$ rpki-client -vvf repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft File: 4B35C20AD3085CF1B9FAEA049AD742539E090205.mft (raw, json) Hash identifier: W4GcQexl8t8EMzuNF3NEuiV5dj5moiJS9yrEGHzh+KE= Subject key identifier: 44:DF:6E:7D:F7:2F:23:5A:9B:65:F0:6A:31:FB:D2:91:05:40:1B:0E Authority key identifier: 4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 Certificate issuer: /CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Certificate serial: 53904312F1104A8F9E48DE3362C1D216710E509A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft Manifest number: 02B4 Signing time: Sat 28 Feb 2026 16:31:18 +0000 Manifest this update: Sat 28 Feb 2026 16:26:18 +0000 Manifest next update: Wed 04 Mar 2026 02:40:18 +0000 Files and hashes: 1: 3130332e3137392e36342e302f32332d3233203d3e20313439333335.roa (hash: T9YXzECK/+yPsc0MjXlDkJh+Di90dnJO766syYdRfEY=) 2: 4B35C20AD3085CF1B9FAEA049AD742539E090205.crl (hash: aJ9CGqEJTiKZsrHGbMIjsQEzx0khb+Cc4bwP70LuTUw=) 3: 3130332e3137392e36342e302f32342d3234203d3e20313439333335.roa (hash: MmuXAKKjfDSx5uMJ92RoI47O3gaQ+ApBdube+8uCMpY=) 4: 3130332e3137392e36352e302f32342d3234203d3e20313439333335.roa (hash: ym37SSdo2iVsDC1Dln3Pafguv+BU6JfKF0m5JjGwHHs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:40:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:90:43:12:f1:10:4a:8f:9e:48:de:33:62:c1:d2:16:71:0e:50:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B35C20AD3085CF1B9FAEA049AD742539E090205 Validity Not Before: Feb 28 16:26:18 2026 GMT Not After : Mar 4 02:40:18 2026 GMT Subject: CN=44DF6E7DF72F235A9B65F06A31FBD29105401B0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:73:fe:af:ba:52:25:24:3a:c6:63:c3:ed:95: ee:e1:ae:ea:34:b4:82:4e:23:df:a0:43:34:f7:6e: 83:77:15:76:72:47:22:55:ed:b1:a3:ee:27:e1:e0: 26:29:c6:bd:25:25:b5:3b:fc:bd:de:91:0c:37:5d: 79:bf:c6:86:c2:eb:c6:8c:3a:dc:8b:61:71:2d:44: dc:28:2c:55:72:23:15:69:aa:b7:7a:1a:5b:93:08: ce:63:34:23:c9:51:f1:96:3b:7a:1d:83:c2:4e:8d: 37:4a:d5:50:39:34:1a:6c:06:be:43:02:94:96:08: 95:cc:1b:95:6f:c9:8f:e8:72:ae:44:f0:70:fe:8b: b1:4d:5e:4f:ab:e8:07:a0:70:8d:5c:c9:44:b4:69: 87:ec:27:b3:66:54:67:19:79:34:94:0b:a4:31:65: 30:1a:5e:b7:cd:43:7f:cb:71:57:a6:80:98:e2:b6: b4:3a:f3:c1:93:5a:fc:01:e7:4d:e4:06:b3:25:dd: 2f:f2:7e:1d:e0:cf:89:57:dd:4c:ff:16:31:29:9c: 61:23:89:51:f5:1c:68:aa:16:9d:c3:97:a5:a2:8a: f4:d2:26:6b:04:72:ef:ad:d1:cb:d9:48:af:b6:6e: 5e:0e:61:9c:18:f9:e5:a7:3a:35:07:67:93:65:3f: 99:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:DF:6E:7D:F7:2F:23:5A:9B:65:F0:6A:31:FB:D2:91:05:40:1B:0E X509v3 Authority Key Identifier: keyid:4B:35:C2:0A:D3:08:5C:F1:B9:FA:EA:04:9A:D7:42:53:9E:09:02:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B35C20AD3085CF1B9FAEA049AD742539E090205.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c77de013-9b56-49ff-8b79-3667a345cb8d/0/4B35C20AD3085CF1B9FAEA049AD742539E090205.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:1e:5a:5c:12:05:fd:6b:98:f6:1c:35:68:be:23:49:48:f2: d2:e0:c6:57:68:76:43:f3:e6:f2:ec:1a:c6:f7:31:f9:7b:eb: 9a:64:84:6b:ee:67:96:03:ec:cf:34:4f:39:f7:3c:cb:36:e0: 71:dd:a1:0f:ff:e2:a8:37:a4:82:da:de:6f:ae:c7:28:a3:e6: 9a:31:04:38:fd:4a:54:b5:61:9f:8f:c5:63:a7:7e:d4:a8:f5: 91:fc:f0:4f:95:b6:49:07:1f:95:17:8d:2c:5e:37:8f:0e:28: 9a:83:fc:1d:3b:04:38:cf:65:b7:a0:8e:3e:b5:57:f1:b7:71: 1f:0d:84:30:9a:fd:bf:b1:79:86:ad:78:7a:ea:51:6c:aa:79: 07:6a:b8:60:86:d5:f5:71:ee:5d:80:61:bf:61:3b:83:61:65: 0f:5e:0e:16:31:92:42:68:d6:36:5c:b6:44:02:89:de:35:12: 53:5c:ac:e7:21:11:1d:91:cf:83:e1:e5:82:c9:4c:db:c2:2c: 66:09:5f:15:9a:3d:3e:f9:68:7e:53:20:a5:37:b0:6c:6f:69: f1:fd:30:e9:54:52:e0:27:be:d8:7e:25:2d:64:6b:e1:58:71: a4:8a:c0:af:e9:d7:f7:90:db:c7:01:7f:0f:13:cb:10:9b:cb: 0d:bb:2a:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5BDEvEQSo+eSN4zYsHSFnEOUJowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5 RTA5MDIwNTAeFw0yNjAyMjgxNjI2MThaFw0yNjAzMDQwMjQwMThaMDMxMTAvBgNV BAMTKDQ0REY2RTdERjcyRjIzNUE5QjY1RjA2QTMxRkJEMjkxMDU0MDFCMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGc/6vulIlJDrGY8Ptle7hruo0 tIJOI9+gQzT3boN3FXZyRyJV7bGj7ifh4CYpxr0lJbU7/L3ekQw3XXm/xobC68aM OtyLYXEtRNwoLFVyIxVpqrd6GluTCM5jNCPJUfGWO3odg8JOjTdK1VA5NBpsBr5D ApSWCJXMG5VvyY/ocq5E8HD+i7FNXk+r6AegcI1cyUS0aYfsJ7NmVGcZeTSUC6Qx ZTAaXrfNQ3/LcVemgJjitrQ688GTWvwB503kBrMl3S/yfh3gz4lX3Uz/FjEpnGEj iVH1HGiqFp3Dl6WiivTSJmsEcu+t0cvZSK+2bl4OYZwY+eWnOjUHZ5NlP5kpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURN9uffcvI1qbZfBqMfvSkQVAGw4wHwYDVR0j BBgwFoAUSzXCCtMIXPG5+uoEmtdCU54JAgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzdkZTAxMy05YjU2LTQ5ZmYtOGI3OS0zNjY3YTM0NWNiOGQvMC80QjM1QzIwQUQz MDg1Q0YxQjlGQUVBMDQ5QUQ3NDI1MzlFMDkwMjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQyNTM5RTA5 MDIwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc3ZGUwMTMtOWI1Ni00OWZmLThi NzktMzY2N2EzNDVjYjhkLzAvNEIzNUMyMEFEMzA4NUNGMUI5RkFFQTA0OUFENzQy NTM5RTA5MDIwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMYeWlwSBf1rmPYcNWi+I0lI8tLgxldodkPz 5vLsGsb3Mfl765pkhGvuZ5YD7M80Tzn3PMs24HHdoQ//4qg3pILa3m+uxyij5pox BDj9SlS1YZ+PxWOnftSo9ZH88E+VtkkHH5UXjSxeN48OKJqD/B07BDjPZbegjj61 V/G3cR8NhDCa/b+xeYateHrqUWyqeQdquGCG1fVx7l2AYb9hO4NhZQ9eDhYxkkJo 1jZctkQCid41ElNcrOchER2Rz4Ph5YLJTNvCLGYJXxWaPT75aH5TIKU3sGxvafH9 MOlUUuAnvth+JS1ka+FYcaSKwK/p1/eQ28cBfw8TyxCbyw27KjI= -----END CERTIFICATE-----Generated at Mon Mar 2 12:43:54 2026 by rpki-client