$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft File: 473225269441779F80E443B1EA516CC99E4ED4DA.mft (raw, json) Hash identifier: U2b+hqWGIsJ80IOvl9gcn4DaFWMrB2HUpMd1PwRchXs= Subject key identifier: 86:D4:CD:BC:B9:1C:F0:9E:8A:14:DF:4C:91:ED:34:C9:12:B7:95:3C Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA Certificate issuer: /CN=473225269441779F80E443B1EA516CC99E4ED4DA Certificate serial: 263725B28E159813AE61CBB1A92D977343E835BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft Manifest number: 01CD Signing time: Mon 02 Mar 2026 00:22:30 +0000 Manifest this update: Mon 02 Mar 2026 00:17:30 +0000 Manifest next update: Thu 05 Mar 2026 05:53:30 +0000 Files and hashes: 1: 3130332e3132312e3138362e302f32332d3233203d3e20313431393039.roa (hash: oAysGbdydhifr7l/UknID+HyQ/T/iVxBHJ4DGeZc8gQ=) 2: 473225269441779F80E443B1EA516CC99E4ED4DA.crl (hash: /s2PJTbDEM61r+3FG+lcYCeTu6Gkb22B43p7Dr1oerU=) 3: 3130332e3132312e3138372e302f32342d3234203d3e20313431393039.roa (hash: ICTrr1zawcyGxqE9qaGBu/NO12Zp3KpSJLdHGzxMVFA=) 4: 3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (hash: opCF0u3jko4hNWDE/2pVcJdIdU0FHQiXsJlqg5I4v5U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 05:53:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:37:25:b2:8e:15:98:13:ae:61:cb:b1:a9:2d:97:73:43:e8:35:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA Validity Not Before: Mar 2 00:17:30 2026 GMT Not After : Mar 5 05:53:30 2026 GMT Subject: CN=86D4CDBCB91CF09E8A14DF4C91ED34C912B7953C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:95:17:ff:b7:e7:09:c6:04:fa:91:a0:0d:87: 0f:06:12:4f:0a:81:45:fc:6a:8a:5d:61:d0:b5:ab: b2:f7:04:bd:b7:10:b1:59:dd:a3:f1:30:d8:84:90: 67:a0:cb:71:f2:de:be:d8:14:68:f9:eb:a9:5f:b0: bd:72:1b:a8:0b:41:34:01:45:01:76:ca:07:16:c1: 4c:61:ba:9b:c6:97:b1:a5:e2:a1:08:d7:85:cd:60: 24:6a:03:a0:f5:b4:2c:ab:18:2b:fe:cf:55:15:c7: 17:47:44:87:1c:ab:cb:54:c6:04:51:d3:4a:13:54: 9f:54:76:26:0f:52:86:55:31:cc:a3:51:f9:de:1f: ef:1a:f8:e3:e9:db:ef:00:03:9b:f1:f1:f3:6c:a6: fd:27:3a:ff:64:09:24:0f:80:ab:94:f6:94:d4:a4: 4a:69:88:4e:e3:d5:c3:30:98:06:17:ed:c9:8f:d1: 18:e6:ef:24:5d:6f:a1:7c:b7:c2:1f:20:ff:d1:c3: 4a:b9:33:f7:cf:80:cc:43:36:38:3d:b7:77:b2:e9: 24:75:af:3e:a5:d4:14:cd:b8:e3:0c:97:57:95:ec: 61:01:d9:37:39:ef:53:85:18:12:c9:8c:46:f1:1a: 56:0c:b3:3c:0e:9a:35:11:f9:ed:7d:e7:dd:d3:d9: 82:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D4:CD:BC:B9:1C:F0:9E:8A:14:DF:4C:91:ED:34:C9:12:B7:95:3C X509v3 Authority Key Identifier: keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:0d:47:6a:f1:5a:7a:0f:3b:38:15:f3:65:47:57:ff:d1:e0: e2:a9:bb:94:ee:07:2a:62:87:5f:ff:75:d6:13:9c:16:b3:26: ce:13:bb:4f:11:e0:0a:25:af:b8:d3:d4:57:75:bf:2d:0c:44: ba:15:e7:b8:37:39:fc:3b:1f:5b:3e:aa:9f:8a:36:97:9d:22: 47:81:b1:29:80:60:51:1d:80:e6:a1:aa:15:b8:9f:71:f4:cd: 8a:c9:26:c1:7c:38:2f:5a:ef:10:c0:2a:35:52:6e:b4:df:40: 79:8e:cd:0e:73:e2:45:ba:b6:c3:4f:fe:0e:5b:92:dc:cc:f9: 99:e4:a8:a8:d5:de:35:9a:f5:cb:c2:12:33:be:85:d7:76:a4: 3d:1c:ba:01:88:64:07:05:63:98:00:c2:5b:dc:45:8c:ae:c8: 36:e7:34:37:e6:db:65:01:8d:e0:ad:e1:d1:ff:e2:3c:67:bb: ad:a7:91:97:1f:af:6d:b3:58:0b:3e:3f:72:43:fc:52:fc:fd: 82:cf:69:62:cd:d0:b0:4b:64:92:ac:04:19:26:fd:b2:6c:aa: c9:4e:33:17:dc:5c:98:b4:18:37:bb:e2:9f:d9:3c:d2:1f:5e: a4:b5:70:c9:2b:85:a2:eb:dd:41:40:de:e5:fb:8e:59:01:5d: 54:88:d7:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJjclso4VmBOuYcuxqS2Xc0PoNbwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5 RTRFRDREQTAeFw0yNjAzMDIwMDE3MzBaFw0yNjAzMDUwNTUzMzBaMDMxMTAvBgNV BAMTKDg2RDRDREJDQjkxQ0YwOUU4QTE0REY0QzkxRUQzNEM5MTJCNzk1M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIlRf/t+cJxgT6kaANhw8GEk8K gUX8aopdYdC1q7L3BL23ELFZ3aPxMNiEkGegy3Hy3r7YFGj566lfsL1yG6gLQTQB RQF2ygcWwUxhupvGl7Gl4qEI14XNYCRqA6D1tCyrGCv+z1UVxxdHRIccq8tUxgRR 00oTVJ9UdiYPUoZVMcyjUfneH+8a+OPp2+8AA5vx8fNspv0nOv9kCSQPgKuU9pTU pEppiE7j1cMwmAYX7cmP0Rjm7yRdb6F8t8IfIP/Rw0q5M/fPgMxDNjg9t3ey6SR1 rz6l1BTNuOMMl1eV7GEB2Tc571OFGBLJjEbxGlYMszwOmjUR+e19593T2YJ9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhtTNvLkc8J6KFN9Mke00yRK3lTwwHwYDVR0j BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0 NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF RDREQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTA2MjBjZmMtYjQ2Yy00NTdjLTlm ZGUtMjk3NzEwYzU0NmE5LzAvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZD Qzk5RTRFRDREQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUNR2rxWnoPOzgV82VHV//R4OKpu5TuBypi h1//ddYTnBazJs4Tu08R4Aolr7jT1Fd1vy0MRLoV57g3Ofw7H1s+qp+KNpedIkeB sSmAYFEdgOahqhW4n3H0zYrJJsF8OC9a7xDAKjVSbrTfQHmOzQ5z4kW6tsNP/g5b ktzM+ZnkqKjV3jWa9cvCEjO+hdd2pD0cugGIZAcFY5gAwlvcRYyuyDbnNDfm22UB jeCt4dH/4jxnu62nkZcfr22zWAs+P3JD/FL8/YLPaWLN0LBLZJKsBBkm/bJsqslO MxfcXJi0GDe74p/ZPNIfXqS1cMkrhaLr3UFA3uX7jlkBXVSI1zc= -----END CERTIFICATE-----Generated at Mon Mar 2 12:44:03 2026 by rpki-client