$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: vlBxPIERar9lrYSVK1d9aDWNiLPucTaz1eSCA+XDi/0= Subject key identifier: 00:A2:47:F6:9F:E6:C5:D2:AE:8D:48:FE:6B:9A:47:D8:08:7D:8C:7A Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 10DFC16344D256A7D406DFF91D23248372A7991B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: 0131 Signing time: Mon 02 Mar 2026 06:01:16 +0000 Manifest this update: Mon 02 Mar 2026 05:56:16 +0000 Manifest next update: Thu 05 Mar 2026 09:40:16 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: IVmWA0sjnzoOPblA5LQxkIVu3A/hMUXTdT7CieN07mY=) 2: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: THBU3MjxbL0TPW7/6YT2w/E4+lgBtWI1ycDfmLyOCJg=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: RowmG35PUWlTBVXWCWFnv7EvaYbGN8PKQsduBtyMpF4=) 4: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: xFffnrBfGrqinSzTOcLoNlqUPiFPKVW2xknOINPEUaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:df:c1:63:44:d2:56:a7:d4:06:df:f9:1d:23:24:83:72:a7:99:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Mar 2 05:56:16 2026 GMT Not After : Mar 5 09:40:16 2026 GMT Subject: CN=00A247F69FE6C5D2AE8D48FE6B9A47D8087D8C7A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:70:de:21:54:ed:a5:24:1f:bb:70:6c:87:0b: f1:b1:1e:61:0d:85:e7:d4:68:7f:28:91:21:aa:ef: 7e:1e:29:75:63:0d:e5:fb:a8:e4:36:3f:97:55:b2: 99:f2:1b:d0:2b:c1:60:14:5f:d0:c5:23:e7:cf:66: fe:c3:78:36:40:38:23:55:69:6e:29:2d:d2:c6:2e: cf:92:79:0e:69:13:38:b6:80:e6:90:1b:92:3f:13: b3:73:ef:50:ef:5d:f1:28:11:37:16:33:7f:22:b3: af:b6:c9:71:22:30:d7:25:dd:3d:6f:3d:96:73:59: 18:c7:16:3f:60:f5:0f:51:87:cb:70:23:46:81:5d: 39:87:e3:1c:35:8b:ab:03:07:3f:8d:91:8b:76:96: 90:55:df:ed:5a:ea:e4:37:d2:29:0f:14:7e:de:ee: e7:88:cc:bd:30:4d:e6:23:7a:c6:b6:85:3b:6e:c9: 11:d1:15:2c:f4:02:21:eb:e9:97:c8:64:f2:4f:78: f7:22:0d:80:df:95:d1:fa:72:5f:42:71:a0:3d:74: ba:0f:2f:65:7b:73:47:bc:fe:e6:21:c1:f2:f3:44: a2:34:10:83:17:63:fe:78:75:cf:57:4a:88:f0:ab: 1d:63:23:dd:9f:fb:76:1b:4e:ae:45:9d:55:e0:ac: e1:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:A2:47:F6:9F:E6:C5:D2:AE:8D:48:FE:6B:9A:47:D8:08:7D:8C:7A X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:b8:d8:b1:07:15:7a:df:e6:34:72:be:ea:26:b0:05:a9:aa: 79:4e:ae:e0:f1:79:f8:9a:4e:f4:c7:5b:75:6b:79:e5:6c:0c: 04:8f:20:12:4b:82:cc:37:21:11:78:dd:3f:80:fc:14:10:0f: ee:ef:46:23:98:88:42:d4:cc:bc:9c:9d:c2:39:7d:25:45:b3: 97:3a:c5:e1:59:c5:b1:e4:29:07:40:4c:be:a2:cb:25:62:19: d4:2e:94:2e:47:fe:50:88:63:bf:70:14:cb:ee:57:2e:da:8b: 56:50:25:fa:d7:1c:44:98:be:ea:4f:db:f5:de:a3:a9:79:0a: b5:0e:2a:00:6d:07:4f:6f:a5:94:c6:16:66:c5:75:85:ad:78: e8:ad:e1:15:1f:c5:d4:20:a2:98:61:b3:23:81:e1:c9:d5:b7: 3a:3c:fc:e4:24:90:c8:32:5d:6d:6e:08:fd:0a:98:a1:96:ab: 62:07:b0:2b:6e:74:ba:5b:55:fd:07:fc:4e:4e:5f:47:48:ec: ff:24:70:a5:99:e5:06:ea:71:ce:f3:71:a8:a7:09:5e:c1:b5: 7b:c4:29:68:58:1b:39:6e:78:f1:34:d3:aa:8a:7d:5e:41:0d: 56:ba:a3:dd:13:1d:db:e0:00:6b:55:30:df:79:bd:19:42:6b: ed:7f:1b:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEN/BY0TSVqfUBt/5HSMkg3KnmRswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNjAzMDIwNTU2MTZaFw0yNjAzMDUwOTQwMTZaMDMxMTAvBgNV BAMTKDAwQTI0N0Y2OUZFNkM1RDJBRThENDhGRTZCOUE0N0Q4MDg3RDhDN0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqcN4hVO2lJB+7cGyHC/GxHmEN hefUaH8okSGq734eKXVjDeX7qOQ2P5dVspnyG9ArwWAUX9DFI+fPZv7DeDZAOCNV aW4pLdLGLs+SeQ5pEzi2gOaQG5I/E7Nz71DvXfEoETcWM38is6+2yXEiMNcl3T1v PZZzWRjHFj9g9Q9Rh8twI0aBXTmH4xw1i6sDBz+NkYt2lpBV3+1a6uQ30ikPFH7e 7ueIzL0wTeYjesa2hTtuyRHRFSz0AiHr6ZfIZPJPePciDYDfldH6cl9CcaA9dLoP L2V7c0e8/uYhwfLzRKI0EIMXY/54dc9XSojwqx1jI92f+3YbTq5FnVXgrOGnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAKJH9p/mxdKujUj+a5pH2Ah9jHowHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE242LEHFXrf5jRyvuomsAWpqnlOruDxefia TvTHW3VreeVsDASPIBJLgsw3IRF43T+A/BQQD+7vRiOYiELUzLycncI5fSVFs5c6 xeFZxbHkKQdATL6iyyViGdQulC5H/lCIY79wFMvuVy7ai1ZQJfrXHESYvupP2/Xe o6l5CrUOKgBtB09vpZTGFmbFdYWteOit4RUfxdQgophhsyOB4cnVtzo8/OQkkMgy XW1uCP0KmKGWq2IHsCtudLpbVf0H/E5OX0dI7P8kcKWZ5Qbqcc7zcainCV7BtXvE KWhYGzluePE006qKfV5BDVa6o90THdvgAGtVMN95vRlCa+1/G4I= -----END CERTIFICATE-----Generated at Mon Mar 2 16:47:15 2026 by rpki-client