo170oyRLzlZiBj+tNuP14TTVGZN512zfRu HPg4nQyACxcmCHhAno7dQy4re8V92u4887SAlx/YzDEwnESqzfKyHi0Pmmoef3cx 6OtYveMUC0EdU+0b1UBNlqKu8eatTQmNNGvs/qCrkHQ86pFzTmYgq0nogSBsvVKU NGxIBQcewAEaTwW0lpEzvLRI28R69oPrTDcP5LtJt93Ef1RqQfZX4SYzWAQ4Z4qX KmjyQoCIK58X9y44YZrI6IeMqkbjHIoziSiqpJ43T4xlMwaHF12+8v9sEKT6KRnh YiGUGYbuWPDXimdSO63+qPgsfOj04znNzUufLMsz5+ABZAy98/0= -----END CERTIFICATE-----Generated at Mon Mar 2 16:45:35 2026 by rpki-client