$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft File: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft (raw, json) Hash identifier: t2qpkfRt1VGZujtjuP4XhioEXOKHDxmTC2B2SUUM4iM= Subject key identifier: 6D:C1:A9:E2:35:2E:B3:F3:0A:F2:2D:C3:9B:3D:2F:8A:0F:BB:5D:67 Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D Certificate issuer: /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Certificate serial: 70165AC77F9CAFF97BD505F05D065F72AF9B37F6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft Manifest number: 01F2 Signing time: Sat 28 Feb 2026 03:21:00 +0000 Manifest this update: Sat 28 Feb 2026 03:16:00 +0000 Manifest next update: Tue 03 Mar 2026 04:40:00 +0000 Files and hashes: 1: B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl (hash: llZF8/mrTEfoo8e1R7HpkUIHZENjNWFh+80IJjwWUIg=) 2: 3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (hash: IQtHv5dJn+zbb+MIajlDdDAnYnBEq1Yu3MvRxA0jXsM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 04:40:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:16:5a:c7:7f:9c:af:f9:7b:d5:05:f0:5d:06:5f:72:af:9b:37:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D Validity Not Before: Feb 28 03:16:00 2026 GMT Not After : Mar 3 04:40:00 2026 GMT Subject: CN=6DC1A9E2352EB3F30AF22DC39B3D2F8A0FBB5D67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e4:48:bc:b8:2d:6a:cc:2b:81:c7:82:c0:d1: 2b:68:e4:bd:e8:4f:6d:d0:51:7a:14:d1:2d:14:76: b4:db:93:a3:5b:f5:d8:08:d0:ab:a7:53:19:1a:ca: 0f:d6:f6:c6:53:dc:40:0b:71:4b:37:87:9b:5c:e4: d2:f2:51:10:b7:aa:07:05:48:c5:64:ac:8f:f1:19: 6f:6a:f9:33:07:46:29:44:96:ab:b3:7e:cf:f6:d2: a8:6d:ba:cf:b2:0c:30:cb:29:29:0e:21:f2:46:e2: 95:a7:04:52:bd:6c:6b:51:2e:7f:dc:37:36:47:53: de:a6:8b:e7:a0:34:e9:c3:15:4d:57:bc:aa:d5:51: 54:2f:ba:41:39:18:76:70:49:3f:07:ac:e0:34:7e: 29:fa:1b:52:c2:44:02:20:51:33:03:4a:f0:c3:5b: c1:42:37:b5:6e:11:3a:bd:73:9e:ba:7f:21:49:38: c3:7d:ba:1d:69:4d:08:12:09:7a:f0:4c:92:cd:57: 7d:c7:69:51:74:f1:a5:c8:8d:0d:cc:81:8e:2d:f5: 1f:d7:58:97:da:f6:9a:b6:da:c0:86:1e:7c:50:86: 75:e3:d4:00:ab:c4:4c:7c:02:b0:65:d6:0b:7a:85: 57:fc:07:c9:1c:12:e2:60:0f:8d:ff:b7:0b:8c:c1: bd:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:C1:A9:E2:35:2E:B3:F3:0A:F2:2D:C3:9B:3D:2F:8A:0F:BB:5D:67 X509v3 Authority Key Identifier: keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:da:1e:85:c0:ae:68:79:d1:a6:63:11:17:b1:b0:5a:40:8b: e7:4a:68:17:7f:67:02:da:62:54:c9:fc:c8:90:57:fd:23:35: e2:1c:6a:7b:31:d4:12:c5:50:d8:83:ab:9b:b5:be:70:e8:95: 05:37:dd:58:1c:63:70:43:a0:9b:79:0a:bd:9b:6f:5f:92:70: 3c:53:f6:d4:f8:eb:c9:62:2a:89:8f:80:a7:1b:d7:fd:34:8a: b4:f7:a7:f7:63:dd:53:19:a8:af:dc:b0:c1:aa:66:fe:e7:6b: 70:f4:c5:71:47:bf:a0:ab:72:38:c8:21:83:98:32:6c:95:9d: d3:4b:81:9b:ef:08:16:83:b0:81:09:cb:f8:eb:5a:30:81:6d: 61:12:45:ae:4e:a4:16:a3:44:ea:5f:01:6a:8c:55:91:b6:c1: c6:6d:9d:13:32:c4:fb:bf:25:a0:ea:ad:b3:6a:3e:20:04:22: a9:1d:60:37:c6:a0:fe:4e:01:93:1d:d7:32:bd:30:65:46:ec: a8:54:74:ba:64:6b:65:03:3e:e6:37:76:09:33:e4:6c:8e:f4: 86:68:57:18:07:ee:8d:76:cd:18:ed:3b:6f:2a:ab:5b:5c:f0: 3b:26:ab:83:0a:b2:36:8b:97:44:3f:8f:a7:41:6f:3b:e9:ec: c0:91:7c:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcBZax3+cr/l71QXwXQZfcq+bN/YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4 MTk2MTUyRDAeFw0yNjAyMjgwMzE2MDBaFw0yNjAzMDMwNDQwMDBaMDMxMTAvBgNV BAMTKDZEQzFBOUUyMzUyRUIzRjMwQUYyMkRDMzlCM0QyRjhBMEZCQjVENjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5Ei8uC1qzCuBx4LA0Sto5L3o T23QUXoU0S0UdrTbk6Nb9dgI0KunUxkayg/W9sZT3EALcUs3h5tc5NLyURC3qgcF SMVkrI/xGW9q+TMHRilElquzfs/20qhtus+yDDDLKSkOIfJG4pWnBFK9bGtRLn/c NzZHU96mi+egNOnDFU1XvKrVUVQvukE5GHZwST8HrOA0fin6G1LCRAIgUTMDSvDD W8FCN7VuETq9c566fyFJOMN9uh1pTQgSCXrwTJLNV33HaVF08aXIjQ3MgY4t9R/X WJfa9pq22sCGHnxQhnXj1ACrxEx8ArBl1gt6hVf8B8kcEuJgD43/twuMwb1HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbcGp4jUus/MK8i3Dmz0vig+7XWcwHwYDVR0j BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4 Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2 MTUyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzc5NGRhNDAtYjM3ZS00ZmU2LThm NDAtNzNiM2IwYmUwMTlmLzAvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2 M0M4MTk2MTUyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPaHoXArmh50aZjERexsFpAi+dKaBd/ZwLa YlTJ/MiQV/0jNeIcansx1BLFUNiDq5u1vnDolQU33VgcY3BDoJt5Cr2bb1+ScDxT 9tT468liKomPgKcb1/00irT3p/dj3VMZqK/csMGqZv7na3D0xXFHv6CrcjjIIYOY MmyVndNLgZvvCBaDsIEJy/jrWjCBbWESRa5OpBajROpfAWqMVZG2wcZtnRMyxPu/ JaDqrbNqPiAEIqkdYDfGoP5OAZMd1zK9MGVG7KhUdLpka2UDPuY3dgkz5GyO9IZo VxgH7o12zRjtO28qq1tc8Dsmq4MKsjaLl0Q/j6dBbzvp7MCRfJk= -----END CERTIFICATE-----Generated at Mon Mar 2 05:59:17 2026 by rpki-client