$ rpki-client -vvf repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft File: 41071AAF0C0E6BD84877680334B4F604B4B4E786.mft (raw, json) Hash identifier: rhq+b5n1Yqea9Np726prtJyac43uE+tpWjVC8M2rWWs= Subject key identifier: B5:D4:3A:64:08:D8:1A:5C:2B:79:9F:2F:D4:4A:22:FB:CB:E0:FC:D3 Authority key identifier: 41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 Certificate issuer: /CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Certificate serial: 4DAFBE3F65BF5F7E12D92BA9DB2D4910BE9EB301 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft Manifest number: 024A Signing time: Sat 28 Feb 2026 22:32:26 +0000 Manifest this update: Sat 28 Feb 2026 22:27:26 +0000 Manifest next update: Wed 04 Mar 2026 08:48:26 +0000 Files and hashes: 1: 3130332e3136372e322e302f32342d3234203d3e20313431393637.roa (hash: S3FgE0+gcaLyx6nH2zsRG+Hi0BgVRkLf/ndGC4F7z/0=) 2: 41071AAF0C0E6BD84877680334B4F604B4B4E786.crl (hash: RJaii/Iski53565/boyG27tmz5tQ73kbYuA8gUmC+Eg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 08:48:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:af:be:3f:65:bf:5f:7e:12:d9:2b:a9:db:2d:49:10:be:9e:b3:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41071AAF0C0E6BD84877680334B4F604B4B4E786 Validity Not Before: Feb 28 22:27:26 2026 GMT Not After : Mar 4 08:48:26 2026 GMT Subject: CN=B5D43A6408D81A5C2B799F2FD44A22FBCBE0FCD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:bf:4e:6b:33:24:b1:a8:0a:89:05:31:87:29: 52:dd:3c:45:c0:d1:9d:f1:50:6d:f8:1b:5c:bf:a4: 73:8f:08:47:38:61:b3:84:51:d1:93:e7:6a:76:f3: da:5f:ca:19:28:9e:89:e4:fa:34:06:09:76:08:a8: 91:8e:c0:9a:48:da:68:b8:ff:b9:8d:97:f8:93:33: 38:9e:09:b1:e4:e9:63:f2:be:21:4f:09:15:ac:79: a1:5f:83:77:99:cb:4b:66:11:4e:05:82:bc:e8:2c: cd:84:fe:2f:7b:87:ab:35:2d:67:a6:96:f5:5e:18: 79:23:ff:31:3c:d5:dc:77:45:aa:6b:2e:98:98:fb: 8a:e5:a9:93:dc:43:37:a6:f6:70:fe:70:1d:30:42: 13:39:7c:ec:a4:77:c7:b1:66:ad:fb:d2:c9:d7:ad: c5:1b:f9:7c:e9:2d:dc:bb:97:d0:3f:86:44:6d:44: c5:f2:43:27:cc:ee:73:58:b2:87:d9:e3:c6:c5:28: cc:1f:b5:08:cb:07:06:b9:8c:84:7e:9a:96:2a:81: af:ef:e4:e4:39:2e:11:c1:b8:e3:a0:77:f8:45:db: f3:52:11:35:69:bf:2f:a7:6c:f3:7b:49:fd:e8:71: 1e:19:de:0c:5e:96:d9:ad:67:5e:80:90:61:f3:75: 09:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:3A:64:08:D8:1A:5C:2B:79:9F:2F:D4:4A:22:FB:CB:E0:FC:D3 X509v3 Authority Key Identifier: keyid:41:07:1A:AF:0C:0E:6B:D8:48:77:68:03:34:B4:F6:04:B4:B4:E7:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/41071AAF0C0E6BD84877680334B4F604B4B4E786.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e27b3e1-f611-4afe-9a49-5fa4fd557653/0/41071AAF0C0E6BD84877680334B4F604B4B4E786.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:b9:75:96:e5:1b:cf:62:0d:41:cf:c9:91:13:ff:c5:bd:76: 5d:d8:02:9a:e4:bd:7e:ac:85:ad:53:53:f4:26:ff:f9:3a:95: 0c:cf:23:3d:f1:a3:05:dc:ea:a2:3e:3d:47:51:fa:3b:99:b7: f5:9c:b8:92:a0:af:25:cd:17:a4:40:dd:ec:b0:54:96:d4:c5: bf:ed:86:95:99:d7:e4:ce:bf:6d:b9:e7:30:a7:15:ca:c8:cc: 39:82:f2:99:7e:f0:ad:6e:57:b5:ee:9b:c8:dd:e5:b6:92:30: f6:56:3c:25:ee:0a:bf:0e:f4:30:7f:b4:c8:5d:b9:1c:1b:a5: dd:25:fb:d1:c1:d6:8a:79:01:66:a5:b1:50:d1:12:cd:a3:ca: 14:9f:91:40:6a:71:48:c8:53:84:97:9c:ec:4f:df:a1:21:05: 4b:62:fa:72:45:29:ea:54:47:40:32:63:6c:78:4d:ff:22:74: 00:5d:5b:84:c2:61:b1:f9:47:e8:cc:da:a1:f0:e5:e1:2d:f8: 80:48:6d:54:bf:60:30:c1:d0:1a:70:cf:c7:46:ed:bb:a8:b8: be:bf:66:e7:33:e5:19:0f:dc:95:95:24:e7:d0:39:b0:8e:f4: ef:5d:a3:ee:30:59:8e:4a:7e:3d:61:f3:18:16:0e:3d:96:b1: 41:a9:5c:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTa++P2W/X34S2Sup2y1JEL6eswEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRC NEI0RTc4NjAeFw0yNjAyMjgyMjI3MjZaFw0yNjAzMDQwODQ4MjZaMDMxMTAvBgNV BAMTKEI1RDQzQTY0MDhEODFBNUMyQjc5OUYyRkQ0NEEyMkZCQ0JFMEZDRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcv05rMySxqAqJBTGHKVLdPEXA 0Z3xUG34G1y/pHOPCEc4YbOEUdGT52p289pfyhkononk+jQGCXYIqJGOwJpI2mi4 /7mNl/iTMzieCbHk6WPyviFPCRWseaFfg3eZy0tmEU4FgrzoLM2E/i97h6s1LWem lvVeGHkj/zE81dx3RaprLpiY+4rlqZPcQzem9nD+cB0wQhM5fOykd8exZq370snX rcUb+XzpLdy7l9A/hkRtRMXyQyfM7nNYsofZ48bFKMwftQjLBwa5jIR+mpYqga/v 5OQ5LhHBuOOgd/hF2/NSETVpvy+nbPN7Sf3ocR4Z3gxeltmtZ16AkGHzdQnFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtdQ6ZAjYGlwreZ8v1Eoi+8vg/NMwHwYDVR0j BBgwFoAUQQcarwwOa9hId2gDNLT2BLS054YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZTI3YjNlMS1mNjExLTRhZmUtOWE0OS01ZmE0ZmQ1NTc2NTMvMC80MTA3MUFBRjBD MEU2QkQ4NDg3NzY4MDMzNEI0RjYwNEI0QjRFNzg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2MDRCNEI0 RTc4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2UyN2IzZTEtZjYxMS00YWZlLTlh NDktNWZhNGZkNTU3NjUzLzAvNDEwNzFBQUYwQzBFNkJEODQ4Nzc2ODAzMzRCNEY2 MDRCNEI0RTc4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIq5dZblG89iDUHPyZET/8W9dl3YAprkvX6s ha1TU/Qm//k6lQzPIz3xowXc6qI+PUdR+juZt/WcuJKgryXNF6RA3eywVJbUxb/t hpWZ1+TOv2255zCnFcrIzDmC8pl+8K1uV7Xum8jd5baSMPZWPCXuCr8O9DB/tMhd uRwbpd0l+9HB1op5AWalsVDREs2jyhSfkUBqcUjIU4SXnOxP36EhBUti+nJFKepU R0AyY2x4Tf8idABdW4TCYbH5R+jM2qHw5eEt+IBIbVS/YDDB0Bpwz8dG7buouL6/ Zucz5RkP3JWVJOfQObCO9O9do+4wWY5Kfj1h8xgWDj2WsUGpXJA= -----END CERTIFICATE-----Generated at Mon Mar 2 17:57:54 2026 by rpki-client