$ rpki-client -vvf repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft File: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft (raw, json) Hash identifier: kvQ+LWozDS9LkD4cFk6mPFpBsuuqeCwxKYwBnN4hVUE= Subject key identifier: C5:F6:30:E3:08:05:B0:18:8A:25:78:07:8D:23:BA:CB:1B:BD:66:DB Authority key identifier: 45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD Certificate issuer: /CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Certificate serial: 662C206CD647BA151ADB82D300A8EC0F7E30534A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft Manifest number: 01F5 Signing time: Sun 01 Mar 2026 19:31:30 +0000 Manifest this update: Sun 01 Mar 2026 19:26:30 +0000 Manifest next update: Thu 05 Mar 2026 01:35:30 +0000 Files and hashes: 1: 3130332e3134302e39312e302f32342d3234203d3e20313338383736.roa (hash: 99LHlaqlJvFBEChHJUY+/SooMeB1+Go2teO3Iar+WnU=) 2: 3130332e3134302e39302e302f32342d3234203d3e20313338383736.roa (hash: TgFFHo7ru8wPRV9QoxZjMRgufeQSRNupm9ex/WNdqlE=) 3: 3130332e3134302e39302e302f32332d3234203d3e20313338383736.roa (hash: nNtuDch1T6loQOI43k4Pa/PnmvoP73GfE/Ea1GsFAQw=) 4: 456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl (hash: KPsC+GBCzN7hrYgv8M4nF0Rs/6ObYi0wqOD4mT6EbI4=) 5: 323030313a6466303a623538303a3a2f34382d3438203d3e20313338383736.roa (hash: a0pLp5FVIOKCyynC3nqEg0f7XooNhe6lSNrvEp9yAtY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 01:35:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:2c:20:6c:d6:47:ba:15:1a:db:82:d3:00:a8:ec:0f:7e:30:53:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=456957B6E32ABD1576136BF4B39EC4CCAD972FCD Validity Not Before: Mar 1 19:26:30 2026 GMT Not After : Mar 5 01:35:30 2026 GMT Subject: CN=C5F630E30805B0188A2578078D23BACB1BBD66DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:09:5f:06:fa:f0:c4:b8:86:99:83:ca:61:f4: dd:c0:7e:25:6e:04:cd:9a:da:bc:6e:f9:7c:4b:78: 64:54:b6:7b:a5:47:24:fb:1d:db:d5:c8:53:ae:3a: c9:f9:fd:15:4f:9c:1a:ff:cf:58:66:08:3e:dd:54: 64:1b:a4:65:f8:31:52:ac:82:c2:3b:c0:ae:fb:f7: 9b:de:0c:ed:4f:16:a8:1a:58:1c:93:ed:e8:9f:c9: 1c:af:30:6a:6d:2c:cd:36:52:ce:83:a7:c0:39:33: 28:00:0d:11:08:a9:04:4c:79:9a:a9:40:65:c8:7b: ab:f6:f9:92:3c:0e:7a:e9:cf:67:bf:13:f8:90:aa: 38:51:3d:79:09:00:70:2b:29:cc:ba:d9:86:d8:c2: 78:fc:f1:60:e2:03:70:c8:d0:c9:b5:89:c0:51:b3: 4c:d4:ff:fd:3a:ac:4c:84:19:9b:b1:36:23:41:0d: bf:14:5d:da:e9:a0:a0:08:02:43:c9:93:dc:c4:17: 93:83:6f:0e:2e:5a:e2:95:c5:fc:0b:2b:d2:ef:4a: fd:15:50:30:f5:26:ed:2e:73:62:f5:b2:9c:e4:8f: ff:88:d9:01:e5:a3:f8:62:92:97:af:41:25:bd:8c: a0:78:fd:a4:83:cc:2c:2a:b9:90:17:6e:e5:5f:c5: 9d:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:F6:30:E3:08:05:B0:18:8A:25:78:07:8D:23:BA:CB:1B:BD:66:DB X509v3 Authority Key Identifier: keyid:45:69:57:B6:E3:2A:BD:15:76:13:6B:F4:B3:9E:C4:CC:AD:97:2F:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6a9ddf7-576a-4a58-89bb-7e8928902270/0/456957B6E32ABD1576136BF4B39EC4CCAD972FCD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:96:65:10:1f:72:d6:9c:d5:24:8a:ec:52:f3:aa:07:1e:3d: 22:73:22:80:c1:51:45:18:5c:63:bd:9f:6f:15:de:d2:86:7e: d1:37:84:b8:ef:bc:9f:1a:60:08:38:db:75:e9:50:af:23:75: 63:2a:fa:4e:1a:9a:d0:36:13:c1:01:63:c5:c8:0c:bc:6a:25: 58:1b:00:af:25:52:a7:e3:44:11:45:90:16:d0:9b:f2:91:29: 0e:fd:a7:f3:dd:81:b2:85:c4:3a:9e:28:67:34:b6:6d:17:f0: c6:f2:bd:30:97:f4:92:dc:7f:79:b3:24:cc:09:24:64:d6:11: 91:f1:a8:78:aa:97:64:6d:61:04:72:c5:78:b3:37:51:74:ad: b4:a5:d1:57:f0:2c:1d:d1:b3:53:1f:e8:dd:bd:15:13:0f:19: 12:8d:fc:13:48:57:f5:65:b2:71:ef:9e:7f:ab:62:13:ca:c7: 1f:ed:39:55:64:2e:62:6c:2f:ac:46:bc:56:da:21:0f:7b:0b: 92:a2:a9:19:28:05:b1:47:19:96:f4:53:b1:4d:61:b8:07:e6: 86:e7:2c:9e:f9:45:d2:97:6c:9a:b5:82:1f:94:e6:38:e7:70: 32:e5:84:8a:62:58:05:1a:30:41:ba:58:4a:83:07:aa:a6:06: 0e:70:06:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZiwgbNZHuhUa24LTAKjsD34wU0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NB RDk3MkZDRDAeFw0yNjAzMDExOTI2MzBaFw0yNjAzMDUwMTM1MzBaMDMxMTAvBgNV BAMTKEM1RjYzMEUzMDgwNUIwMTg4QTI1NzgwNzhEMjNCQUNCMUJCRDY2REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuCV8G+vDEuIaZg8ph9N3AfiVu BM2a2rxu+XxLeGRUtnulRyT7HdvVyFOuOsn5/RVPnBr/z1hmCD7dVGQbpGX4MVKs gsI7wK7795veDO1PFqgaWByT7eifyRyvMGptLM02Us6Dp8A5MygADREIqQRMeZqp QGXIe6v2+ZI8Dnrpz2e/E/iQqjhRPXkJAHArKcy62YbYwnj88WDiA3DI0Mm1icBR s0zU//06rEyEGZuxNiNBDb8UXdrpoKAIAkPJk9zEF5ODbw4uWuKVxfwLK9LvSv0V UDD1Ju0uc2L1spzkj/+I2QHlo/hikpevQSW9jKB4/aSDzCwquZAXbuVfxZ0BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxfYw4wgFsBiKJXgHjSO6yxu9ZtswHwYDVR0j BBgwFoAURWlXtuMqvRV2E2v0s57EzK2XL80wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmE5ZGRmNy01NzZhLTRhNTgtODliYi03ZTg5Mjg5MDIyNzAvMC80NTY5NTdCNkUz MkFCRDE1NzYxMzZCRjRCMzlFQzRDQ0FEOTcyRkNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0Q0NBRDk3 MkZDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZhOWRkZjctNTc2YS00YTU4LTg5 YmItN2U4OTI4OTAyMjcwLzAvNDU2OTU3QjZFMzJBQkQxNTc2MTM2QkY0QjM5RUM0 Q0NBRDk3MkZDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCWZRAfctac1SSK7FLzqgcePSJzIoDBUUUY XGO9n28V3tKGftE3hLjvvJ8aYAg423XpUK8jdWMq+k4amtA2E8EBY8XIDLxqJVgb AK8lUqfjRBFFkBbQm/KRKQ79p/PdgbKFxDqeKGc0tm0X8MbyvTCX9JLcf3mzJMwJ JGTWEZHxqHiql2RtYQRyxXizN1F0rbSl0VfwLB3Rs1Mf6N29FRMPGRKN/BNIV/Vl snHvnn+rYhPKxx/tOVVkLmJsL6xGvFbaIQ97C5KiqRkoBbFHGZb0U7FNYbgH5obn LJ75RdKXbJq1gh+U5jjncDLlhIpiWAUaMEG6WEqDB6qmBg5wBrM= -----END CERTIFICATE-----Generated at Mon Mar 2 19:09:11 2026 by rpki-client