$ rpki-client -vvf repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft File: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft (raw, json) Hash identifier: sGP4ZIcU/jm+mbtKTvlOzAU7epCRh4BZRtRnxKT7FXM= Subject key identifier: F9:3B:BC:23:2F:88:20:03:B6:27:E2:28:A7:77:1C:82:69:D1:70:57 Authority key identifier: 4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 Certificate issuer: /CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Certificate serial: 2D64C92C2AA466E6B2AA98A1DC252488E71886F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft Manifest number: 011F Signing time: Sun 01 Mar 2026 06:31:16 +0000 Manifest this update: Sun 01 Mar 2026 06:26:16 +0000 Manifest next update: Wed 04 Mar 2026 07:45:16 +0000 Files and hashes: 1: 4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl (hash: +HtbEIhdrTQ2qj4kXmN5MPnRYfz90DIFrWNCk40krNk=) 2: 3130332e3234342e3130342e302f32342d3234203d3e20313531353534.roa (hash: jrKOilPCIf2Ja6+AaaEcXg/8k0wsYFPn+K9KWKLrdzE=) 3: 3130332e3234342e3130352e302f32342d3234203d3e20313531353534.roa (hash: ztwT0b/RRL8JmA2A1xEIyDAku/obP4kwaW2vaWiLopQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 07:45:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:64:c9:2c:2a:a4:66:e6:b2:aa:98:a1:dc:25:24:88:e7:18:86:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CDDA0597DCBCA2C92A176D00847EB50F6122354 Validity Not Before: Mar 1 06:26:16 2026 GMT Not After : Mar 4 07:45:16 2026 GMT Subject: CN=F93BBC232F882003B627E228A7771C8269D17057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:00:0d:7f:40:3d:df:e9:21:a7:5f:23:8a:9e: 06:68:37:32:d0:53:7b:30:24:92:a3:6a:c2:de:98: a8:70:ff:36:db:18:65:09:65:e9:9c:6d:35:36:f1: 57:8e:c9:89:f5:2d:e0:ff:6a:2b:72:4d:41:dd:85: 62:41:d9:85:4d:a7:fc:d7:19:95:26:2b:3c:48:b2: 66:f1:8f:71:97:4b:bc:ab:31:63:6a:f6:60:ea:91: 95:ed:64:03:f2:55:c0:08:4f:a9:30:ed:ad:57:95: 24:60:22:c7:42:e6:db:68:98:c1:f3:40:84:4a:f7: 00:a4:cf:70:1a:53:c5:53:a9:f5:86:1f:6b:85:69: f1:f3:96:99:12:2d:b0:b2:f1:99:84:55:3e:31:12: a9:c6:c7:3a:79:df:4f:94:4d:22:56:f7:a2:bf:3a: 7e:3d:21:21:08:d9:be:d0:44:13:10:bb:73:37:ba: 51:48:9f:be:2e:80:de:31:49:3d:37:5a:ff:d2:b5: 3e:da:78:5c:04:09:3c:bf:d7:49:a5:cb:9a:6d:ad: ba:f2:78:38:31:d3:dc:a3:4c:26:30:e7:53:39:94: ec:aa:8b:91:56:c9:9c:e0:50:1a:df:50:b9:1a:76: bd:01:e7:7f:5f:9a:3a:aa:8d:65:a1:67:95:71:d1: 8f:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:3B:BC:23:2F:88:20:03:B6:27:E2:28:A7:77:1C:82:69:D1:70:57 X509v3 Authority Key Identifier: keyid:4C:DD:A0:59:7D:CB:CA:2C:92:A1:76:D0:08:47:EB:50:F6:12:23:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CDDA0597DCBCA2C92A176D00847EB50F6122354.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9d2fa51e-3fd4-4520-b375-09eef5e0e510/0/4CDDA0597DCBCA2C92A176D00847EB50F6122354.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:73:d7:73:96:e8:22:ac:59:ea:da:06:17:c6:ee:b3:ba:8c: 61:fd:6b:54:5c:17:da:82:6f:04:d9:d9:9f:76:3a:7d:6c:0e: ef:3e:3f:ab:17:f8:49:d8:24:af:47:51:50:bc:29:2d:96:e0: d2:4e:bb:76:9a:2a:a6:86:90:f8:a0:c7:41:e3:fc:08:24:c6: 74:00:a9:f7:be:ab:a1:3a:4a:f3:7c:7c:84:80:5e:24:fd:6c: 0b:a6:ad:b8:7c:95:b0:69:e6:be:a4:41:3c:3c:3b:e5:e2:68: 02:a7:9c:a1:aa:c6:e3:d8:45:be:89:ed:4b:14:2e:47:8a:72: 59:61:48:06:d1:56:11:54:2b:28:eb:98:7e:7f:5f:29:21:00: f2:f2:06:44:c9:3c:71:37:40:af:ce:b6:0a:ed:bc:17:72:67: 39:2d:9d:6d:fd:30:66:fb:ff:26:32:5b:66:d8:8d:aa:81:34: b6:10:46:d7:54:6f:d4:ec:56:94:75:3f:59:36:ce:ba:38:2e: 80:01:96:4d:88:46:a5:8c:bb:89:75:7e:42:e7:fa:1e:3b:98: 3f:70:b3:5f:c9:e5:2b:0b:f3:5d:c8:0e:38:e4:40:51:72:0c: b1:6a:06:64:6f:11:e1:ab:1f:8c:06:d8:4a:50:6f:67:f7:c6: 8a:5c:5f:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULWTJLCqkZuayqpih3CUkiOcYhvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBG NjEyMjM1NDAeFw0yNjAzMDEwNjI2MTZaFw0yNjAzMDQwNzQ1MTZaMDMxMTAvBgNV BAMTKEY5M0JCQzIzMkY4ODIwMDNCNjI3RTIyOEE3NzcxQzgyNjlEMTcwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9AA1/QD3f6SGnXyOKngZoNzLQ U3swJJKjasLemKhw/zbbGGUJZemcbTU28VeOyYn1LeD/aityTUHdhWJB2YVNp/zX GZUmKzxIsmbxj3GXS7yrMWNq9mDqkZXtZAPyVcAIT6kw7a1XlSRgIsdC5ttomMHz QIRK9wCkz3AaU8VTqfWGH2uFafHzlpkSLbCy8ZmEVT4xEqnGxzp530+UTSJW96K/ On49ISEI2b7QRBMQu3M3ulFIn74ugN4xST03Wv/StT7aeFwECTy/10mly5ptrbry eDgx09yjTCYw51M5lOyqi5FWyZzgUBrfULkadr0B539fmjqqjWWhZ5Vx0Y/pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Tu8Iy+IIAO2J+Iop3ccgmnRcFcwHwYDVR0j BBgwFoAUTN2gWX3LyiySoXbQCEfrUPYSI1QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZDJmYTUxZS0zZmQ0LTQ1MjAtYjM3NS0wOWVlZjVlMGU1MTAvMC80Q0REQTA1OTdE Q0JDQTJDOTJBMTc2RDAwODQ3RUI1MEY2MTIyMzU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VCNTBGNjEy MjM1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWQyZmE1MWUtM2ZkNC00NTIwLWIz NzUtMDllZWY1ZTBlNTEwLzAvNENEREEwNTk3RENCQ0EyQzkyQTE3NkQwMDg0N0VC NTBGNjEyMjM1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVz13OW6CKsWeraBhfG7rO6jGH9a1RcF9qC bwTZ2Z92On1sDu8+P6sX+EnYJK9HUVC8KS2W4NJOu3aaKqaGkPigx0Hj/AgkxnQA qfe+q6E6SvN8fISAXiT9bAumrbh8lbBp5r6kQTw8O+XiaAKnnKGqxuPYRb6J7UsU LkeKcllhSAbRVhFUKyjrmH5/XykhAPLyBkTJPHE3QK/OtgrtvBdyZzktnW39MGb7 /yYyW2bYjaqBNLYQRtdUb9TsVpR1P1k2zro4LoABlk2IRqWMu4l1fkLn+h47mD9w s1/J5SsL813IDjjkQFFyDLFqBmRvEeGrH4wG2EpQb2f3xopcXxY= -----END CERTIFICATE-----Generated at Mon Mar 2 09:06:51 2026 by rpki-client