$ rpki-client -vvf repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft File: 4A243A1EC4991C40D3A6148515E3C51981B425F7.mft (raw, json) Hash identifier: HwkoQdjY6qrjIIkmWmkkljL37hI0e9U+YmF35UJMOCE= Subject key identifier: 60:34:5D:57:CA:92:19:0E:63:8A:3E:9C:6F:A0:78:F0:00:6D:2F:BF Authority key identifier: 4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 Certificate issuer: /CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Certificate serial: 4CE2326EC1E41740B44A9FCA2C0396372480DDCF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft Manifest number: 01EC Signing time: Sat 28 Feb 2026 08:31:06 +0000 Manifest this update: Sat 28 Feb 2026 08:26:06 +0000 Manifest next update: Tue 03 Mar 2026 14:24:06 +0000 Files and hashes: 1: 4A243A1EC4991C40D3A6148515E3C51981B425F7.crl (hash: K3wE6zttUOZOkNJEQmKl2M7UqzRIb91gkW/rqvqiWiA=) 2: 3130332e3130392e3230372e302f32342d3234203d3e20313530393335.roa (hash: BXD0wRHHvZ7tvUsCrEkeYNeQx/wQOvq3rapVAJZzAJs=) 3: 3130332e3130392e3230362e302f32342d3234203d3e20313530393335.roa (hash: N89QBdgbynlTPf9e92O0WSzi8E87JnEMSvR4tVBmXXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 14:24:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e2:32:6e:c1:e4:17:40:b4:4a:9f:ca:2c:03:96:37:24:80:dd:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4A243A1EC4991C40D3A6148515E3C51981B425F7 Validity Not Before: Feb 28 08:26:06 2026 GMT Not After : Mar 3 14:24:06 2026 GMT Subject: CN=60345D57CA92190E638A3E9C6FA078F0006D2FBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a3:3f:c7:a9:2c:97:39:79:a0:82:e5:ea:ba: 72:fa:48:4a:c7:d1:90:e5:56:e8:5d:85:fd:20:65: c9:c5:2f:ab:eb:2f:39:1b:21:0b:5c:a2:d3:03:58: 1c:12:9d:64:26:d6:09:d3:47:42:1a:ee:38:5e:70: 4e:88:b5:e0:a4:0f:bb:82:04:8a:d1:f7:8b:64:a2: db:47:53:55:d4:aa:d8:b2:9d:a3:6f:0e:5a:39:f1: d8:05:5e:70:4b:eb:bd:47:5c:cf:d3:33:32:87:75: 6e:6e:b1:86:69:33:c2:58:2e:b0:a1:9b:02:78:92: a5:f4:94:7d:57:f7:ed:8c:e4:54:23:4a:c7:73:7e: 52:d7:df:3b:c7:e9:03:99:e0:eb:4b:e5:1e:33:8a: bd:5c:82:23:3b:d5:64:7b:ac:b8:02:3e:98:38:39: 9f:6b:2e:29:a5:bc:19:0d:d8:79:d0:43:b3:db:a2: 04:3d:2c:a4:df:74:0d:3d:5e:41:f1:24:8d:ee:6a: 7b:71:d8:bc:ac:71:27:e1:76:34:34:a9:dc:11:53: b3:ab:54:34:4f:fb:de:e3:e9:ec:cf:55:c3:08:e3: a2:35:a3:a1:88:7c:a7:67:8d:85:c1:dc:62:b5:f7: 4d:cc:2b:cb:f3:9b:0f:4a:bf:47:a3:a4:8f:a0:35: dd:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:34:5D:57:CA:92:19:0E:63:8A:3E:9C:6F:A0:78:F0:00:6D:2F:BF X509v3 Authority Key Identifier: keyid:4A:24:3A:1E:C4:99:1C:40:D3:A6:14:85:15:E3:C5:19:81:B4:25:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A243A1EC4991C40D3A6148515E3C51981B425F7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ec8892eb-ddc0-4cb6-957c-b653f28bbf39/0/4A243A1EC4991C40D3A6148515E3C51981B425F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:45:5f:65:5a:23:3c:d7:38:e5:bb:2a:ae:ab:9f:93:c4:71: 2a:2d:ea:f8:4d:b0:83:a5:88:67:57:31:7a:c0:4f:7b:2e:1f: 37:e6:d5:9f:d0:4b:2c:b4:3f:6b:71:b9:12:dc:07:72:5b:59: 0e:0e:66:f2:0e:1e:58:64:45:c2:51:0d:32:2e:b9:02:ee:af: 75:cc:d4:85:eb:e1:ed:6b:c6:99:a9:e1:3d:07:34:5f:83:e2: a5:55:83:7c:f6:1d:e6:8e:44:8b:86:56:77:4e:49:d9:d4:bc: 07:09:e0:95:79:67:7e:95:0b:dd:36:99:e9:0a:53:ad:ab:ae: ef:a2:2d:cd:75:0b:86:70:f6:bf:40:f0:ed:72:9d:3f:23:b6: a5:6c:e4:0e:68:93:ae:68:4d:d4:6e:fc:7b:7c:12:ba:9e:cd: f4:51:81:38:e5:88:86:05:ac:25:49:2a:b4:3d:f5:df:ea:1c: 5f:39:3e:75:72:02:b8:58:ee:a0:43:c1:bd:ba:d6:5d:9c:27: 8f:3b:33:db:cf:f0:f0:8d:7c:68:f1:4e:61:2a:0c:b2:c6:74: 22:fd:51:bd:0b:b6:13:88:73:26:b7:55:28:87:ca:4c:d9:a1: 2e:0f:06:19:ad:54:1e:c3:5a:f2:95:35:cd:ee:5b:9a:a3:6c: 46:3f:50:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOIybsHkF0C0Sp/KLAOWNySA3c8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4 MUI0MjVGNzAeFw0yNjAyMjgwODI2MDZaFw0yNjAzMDMxNDI0MDZaMDMxMTAvBgNV BAMTKDYwMzQ1RDU3Q0E5MjE5MEU2MzhBM0U5QzZGQTA3OEYwMDA2RDJGQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMoz/HqSyXOXmgguXqunL6SErH 0ZDlVuhdhf0gZcnFL6vrLzkbIQtcotMDWBwSnWQm1gnTR0Ia7jhecE6IteCkD7uC BIrR94tkottHU1XUqtiynaNvDlo58dgFXnBL671HXM/TMzKHdW5usYZpM8JYLrCh mwJ4kqX0lH1X9+2M5FQjSsdzflLX3zvH6QOZ4OtL5R4zir1cgiM71WR7rLgCPpg4 OZ9rLimlvBkN2HnQQ7PbogQ9LKTfdA09XkHxJI3uantx2LyscSfhdjQ0qdwRU7Or VDRP+97j6ezPVcMI46I1o6GIfKdnjYXB3GK1903MK8vzmw9Kv0ejpI+gNd0TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYDRdV8qSGQ5jij6cb6B48ABtL78wHwYDVR0j BBgwFoAUSiQ6HsSZHEDTphSFFePFGYG0JfcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l Yzg4OTJlYi1kZGMwLTRjYjYtOTU3Yy1iNjUzZjI4YmJmMzkvMC80QTI0M0ExRUM0 OTkxQzQwRDNBNjE0ODUxNUUzQzUxOTgxQjQyNUY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1MTk4MUI0 MjVGNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWM4ODkyZWItZGRjMC00Y2I2LTk1 N2MtYjY1M2YyOGJiZjM5LzAvNEEyNDNBMUVDNDk5MUM0MEQzQTYxNDg1MTVFM0M1 MTk4MUI0MjVGNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADBFX2VaIzzXOOW7Kq6rn5PEcSot6vhNsIOl iGdXMXrAT3suHzfm1Z/QSyy0P2txuRLcB3JbWQ4OZvIOHlhkRcJRDTIuuQLur3XM 1IXr4e1rxpmp4T0HNF+D4qVVg3z2HeaORIuGVndOSdnUvAcJ4JV5Z36VC902mekK U62rru+iLc11C4Zw9r9A8O1ynT8jtqVs5A5ok65oTdRu/Ht8ErqezfRRgTjliIYF rCVJKrQ99d/qHF85PnVyArhY7qBDwb261l2cJ487M9vP8PCNfGjxTmEqDLLGdCL9 Ub0LthOIcya3VSiHykzZoS4PBhmtVB7DWvKVNc3uW5qjbEY/UAo= -----END CERTIFICATE-----Generated at Mon Mar 2 16:30:16 2026 by rpki-client