$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft File: 411479424B4016269EB9E266CD48905F63DC9F0B.mft (raw, json) Hash identifier: SgIMWm3GDdntYmrsICzRxGfqh2JwwJ6FX1GHY5/mqcY= Subject key identifier: 6E:3F:2C:71:DA:1E:5A:A8:F6:48:93:6A:9D:5A:BE:E5:E5:1F:28:74 Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B Certificate issuer: /CN=411479424B4016269EB9E266CD48905F63DC9F0B Certificate serial: 6F382331EC9F06F9C5D8D4F048FDC4CC2D6275D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft Manifest number: 02FA Signing time: Sun 01 Mar 2026 11:02:37 +0000 Manifest this update: Sun 01 Mar 2026 10:57:37 +0000 Manifest next update: Wed 04 Mar 2026 17:10:37 +0000 Files and hashes: 1: 3130332e3137382e39312e302f32342d3234203d3e20313430343034.roa (hash: vr+BxfkmoPeng8pSy2LdmDpMjQR/gXY9KvmthDLXE0s=) 2: 3130332e3137382e39302e302f32342d3234203d3e20313430343034.roa (hash: OK/qKcmCWZLbUU0gqTVd4CzrA30sPM3AN1RD82duRis=) 3: 3130332e3137382e39302e302f32332d3233203d3e20313430343034.roa (hash: bLbFLRF4nCoMUEy8txljQ1KpQ4biSpv3zVxmLsxYZs4=) 4: 411479424B4016269EB9E266CD48905F63DC9F0B.crl (hash: TFrpMy8cAn0pBhbYr+9NMWCgWn21sdzfjzfhQrUz3pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:10:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:38:23:31:ec:9f:06:f9:c5:d8:d4:f0:48:fd:c4:cc:2d:62:75:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B Validity Not Before: Mar 1 10:57:37 2026 GMT Not After : Mar 4 17:10:37 2026 GMT Subject: CN=6E3F2C71DA1E5AA8F648936A9D5ABEE5E51F2874 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f3:7e:86:a4:50:64:5d:c0:18:ba:36:c1:aa: 48:f0:cd:9a:63:c5:5b:b8:eb:db:67:f6:01:24:56: 91:95:4a:16:eb:13:ef:92:09:80:5e:b6:de:cd:7d: 14:b6:67:e1:5b:50:4a:5f:26:51:df:2e:cc:51:6f: 2b:35:c1:9b:c7:40:13:6b:11:30:fe:98:d8:7f:02: 70:5d:07:83:ac:bd:cc:81:66:a1:22:f5:fa:dd:72: d6:84:7f:09:fa:a5:da:d2:98:fd:ff:39:19:d4:37: 0f:66:31:57:27:06:5b:da:74:c5:d0:4f:44:8c:a0: 53:16:f1:39:63:f6:c2:20:35:db:72:da:29:e7:af: 0e:30:63:81:6b:ed:67:f2:7c:7b:c1:d3:4c:67:a2: da:a7:16:8e:8f:3f:eb:ba:1b:2b:3a:ab:83:e7:4f: 10:bd:29:c9:57:9d:3b:03:1f:15:01:b2:f7:2e:f7: c2:71:5a:4e:1a:ed:40:bf:ad:fa:97:51:5d:1b:4d: 06:d9:bd:f2:cf:8c:f5:04:15:6b:b5:7b:80:f6:b0: bc:8a:d8:32:0b:b0:36:ee:03:ce:77:d6:4a:d0:38: c4:9c:f1:e7:e9:d9:72:b0:9a:d2:56:27:6a:54:ae: 00:9d:ba:1d:94:3d:c2:5f:39:8a:01:66:96:03:39: 23:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:3F:2C:71:DA:1E:5A:A8:F6:48:93:6A:9D:5A:BE:E5:E5:1F:28:74 X509v3 Authority Key Identifier: keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:71:4a:ce:39:61:ee:48:de:fa:47:d2:bc:78:49:24:9c:1d: 72:5e:b7:48:49:a6:75:c4:dd:5c:75:c2:ef:c2:da:02:68:b5: 7e:e8:62:07:1a:74:4c:f4:d9:f2:6a:50:ca:26:bd:aa:16:97: b1:f2:fd:a9:cb:dc:cf:2a:ae:0a:c7:9f:e6:67:e3:a5:d3:64: 44:fd:73:ce:b5:d9:8c:07:e6:e9:75:cb:ad:e5:f4:f7:c5:35: 36:18:8c:94:f2:df:64:34:14:41:1a:a8:0c:bf:2b:d6:48:d2: 69:5e:aa:15:52:59:62:f8:7b:ad:bb:eb:38:a2:8a:dd:51:01: 9b:88:b6:f6:8e:13:20:5f:bd:24:0b:85:7b:71:1e:6a:9a:fc: e3:4c:3f:71:6d:39:7c:b9:80:94:f0:63:3d:49:18:18:74:c8: 7a:ae:79:b7:22:5b:22:55:b3:b6:db:2b:80:84:52:e7:72:d1: de:b4:3e:4f:84:6f:32:7a:8a:2d:49:b4:ab:ba:92:3c:b6:01: 9a:79:bb:16:60:8c:9f:d5:3b:58:bb:53:36:8e:5f:cf:dd:83: 53:e3:ec:2a:d2:09:b8:8c:0b:62:9a:e9:b8:f9:99:1b:bf:ca: f7:8c:df:21:79:a2:ba:95:f0:20:a0:9b:8d:70:da:36:c9:86: 4b:6a:15:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbzgjMeyfBvnF2NTwSP3EzC1iddEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2 M0RDOUYwQjAeFw0yNjAzMDExMDU3MzdaFw0yNjAzMDQxNzEwMzdaMDMxMTAvBgNV BAMTKDZFM0YyQzcxREExRTVBQThGNjQ4OTM2QTlENUFCRUU1RTUxRjI4NzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+836GpFBkXcAYujbBqkjwzZpj xVu469tn9gEkVpGVShbrE++SCYBett7NfRS2Z+FbUEpfJlHfLsxRbys1wZvHQBNr ETD+mNh/AnBdB4OsvcyBZqEi9frdctaEfwn6pdrSmP3/ORnUNw9mMVcnBlvadMXQ T0SMoFMW8Tlj9sIgNdty2innrw4wY4Fr7WfyfHvB00xnotqnFo6PP+u6Gys6q4Pn TxC9KclXnTsDHxUBsvcu98JxWk4a7UC/rfqXUV0bTQbZvfLPjPUEFWu1e4D2sLyK 2DILsDbuA8531krQOMSc8efp2XKwmtJWJ2pUrgCduh2UPcJfOYoBZpYDOSNzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbj8scdoeWqj2SJNqnVq+5eUfKHQwHwYDVR0j BBgwFoAUQRR5QktAFiaeueJmzUiQX2PcnwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MTM3MzllMS1iNWRiLTQ3MzQtODM4YS1iMGI1ODBiZWI5ZjMvMC80MTE0Nzk0MjRC NDAxNjI2OUVCOUUyNjZDRDQ4OTA1RjYzREM5RjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkwNUY2M0RD OUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzEzNzM5ZTEtYjVkYi00NzM0LTgz OGEtYjBiNTgwYmViOWYzLzAvNDExNDc5NDI0QjQwMTYyNjlFQjlFMjY2Q0Q0ODkw NUY2M0RDOUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG5xSs45Ye5I3vpH0rx4SSScHXJet0hJpnXE 3Vx1wu/C2gJotX7oYgcadEz02fJqUMomvaoWl7Hy/anL3M8qrgrHn+Zn46XTZET9 c8612YwH5ul1y63l9PfFNTYYjJTy32Q0FEEaqAy/K9ZI0mleqhVSWWL4e6276zii it1RAZuItvaOEyBfvSQLhXtxHmqa/ONMP3FtOXy5gJTwYz1JGBh0yHquebciWyJV s7bbK4CEUudy0d60Pk+EbzJ6ii1JtKu6kjy2AZp5uxZgjJ/VO1i7UzaOX8/dg1Pj 7CrSCbiMC2Ka6bj5mRu/yveM3yF5orqV8CCgm41w2jbJhktqFYM= -----END CERTIFICATE-----Generated at Mon Mar 2 16:34:17 2026 by rpki-client