$ rpki-client -vvf repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft File: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft (raw, json) Hash identifier: +erwdYVpu3HPxSsq0vFj8dtmYS/1teDJ3t6fY+Eu6eU= Subject key identifier: 17:D6:79:61:58:FA:49:F7:8F:5F:A5:29:54:2C:A8:E4:CE:73:5C:62 Authority key identifier: 4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA Certificate issuer: /CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Certificate serial: 416E1BC3566E64D04E74E917F20C0B09AC063248 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft Manifest number: 01EA Signing time: Sun 01 Mar 2026 02:11:48 +0000 Manifest this update: Sun 01 Mar 2026 02:06:47 +0000 Manifest next update: Wed 04 Mar 2026 06:38:47 +0000 Files and hashes: 1: 4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl (hash: Pfl/8nftiOZwynTDjt5ycFj24loCqBCqGotgGeOywRM=) 2: 3130332e3139392e3131372e302f32342d3234203d3e20313530393234.roa (hash: kq+NuC2L3vEb1GZ+wb9CoyHOvi8YFEOs7gaELxt5HT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:38:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:6e:1b:c3:56:6e:64:d0:4e:74:e9:17:f2:0c:0b:09:ac:06:32:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA Validity Not Before: Mar 1 02:06:47 2026 GMT Not After : Mar 4 06:38:47 2026 GMT Subject: CN=17D6796158FA49F78F5FA529542CA8E4CE735C62 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:c7:1c:48:1f:36:a5:55:f5:27:12:cd:9f:2e: ab:21:17:69:ad:5c:09:26:4d:d3:ef:75:81:dd:53: ee:7a:4c:0a:78:f9:aa:e9:c8:7f:6a:fe:44:7c:25: ca:5e:2a:1c:97:38:74:ac:e3:40:ee:7d:d9:39:ac: e9:de:86:d9:69:ad:92:cb:db:b5:90:f3:a8:4c:f9: e9:c7:1a:d0:9d:7b:38:63:d7:6f:89:aa:ad:2e:90: 8d:56:e3:aa:05:4b:61:c9:f2:05:6d:4b:db:2f:94: 2c:df:4d:a6:65:00:99:d0:00:f5:59:0a:f0:39:40: ee:53:3b:0f:b1:9d:38:28:49:bc:3b:6c:4f:84:84: d8:5d:57:a8:d1:70:de:3c:ec:52:8c:33:77:be:d5: b3:e1:94:5c:95:67:df:51:9b:cb:61:c1:85:12:26: 8d:fa:8d:52:cf:e6:ac:e7:5e:f0:65:0e:ff:ae:8b: 03:48:e8:c3:9f:cd:4c:0a:90:c0:0a:c9:12:ea:42: 75:7c:37:6d:8d:6f:8d:13:39:1a:d9:a9:af:4e:7e: eb:58:a6:e4:0b:33:4a:52:6d:08:4d:a4:bd:a2:24: 0d:19:da:5f:b8:b2:f5:a6:35:1a:01:13:cf:c9:af: 2d:a7:9f:cc:c0:e6:df:82:37:76:7c:68:51:15:bf: 44:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:D6:79:61:58:FA:49:F7:8F:5F:A5:29:54:2C:A8:E4:CE:73:5C:62 X509v3 Authority Key Identifier: keyid:4B:C6:23:69:08:AF:9F:36:A8:05:7E:2B:B1:A5:B3:4B:CD:6B:7D:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/960f8461-bb2c-4d3e-a5be-700939427c8c/0/4BC6236908AF9F36A8057E2BB1A5B34BCD6B7DBA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:06:64:9e:33:61:16:1a:59:ba:aa:33:d4:82:be:e1:17:f8: ed:7c:22:2c:d4:28:b8:a8:c5:53:0a:3f:b1:4d:4b:36:c6:13: dd:7a:42:f8:18:22:57:4d:f6:98:ac:f0:7a:79:18:41:4f:39: 33:99:c8:56:14:42:12:0c:37:3d:e6:73:1c:aa:03:24:be:90: c8:58:4b:dc:9c:51:c4:16:30:ef:0e:af:16:40:bc:f9:a0:32: f9:4a:1a:b1:ed:c6:34:41:e1:f5:af:77:5a:1c:b9:34:19:bd: 25:ae:91:f5:f3:8d:91:44:e8:e1:91:41:f8:22:1b:2b:dd:2e: b6:f0:72:f9:41:79:3e:23:74:4c:52:3a:e6:1b:58:45:db:55: 00:ae:e5:5e:2f:ba:70:d4:c6:ae:b9:bc:b7:8d:3d:4f:71:fb: c3:94:81:d3:14:d9:19:db:70:77:a4:04:6b:7d:db:a7:4f:13: c9:f1:e3:d6:bb:6c:a8:cd:40:d2:e9:50:74:f0:33:d0:0b:d4: 94:58:17:d6:ec:69:fd:93:56:dd:76:c0:e5:2d:57:d0:ca:0c: d5:ad:54:8e:b0:33:3c:e9:5c:35:c4:c5:33:6a:f9:65:e9:5f: 19:71:f9:52:6d:57:c7:54:3c:d7:fe:e2:82:a0:3b:41:b7:91: a8:31:1a:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQW4bw1ZuZNBOdOkX8gwLCawGMkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJD RDZCN0RCQTAeFw0yNjAzMDEwMjA2NDdaFw0yNjAzMDQwNjM4NDdaMDMxMTAvBgNV BAMTKDE3RDY3OTYxNThGQTQ5Rjc4RjVGQTUyOTU0MkNBOEU0Q0U3MzVDNjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2xxxIHzalVfUnEs2fLqshF2mt XAkmTdPvdYHdU+56TAp4+arpyH9q/kR8JcpeKhyXOHSs40Dufdk5rOnehtlprZLL 27WQ86hM+enHGtCdezhj12+Jqq0ukI1W46oFS2HJ8gVtS9svlCzfTaZlAJnQAPVZ CvA5QO5TOw+xnTgoSbw7bE+EhNhdV6jRcN487FKMM3e+1bPhlFyVZ99Rm8thwYUS Jo36jVLP5qznXvBlDv+uiwNI6MOfzUwKkMAKyRLqQnV8N22Nb40TORrZqa9OfutY puQLM0pSbQhNpL2iJA0Z2l+4svWmNRoBE8/Jry2nn8zA5t+CN3Z8aFEVv0QfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF9Z5YVj6SfePX6UpVCyo5M5zXGIwHwYDVR0j BBgwFoAUS8YjaQivnzaoBX4rsaWzS81rfbowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NjBmODQ2MS1iYjJjLTRkM2UtYTViZS03MDA5Mzk0MjdjOGMvMC80QkM2MjM2OTA4 QUY5RjM2QTgwNTdFMkJCMUE1QjM0QkNENkI3REJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIzNEJDRDZC N0RCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTYwZjg0NjEtYmIyYy00ZDNlLWE1 YmUtNzAwOTM5NDI3YzhjLzAvNEJDNjIzNjkwOEFGOUYzNkE4MDU3RTJCQjFBNUIz NEJDRDZCN0RCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0GZJ4zYRYaWbqqM9SCvuEX+O18IizUKLio xVMKP7FNSzbGE916QvgYIldN9pis8Hp5GEFPOTOZyFYUQhIMNz3mcxyqAyS+kMhY S9ycUcQWMO8OrxZAvPmgMvlKGrHtxjRB4fWvd1ocuTQZvSWukfXzjZFE6OGRQfgi GyvdLrbwcvlBeT4jdExSOuYbWEXbVQCu5V4vunDUxq65vLeNPU9x+8OUgdMU2Rnb cHekBGt926dPE8nx49a7bKjNQNLpUHTwM9AL1JRYF9bsaf2TVt12wOUtV9DKDNWt VI6wMzzpXDXExTNq+WXpXxlx+VJtV8dUPNf+4oKgO0G3kagxGqk= -----END CERTIFICATE-----Generated at Mon Mar 2 00:34:44 2026 by rpki-client