$ rpki-client -vvf repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft File: C94D41BEAEF4A56979753B500D992FE3CAE43727.mft (raw, json) Hash identifier: tl5sn1AO6kwQw+BzRtGRXnCEtzcjFsacOyuV1Kq1ZIQ= Subject key identifier: 4C:8F:7B:B9:42:4A:57:53:FE:0A:B1:33:15:C8:9C:1E:55:05:6B:6E Authority key identifier: C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 Certificate issuer: /CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Certificate serial: 455934C283D881E1A42C619E27EF4546CC7409C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject info access: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft Manifest number: 010E Signing time: Mon 02 Mar 2026 02:41:47 +0000 Manifest this update: Mon 02 Mar 2026 02:36:47 +0000 Manifest next update: Thu 05 Mar 2026 12:23:47 +0000 Files and hashes: 1: 3130332e34362e382e302f32332d3234203d3e20313532303538.roa (hash: ZKpdCdHAMqYMIiL/QBWmUsVJXV1a394N+T5GNDzQ6wg=) 2: C94D41BEAEF4A56979753B500D992FE3CAE43727.crl (hash: Y4ufylqmO1lFWjs5Ho2Id9jHYHdfk5zT3erMJ+SnxuQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:59:34:c2:83:d8:81:e1:a4:2c:61:9e:27:ef:45:46:cc:74:09:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C94D41BEAEF4A56979753B500D992FE3CAE43727 Validity Not Before: Mar 2 02:36:47 2026 GMT Not After : Mar 5 12:23:47 2026 GMT Subject: CN=4C8F7BB9424A5753FE0AB13315C89C1E55056B6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:e9:0b:5d:3e:6c:bc:2c:b2:d2:98:39:bf:c0: 9e:54:81:9b:d3:fc:23:45:dd:6a:aa:08:5c:7b:b1: f9:7a:24:12:dd:ca:b0:f5:32:5c:1e:db:15:ee:08: 78:8e:63:ea:9b:38:cc:0f:d1:4c:90:a0:83:a6:d7: e0:a9:0c:c8:c6:aa:57:91:5d:02:f6:cc:5e:73:e0: c5:07:73:1a:3e:40:b0:ac:ca:52:ee:60:83:f9:ad: 7e:15:af:d3:cc:90:a3:08:32:56:6b:4c:09:09:88: b2:6b:c3:22:1b:d3:c6:12:60:bb:ee:2b:da:49:f0: 09:c7:f6:07:11:6d:ab:50:6a:f3:fa:66:e1:1a:11: 0c:7c:a4:a7:2a:b8:ec:7c:36:08:97:5f:ed:50:46: a2:68:22:41:18:f6:80:e7:25:66:cc:bd:7b:3d:02: 9a:78:29:d0:c2:cd:70:c1:cd:9f:a6:18:d8:bc:e7: 23:a7:23:da:92:8e:b1:7b:8b:02:64:97:29:22:ce: ab:5e:3c:af:24:6a:75:39:2e:3c:06:11:57:73:53: f0:80:d1:ca:6d:05:13:a5:e6:67:fd:3d:5b:a9:c0: df:5a:33:28:c0:09:93:fd:df:30:5b:58:0d:2f:fe: 41:ea:1a:08:32:7e:07:6d:a2:ed:70:97:b2:ca:56: d9:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:8F:7B:B9:42:4A:57:53:FE:0A:B1:33:15:C8:9C:1E:55:05:6B:6E X509v3 Authority Key Identifier: keyid:C9:4D:41:BE:AE:F4:A5:69:79:75:3B:50:0D:99:2F:E3:CA:E4:37:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C94D41BEAEF4A56979753B500D992FE3CAE43727.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76d8a0fa-5d4a-483b-af89-0ef40deb05f3/0/C94D41BEAEF4A56979753B500D992FE3CAE43727.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:64:39:87:5d:33:6f:c5:69:5d:62:47:2f:00:0c:d5:50:3a: f8:43:4a:63:cf:df:b2:d3:d7:a2:f8:0a:c9:1b:97:0f:16:5c: bf:5e:49:ef:c5:b0:78:60:3b:98:cf:61:3f:45:70:25:a2:6a: 36:5e:77:f8:4c:87:b4:0a:4e:b0:c7:f5:bd:61:19:2f:e0:82: 0c:bf:4e:05:95:4f:d4:40:8b:dc:ff:29:ce:eb:b7:6d:1d:dd: da:3d:d0:a8:ec:f8:c1:8e:d9:2e:9c:40:a9:9a:f6:6f:26:db: 92:17:f4:41:15:06:9f:4b:46:0b:ff:d6:68:e1:46:ce:8a:81: 22:7c:ad:98:4b:a1:29:f5:b0:ba:71:93:cb:4b:5e:e5:fe:f6: 31:d2:2b:a3:44:e0:7a:b5:d1:68:d5:ec:68:56:b3:94:ce:93: 19:84:ea:6d:dc:cb:5a:d4:a0:e7:37:e5:f7:68:dc:75:bd:11: ad:af:7d:4a:14:5e:c4:3b:cf:3b:2f:96:4e:16:0d:99:bc:b5: 6e:26:60:ae:11:6c:df:4f:84:f4:ff:da:f6:7e:24:8d:c8:30: cf:48:98:1e:4f:0b:dc:b8:a8:c2:7c:c5:42:5f:c5:71:14:88: 98:48:99:17:a6:82:81:cc:1f:c4:7c:46:c3:35:a3:1e:19:e6: 68:b0:a7:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVk0woPYgeGkLGGeJ+9FRsx0CcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTND QUU0MzcyNzAeFw0yNjAzMDIwMjM2NDdaFw0yNjAzMDUxMjIzNDdaMDMxMTAvBgNV BAMTKDRDOEY3QkI5NDI0QTU3NTNGRTBBQjEzMzE1Qzg5QzFFNTUwNTZCNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn6QtdPmy8LLLSmDm/wJ5UgZvT /CNF3WqqCFx7sfl6JBLdyrD1Mlwe2xXuCHiOY+qbOMwP0UyQoIOm1+CpDMjGqleR XQL2zF5z4MUHcxo+QLCsylLuYIP5rX4Vr9PMkKMIMlZrTAkJiLJrwyIb08YSYLvu K9pJ8AnH9gcRbatQavP6ZuEaEQx8pKcquOx8NgiXX+1QRqJoIkEY9oDnJWbMvXs9 App4KdDCzXDBzZ+mGNi85yOnI9qSjrF7iwJklykizqtePK8kanU5LjwGEVdzU/CA 0cptBROl5mf9PVupwN9aMyjACZP93zBbWA0v/kHqGggyfgdtou1wl7LKVtlxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTI97uUJKV1P+CrEzFcicHlUFa24wHwYDVR0j BBgwFoAUyU1Bvq70pWl5dTtQDZkv48rkNycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NmQ4YTBmYS01ZDRhLTQ4M2ItYWY4OS0wZWY0MGRlYjA1ZjMvMC9DOTRENDFCRUFF RjRBNTY5Nzk3NTNCNTAwRDk5MkZFM0NBRTQzNzI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJGRTNDQUU0 MzcyNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzZkOGEwZmEtNWQ0YS00ODNiLWFm ODktMGVmNDBkZWIwNWYzLzAvQzk0RDQxQkVBRUY0QTU2OTc5NzUzQjUwMEQ5OTJG RTNDQUU0MzcyNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdkOYddM2/FaV1iRy8ADNVQOvhDSmPP37LT 16L4Cskblw8WXL9eSe/FsHhgO5jPYT9FcCWiajZed/hMh7QKTrDH9b1hGS/gggy/ TgWVT9RAi9z/Kc7rt20d3do90Kjs+MGO2S6cQKma9m8m25IX9EEVBp9LRgv/1mjh Rs6KgSJ8rZhLoSn1sLpxk8tLXuX+9jHSK6NE4Hq10WjV7GhWs5TOkxmE6m3cy1rU oOc35fdo3HW9Ea2vfUoUXsQ7zzsvlk4WDZm8tW4mYK4RbN9PhPT/2vZ+JI3IMM9I mB5PC9y4qMJ8xUJfxXEUiJhImRemgoHMH8R8RsM1ox4Z5miwpy0= -----END CERTIFICATE-----Generated at Mon Mar 2 09:31:27 2026 by rpki-client