$ rpki-client -vvf repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft File: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft (raw, json) Hash identifier: fEa9gSOSeWAsqMNYetHXI//rsXbHAljpU4hx14i+LB8= Subject key identifier: 12:26:0C:83:49:11:69:1A:68:38:30:82:A1:D3:D0:85:D3:8F:7C:48 Authority key identifier: E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F Certificate issuer: /CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Certificate serial: 4B8BF26E4A33AA3CC128C5A1FA1A17FD951A62ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft Manifest number: 0126 Signing time: Sun 01 Mar 2026 15:11:18 +0000 Manifest this update: Sun 01 Mar 2026 15:06:18 +0000 Manifest next update: Wed 04 Mar 2026 21:44:18 +0000 Files and hashes: 1: E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl (hash: aVQyWXOTKEjnYCdVpaFfYOqLmrIDXF/etWFJOjpQe4M=) 2: 3135372e31352e3132302e302f32342d3234203d3e20313336383436.roa (hash: fkNU7FdVjKHsjFj1YpiV+gYURzvDFsZYzfTu/zHhcfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 21:44:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:8b:f2:6e:4a:33:aa:3c:c1:28:c5:a1:fa:1a:17:fd:95:1a:62:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F Validity Not Before: Mar 1 15:06:18 2026 GMT Not After : Mar 4 21:44:18 2026 GMT Subject: CN=12260C834911691A68383082A1D3D085D38F7C48 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:61:6b:96:95:a4:46:a5:58:88:8d:32:47:4d: 37:32:fc:a9:3c:f1:e6:dc:90:f1:00:4b:da:a6:21: 96:77:ba:d6:96:c7:90:5f:d5:50:e3:5d:f4:97:1d: 6c:39:34:ea:07:f3:36:12:ec:02:d1:b4:68:25:5e: 13:41:cb:26:94:fd:e8:d8:e1:09:72:a1:ab:f2:09: 6b:53:d6:5d:f0:b2:76:bb:27:6f:3f:10:27:33:64: b6:3d:55:b6:39:bb:00:b6:cd:d7:3d:d8:74:46:46: a1:bd:e4:8f:23:31:53:91:ad:c4:ef:69:38:24:c7: 4b:09:9e:41:f7:a4:04:26:10:69:9b:95:69:5a:95: ec:a1:c5:e8:3d:de:af:44:71:44:a2:64:7b:96:18: 2c:51:a2:a3:df:da:d4:5b:82:35:d0:5c:1e:a8:7e: 69:79:3e:79:47:9d:24:01:c6:f2:75:3f:4f:8f:f7: e6:07:a7:df:46:2f:1c:7e:50:2a:ba:aa:a5:6e:a8: 1e:83:98:3a:6c:5e:a5:1d:9a:64:3e:24:7b:4d:6a: fe:c1:aa:ba:ab:df:93:b9:84:14:8e:8e:d5:23:c0: 99:c5:e7:30:03:53:3c:79:ae:4d:bb:39:7c:52:13: c2:41:4f:8a:3b:22:db:fb:a3:89:9a:a3:18:ae:3c: b1:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:26:0C:83:49:11:69:1A:68:38:30:82:A1:D3:D0:85:D3:8F:7C:48 X509v3 Authority Key Identifier: keyid:E9:02:BF:4C:FC:9D:99:7E:36:A9:E1:A3:2F:AA:2E:08:CC:2F:5C:7F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfb466c6-3743-495f-b1a8-2607cc99573f/0/E902BF4CFC9D997E36A9E1A32FAA2E08CC2F5C7F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:b6:4a:91:70:c9:68:55:5b:81:3f:64:5d:08:c2:43:f1:9a: f7:07:06:f5:0a:a4:ef:aa:cc:7c:f8:f8:c8:4d:dd:c2:71:85: d1:71:a6:45:8f:f9:67:1c:b2:2f:e2:c0:8c:36:6e:9c:e8:ae: 5d:d3:cc:7d:c5:c0:2b:1d:af:f4:cb:42:d9:48:82:56:35:bb: e0:81:0e:38:d6:d6:be:65:a3:fd:c2:88:e5:1b:c4:fd:dd:bd: c5:99:4d:6d:11:38:0b:98:af:f9:97:9d:8f:d9:01:5f:13:f0: 0f:0a:08:08:6d:44:3b:3d:76:98:10:ff:ba:b3:88:8e:a0:2f: 47:54:fe:e3:fa:40:69:25:c0:d4:7b:c2:1e:58:aa:d6:63:5a: a8:99:0c:34:68:20:7c:c7:c7:d4:f3:ce:81:4a:21:07:79:52: 23:f9:1a:53:54:7f:64:4e:56:b6:37:29:0a:a7:67:ff:48:3b: 92:db:39:95:75:e7:22:81:f3:b2:51:36:5d:2e:e8:ef:1e:93: 5a:a0:0e:1d:e6:4d:6c:08:c6:1d:03:78:5d:32:70:40:df:2a: 1e:ef:8e:7d:f4:cd:b5:e0:97:fb:b5:d5:96:c2:db:d5:0c:34: 7d:4e:10:e7:62:05:75:76:17:85:38:d8:33:05:4f:45:3e:af: 91:d9:61:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS4vybkozqjzBKMWh+hoX/ZUaYu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhD QzJGNUM3RjAeFw0yNjAzMDExNTA2MThaFw0yNjAzMDQyMTQ0MThaMDMxMTAvBgNV BAMTKDEyMjYwQzgzNDkxMTY5MUE2ODM4MzA4MkExRDNEMDg1RDM4RjdDNDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKYWuWlaRGpViIjTJHTTcy/Kk8 8ebckPEAS9qmIZZ3utaWx5Bf1VDjXfSXHWw5NOoH8zYS7ALRtGglXhNByyaU/ejY 4QlyoavyCWtT1l3wsna7J28/ECczZLY9VbY5uwC2zdc92HRGRqG95I8jMVORrcTv aTgkx0sJnkH3pAQmEGmblWlaleyhxeg93q9EcUSiZHuWGCxRoqPf2tRbgjXQXB6o fml5PnlHnSQBxvJ1P0+P9+YHp99GLxx+UCq6qqVuqB6DmDpsXqUdmmQ+JHtNav7B qrqr35O5hBSOjtUjwJnF5zADUzx5rk27OXxSE8JBT4o7Itv7o4maoxiuPLHhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEiYMg0kRaRpoODCCodPQhdOPfEgwHwYDVR0j BBgwFoAU6QK/TPydmX42qeGjL6ouCMwvXH8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmI0NjZjNi0zNzQzLTQ5NWYtYjFhOC0yNjA3Y2M5OTU3M2YvMC9FOTAyQkY0Q0ZD OUQ5OTdFMzZBOUUxQTMyRkFBMkUwOENDMkY1QzdGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJFMDhDQzJG NUM3Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZiNDY2YzYtMzc0My00OTVmLWIx YTgtMjYwN2NjOTk1NzNmLzAvRTkwMkJGNENGQzlEOTk3RTM2QTlFMUEzMkZBQTJF MDhDQzJGNUM3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALa2SpFwyWhVW4E/ZF0IwkPxmvcHBvUKpO+q zHz4+MhN3cJxhdFxpkWP+Wccsi/iwIw2bpzorl3TzH3FwCsdr/TLQtlIglY1u+CB DjjW1r5lo/3CiOUbxP3dvcWZTW0ROAuYr/mXnY/ZAV8T8A8KCAhtRDs9dpgQ/7qz iI6gL0dU/uP6QGklwNR7wh5YqtZjWqiZDDRoIHzHx9TzzoFKIQd5UiP5GlNUf2RO VrY3KQqnZ/9IO5LbOZV15yKB87JRNl0u6O8ek1qgDh3mTWwIxh0DeF0ycEDfKh7v jn30zbXgl/u11ZbC29UMNH1OEOdiBXV2F4U42DMFT0U+r5HZYdI= -----END CERTIFICATE-----Generated at Mon Mar 2 10:02:23 2026 by rpki-client