$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: 33bIYBbfGa4pQDt0f+x8C1G74BVn7sxFLTiOtG2max8= Subject key identifier: 00:8C:B4:82:47:F7:B6:0B:9D:DF:30:8E:8C:7F:23:5C:65:4D:90:40 Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 514F23343EECA5D013A68FD017A370E0C7AC68A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0142 Signing time: Fri 27 Feb 2026 23:41:19 +0000 Manifest this update: Fri 27 Feb 2026 23:36:19 +0000 Manifest next update: Tue 03 Mar 2026 10:47:19 +0000 Files and hashes: 1: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 2: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 3: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: 7pS+RD3mSkHePOQj9ai3oNEile9a30jdEwo6tx+aMf8=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:47:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:4f:23:34:3e:ec:a5:d0:13:a6:8f:d0:17:a3:70:e0:c7:ac:68:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Feb 27 23:36:19 2026 GMT Not After : Mar 3 10:47:19 2026 GMT Subject: CN=008CB48247F7B60B9DDF308E8C7F235C654D9040 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:90:fe:a3:f4:72:53:84:05:1a:cc:c8:3c:c5: 07:e4:0f:f6:7a:a0:62:9a:a4:25:97:d8:11:17:c5: 69:a9:03:f7:00:f1:41:81:ff:b1:05:9a:ed:53:5a: c6:e9:e0:c0:71:6b:b7:5a:42:1d:f8:bd:b8:f7:d8: e1:26:32:c6:d7:41:f0:fe:80:14:bd:56:bf:46:0e: dd:9f:35:69:67:7b:96:ee:39:63:88:56:d8:a2:14: 29:e1:48:93:f0:db:a8:27:6c:0a:f7:32:69:40:05: 51:b8:7b:28:bd:15:cf:01:e0:0d:9a:8f:6b:c9:03: 9d:05:a0:2c:e4:41:bb:cd:9d:c8:f3:82:97:fe:0a: a4:d2:ff:c9:2b:06:18:21:8a:8c:49:6c:cc:b7:bf: f0:fb:57:29:f9:bc:98:16:0f:c2:64:36:90:a1:57: d2:3e:bc:04:8e:be:54:00:97:d2:d7:8f:a5:00:ba: ba:08:6b:3b:d8:24:bb:a8:ca:c9:c3:ff:f0:8c:33: 2a:3e:f5:28:12:05:33:59:22:bc:83:ba:54:6a:a1: 25:bc:4e:29:f1:d1:e5:79:a9:38:13:49:40:70:ca: 42:d9:45:6b:e2:9c:66:05:25:3f:9d:18:e6:dc:81: 8f:e5:66:a3:29:19:af:b8:9c:45:19:f7:c3:d0:52: cf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:8C:B4:82:47:F7:B6:0B:9D:DF:30:8E:8C:7F:23:5C:65:4D:90:40 X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:a4:45:44:1f:43:48:20:26:17:57:b2:48:34:b6:62:75:dc: 48:96:91:07:98:e4:33:8e:f9:4e:49:6f:8c:7b:4d:dc:3b:d1: 91:62:88:bf:67:3e:9f:3b:7c:ff:27:5a:12:d7:12:b5:33:d0: 84:38:c3:09:03:c3:a4:f5:a0:c3:c3:f5:0e:e2:97:37:74:50: 2b:84:b1:be:0c:5a:d5:65:86:19:d0:4e:eb:c3:0b:d5:cb:5a: f6:b8:5a:ca:8d:d5:be:6b:a8:54:a4:8b:18:59:c0:dc:d8:1e: ff:bd:8d:da:cf:15:f7:6a:8d:a7:a4:8d:bf:7d:61:fc:64:12: 4f:ab:c2:b3:33:2f:48:70:54:bd:d9:93:1a:dc:9f:6a:9c:a2: d3:2e:75:69:04:ee:ef:2f:2d:98:aa:e9:0b:5b:63:c7:56:9f: f7:3c:24:cb:0c:18:59:15:84:76:50:fe:a9:99:0a:6a:6a:17: 52:4f:a6:1b:4a:12:e9:e7:08:c2:42:c7:a5:2d:31:28:ff:ab: c0:f6:c1:3d:55:67:c1:37:3c:e4:43:45:8b:ea:d4:32:df:f4: b1:92:0d:d8:d8:25:50:84:ae:b5:64:64:52:b9:7e:86:ba:60: f1:df:0f:4a:ed:bb:7e:cd:11:e5:fb:bf:85:59:34:2b:ca:6f: a4:9d:4b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUU8jND7spdATpo/QF6Nw4MesaKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNjAyMjcyMzM2MTlaFw0yNjAzMDMxMDQ3MTlaMDMxMTAvBgNV BAMTKDAwOENCNDgyNDdGN0I2MEI5RERGMzA4RThDN0YyMzVDNjU0RDkwNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDkP6j9HJThAUazMg8xQfkD/Z6 oGKapCWX2BEXxWmpA/cA8UGB/7EFmu1TWsbp4MBxa7daQh34vbj32OEmMsbXQfD+ gBS9Vr9GDt2fNWlne5buOWOIVtiiFCnhSJPw26gnbAr3MmlABVG4eyi9Fc8B4A2a j2vJA50FoCzkQbvNncjzgpf+CqTS/8krBhghioxJbMy3v/D7Vyn5vJgWD8JkNpCh V9I+vASOvlQAl9LXj6UAuroIazvYJLuoysnD//CMMyo+9SgSBTNZIryDulRqoSW8 Tinx0eV5qTgTSUBwykLZRWvinGYFJT+dGObcgY/lZqMpGa+4nEUZ98PQUs95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAIy0gkf3tgud3zCOjH8jXGVNkEAwHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABKkRUQfQ0ggJhdXskg0tmJ13EiWkQeY5DOO +U5Jb4x7Tdw70ZFiiL9nPp87fP8nWhLXErUz0IQ4wwkDw6T1oMPD9Q7ilzd0UCuE sb4MWtVlhhnQTuvDC9XLWva4WsqN1b5rqFSkixhZwNzYHv+9jdrPFfdqjaekjb99 YfxkEk+rwrMzL0hwVL3Zkxrcn2qcotMudWkE7u8vLZiq6QtbY8dWn/c8JMsMGFkV hHZQ/qmZCmpqF1JPphtKEunnCMJCx6UtMSj/q8D2wT1VZ8E3PORDRYvq1DLf9LGS DdjYJVCErrVkZFK5foa6YPHfD0rtu37NEeX7v4VZNCvKb6SdSy4= -----END CERTIFICATE-----Generated at Mon Mar 2 11:37:50 2026 by rpki-client