$ rpki-client -vvf repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft File: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft (raw, json) Hash identifier: XmSEWhWZ3bEEcSi93Bf6eDIxaQk/rtOGVH2sfn9D7G4= Subject key identifier: 9B:A6:17:FA:50:FA:FC:66:DE:8C:86:16:91:9B:A9:71:B2:3E:8A:6D Authority key identifier: 54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 Certificate issuer: /CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Certificate serial: 4459E4BBEE3D6C5A65F9E6230235B243E530BC4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft Manifest number: 0226 Signing time: Sun 01 Mar 2026 03:41:10 +0000 Manifest this update: Sun 01 Mar 2026 03:36:10 +0000 Manifest next update: Wed 04 Mar 2026 03:44:10 +0000 Files and hashes: 1: 3130332e37332e37322e302f32322d3234203d3e20313335343638.roa (hash: KaaHy0cR6xA7/7fhA1scnNnAkCNoe5f7kq1dVSYxDCg=) 2: 5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl (hash: T/mEXHggn6fNYxe5xiVIyZNt/kpII43N/CtUrkj5Qqc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:44:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:59:e4:bb:ee:3d:6c:5a:65:f9:e6:23:02:35:b2:43:e5:30:bc:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5461EABC862E4C90B32790DBA21CD5FFCB966BD3 Validity Not Before: Mar 1 03:36:10 2026 GMT Not After : Mar 4 03:44:10 2026 GMT Subject: CN=9BA617FA50FAFC66DE8C8616919BA971B23E8A6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:56:58:97:a4:f6:e5:0c:23:f6:21:c2:8e:72: de:61:d2:11:8a:e2:03:0e:c5:0a:e5:84:ba:a8:7b: 01:b7:68:41:33:11:0c:a9:46:cf:e7:63:3b:86:1e: 3c:75:fd:58:d7:0a:f2:b1:76:e6:0f:1a:9c:2d:f5: 55:4f:1e:cd:74:ef:ac:af:64:92:f8:ab:07:27:07: 96:a1:77:fb:9c:09:1b:e0:c9:a3:80:17:16:36:92: 99:10:77:b3:f7:10:1b:f0:63:0a:92:fc:1f:22:f2: 3e:65:79:2d:d1:93:02:9d:12:65:cb:f8:f7:c8:36: e5:6a:74:f4:59:e2:65:df:a4:4d:6b:88:30:74:57: 08:96:c6:67:15:58:3e:b6:b3:ae:7c:be:5b:ab:a3: ec:ea:1b:51:05:de:fe:ed:d0:54:fc:19:dc:85:c0: 8d:7f:63:51:8b:24:37:1c:3d:20:98:f7:ec:65:d8: f3:33:bf:2e:da:ae:1f:87:c0:a3:76:c1:ce:5e:ab: 97:8d:d0:b3:f0:d2:06:f9:7f:ac:6b:ea:f3:7d:19: 6e:6e:03:fc:59:e2:b5:28:80:74:49:2c:22:aa:22: 76:34:1f:fc:b1:2b:12:25:01:7e:8e:4f:c1:49:a9: f3:dd:ef:cc:f3:8c:9e:54:d2:d0:5b:4c:34:cd:89: 01:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:A6:17:FA:50:FA:FC:66:DE:8C:86:16:91:9B:A9:71:B2:3E:8A:6D X509v3 Authority Key Identifier: keyid:54:61:EA:BC:86:2E:4C:90:B3:27:90:DB:A2:1C:D5:FF:CB:96:6B:D3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6ecc72a-e954-4302-92c4-f4f23070b997/0/5461EABC862E4C90B32790DBA21CD5FFCB966BD3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:13:55:bb:40:93:8a:1d:7f:87:fd:cf:7d:90:3e:8e:73:f4: 90:e9:a4:fb:f8:36:38:6a:2a:f5:47:90:72:71:99:fa:ef:b2: 74:58:6b:f7:70:9a:37:1f:66:8f:09:05:91:57:8e:28:1e:3c: a6:3c:56:12:ba:07:a4:a9:67:f7:c3:f3:8c:6d:17:6f:e6:4f: c2:95:d4:73:a6:75:dc:86:96:3f:4c:ab:39:1c:09:17:d4:11: 8b:0f:e1:50:b4:4a:9d:e9:31:89:5d:70:f0:1d:1c:11:6e:d1: b3:53:46:04:15:12:7b:f3:8e:85:4d:bb:ca:a1:6c:95:12:3e: 56:cf:f8:3a:e8:cb:7a:6a:12:95:42:ed:10:98:c5:d9:26:97: 8f:cc:78:23:e8:da:8a:9b:69:7a:70:47:54:c9:31:26:52:37: 11:94:1e:d3:db:73:bb:7a:16:90:8d:c2:08:d0:e2:ea:5f:b8: 17:bb:e2:da:3b:25:bf:2b:df:f9:93:ac:78:25:26:a0:92:d9: c5:c4:0f:92:40:4f:2c:f0:12:43:43:8a:f0:b7:80:87:bd:c9: 65:1a:8b:47:bc:14:e8:69:9b:5d:d1:67:da:50:6f:cf:c4:f3: 8d:bd:4e:60:37:64:4f:db:82:26:4a:cc:bb:6c:11:27:40:09: fa:60:da:2c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURFnku+49bFpl+eYjAjWyQ+UwvE0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZD Qjk2NkJEMzAeFw0yNjAzMDEwMzM2MTBaFw0yNjAzMDQwMzQ0MTBaMDMxMTAvBgNV BAMTKDlCQTYxN0ZBNTBGQUZDNjZERThDODYxNjkxOUJBOTcxQjIzRThBNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZVliXpPblDCP2IcKOct5h0hGK 4gMOxQrlhLqoewG3aEEzEQypRs/nYzuGHjx1/VjXCvKxduYPGpwt9VVPHs1076yv ZJL4qwcnB5ahd/ucCRvgyaOAFxY2kpkQd7P3EBvwYwqS/B8i8j5leS3RkwKdEmXL +PfINuVqdPRZ4mXfpE1riDB0VwiWxmcVWD62s658vluro+zqG1EF3v7t0FT8GdyF wI1/Y1GLJDccPSCY9+xl2PMzvy7arh+HwKN2wc5eq5eN0LPw0gb5f6xr6vN9GW5u A/xZ4rUogHRJLCKqInY0H/yxKxIlAX6OT8FJqfPd78zzjJ5U0tBbTDTNiQFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm6YX+lD6/GbejIYWkZupcbI+im0wHwYDVR0j BBgwFoAUVGHqvIYuTJCzJ5DbohzV/8uWa9MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NmVjYzcyYS1lOTU0LTQzMDItOTJjNC1mNGYyMzA3MGI5OTcvMC81NDYxRUFCQzg2 MkU0QzkwQjMyNzkwREJBMjFDRDVGRkNCOTY2QkQzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1RkZDQjk2 NkJEMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDZlY2M3MmEtZTk1NC00MzAyLTky YzQtZjRmMjMwNzBiOTk3LzAvNTQ2MUVBQkM4NjJFNEM5MEIzMjc5MERCQTIxQ0Q1 RkZDQjk2NkJEMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG0TVbtAk4odf4f9z32QPo5z9JDppPv4Njhq KvVHkHJxmfrvsnRYa/dwmjcfZo8JBZFXjigePKY8VhK6B6SpZ/fD84xtF2/mT8KV 1HOmddyGlj9MqzkcCRfUEYsP4VC0Sp3pMYldcPAdHBFu0bNTRgQVEnvzjoVNu8qh bJUSPlbP+Droy3pqEpVC7RCYxdkml4/MeCPo2oqbaXpwR1TJMSZSNxGUHtPbc7t6 FpCNwgjQ4upfuBe74to7Jb8r3/mTrHglJqCS2cXED5JATyzwEkNDivC3gIe9yWUa i0e8FOhpm13RZ9pQb8/E8429TmA3ZE/bgiZKzLtsESdACfpg2iw= -----END CERTIFICATE-----Generated at Mon Mar 2 14:07:59 2026 by rpki-client