$ rpki-client -vvf repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft File: B4771724B89252E420CF8D2504309C8B69AC30CB.mft (raw, json) Hash identifier: IbGrPlbufxNJCw2FSpL3IkEHvOLItTSHP7kd25T1U2c= Subject key identifier: 55:56:1E:FE:F2:BF:18:0B:1B:79:9A:72:A6:CC:A0:FE:A7:3A:49:17 Authority key identifier: B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB Certificate issuer: /CN=B4771724B89252E420CF8D2504309C8B69AC30CB Certificate serial: 26DE2C1A612DA4D0470C3020EEBEF571F9BF7D3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft Manifest number: 0225 Signing time: Mon 02 Mar 2026 04:01:13 +0000 Manifest this update: Mon 02 Mar 2026 03:56:13 +0000 Manifest next update: Thu 05 Mar 2026 06:11:13 +0000 Files and hashes: 1: B4771724B89252E420CF8D2504309C8B69AC30CB.crl (hash: dwR7h8rHSrPS2ThtuhdwsH1++5oZH3CHw/ri/w5JYRM=) 2: 3130332e31332e3133372e302f32342d3234203d3e20313338383836.roa (hash: 9+zqRvHbgK/9DD5m9ea4hlsqCLzmMR1u9uOqUg58U7s=) 3: 3130332e31332e3133362e302f32342d3234203d3e20313430343537.roa (hash: An6EMR5UX4KSjk0FZOrqiyzcjniIuBPOS2x0pcY6vGs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:11:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:de:2c:1a:61:2d:a4:d0:47:0c:30:20:ee:be:f5:71:f9:bf:7d:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B4771724B89252E420CF8D2504309C8B69AC30CB Validity Not Before: Mar 2 03:56:13 2026 GMT Not After : Mar 5 06:11:13 2026 GMT Subject: CN=55561EFEF2BF180B1B799A72A6CCA0FEA73A4917 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:ed:7a:13:d7:43:9e:a7:14:96:12:34:3a:6d: 1a:38:77:ee:75:e6:98:5d:28:6a:8e:76:f6:1f:b6: 65:d6:aa:d5:91:c6:f3:e5:36:b9:e4:91:de:6e:5b: 7b:f3:b3:18:dc:68:d2:0a:9e:f9:06:25:2f:73:e8: 42:40:df:0f:15:1f:1d:d0:a4:c8:bd:11:83:80:88: 79:e7:91:e1:a5:1c:02:a9:e7:a3:39:e5:4e:58:f0: 14:4b:17:19:01:74:ff:ec:ea:ac:ce:62:dd:d5:89: e9:e7:cd:d1:d0:91:af:df:cf:3a:44:2f:4a:fb:e5: ab:7e:3f:f7:3c:54:52:a2:35:a2:d1:e7:15:26:92: ce:94:0d:74:e9:28:71:b6:18:40:e2:50:e6:db:04: 85:cc:1a:75:25:0a:84:69:bf:df:35:ed:50:08:90: b9:0f:59:fd:97:68:4e:44:0c:2c:35:f5:5c:cd:46: fd:07:b4:ce:b9:1a:06:ef:7b:6d:2a:87:df:fc:01: d6:c3:41:39:9e:1b:e4:d0:71:59:d2:0a:25:ba:2f: 9b:c7:81:77:61:ec:83:50:16:42:43:77:fb:d0:28: 0d:f8:28:d1:99:41:31:19:67:39:fe:70:87:2e:03: e1:e0:df:f9:07:81:a1:78:0f:5e:0d:4a:0d:52:9c: dd:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:56:1E:FE:F2:BF:18:0B:1B:79:9A:72:A6:CC:A0:FE:A7:3A:49:17 X509v3 Authority Key Identifier: keyid:B4:77:17:24:B8:92:52:E4:20:CF:8D:25:04:30:9C:8B:69:AC:30:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4771724B89252E420CF8D2504309C8B69AC30CB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b55af8af-a40f-42c7-9f4c-18e0ca5cd47e/0/B4771724B89252E420CF8D2504309C8B69AC30CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:8c:89:a9:9c:cc:62:dd:9a:46:8b:1e:ea:31:85:c3:64:8d: 12:a8:0e:a3:16:2f:fb:4f:7c:5a:8c:7c:0f:05:bd:98:68:97: 65:ef:9b:10:56:b6:b2:f6:16:f6:84:6f:0f:20:68:7f:b6:fe: 1b:50:66:9c:44:fa:a6:48:f7:8d:1a:1b:fb:0a:a6:7b:1c:d2: 28:ea:cc:28:ad:4b:92:5b:cb:1d:a9:3c:eb:28:02:c9:c4:ae: bd:f6:ba:12:04:6a:cd:7d:84:ac:f3:93:ba:c7:e7:6c:20:8e: b0:5b:00:43:a9:d8:2e:58:f8:59:9d:4b:f6:2b:9a:92:4a:a1: 8b:b5:52:75:e0:49:2d:22:51:b2:d9:05:cc:41:4c:e3:d4:64: 57:4c:1d:82:7a:f3:e2:44:6e:ff:3b:ea:fb:84:e8:69:04:8d: 2e:fd:15:35:96:6e:ff:63:cf:2b:de:6b:75:43:50:81:e3:5e: 7d:37:43:d6:50:3b:04:d7:92:0e:6c:48:e6:c6:56:60:2f:30: 7f:20:51:e3:00:a9:f9:db:ef:e7:1c:5c:40:a9:11:7a:bf:ae: 74:d4:0e:6c:33:a7:21:f6:33:4e:dd:6c:80:20:08:5f:db:6c: 3b:b5:74:73:3c:fe:7a:c7:e0:35:62:ef:60:7b:33:00:db:c7: 29:b0:91:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJt4sGmEtpNBHDDAg7r71cfm/fT8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2 OUFDMzBDQjAeFw0yNjAzMDIwMzU2MTNaFw0yNjAzMDUwNjExMTNaMDMxMTAvBgNV BAMTKDU1NTYxRUZFRjJCRjE4MEIxQjc5OUE3MkE2Q0NBMEZFQTczQTQ5MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJ7XoT10OepxSWEjQ6bRo4d+51 5phdKGqOdvYftmXWqtWRxvPlNrnkkd5uW3vzsxjcaNIKnvkGJS9z6EJA3w8VHx3Q pMi9EYOAiHnnkeGlHAKp56M55U5Y8BRLFxkBdP/s6qzOYt3ViennzdHQka/fzzpE L0r75at+P/c8VFKiNaLR5xUmks6UDXTpKHG2GEDiUObbBIXMGnUlCoRpv9817VAI kLkPWf2XaE5EDCw19VzNRv0HtM65Ggbve20qh9/8AdbDQTmeG+TQcVnSCiW6L5vH gXdh7INQFkJDd/vQKA34KNGZQTEZZzn+cIcuA+Hg3/kHgaF4D14NSg1SnN0FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVVYe/vK/GAsbeZpypsyg/qc6SRcwHwYDVR0j BBgwFoAUtHcXJLiSUuQgz40lBDCci2msMMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NTVhZjhhZi1hNDBmLTQyYzctOWY0Yy0xOGUwY2E1Y2Q0N2UvMC9CNDc3MTcyNEI4 OTI1MkU0MjBDRjhEMjUwNDMwOUM4QjY5QUMzMENCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlDOEI2OUFD MzBDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjU1YWY4YWYtYTQwZi00MmM3LTlm NGMtMThlMGNhNWNkNDdlLzAvQjQ3NzE3MjRCODkyNTJFNDIwQ0Y4RDI1MDQzMDlD OEI2OUFDMzBDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIiMiamczGLdmkaLHuoxhcNkjRKoDqMWL/tP fFqMfA8FvZhol2XvmxBWtrL2FvaEbw8gaH+2/htQZpxE+qZI940aG/sKpnsc0ijq zCitS5Jbyx2pPOsoAsnErr32uhIEas19hKzzk7rH52wgjrBbAEOp2C5Y+FmdS/Yr mpJKoYu1UnXgSS0iUbLZBcxBTOPUZFdMHYJ68+JEbv876vuE6GkEjS79FTWWbv9j zyvea3VDUIHjXn03Q9ZQOwTXkg5sSObGVmAvMH8gUeMAqfnb7+ccXECpEXq/rnTU DmwzpyH2M07dbIAgCF/bbDu1dHM8/nrH4DVi72B7MwDbxymwkWQ= -----END CERTIFICATE-----Generated at Mon Mar 2 11:10:13 2026 by rpki-client