$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft File: 4F022459BA46CF30700E070671C752B44729E249.mft (raw, json) Hash identifier: VHg3TeTjBEWtSJy+XWHaNE1PBvGsqggJd3TXM058TQw= Subject key identifier: D1:24:9F:7A:F3:99:B7:15:0D:30:25:A2:98:BC:24:0D:1B:A3:05:E6 Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 Certificate issuer: /CN=4F022459BA46CF30700E070671C752B44729E249 Certificate serial: 7F0BDCF2C18BBE961D9B8E69F2B827D14B8C7A79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft Manifest number: 01F8 Signing time: Sat 28 Feb 2026 00:22:23 +0000 Manifest this update: Sat 28 Feb 2026 00:17:23 +0000 Manifest next update: Tue 03 Mar 2026 12:18:23 +0000 Files and hashes: 1: 3130332e36312e3233342e302f32342d3234203d3e20313530353130.roa (hash: KJBcxzna1Sdf4Z3z5OZgBn5Ib7elkK6g0XAXxdhyUSQ=) 2: 3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (hash: eReb0WjJwBofXwNbDwmRqsCz1oLf4D/ET0XbS0nqqnk=) 3: 3130332e36312e3233352e302f32342d3234203d3e20313530353130.roa (hash: OWWwKr6VgMTRSl2gHvmJwedkDbcvu1lGUMF7l6U0D14=) 4: 4F022459BA46CF30700E070671C752B44729E249.crl (hash: O9hPdGLtpm4WkMM/Z/PsNeESW/Th8duVILEWOobaDJ8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:18:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:0b:dc:f2:c1:8b:be:96:1d:9b:8e:69:f2:b8:27:d1:4b:8c:7a:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4F022459BA46CF30700E070671C752B44729E249 Validity Not Before: Feb 28 00:17:23 2026 GMT Not After : Mar 3 12:18:23 2026 GMT Subject: CN=D1249F7AF399B7150D3025A298BC240D1BA305E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:e7:05:47:18:bf:e6:0b:d8:85:6b:3b:49:92: 7a:69:cc:5b:b1:b1:ca:31:b4:27:ca:ec:7a:dd:fc: c9:07:c9:12:24:9f:e1:ce:55:ba:4c:da:f8:0a:3e: 76:16:27:c5:0e:a5:f2:32:89:bd:cf:4a:0b:9c:b6: 30:ff:4d:e2:2c:34:80:c4:2b:c0:99:a0:c6:ab:0c: be:20:b3:4e:29:79:21:12:8b:13:4a:9f:78:52:a2: 93:2d:0e:df:4f:f1:6b:0f:a6:f7:c6:83:ea:ea:0c: 73:24:b1:00:61:9d:5e:ef:cb:b7:fa:e6:df:f4:25: 24:da:71:6e:de:4d:4e:e4:11:af:9a:86:14:a0:32: 38:95:21:32:6d:9f:cb:a3:bf:54:97:96:27:ee:7d: 39:42:43:d5:0b:b6:75:f5:85:d5:3c:24:d6:7b:bb: ff:0a:fa:9d:73:27:b6:a8:0d:ed:c8:b4:ac:c7:d0: 72:cc:59:ab:95:f3:f3:1b:d6:e0:e4:f5:be:bc:fb: 71:08:9f:14:d0:f5:94:20:ad:9a:c0:eb:5f:7f:b9: 5f:ef:2a:59:ba:2c:65:5c:49:79:4e:95:4e:35:28: 19:26:07:3c:00:23:35:09:2b:85:41:20:2e:f5:ca: bd:78:ce:5d:2f:66:b1:b8:05:78:ed:72:8f:1e:c7: 6d:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:24:9F:7A:F3:99:B7:15:0D:30:25:A2:98:BC:24:0D:1B:A3:05:E6 X509v3 Authority Key Identifier: keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:06:c7:e2:a8:e7:a6:a8:a4:1c:70:0c:7a:1e:83:01:dd:1d: 10:66:ed:28:a1:41:c8:65:64:e1:58:db:5f:ce:e3:8a:bc:78: 0d:46:38:83:5a:c1:76:a3:33:8d:81:fc:07:d4:85:8c:3d:c7: 97:45:2c:09:77:94:6d:6a:54:cc:f7:c2:97:25:db:c2:a7:fe: c1:90:11:74:b2:27:ca:51:6d:e3:ea:46:fb:eb:1b:ce:d3:d7: e4:40:9e:3d:6c:e2:8e:1b:ad:8c:03:7f:19:50:1c:a6:98:f1: 66:f9:f7:33:6a:a5:5b:22:4d:23:fd:cd:2d:60:4f:42:4b:a9: 0a:ba:2e:ac:e3:d1:47:bf:0b:e2:a6:47:ef:8e:d6:74:75:78: 9d:ad:05:42:33:5d:46:77:5d:38:15:00:d4:d6:ee:33:1a:67: 46:c1:f7:48:6c:af:41:b1:65:ee:44:b7:48:6f:6f:e6:70:27: ca:ee:db:e2:47:f2:9d:05:55:1e:0b:e0:a2:73:00:5c:34:f5: 85:c3:b9:b6:75:e7:67:db:2f:11:2d:e5:89:ea:f9:69:6b:53: f6:9e:6d:8c:12:69:7f:40:c7:4a:15:71:b6:f4:86:22:5f:f2: 76:b9:ea:f3:2a:b9:7c:97:ad:72:c2:47:c5:3d:23:24:cf:f9: a4:05:0e:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfwvc8sGLvpYdm45p8rgn0UuMenkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0 NzI5RTI0OTAeFw0yNjAyMjgwMDE3MjNaFw0yNjAzMDMxMjE4MjNaMDMxMTAvBgNV BAMTKEQxMjQ5RjdBRjM5OUI3MTUwRDMwMjVBMjk4QkMyNDBEMUJBMzA1RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDi5wVHGL/mC9iFaztJknppzFux scoxtCfK7Hrd/MkHyRIkn+HOVbpM2vgKPnYWJ8UOpfIyib3PSguctjD/TeIsNIDE K8CZoMarDL4gs04peSESixNKn3hSopMtDt9P8WsPpvfGg+rqDHMksQBhnV7vy7f6 5t/0JSTacW7eTU7kEa+ahhSgMjiVITJtn8ujv1SXlifufTlCQ9ULtnX1hdU8JNZ7 u/8K+p1zJ7aoDe3ItKzH0HLMWauV8/Mb1uDk9b68+3EInxTQ9ZQgrZrA619/uV/v Klm6LGVcSXlOlU41KBkmBzwAIzUJK4VBIC71yr14zl0vZrG4BXjtco8ex23hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0SSfevOZtxUNMCWimLwkDRujBeYwHwYDVR0j BBgwFoAUTwIkWbpGzzBwDgcGccdStEcp4kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTJiZmU5YS0zODIzLTQ0ZTktOTdjMC0yMTkxYTU2YmFmZDMvMC80RjAyMjQ1OUJB NDZDRjMwNzAwRTA3MDY3MUM3NTJCNDQ3MjlFMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUyQjQ0NzI5 RTI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEyYmZlOWEtMzgyMy00NGU5LTk3 YzAtMjE5MWE1NmJhZmQzLzAvNEYwMjI0NTlCQTQ2Q0YzMDcwMEUwNzA2NzFDNzUy QjQ0NzI5RTI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcGx+Ko56aopBxwDHoegwHdHRBm7SihQchl ZOFY21/O44q8eA1GOINawXajM42B/AfUhYw9x5dFLAl3lG1qVMz3wpcl28Kn/sGQ EXSyJ8pRbePqRvvrG87T1+RAnj1s4o4brYwDfxlQHKaY8Wb59zNqpVsiTSP9zS1g T0JLqQq6Lqzj0Ue/C+KmR++O1nR1eJ2tBUIzXUZ3XTgVANTW7jMaZ0bB90hsr0Gx Ze5Et0hvb+ZwJ8ru2+JH8p0FVR4L4KJzAFw09YXDubZ152fbLxEt5Ynq+WlrU/ae bYwSaX9Ax0oVcbb0hiJf8na56vMquXyXrXLCR8U9IyTP+aQFDo4= -----END CERTIFICATE-----Generated at Mon Mar 2 00:34:56 2026 by rpki-client