$ rpki-client -vvf repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft File: 6176447D40001B20E000D73A3B5E66B74A431374.mft (raw, json) Hash identifier: R6YQEhWSjJ3FauFJ++M7l1Da9QYFXr3LfS2hHYi+MFM= Subject key identifier: 2D:84:4C:33:D7:EB:46:9A:64:61:63:3C:02:AD:4C:4B:3C:24:74:FC Authority key identifier: 61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 Certificate issuer: /CN=6176447D40001B20E000D73A3B5E66B74A431374 Certificate serial: 4D6E366EE24C01F241212D8EA4C7AEBB5CBE2970 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft Manifest number: 0117 Signing time: Sat 28 Feb 2026 22:41:31 +0000 Manifest this update: Sat 28 Feb 2026 22:36:30 +0000 Manifest next update: Wed 04 Mar 2026 04:02:30 +0000 Files and hashes: 1: 3136302e31392e3134342e302f32332d3234203d3e20313532373838.roa (hash: x2vTD40zXLkQU7jWF3x2cDs6hnaBe5UiTC1SGpRcNlY=) 2: 6176447D40001B20E000D73A3B5E66B74A431374.crl (hash: b24Hlptg/3zR39FU0Nx5dA8JhLrXNjX9PH+N6H+d1ZA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:02:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:6e:36:6e:e2:4c:01:f2:41:21:2d:8e:a4:c7:ae:bb:5c:be:29:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6176447D40001B20E000D73A3B5E66B74A431374 Validity Not Before: Feb 28 22:36:30 2026 GMT Not After : Mar 4 04:02:30 2026 GMT Subject: CN=2D844C33D7EB469A6461633C02AD4C4B3C2474FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:e2:a3:4c:9f:46:05:40:5e:25:a3:ba:e0:60: 17:0e:dd:c2:ef:4a:20:0f:3f:8c:db:33:27:69:f4: 8e:1d:e0:10:2f:d7:26:d5:3e:a9:cb:49:ba:39:ba: 06:b8:39:ad:86:6e:d6:57:5b:12:ef:ba:08:97:e3: d5:82:ba:c7:d2:29:fe:64:d5:2e:1f:04:79:46:77: cf:f5:a0:cf:81:e1:6d:11:77:d9:91:6f:bd:8d:1b: 71:d6:3d:16:79:87:6e:65:08:0d:41:5d:4d:01:73: 73:dd:6d:46:5c:6d:d5:43:c5:93:29:9c:8b:46:11: e2:1b:cb:14:05:ad:4c:d2:34:ba:4e:e5:63:12:86: 8e:7f:4a:de:5f:e6:73:51:dc:2a:81:a2:f5:ea:a1: 90:26:75:c5:8a:5f:64:65:ad:d9:fb:3c:54:ff:fb: c0:45:76:58:9b:fb:a8:f2:02:6b:3d:d2:b8:e0:77: e6:46:3f:05:d1:0a:7c:19:81:df:1c:64:5f:7a:ed: 84:0a:39:1c:c7:f7:80:8d:fb:8d:c3:5b:3b:0c:cb: d1:58:87:3d:9f:ce:3a:c5:f9:82:c7:e4:02:ff:25: dd:bc:37:17:ec:b7:aa:a7:b0:03:c1:09:a1:d8:f2: 5f:3a:da:d1:c3:c5:d8:6a:c3:04:d8:3c:74:6a:07: 45:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:84:4C:33:D7:EB:46:9A:64:61:63:3C:02:AD:4C:4B:3C:24:74:FC X509v3 Authority Key Identifier: keyid:61:76:44:7D:40:00:1B:20:E0:00:D7:3A:3B:5E:66:B7:4A:43:13:74 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/6176447D40001B20E000D73A3B5E66B74A431374.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d40bd6e4-b4fb-4f48-b83a-acb8f2d74583/0/6176447D40001B20E000D73A3B5E66B74A431374.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:29:a2:a2:20:aa:b7:cc:78:c7:e5:95:63:a5:26:35:07:eb: c2:36:93:34:e3:b2:dc:a7:95:fa:b7:4a:fc:e8:99:93:26:c8: 47:84:ae:60:c9:ac:97:cb:b1:4b:14:a3:ab:65:39:ad:49:7c: b2:c7:ee:e8:48:97:25:4c:a5:a1:fc:bf:eb:69:df:91:93:c6: 85:51:40:03:2f:f3:a6:77:0e:3a:3e:25:64:f6:89:e7:4d:48: be:c4:6a:3d:51:25:e4:a1:c1:03:dd:04:4e:3e:dc:a1:d2:44: a7:c5:32:26:ae:d7:be:4a:79:a8:23:50:18:ce:61:27:1c:e2: e8:93:3b:da:3f:dd:7f:3d:cd:a6:86:d0:9b:5f:7e:0a:92:a7: e4:df:94:ca:26:58:e9:69:cb:ba:fe:e3:b4:74:c4:7c:99:03: 09:30:4f:5f:ea:24:ad:f4:d1:6d:7b:5a:47:4d:e9:2b:1e:d5: 51:ae:5d:0e:30:0f:d7:8f:46:1a:f3:31:57:16:73:d2:6a:70: 96:79:bb:8d:9b:24:bb:73:3a:e4:14:ad:16:22:3c:7b:54:2f: fc:ad:a4:e4:f7:60:f0:c3:0a:c3:f8:68:35:eb:82:32:e2:45: 96:78:79:cb:7d:d2:0d:ab:2f:44:ee:24:b5:69:83:50:40:63: 44:30:c3:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTW42buJMAfJBIS2OpMeuu1y+KXAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0 QTQzMTM3NDAeFw0yNjAyMjgyMjM2MzBaFw0yNjAzMDQwNDAyMzBaMDMxMTAvBgNV BAMTKDJEODQ0QzMzRDdFQjQ2OUE2NDYxNjMzQzAyQUQ0QzRCM0MyNDc0RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh4qNMn0YFQF4lo7rgYBcO3cLv SiAPP4zbMydp9I4d4BAv1ybVPqnLSbo5uga4Oa2GbtZXWxLvugiX49WCusfSKf5k 1S4fBHlGd8/1oM+B4W0Rd9mRb72NG3HWPRZ5h25lCA1BXU0Bc3PdbUZcbdVDxZMp nItGEeIbyxQFrUzSNLpO5WMSho5/St5f5nNR3CqBovXqoZAmdcWKX2Rlrdn7PFT/ +8BFdlib+6jyAms90rjgd+ZGPwXRCnwZgd8cZF967YQKORzH94CN+43DWzsMy9FY hz2fzjrF+YLH5AL/Jd28Nxfst6qnsAPBCaHY8l862tHDxdhqwwTYPHRqB0UdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULYRMM9frRppkYWM8Aq1MSzwkdPwwHwYDVR0j BBgwFoAUYXZEfUAAGyDgANc6O15mt0pDE3QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NDBiZDZlNC1iNGZiLTRmNDgtYjgzYS1hY2I4ZjJkNzQ1ODMvMC82MTc2NDQ3RDQw MDAxQjIwRTAwMEQ3M0EzQjVFNjZCNzRBNDMxMzc0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2Qjc0QTQz MTM3NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDQwYmQ2ZTQtYjRmYi00ZjQ4LWI4 M2EtYWNiOGYyZDc0NTgzLzAvNjE3NjQ0N0Q0MDAwMUIyMEUwMDBENzNBM0I1RTY2 Qjc0QTQzMTM3NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH8poqIgqrfMeMfllWOlJjUH68I2kzTjstyn lfq3SvzomZMmyEeErmDJrJfLsUsUo6tlOa1JfLLH7uhIlyVMpaH8v+tp35GTxoVR QAMv86Z3Djo+JWT2iedNSL7Eaj1RJeShwQPdBE4+3KHSRKfFMiau175KeagjUBjO YScc4uiTO9o/3X89zaaG0JtffgqSp+TflMomWOlpy7r+47R0xHyZAwkwT1/qJK30 0W17WkdN6Sse1VGuXQ4wD9ePRhrzMVcWc9JqcJZ5u42bJLtzOuQUrRYiPHtUL/yt pOT3YPDDCsP4aDXrgjLiRZZ4ect90g2rL0TuJLVpg1BAY0Qww+Q= -----END CERTIFICATE-----Generated at Mon Mar 2 17:42:13 2026 by rpki-client