$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft File: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft (raw, json) Hash identifier: aWVA6Flb8mPcocoMcD2p0oupXTBbrq7xHUpiEAjwX0E= Subject key identifier: 11:2B:F6:F9:32:B8:17:F4:7A:E4:A1:06:53:31:E2:38:9B:7A:C7:FE Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 Certificate issuer: /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Certificate serial: 73FB7FA904DC72BB1EBF7F2F6BA512677BBC6610 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft Manifest number: 0553 Signing time: Sun 01 Mar 2026 09:02:08 +0000 Manifest this update: Sun 01 Mar 2026 08:57:08 +0000 Manifest next update: Wed 04 Mar 2026 14:20:08 +0000 Files and hashes: 1: 3130332e3130352e39382e302f32342d3234203d3e20313336383638.roa (hash: gEF6XHOWRCqM+iWbvzjd5eE8QEvtBHMbgAap2D0U424=) 2: 323030313a6466333a373130303a3a2f34382d3438203d3e20313336383638.roa (hash: gxzjhOqlSfyvVQV8GuZutKZCxMRY+U2lIgUsJNuDYjo=) 3: 4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl (hash: Zd91oBWBYOejFoUiuCTcO/1D0GvGpISoxxM6qdkoDgk=) 4: 3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (hash: KrFiIsKebuclmAnJCp7i0qAQI2dNZ1dLN7tW2prCRMk=) 5: 3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (hash: RarippCnWnMmEjTgkPvYhkG55G9O0lUfwe2+0FeUYpg=) 6: 3130332e3133332e32302e302f32332d3234203d3e20313336383638.roa (hash: kKOPYDd68IbPpSS7OOzul5ii2GOnq8I9waVsMp0r138=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:20:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:fb:7f:a9:04:dc:72:bb:1e:bf:7f:2f:6b:a5:12:67:7b:bc:66:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36 Validity Not Before: Mar 1 08:57:08 2026 GMT Not After : Mar 4 14:20:08 2026 GMT Subject: CN=112BF6F932B817F47AE4A1065331E2389B7AC7FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:7b:74:24:f8:c0:29:a6:50:22:9b:5c:f7:ad: 4f:7c:b1:11:cb:a0:6f:06:1c:a5:1c:bd:81:19:32: d6:b5:fd:3d:aa:3e:73:d2:a0:45:0f:10:20:45:27: 05:d8:01:7b:16:5b:21:1b:13:41:5a:3e:43:ce:b0: ea:1d:df:fe:f4:88:ac:b4:92:b5:f1:76:55:af:36: 4a:26:1e:44:99:73:3a:f8:af:98:65:2a:35:ff:57: c6:ee:a2:ca:a7:a1:df:32:af:07:ff:6b:ec:07:34: 7a:d7:74:10:b4:30:15:e9:75:13:a5:d2:9e:ce:08: 1b:ef:5d:2d:21:87:d4:7e:a5:50:ad:a1:3f:15:34: 3b:a3:23:3a:38:4d:56:dd:9b:b1:6e:97:0d:ac:85: 64:f6:7c:06:8d:ce:be:7f:85:00:c3:14:ac:45:19: 4e:f2:01:2d:f0:55:bd:92:c5:c1:3b:b0:35:06:01: b9:09:7e:6c:88:23:4c:25:e6:4b:03:06:c8:50:8b: a9:1b:d2:c8:77:57:19:c6:c6:2e:1a:16:6d:49:c8: 6b:f5:d9:53:f9:48:0f:43:13:11:b0:05:84:4e:94: 5d:53:12:75:37:84:8a:4a:14:a9:69:dc:da:6f:1c: 32:e9:d8:1e:f8:9b:ec:bf:0e:29:bc:dc:ba:85:8c: 8b:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:2B:F6:F9:32:B8:17:F4:7A:E4:A1:06:53:31:E2:38:9B:7A:C7:FE X509v3 Authority Key Identifier: keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:81:06:27:1a:c7:cf:43:ab:0c:bf:d6:e5:cb:69:80:e6:3e: 7b:9a:38:50:b3:2f:d8:be:d3:60:bc:be:f2:83:70:b1:41:6f: 83:f1:fb:8d:da:6f:8b:6a:e9:a4:2c:c0:7f:f8:9d:69:47:d4: 87:af:b2:4a:4c:d9:26:5c:da:1b:18:e8:24:fa:d0:c0:d9:30: bd:e0:67:b4:7c:01:cc:f6:35:ae:b8:e1:15:2a:cb:e7:5f:37: 97:26:08:47:d9:86:86:58:65:69:2e:48:5a:09:07:09:41:af: f6:c6:da:f4:e3:8a:ad:e6:38:f4:33:93:a8:db:3e:be:2c:e7: a9:5d:f0:49:10:07:38:77:8c:76:81:4d:08:f3:57:ed:00:2a: 73:82:ae:50:9b:2d:f3:1e:23:1d:61:66:cd:84:4e:8e:c6:85: 61:90:06:a6:f3:b4:37:dc:a6:02:91:5b:cf:93:58:b4:70:1c: 34:21:d5:df:a8:af:51:a2:b2:24:4b:d8:02:57:a9:23:46:b4: 91:85:b8:80:dd:fb:5b:9e:45:16:77:70:ee:70:35:61:ae:47: 5a:da:71:13:1d:5e:d7:4a:25:d1:a3:c5:3f:04:c8:47:d1:5a: df:ed:54:1b:db:8d:91:a1:6f:8d:ff:3e:e9:9e:1f:db:c7:11: de:5b:09:a7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/t/qQTccrsev38va6USZ3u8ZhAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx QTc4M0UzNjAeFw0yNjAzMDEwODU3MDhaFw0yNjAzMDQxNDIwMDhaMDMxMTAvBgNV BAMTKDExMkJGNkY5MzJCODE3RjQ3QUU0QTEwNjUzMzFFMjM4OUI3QUM3RkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCme3Qk+MApplAim1z3rU98sRHL oG8GHKUcvYEZMta1/T2qPnPSoEUPECBFJwXYAXsWWyEbE0FaPkPOsOod3/70iKy0 krXxdlWvNkomHkSZczr4r5hlKjX/V8buosqnod8yrwf/a+wHNHrXdBC0MBXpdROl 0p7OCBvvXS0hh9R+pVCtoT8VNDujIzo4TVbdm7Fulw2shWT2fAaNzr5/hQDDFKxF GU7yAS3wVb2SxcE7sDUGAbkJfmyII0wl5ksDBshQi6kb0sh3VxnGxi4aFm1JyGv1 2VP5SA9DExGwBYROlF1TEnU3hIpKFKlp3NpvHDLp2B74m+y/Dim83LqFjItXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESv2+TK4F/R65KEGUzHiOJt6x/4wHwYDVR0j BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4 M0UzNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTEyNGFhOGMtZGVkYy00Mzc2LTkz ODEtMGE4MWU2YmNjNTY0LzAvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NF NDQxQTc4M0UzNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOBBicax89Dqwy/1uXLaYDmPnuaOFCzL9i+ 02C8vvKDcLFBb4Px+43ab4tq6aQswH/4nWlH1IevskpM2SZc2hsY6CT60MDZML3g Z7R8Acz2Na644RUqy+dfN5cmCEfZhoZYZWkuSFoJBwlBr/bG2vTjiq3mOPQzk6jb Pr4s56ld8EkQBzh3jHaBTQjzV+0AKnOCrlCbLfMeIx1hZs2ETo7GhWGQBqbztDfc pgKRW8+TWLRwHDQh1d+or1GisiRL2AJXqSNGtJGFuIDd+1ueRRZ3cO5wNWGuR1ra cRMdXtdKJdGjxT8EyEfRWt/tVBvbjZGhb43/PumeH9vHEd5bCac= -----END CERTIFICATE-----Generated at Mon Mar 2 19:50:11 2026 by rpki-client