$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft File: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft (raw, json) Hash identifier: Sl4xyCkhGmns1oCHkd72Ho7lK6EVrWxX9e7Qd3wZoqs= Subject key identifier: 41:C4:3A:45:7E:44:47:3E:E4:7D:79:BB:A2:2C:F1:D1:06:EC:6B:29 Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B Certificate issuer: /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Certificate serial: 41FA0C495ED275D8969FE394E939DA4F8BBC1C81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft Manifest number: 017E Signing time: Sat 28 Feb 2026 15:42:37 +0000 Manifest this update: Sat 28 Feb 2026 15:37:37 +0000 Manifest next update: Tue 03 Mar 2026 22:02:37 +0000 Files and hashes: 1: 3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (hash: BXIKEbp3orzobWDQOxRP4yZHbZeEm5j1Qo8aYx25BZE=) 2: 4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl (hash: 7qVzcdkUwYB+KEHGMXGvP7GK9PAl4CXGevNzLNBUhzk=) 3: 323030313a6466323a656434303a3a2f34382d3438203d3e203535363838.roa (hash: EjIlnJwLN6tob8lWzuv6YJeMCHTcSGWnYIQOvyIdVqQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:fa:0c:49:5e:d2:75:d8:96:9f:e3:94:e9:39:da:4f:8b:bc:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B Validity Not Before: Feb 28 15:37:37 2026 GMT Not After : Mar 3 22:02:37 2026 GMT Subject: CN=41C43A457E44473EE47D79BBA22CF1D106EC6B29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a9:22:2f:51:6e:ac:84:1f:0d:1c:0f:8f:db: 60:ea:57:31:ba:e3:75:28:b3:69:04:11:d9:06:d8: a0:dd:ec:70:05:a1:1b:23:cc:74:e8:99:8b:fb:a0: a0:3f:c8:9c:de:e0:c7:48:1d:9d:f9:4d:dc:de:27: 07:bb:2a:8f:da:a2:ec:e0:6d:f1:72:1b:76:85:63: ff:8c:ba:fd:c7:5f:22:8a:63:42:b4:71:ba:a0:2c: 97:63:e1:c3:a7:6d:14:a5:5e:78:10:bd:09:da:4a: 0c:a5:76:ed:0c:53:2b:c6:fb:25:73:29:dc:3b:be: 78:27:5e:0c:78:c3:05:da:36:04:f1:71:a4:d3:dc: 8a:a0:19:bb:a3:d7:42:48:65:2e:dd:3a:1d:5c:26: da:5b:cb:c2:f8:df:aa:c7:43:c2:82:97:07:c4:36: 73:bd:31:1a:e5:68:a5:6b:3a:33:53:67:60:cf:eb: de:4e:2c:8f:db:05:f2:c3:87:77:d6:43:60:b4:0f: 29:cd:77:7b:77:41:85:fe:8c:97:0f:40:03:38:fe: 8e:64:90:31:de:68:7d:08:20:32:8d:e7:2e:b0:f2: c0:6c:ad:92:c9:4a:ab:12:64:2e:6f:24:c4:df:f1: 41:0d:f9:ff:8b:c6:ee:3e:2f:cb:32:85:4b:f8:28: be:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:C4:3A:45:7E:44:47:3E:E4:7D:79:BB:A2:2C:F1:D1:06:EC:6B:29 X509v3 Authority Key Identifier: keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:01:f3:9c:30:58:c8:66:60:24:6d:ca:40:ae:35:7e:a4:1d: 9b:0d:a0:67:06:74:ff:4f:83:fd:2f:c2:28:63:1a:c0:f1:db: f1:da:3f:f0:53:4a:91:3b:6d:e6:d5:1c:56:92:6d:08:0e:50: 7d:74:22:72:1d:44:bb:77:5b:46:21:8e:87:c8:b9:86:70:f1: cb:dc:b1:1d:1e:dc:4c:57:ad:c7:70:7e:87:32:1f:1c:8e:21: 52:0c:48:78:21:bb:1b:02:62:c9:63:d3:20:6f:a8:32:41:2e: a9:6d:89:dd:ea:15:e9:aa:88:ad:d3:ff:67:da:58:76:87:b0: e7:1f:66:6d:29:67:f6:93:c9:66:af:10:ff:ac:36:b7:39:06: 7e:b1:ff:14:33:e7:f8:91:a5:74:93:96:d8:6e:f6:8c:97:e4: b6:f2:13:31:70:b7:59:28:fc:62:7e:6e:7c:64:29:73:3e:9f: 88:aa:ed:4a:f6:dd:59:81:13:04:e1:4d:7e:87:a8:d1:ec:54: e6:47:6b:00:57:15:d3:0e:e4:c5:09:f9:f0:64:6c:83:fe:ff: d0:12:b9:40:eb:d8:f5:ad:b9:f4:53:3c:f7:d6:14:fe:23:8e: 15:34:e2:5e:06:cd:17:d6:33:ab:29:3b:58:7f:ad:70:47:fc: 72:c4:8a:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQfoMSV7SddiWn+OU6TnaT4u8HIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1 MEU2NEYyQjAeFw0yNjAyMjgxNTM3MzdaFw0yNjAzMDMyMjAyMzdaMDMxMTAvBgNV BAMTKDQxQzQzQTQ1N0U0NDQ3M0VFNDdENzlCQkEyMkNGMUQxMDZFQzZCMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXqSIvUW6shB8NHA+P22DqVzG6 43Uos2kEEdkG2KDd7HAFoRsjzHTomYv7oKA/yJze4MdIHZ35TdzeJwe7Ko/aouzg bfFyG3aFY/+Muv3HXyKKY0K0cbqgLJdj4cOnbRSlXngQvQnaSgyldu0MUyvG+yVz Kdw7vngnXgx4wwXaNgTxcaTT3IqgGbuj10JIZS7dOh1cJtpby8L436rHQ8KClwfE NnO9MRrlaKVrOjNTZ2DP695OLI/bBfLDh3fWQ2C0DynNd3t3QYX+jJcPQAM4/o5k kDHeaH0IIDKN5y6w8sBsrZLJSqsSZC5vJMTf8UEN+f+Lxu4+L8syhUv4KL4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQcQ6RX5ERz7kfXm7oizx0QbsaykwHwYDVR0j BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2 NEYyQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M0OTM1ZDgtOTZhMi00NTY0LTg1 YTMtMzJhNTMxODkzNjdlLzAvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5 ODU1MEU2NEYyQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADIB85wwWMhmYCRtykCuNX6kHZsNoGcGdP9P g/0vwihjGsDx2/HaP/BTSpE7bebVHFaSbQgOUH10InIdRLt3W0YhjofIuYZw8cvc sR0e3ExXrcdwfocyHxyOIVIMSHghuxsCYslj0yBvqDJBLqltid3qFemqiK3T/2fa WHaHsOcfZm0pZ/aTyWavEP+sNrc5Bn6x/xQz5/iRpXSTlthu9oyX5LbyEzFwt1ko /GJ+bnxkKXM+n4iq7Ur23VmBEwThTX6HqNHsVOZHawBXFdMO5MUJ+fBkbIP+/9AS uUDr2PWtufRTPPfWFP4jjhU04l4GzRfWM6spO1h/rXBH/HLEin8= -----END CERTIFICATE-----Generated at Mon Mar 2 13:54:29 2026 by rpki-client