$ rpki-client -vvf repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft File: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft (raw, json) Hash identifier: 1X20ssFfYuaEdbuspULbP6fHLCGUlbvbUJ0+OnrIaBw= Subject key identifier: EC:84:F8:41:9C:41:2E:E8:03:1B:4D:05:FC:50:16:B5:65:F7:D8:A0 Authority key identifier: 4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 Certificate issuer: /CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Certificate serial: 50567218228C296932564C009695C771394A1CCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft Manifest number: 01F3 Signing time: Sun 01 Mar 2026 11:31:41 +0000 Manifest this update: Sun 01 Mar 2026 11:26:41 +0000 Manifest next update: Wed 04 Mar 2026 14:48:41 +0000 Files and hashes: 1: 323030313a6466303a6134303a3a2f34382d3438203d3e20313439333532.roa (hash: WvA2JFm1OCiObbV4owSHIvkJpV0e6REQe/TCSDG98G4=) 2: 4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl (hash: zjFchascNlw7vR2jXWkuNYAjtH5PY8OUfvYzDTUNmyk=) 3: 3130332e3137342e31342e302f32332d3234203d3e20313439333532.roa (hash: EWZ8aolNNLiVVbkuT7UicoQ0CTjjE+TbqDmkXpjzrr8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:48:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:56:72:18:22:8c:29:69:32:56:4c:00:96:95:c7:71:39:4a:1c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623 Validity Not Before: Mar 1 11:26:41 2026 GMT Not After : Mar 4 14:48:41 2026 GMT Subject: CN=EC84F8419C412EE8031B4D05FC5016B565F7D8A0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:a2:e3:8e:1b:65:e0:cc:fe:25:c7:1e:8a:12: c1:cc:b0:76:98:34:37:83:0b:40:27:cb:da:19:6f: 99:a5:13:07:3f:dd:9e:52:f0:8c:6b:b4:cc:6c:d0: 12:f3:99:82:b8:aa:14:34:48:f1:2b:9c:85:7f:f4: 90:62:24:13:b3:0e:f6:b9:e3:3e:48:e6:46:0e:a3: 0b:0d:e1:0a:95:47:92:42:a1:af:56:33:c8:f4:b6: dc:98:15:f9:98:d6:f7:3e:85:fe:94:d0:93:6f:eb: ac:57:70:98:e9:79:7f:0f:4b:d1:32:c4:7f:8c:16: 32:fb:8f:2f:ca:93:0b:96:40:a7:e4:66:fe:3c:00: 1c:56:e3:6f:c3:96:ab:9d:b5:84:73:03:15:e4:43: 57:37:96:5a:46:68:cb:a7:de:66:22:4b:2d:e9:a5: 3d:9f:ef:b8:d2:d7:92:60:7b:9b:3e:9f:6f:30:f9: 2a:23:b0:29:b7:78:09:f6:9b:1c:8f:56:60:81:5e: e2:e7:73:5a:0c:5b:46:f4:f5:87:03:58:c3:7a:2d: 66:eb:0c:b9:c4:41:ec:bb:98:70:8a:cb:e2:fd:a6: 15:95:6e:de:4c:c5:da:35:ab:49:76:ff:25:75:d6: 1f:f6:ff:49:b1:34:39:75:50:3b:e0:f0:d4:38:48: d0:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:84:F8:41:9C:41:2E:E8:03:1B:4D:05:FC:50:16:B5:65:F7:D8:A0 X509v3 Authority Key Identifier: keyid:4E:2A:A9:ED:35:DB:0F:27:6A:5F:F0:D4:02:0D:BE:A1:3E:04:C6:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9eab0a01-8ee4-4825-840d-112daef0aca8/0/4E2AA9ED35DB0F276A5FF0D4020DBEA13E04C623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:f4:56:9a:af:62:f4:39:d6:ae:77:90:6b:26:b0:9a:5d:12: c1:c9:7c:b5:52:ed:e2:9d:d6:ec:83:f5:46:7a:0e:6a:6c:ce: 8b:c3:2b:73:72:e8:6b:1c:87:44:68:a2:af:ee:99:b7:20:37: 5a:39:6c:68:25:95:c0:4c:fb:0d:dd:ee:be:eb:5b:ea:00:0d: 99:5a:21:7e:0b:02:cc:f0:96:89:de:9d:e5:44:39:81:4f:bb: 61:c5:62:d8:d0:a2:65:da:1f:c6:bb:a0:2a:cd:98:d9:28:23: 8e:75:65:54:6e:9e:a0:eb:60:bb:c0:6e:7e:78:a5:35:11:d5: 79:ff:55:1f:0f:f5:47:a1:11:21:ee:66:29:2b:56:80:a2:03: a5:d1:7f:fc:81:69:cc:cf:7f:c4:bd:58:2b:0b:09:62:04:7b: ce:3b:03:5a:c7:93:be:f6:b3:5a:71:da:f5:bd:8b:29:2a:c3: 1c:6d:30:1d:e3:f3:65:bd:ff:9e:fb:f5:76:c9:a0:d2:ee:ce: e5:7c:3e:55:2e:9f:47:cb:64:b5:df:c9:e5:0c:52:98:25:a7: 5d:3e:6c:69:11:89:89:b2:23:e0:17:b0:98:09:8c:d8:4d:c5: 81:cf:ce:a2:a7:66:8d:24:9a:49:43:f0:4f:96:d5:ad:1b:fe: a4:02:bf:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUFZyGCKMKWkyVkwAlpXHcTlKHMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEz RTA0QzYyMzAeFw0yNjAzMDExMTI2NDFaFw0yNjAzMDQxNDQ4NDFaMDMxMTAvBgNV BAMTKEVDODRGODQxOUM0MTJFRTgwMzFCNEQwNUZDNTAxNkI1NjVGN0Q4QTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgouOOG2XgzP4lxx6KEsHMsHaY NDeDC0Any9oZb5mlEwc/3Z5S8IxrtMxs0BLzmYK4qhQ0SPErnIV/9JBiJBOzDva5 4z5I5kYOowsN4QqVR5JCoa9WM8j0ttyYFfmY1vc+hf6U0JNv66xXcJjpeX8PS9Ey xH+MFjL7jy/KkwuWQKfkZv48ABxW42/DlqudtYRzAxXkQ1c3llpGaMun3mYiSy3p pT2f77jS15Jge5s+n28w+SojsCm3eAn2mxyPVmCBXuLnc1oMW0b09YcDWMN6LWbr DLnEQey7mHCKy+L9phWVbt5Mxdo1q0l2/yV11h/2/0mxNDl1UDvg8NQ4SNCBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7IT4QZxBLugDG00F/FAWtWX32KAwHwYDVR0j BBgwFoAUTiqp7TXbDydqX/DUAg2+oT4ExiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZWFiMGEwMS04ZWU0LTQ4MjUtODQwZC0xMTJkYWVmMGFjYTgvMC80RTJBQTlFRDM1 REIwRjI3NkE1RkYwRDQwMjBEQkVBMTNFMDRDNjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJFQTEzRTA0 QzYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWVhYjBhMDEtOGVlNC00ODI1LTg0 MGQtMTEyZGFlZjBhY2E4LzAvNEUyQUE5RUQzNURCMEYyNzZBNUZGMEQ0MDIwREJF QTEzRTA0QzYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABX0VpqvYvQ51q53kGsmsJpdEsHJfLVS7eKd 1uyD9UZ6DmpszovDK3Ny6Gsch0Rooq/umbcgN1o5bGgllcBM+w3d7r7rW+oADZla IX4LAszwloneneVEOYFPu2HFYtjQomXaH8a7oCrNmNkoI451ZVRunqDrYLvAbn54 pTUR1Xn/VR8P9UehESHuZikrVoCiA6XRf/yBaczPf8S9WCsLCWIEe847A1rHk772 s1px2vW9iykqwxxtMB3j82W9/5779XbJoNLuzuV8PlUun0fLZLXfyeUMUpglp10+ bGkRiYmyI+AXsJgJjNhNxYHPzqKnZo0kmklD8E+W1a0b/qQCvxk= -----END CERTIFICATE-----Generated at Mon Mar 2 06:02:59 2026 by rpki-client