$ rpki-client -vvf repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft File: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft (raw, json) Hash identifier: ZgSr8OcblL1U7CYSiP28dVfJA2GjTIwjLBeghkgmNPM= Subject key identifier: 74:47:99:60:B0:62:39:41:9A:A2:A3:C0:32:C5:BE:69:EC:F9:7B:35 Authority key identifier: 45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 Certificate issuer: /CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Certificate serial: 5DFC18C9CA4DE97EE47BCDEB73B71F58CB648AEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft Manifest number: 01E5 Signing time: Sun 01 Mar 2026 23:42:03 +0000 Manifest this update: Sun 01 Mar 2026 23:37:03 +0000 Manifest next update: Thu 05 Mar 2026 04:43:03 +0000 Files and hashes: 1: 3130332e3130312e3134322e302f32342d3234203d3e20313530393330.roa (hash: mFejQ+rZMYWI2e2oK1mVjUKVpb9d3Kj3eFkk7uGq9z8=) 2: 456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl (hash: qbfG3bC2RYDoGDsJUOPs29tognZZCQWENuwHNxw4F14=) 3: 3130332e3130312e3134332e302f32342d3234203d3e20313339393637.roa (hash: 1puyNHEGNNhGWrQg/vX5HkRvqQmry57OCK++TTBuetA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 04:43:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:fc:18:c9:ca:4d:e9:7e:e4:7b:cd:eb:73:b7:1f:58:cb:64:8a:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456E5E4F039DBA0492D11A1873B7ECBBAC67A940 Validity Not Before: Mar 1 23:37:03 2026 GMT Not After : Mar 5 04:43:03 2026 GMT Subject: CN=74479960B06239419AA2A3C032C5BE69ECF97B35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:c9:9a:9d:9a:e5:0e:8e:03:37:6e:c4:1e: e6:64:37:3e:1f:59:4b:5f:88:41:64:f3:54:4f:15: ff:68:b9:46:38:7a:7d:4f:ba:fd:8f:ce:35:b4:65: ae:49:d4:ff:d5:5e:f9:e3:6a:d5:9f:a0:ce:1e:a3: db:62:c9:ff:84:fe:24:fd:c7:8e:3e:a4:15:bd:a7: 41:02:87:3f:8e:51:ea:92:28:47:50:0a:34:b0:32: b2:05:71:9b:99:2e:f2:29:f6:04:c0:f9:40:45:ec: 6e:9e:40:26:1a:56:77:28:fb:c5:16:90:d4:26:eb: b6:36:2a:2d:9e:b7:9f:7d:8a:f7:ad:e0:f0:8c:74: 11:a7:cb:63:98:40:c5:2a:e9:99:2f:e2:4c:e4:00: 7e:1f:50:57:11:90:75:77:9d:f1:5d:17:9c:1c:59: 8e:83:61:0c:69:b7:3b:83:52:d3:c1:30:24:b3:ad: 06:40:84:2e:81:46:5a:ea:99:40:e9:2b:6a:e8:73: 79:e2:65:8e:02:ef:80:0b:54:81:b1:c7:47:b6:b5: 5a:ad:30:24:67:76:7c:4d:46:f0:5c:ee:8e:74:b8: 7a:aa:83:c1:dd:95:e2:db:5a:f9:12:57:c8:be:4f: a8:61:ec:fe:24:bf:d4:b9:ff:43:d9:86:b6:cc:fc: 21:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:47:99:60:B0:62:39:41:9A:A2:A3:C0:32:C5:BE:69:EC:F9:7B:35 X509v3 Authority Key Identifier: keyid:45:6E:5E:4F:03:9D:BA:04:92:D1:1A:18:73:B7:EC:BB:AC:67:A9:40 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91dc71cd-acca-415c-b283-b9372c0d4ce8/0/456E5E4F039DBA0492D11A1873B7ECBBAC67A940.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:9d:5c:07:8b:ba:b9:76:a8:0f:7b:80:8a:1f:db:49:e1:a8: a4:93:1f:41:4b:cb:73:bf:68:a7:dc:ad:53:d8:66:b7:4d:4c: e4:ee:69:32:0a:1d:a5:5c:0d:bc:0b:3d:8c:cb:39:75:5c:ef: 3f:ea:97:75:0f:55:3f:86:68:be:4e:ca:cc:b9:69:f8:bd:9c: aa:cc:2b:10:3e:2f:a0:5e:c7:b9:da:25:fe:38:6e:1b:bb:84: 3e:9a:22:22:7d:bf:04:03:3d:45:b1:76:f6:85:da:90:ba:d4: 6f:ab:39:40:cb:94:c6:1e:c1:8f:29:3f:28:ed:70:80:62:e3: d9:52:5b:26:90:e0:20:e8:81:32:76:9e:ea:eb:d3:b8:95:e8: 68:82:84:d3:08:a3:1c:3e:4c:f6:e3:90:f9:ae:1a:2a:ad:37: 55:64:60:23:4b:92:12:ab:2b:c1:1e:20:30:ee:ef:01:de:ff: d2:98:98:e1:57:0a:ce:03:73:97:0e:90:6f:64:e4:c6:46:3a: b0:66:7a:bb:f3:12:49:ba:8d:fd:35:15:3c:e6:bd:53:9c:4e: a2:cc:8b:ce:3d:cd:cc:43:f9:48:f5:00:13:e5:3b:0e:f8:ef: 4c:42:ef:3e:a6:40:ea:83:9a:75:6a:00:22:d0:c5:ce:b8:bc: c5:3c:f5:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXfwYycpN6X7ke83rc7cfWMtkiu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJB QzY3QTk0MDAeFw0yNjAzMDEyMzM3MDNaFw0yNjAzMDUwNDQzMDNaMDMxMTAvBgNV BAMTKDc0NDc5OTYwQjA2MjM5NDE5QUEyQTNDMDMyQzVCRTY5RUNGOTdCMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ3smanZrlDo4DN27EHuZkNz4f WUtfiEFk81RPFf9ouUY4en1Puv2PzjW0Za5J1P/VXvnjatWfoM4eo9tiyf+E/iT9 x44+pBW9p0EChz+OUeqSKEdQCjSwMrIFcZuZLvIp9gTA+UBF7G6eQCYaVnco+8UW kNQm67Y2Ki2et599ivet4PCMdBGny2OYQMUq6Zkv4kzkAH4fUFcRkHV3nfFdF5wc WY6DYQxptzuDUtPBMCSzrQZAhC6BRlrqmUDpK2roc3niZY4C74ALVIGxx0e2tVqt MCRndnxNRvBc7o50uHqqg8HdleLbWvkSV8i+T6hh7P4kv9S5/0PZhrbM/CHVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdEeZYLBiOUGaoqPAMsW+aez5ezUwHwYDVR0j BBgwFoAURW5eTwOdugSS0RoYc7fsu6xnqUAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRjNzFjZC1hY2NhLTQxNWMtYjI4My1iOTM3MmMwZDRjZTgvMC80NTZFNUU0RjAz OURCQTA0OTJEMTFBMTg3M0I3RUNCQkFDNjdBOTQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VDQkJBQzY3 QTk0MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYzcxY2QtYWNjYS00MTVjLWIy ODMtYjkzNzJjMGQ0Y2U4LzAvNDU2RTVFNEYwMzlEQkEwNDkyRDExQTE4NzNCN0VD QkJBQzY3QTk0MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+dXAeLurl2qA97gIof20nhqKSTH0FLy3O/ aKfcrVPYZrdNTOTuaTIKHaVcDbwLPYzLOXVc7z/ql3UPVT+GaL5Oysy5afi9nKrM KxA+L6Bex7naJf44bhu7hD6aIiJ9vwQDPUWxdvaF2pC61G+rOUDLlMYewY8pPyjt cIBi49lSWyaQ4CDogTJ2nurr07iV6GiChNMIoxw+TPbjkPmuGiqtN1VkYCNLkhKr K8EeIDDu7wHe/9KYmOFXCs4Dc5cOkG9k5MZGOrBmervzEkm6jf01FTzmvVOcTqLM i849zcxD+Uj1ABPlOw7470xC7z6mQOqDmnVqACLQxc64vMU89fE= -----END CERTIFICATE-----Generated at Mon Mar 2 14:59:49 2026 by rpki-client