$ rpki-client -vvf repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft File: 4E52504397B6835784BD4E67D8048C0D1CE3B242.mft (raw, json) Hash identifier: XLcxjFub+QzgQn9rqj2Bp/BMfRPTmfRPlTqp4JdQviM= Subject key identifier: 4F:81:D3:6E:5B:56:1A:77:F9:04:AC:5A:96:B5:4A:86:30:59:F2:F1 Authority key identifier: 4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 Certificate issuer: /CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Certificate serial: 51BAADACCA684012443212C5CA127002104B5D1C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject info access: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft Manifest number: 0555 Signing time: Mon 02 Mar 2026 01:22:28 +0000 Manifest this update: Mon 02 Mar 2026 01:17:28 +0000 Manifest next update: Thu 05 Mar 2026 07:17:28 +0000 Files and hashes: 1: 323430333a653630303a6630303a3a2f34302d3430203d3e203538333736.roa (hash: AgqSIkRIGOrQPc+1mZW5lGFc3zRhyUQtTv3vz8FdAPU=) 2: 34332e3234352e3138382e302f32322d3234203d3e203538333736.roa (hash: AI/USbQ/a0LFBdjZWtV22hxC6HEFmmDia8w1dNa/lbM=) 3: 323430333a653630303a3a2f33322d3332203d3e203538333736.roa (hash: bVu2SaAa9IWvlQ6o6+veKHD0ZA7xlveBNCWEZ2Ja1Z4=) 4: 4E52504397B6835784BD4E67D8048C0D1CE3B242.crl (hash: vlaSgwWdUtDIVK63w++E86dnIClhT5VnmDf/EMV2fhw=) 5: 3130332e32392e3134382e302f32322d3234203d3e203538333736.roa (hash: kZ6+BhGljQylz/AhW+5O41yNHq5oDRG+mIs3e+fq18E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ba:ad:ac:ca:68:40:12:44:32:12:c5:ca:12:70:02:10:4b:5d:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E52504397B6835784BD4E67D8048C0D1CE3B242 Validity Not Before: Mar 2 01:17:28 2026 GMT Not After : Mar 5 07:17:28 2026 GMT Subject: CN=4F81D36E5B561A77F904AC5A96B54A863059F2F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:1e:6a:b2:8f:12:e2:18:92:6a:08:9b:3e:a1: 20:05:5d:0f:25:de:3f:68:ba:15:3c:5f:85:dc:f2: 47:d5:46:cd:d6:a0:97:26:06:a6:fe:57:fc:89:08: 2a:82:f2:05:78:26:50:e7:e5:b5:1f:2f:0e:e7:bd: ac:d2:a4:98:a0:62:5a:4b:28:34:bf:dd:1d:a9:ef: ed:82:4e:0d:5e:a4:67:33:84:2a:ae:54:82:67:44: f9:41:5d:ad:39:ca:86:3c:6f:ac:73:4c:0b:66:a7: d8:28:cf:07:1b:ea:bd:cc:62:2a:f1:5f:8e:45:4c: 54:03:56:11:de:46:be:44:8e:33:29:2c:0c:c8:c2: 7b:60:ba:9b:99:ca:74:b1:bf:08:53:53:8f:99:65: 76:3f:92:02:2a:e1:13:f9:9e:6c:6b:3d:5c:27:f8: 22:43:4e:9e:ad:25:65:a0:9d:79:e2:99:ea:0b:e2: 4a:b6:e7:f3:da:13:e1:20:73:05:c9:97:e3:69:f3: 0f:05:a2:fd:93:b8:30:31:b4:50:68:86:fe:01:a1: 98:66:f5:49:4e:35:51:2c:9d:3e:2b:26:b2:bc:a4: e2:76:57:fe:22:4d:2b:69:4d:25:28:9c:8c:51:30: cd:e3:d5:4f:cf:5c:42:c8:21:c6:5b:e1:cb:e3:df: ae:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:81:D3:6E:5B:56:1A:77:F9:04:AC:5A:96:B5:4A:86:30:59:F2:F1 X509v3 Authority Key Identifier: keyid:4E:52:50:43:97:B6:83:57:84:BD:4E:67:D8:04:8C:0D:1C:E3:B2:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E52504397B6835784BD4E67D8048C0D1CE3B242.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/891d3c30-95dc-4b72-ae1b-ad1e98b0e179/0/4E52504397B6835784BD4E67D8048C0D1CE3B242.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:5c:22:3c:ce:a2:73:02:78:ac:b6:46:ef:68:e5:e7:5b:a8: 4c:ed:9b:07:f3:ab:35:8c:e0:1e:20:22:16:81:41:72:3d:77: d0:4a:c2:a7:2c:67:65:e8:a0:3b:d6:ea:dc:a0:af:44:5a:90: 3b:da:b0:2b:7a:d4:af:90:2e:9d:34:2c:63:a7:11:ce:c9:98: d2:07:40:13:27:9a:76:92:19:6e:fd:37:8e:56:d7:60:80:9e: f9:1b:86:15:ba:13:41:55:93:90:3d:5b:ac:6a:63:ee:21:1f: 74:b8:76:b1:2c:56:0d:9f:9b:f9:4b:31:c1:b7:2c:7a:70:a7: 8b:ba:da:f1:7e:31:0c:05:79:9a:91:01:e5:cf:05:3a:20:be: 1f:60:96:34:55:36:0c:1b:c8:78:16:df:62:4e:af:e6:ea:7d: df:6e:95:0e:a2:ba:2c:07:d7:26:42:18:d9:d6:70:84:dc:ef: 33:a3:da:99:62:a4:ed:1f:3d:db:a7:e5:4b:3a:4b:df:07:50: 58:e4:95:b2:ae:b4:a2:45:f2:ef:a3:ec:09:1c:1e:7d:bb:3c: 29:5b:61:16:f2:bf:5f:b4:65:c8:42:a0:d1:a4:c6:70:f9:4b: 91:fa:0b:89:6a:f2:d3:05:27:0b:55:43:a4:88:7d:b6:4b:5c: d9:59:41:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbqtrMpoQBJEMhLFyhJwAhBLXRwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQx Q0UzQjI0MjAeFw0yNjAzMDIwMTE3MjhaFw0yNjAzMDUwNzE3MjhaMDMxMTAvBgNV BAMTKDRGODFEMzZFNUI1NjFBNzdGOTA0QUM1QTk2QjU0QTg2MzA1OUYyRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5HmqyjxLiGJJqCJs+oSAFXQ8l 3j9ouhU8X4Xc8kfVRs3WoJcmBqb+V/yJCCqC8gV4JlDn5bUfLw7nvazSpJigYlpL KDS/3R2p7+2CTg1epGczhCquVIJnRPlBXa05yoY8b6xzTAtmp9gozwcb6r3MYirx X45FTFQDVhHeRr5EjjMpLAzIwntgupuZynSxvwhTU4+ZZXY/kgIq4RP5nmxrPVwn +CJDTp6tJWWgnXnimeoL4kq25/PaE+EgcwXJl+Np8w8Fov2TuDAxtFBohv4BoZhm 9UlONVEsnT4rJrK8pOJ2V/4iTStpTSUonIxRMM3j1U/PXELIIcZb4cvj366rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT4HTbltWGnf5BKxalrVKhjBZ8vEwHwYDVR0j BBgwFoAUTlJQQ5e2g1eEvU5n2ASMDRzjskIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OTFkM2MzMC05NWRjLTRiNzItYWUxYi1hZDFlOThiMGUxNzkvMC80RTUyNTA0Mzk3 QjY4MzU3ODRCRDRFNjdEODA0OEMwRDFDRTNCMjQyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhDMEQxQ0Uz QjI0Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODkxZDNjMzAtOTVkYy00YjcyLWFl MWItYWQxZTk4YjBlMTc5LzAvNEU1MjUwNDM5N0I2ODM1Nzg0QkQ0RTY3RDgwNDhD MEQxQ0UzQjI0Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNcIjzOonMCeKy2Ru9o5edbqEztmwfzqzWM 4B4gIhaBQXI9d9BKwqcsZ2XooDvW6tygr0RakDvasCt61K+QLp00LGOnEc7JmNIH QBMnmnaSGW79N45W12CAnvkbhhW6E0FVk5A9W6xqY+4hH3S4drEsVg2fm/lLMcG3 LHpwp4u62vF+MQwFeZqRAeXPBTogvh9gljRVNgwbyHgW32JOr+bqfd9ulQ6iuiwH 1yZCGNnWcITc7zOj2plipO0fPdun5Us6S98HUFjklbKutKJF8u+j7AkcHn27PClb YRbyv1+0ZchCoNGkxnD5S5H6C4lq8tMFJwtVQ6SIfbZLXNlZQQ4= -----END CERTIFICATE-----Generated at Mon Mar 2 14:12:13 2026 by rpki-client