$ rpki-client -vvf repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft File: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft (raw, json) Hash identifier: Khmj+QXwCj4yp7J0m3Be79+Heu9pycQOb2LM5/Q4JEM= Subject key identifier: 9A:14:95:19:7B:F3:F7:AF:1A:53:E2:74:4E:4F:AC:D1:30:9E:4B:65 Authority key identifier: 4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB Certificate issuer: /CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Certificate serial: 67131FBB3F2F959BC40F80378AD3A45F7E8B996C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft Manifest number: 04E2 Signing time: Sat 28 Feb 2026 17:21:39 +0000 Manifest this update: Sat 28 Feb 2026 17:16:39 +0000 Manifest next update: Wed 04 Mar 2026 01:33:39 +0000 Files and hashes: 1: 4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl (hash: bRQ9Ja4s0sNzLA5KX7eIRlgDsOxDAGwONWFZ9jcQC8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:33:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:13:1f:bb:3f:2f:95:9b:c4:0f:80:37:8a:d3:a4:5f:7e:8b:99:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4B6AF7335EC07FE746BC2A368302436EF6B1B9EB Validity Not Before: Feb 28 17:16:39 2026 GMT Not After : Mar 4 01:33:39 2026 GMT Subject: CN=9A1495197BF3F7AF1A53E2744E4FACD1309E4B65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:2f:f6:a7:25:fb:6c:9c:ad:fe:bc:f8:64:6d: f0:4d:95:c0:88:e7:aa:c7:36:2e:54:ec:14:7a:13: 9c:5d:bd:b0:66:db:82:f1:03:bd:cb:f1:6a:37:18: 77:08:c4:1f:90:5b:cf:a9:db:6d:80:ea:24:dd:81: 85:14:21:fc:49:87:ee:f7:be:d9:4f:0b:d4:0e:1c: a6:36:55:75:96:a3:eb:ff:32:bf:3d:a0:a4:20:aa: 8d:7e:1c:27:92:b3:58:0c:f2:1b:3f:4b:e0:f9:1d: 06:71:b0:1c:2f:b6:7d:f1:8c:49:8e:ed:e7:7c:68: fc:f1:7a:6f:3b:98:01:f2:b4:97:61:13:d2:0f:4b: 65:c9:22:3b:9e:bf:d1:13:0e:66:e0:de:c6:0e:ab: 0e:36:05:48:b2:7c:4c:6b:67:33:54:5e:5a:e2:97: 16:72:2d:19:c9:12:6f:75:16:ff:97:a0:14:76:d6: 5d:af:9a:8e:ce:3a:1d:34:31:7f:69:ed:14:90:75: bc:70:46:e0:1b:ec:13:d2:9d:95:6d:aa:f5:07:f3: d2:fb:5f:ba:9c:60:4d:35:72:b0:66:04:e1:6a:ca: ac:69:83:7e:db:bf:1d:a1:f0:cf:ff:f0:e6:b9:09: 8d:97:d6:7f:8f:f9:58:f2:11:4b:88:f5:47:b4:7c: cf:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:14:95:19:7B:F3:F7:AF:1A:53:E2:74:4E:4F:AC:D1:30:9E:4B:65 X509v3 Authority Key Identifier: keyid:4B:6A:F7:33:5E:C0:7F:E7:46:BC:2A:36:83:02:43:6E:F6:B1:B9:EB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d07cf202-f5ec-4101-8085-ceb86ea65b3e/0/4B6AF7335EC07FE746BC2A368302436EF6B1B9EB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:75:d6:85:a0:85:a9:b8:ab:d8:30:33:45:38:4e:c0:07:e1: 30:2f:af:9e:b3:32:29:08:a5:dd:c3:ce:e4:2b:71:b3:29:24: ac:b9:a2:33:7e:bc:d1:15:ee:7d:0c:87:63:c9:3f:70:da:b1: 2c:98:80:2d:38:81:4b:4e:98:83:08:80:fa:6b:07:a1:2c:f8: cc:d0:01:13:38:9e:c0:84:10:6a:46:76:38:5b:57:06:47:8d: 70:b0:65:0c:04:35:6f:39:31:75:e8:ee:36:f5:e8:e9:3c:7a: 29:5e:9f:8f:6e:5c:82:ac:98:24:a6:09:44:85:cd:82:f1:9d: 2d:68:e2:08:d1:2f:b3:6b:9f:7e:0c:e3:b2:92:a2:a4:5e:5d: ab:3e:68:e0:9f:56:35:d3:34:af:43:ab:ee:d4:ca:f5:55:77: ca:22:8c:df:6b:bc:46:11:8a:23:23:ce:8c:9f:e5:14:3e:6f: 9a:10:b9:72:46:1a:a8:19:69:28:eb:34:79:78:d7:19:da:56: e1:b3:de:3e:48:fa:b3:d7:cc:e8:1f:aa:7f:34:cb:fe:dd:52: 4d:83:cf:e6:bd:dc:06:6a:86:3d:a2:51:e3:87:4c:e4:d4:05: 27:7e:6e:58:4d:37:9f:e3:38:a7:1d:ba:43:53:56:6b:47:d8: cf:1d:f5:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxMfuz8vlZvED4A3itOkX36LmWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVG NkIxQjlFQjAeFw0yNjAyMjgxNzE2MzlaFw0yNjAzMDQwMTMzMzlaMDMxMTAvBgNV BAMTKDlBMTQ5NTE5N0JGM0Y3QUYxQTUzRTI3NDRFNEZBQ0QxMzA5RTRCNjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmL/anJftsnK3+vPhkbfBNlcCI 56rHNi5U7BR6E5xdvbBm24LxA73L8Wo3GHcIxB+QW8+p222A6iTdgYUUIfxJh+73 vtlPC9QOHKY2VXWWo+v/Mr89oKQgqo1+HCeSs1gM8hs/S+D5HQZxsBwvtn3xjEmO 7ed8aPzxem87mAHytJdhE9IPS2XJIjuev9ETDmbg3sYOqw42BUiyfExrZzNUXlri lxZyLRnJEm91Fv+XoBR21l2vmo7OOh00MX9p7RSQdbxwRuAb7BPSnZVtqvUH89L7 X7qcYE01crBmBOFqyqxpg37bvx2h8M//8Oa5CY2X1n+P+VjyEUuI9Ue0fM8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmhSVGXvz968aU+J0Tk+s0TCeS2UwHwYDVR0j BBgwFoAUS2r3M17Af+dGvCo2gwJDbvaxueswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDdjZjIwMi1mNWVjLTQxMDEtODA4NS1jZWI4NmVhNjViM2UvMC80QjZBRjczMzVF QzA3RkU3NDZCQzJBMzY4MzAyNDM2RUY2QjFCOUVCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQzNkVGNkIx QjlFQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA3Y2YyMDItZjVlYy00MTAxLTgw ODUtY2ViODZlYTY1YjNlLzAvNEI2QUY3MzM1RUMwN0ZFNzQ2QkMyQTM2ODMwMjQz NkVGNkIxQjlFQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHd11oWgham4q9gwM0U4TsAH4TAvr56zMikI pd3DzuQrcbMpJKy5ojN+vNEV7n0Mh2PJP3DasSyYgC04gUtOmIMIgPprB6Es+MzQ ARM4nsCEEGpGdjhbVwZHjXCwZQwENW85MXXo7jb16Ok8eilen49uXIKsmCSmCUSF zYLxnS1o4gjRL7Nrn34M47KSoqReXas+aOCfVjXTNK9Dq+7UyvVVd8oijN9rvEYR iiMjzoyf5RQ+b5oQuXJGGqgZaSjrNHl41xnaVuGz3j5I+rPXzOgfqn80y/7dUk2D z+a93AZqhj2iUeOHTOTUBSd+blhNN5/jOKcdukNTVmtH2M8d9TE= -----END CERTIFICATE-----Generated at Mon Mar 2 00:56:31 2026 by rpki-client