$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: yhnYFO1ocJlDlngll78kdwFIgvOvwA21kjo9M620VOk= Subject key identifier: E1:6F:68:3F:31:BA:4E:6D:5F:06:15:7D:E1:BD:23:B1:43:89:18:D0 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 3CAF7EB620D0F27DDCB95F58D20698198FC603B4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 0261 Signing time: Sun 01 Mar 2026 01:21:33 +0000 Manifest this update: Sun 01 Mar 2026 01:16:33 +0000 Manifest next update: Wed 04 Mar 2026 12:19:33 +0000 Files and hashes: 1: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: NZCU7WlYCgiQdO5O51mnbjYmFyT+HY2fUPKtgtEjsZs=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: 82YqFhb4/ZH/TVttJfl2TXhpxvQiL0hSWz60Ovq6qlE=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: ZY6/yTzTB0VPLAu2EmeaFz398YorukpRHSOffB+JUQQ=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: 7aywUIXFUEuMUfYXXNrXCaHCS72hzYp6TKpPIt+Y3+k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:19:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:af:7e:b6:20:d0:f2:7d:dc:b9:5f:58:d2:06:98:19:8f:c6:03:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Mar 1 01:16:33 2026 GMT Not After : Mar 4 12:19:33 2026 GMT Subject: CN=E16F683F31BA4E6D5F06157DE1BD23B1438918D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:ed:1a:29:a8:88:2a:45:54:e0:e4:cd:56:67: 0d:9a:70:95:9d:6c:03:6c:f2:d9:ee:a8:6f:4d:69: 14:2b:e9:34:57:91:a9:ea:01:01:89:02:e3:93:eb: 00:99:28:1b:c5:25:3d:65:55:a6:5e:3c:8c:dc:ed: 21:c1:b8:39:7a:ff:14:3e:4a:f9:e8:d2:c4:95:f7: 48:68:fa:a1:e1:d8:65:98:bd:59:06:c2:4e:d1:15: 2e:19:26:36:79:ee:3b:5b:0b:9a:e3:72:38:3b:d9: af:b9:e2:c6:7c:cb:95:6a:98:bc:dc:cb:e6:9a:dd: 3b:ac:1f:0b:cc:b7:09:1f:d6:10:9b:ee:79:06:4d: 61:26:93:86:61:ce:77:e3:75:52:13:0e:65:97:b5: 1b:11:9f:f4:af:63:fb:7a:0c:60:86:33:84:b0:18: 68:3b:d1:8d:9e:5d:4f:03:39:16:0c:db:ad:e2:c4: 81:b9:bf:06:b6:0c:f3:d8:7b:73:26:93:c0:d0:a9: 9a:cc:91:23:2c:a9:db:9b:03:44:7f:a4:e8:20:5a: 74:54:3a:5d:0a:67:a5:6b:a4:9d:ab:97:c7:64:2a: f1:9c:63:c8:86:c6:04:71:a4:79:91:7f:ef:07:73: 73:65:c5:a5:1b:c0:b7:e6:e9:02:04:27:96:76:4a: 2b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:6F:68:3F:31:BA:4E:6D:5F:06:15:7D:E1:BD:23:B1:43:89:18:D0 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:40:ac:d9:e1:04:27:ec:5e:d0:eb:d4:ad:1f:d6:c8:92:d8: a8:72:f3:f8:08:30:e6:bd:d6:25:b7:da:e7:e6:3f:c1:79:c3: 61:b7:1a:6b:e8:ee:f2:ed:73:03:81:33:e2:11:f7:9a:53:c3: ef:ee:72:ed:c1:a5:91:87:b8:ab:c4:0a:16:ed:33:a9:03:c7: 8e:55:4c:9b:7e:d1:55:5f:58:5f:34:be:55:d1:d3:1f:46:05: d8:06:7b:ca:34:54:e0:57:73:60:b9:2d:b4:91:ba:1c:a7:77: 2e:f4:85:41:5e:8e:dc:1a:bc:a9:70:71:54:67:96:1a:c7:71: 6d:35:8e:04:cd:56:54:24:e8:06:6c:cc:cc:dc:1b:10:da:00: 7a:e0:79:a0:b6:0f:58:ea:45:d1:a0:e7:4e:54:ac:94:f6:6b: 25:05:c3:af:66:ac:d0:46:ce:40:02:bc:6a:bd:fb:49:0b:0a: bc:55:7a:eb:28:2a:55:fb:86:f0:60:03:a9:b6:65:07:31:ff: c3:82:22:26:b0:1a:00:90:95:69:ab:75:36:8c:09:9e:44:7d: 0f:a9:9e:05:c1:c7:f8:23:bb:b6:f0:ef:2e:77:c5:69:be:47: 77:84:75:b9:9a:40:09:14:81:87:cb:b4:6a:a3:b5:41:9c:51: 01:88:55:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPK9+tiDQ8n3cuV9Y0gaYGY/GA7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNjAzMDEwMTE2MzNaFw0yNjAzMDQxMjE5MzNaMDMxMTAvBgNV BAMTKEUxNkY2ODNGMzFCQTRFNkQ1RjA2MTU3REUxQkQyM0IxNDM4OTE4RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDh7RopqIgqRVTg5M1WZw2acJWd bANs8tnuqG9NaRQr6TRXkanqAQGJAuOT6wCZKBvFJT1lVaZePIzc7SHBuDl6/xQ+ Svno0sSV90ho+qHh2GWYvVkGwk7RFS4ZJjZ57jtbC5rjcjg72a+54sZ8y5VqmLzc y+aa3TusHwvMtwkf1hCb7nkGTWEmk4ZhznfjdVITDmWXtRsRn/SvY/t6DGCGM4Sw GGg70Y2eXU8DORYM263ixIG5vwa2DPPYe3Mmk8DQqZrMkSMsqdubA0R/pOggWnRU Ol0KZ6VrpJ2rl8dkKvGcY8iGxgRxpHmRf+8Hc3NlxaUbwLfm6QIEJ5Z2SivnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4W9oPzG6Tm1fBhV94b0jsUOJGNAwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVArNnhBCfsXtDr1K0f1siS2Khy8/gIMOa9 1iW32ufmP8F5w2G3Gmvo7vLtcwOBM+IR95pTw+/ucu3BpZGHuKvEChbtM6kDx45V TJt+0VVfWF80vlXR0x9GBdgGe8o0VOBXc2C5LbSRuhyndy70hUFejtwavKlwcVRn lhrHcW01jgTNVlQk6AZszMzcGxDaAHrgeaC2D1jqRdGg505UrJT2ayUFw69mrNBG zkACvGq9+0kLCrxVeusoKlX7hvBgA6m2ZQcx/8OCIiawGgCQlWmrdTaMCZ5EfQ+p ngXBx/gju7bw7y53xWm+R3eEdbmaQAkUgYfLtGqjtUGcUQGIVcs= -----END CERTIFICATE-----Generated at Mon Mar 2 00:46:00 2026 by rpki-client