$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: 7OvtIpGHpCn3bBj7gNynQo4x9S+EtXgIFtllJNaRfRE= Subject key identifier: F0:3F:A8:39:7A:35:54:13:41:E7:A8:65:5F:E9:E9:69:0E:28:69:47 Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 5A97441426490B4014688FB7DFCB788784097F35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 0245 Signing time: Sun 01 Mar 2026 11:40:56 +0000 Manifest this update: Sun 01 Mar 2026 11:35:56 +0000 Manifest next update: Wed 04 Mar 2026 21:13:56 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: /LYCiK3XSDhV7kS4sWLIi52mG0iCN/50Lplsahjb3M4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:97:44:14:26:49:0b:40:14:68:8f:b7:df:cb:78:87:84:09:7f:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Mar 1 11:35:56 2026 GMT Not After : Mar 4 21:13:56 2026 GMT Subject: CN=F03FA8397A35541341E7A8655FE9E9690E286947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:3a:44:05:00:51:39:01:b3:38:03:f3:7c:cc: 97:79:bb:c5:16:ca:29:fe:d1:8d:1f:73:c0:15:b5: 1b:e1:4f:bb:09:be:23:26:99:f7:a3:db:ab:67:05: 73:96:39:c9:1b:29:7d:5e:97:74:0d:4b:2e:22:29: bc:fb:a4:04:d8:5a:4e:32:6c:c9:e9:d1:6f:f8:4d: 10:b0:9e:16:80:08:e2:02:fd:8d:0c:a0:90:a2:2d: fd:a9:11:77:b4:ac:f5:38:fc:0c:15:3b:21:76:f9: b4:d1:78:4a:ce:d8:98:b3:cb:4f:66:a5:03:96:63: 3f:3a:0e:e1:42:c1:42:ac:99:d7:fa:34:d9:09:74: 16:41:ca:10:48:0e:39:2c:ed:9a:ea:3c:e7:62:90: 58:1f:91:a5:07:a7:6a:4d:28:13:65:e4:c2:b8:ba: 0d:b0:02:27:fc:5c:de:78:78:c6:e9:dc:b3:c7:d2: 11:c2:22:5a:da:60:e8:58:07:ca:44:be:22:c4:8f: b2:9b:ba:23:fa:82:b7:a5:3d:45:b8:5a:64:03:10: 8c:cd:29:43:99:9e:5a:db:5b:c4:31:c5:a6:e7:48: 8d:7d:1b:d0:84:c6:9b:cf:e1:ac:31:23:23:61:c2: f4:f6:af:29:3a:6d:96:62:65:02:88:44:8a:e0:42: 5f:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:3F:A8:39:7A:35:54:13:41:E7:A8:65:5F:E9:E9:69:0E:28:69:47 X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:74:02:97:00:4e:8b:46:bf:c2:12:18:fa:85:1f:05:e7:96: d2:94:9a:9b:77:55:a2:50:be:a9:e9:ad:63:f3:b1:bb:4d:72: c7:93:49:6b:18:42:e0:28:1b:24:40:b5:a7:88:f0:9c:01:f1: 49:24:c5:8d:04:33:82:93:27:88:70:4e:a7:18:96:69:8a:ca: 5c:81:af:d0:7e:78:2e:07:89:c0:9e:cf:5a:e0:91:2c:7e:f5: a2:26:9d:63:94:c8:26:a3:ae:e6:2f:a4:a3:66:a7:6a:40:18: 55:72:44:4f:3c:8a:a5:25:64:5d:db:f4:0a:df:3b:ea:af:a5: 1e:d6:77:6c:71:43:1e:f6:8b:d7:07:63:e3:f1:4f:c0:01:ea: d4:c5:e8:d3:a2:d7:15:56:47:25:40:13:b4:43:c5:aa:4d:30: 0a:26:44:b0:92:92:00:e0:63:7f:27:b4:99:d5:13:3e:79:d1: 29:49:08:df:d5:f6:47:ae:9d:2e:e1:76:6a:9d:82:e9:2b:38: 1e:1d:48:89:03:ea:33:d9:9c:23:6b:03:2a:21:d4:2f:0c:a6: e3:63:79:39:a2:02:1b:77:42:34:df:56:fd:33:5a:41:20:81: bc:04:0b:8a:0d:2d:24:1e:dc:bb:7d:8a:44:dc:11:be:a6:fb: c6:3f:55:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWpdEFCZJC0AUaI+338t4h4QJfzUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNjAzMDExMTM1NTZaFw0yNjAzMDQyMTEzNTZaMDMxMTAvBgNV BAMTKEYwM0ZBODM5N0EzNTU0MTM0MUU3QTg2NTVGRTlFOTY5MEUyODY5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/OkQFAFE5AbM4A/N8zJd5u8UW yin+0Y0fc8AVtRvhT7sJviMmmfej26tnBXOWOckbKX1el3QNSy4iKbz7pATYWk4y bMnp0W/4TRCwnhaACOIC/Y0MoJCiLf2pEXe0rPU4/AwVOyF2+bTReErO2Jizy09m pQOWYz86DuFCwUKsmdf6NNkJdBZByhBIDjks7ZrqPOdikFgfkaUHp2pNKBNl5MK4 ug2wAif8XN54eMbp3LPH0hHCIlraYOhYB8pEviLEj7KbuiP6grelPUW4WmQDEIzN KUOZnlrbW8QxxabnSI19G9CExpvP4awxIyNhwvT2ryk6bZZiZQKIRIrgQl/HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8D+oOXo1VBNB56hlX+npaQ4oaUcwHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC50ApcATotGv8ISGPqFHwXnltKUmpt3VaJQ vqnprWPzsbtNcseTSWsYQuAoGyRAtaeI8JwB8UkkxY0EM4KTJ4hwTqcYlmmKylyB r9B+eC4HicCez1rgkSx+9aImnWOUyCajruYvpKNmp2pAGFVyRE88iqUlZF3b9Arf O+qvpR7Wd2xxQx72i9cHY+PxT8AB6tTF6NOi1xVWRyVAE7RDxapNMAomRLCSkgDg Y38ntJnVEz550SlJCN/V9keunS7hdmqdgukrOB4dSIkD6jPZnCNrAyoh1C8MpuNj eTmiAht3QjTfVv0zWkEggbwEC4oNLSQe3Lt9ikTcEb6m+8Y/VQg= -----END CERTIFICATE-----Generated at Mon Mar 2 17:45:19 2026 by rpki-client