$ rpki-client -vvf repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft File: 4CC71073C4D5095D162AA86A1727D924EB83598A.mft (raw, json) Hash identifier: NDhbRtcG3o86odg/6vC7iWeR//rykVm3UdP636nXICA= Subject key identifier: A6:D2:4D:25:EF:63:37:6A:41:4A:B5:AF:B6:B7:A2:35:58:9C:20:77 Authority key identifier: 4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A Certificate issuer: /CN=4CC71073C4D5095D162AA86A1727D924EB83598A Certificate serial: 66D81CF0F7B33D1BF165EC435034D05FEECC4663 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft Manifest number: 0243 Signing time: Sat 28 Feb 2026 14:21:38 +0000 Manifest this update: Sat 28 Feb 2026 14:16:38 +0000 Manifest next update: Tue 03 Mar 2026 17:48:38 +0000 Files and hashes: 1: 4CC71073C4D5095D162AA86A1727D924EB83598A.crl (hash: A7XBn0lu45VMbpqwjgJ2OvxstFNBFVTzlNTNerbb70s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 17:48:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:d8:1c:f0:f7:b3:3d:1b:f1:65:ec:43:50:34:d0:5f:ee:cc:46:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4CC71073C4D5095D162AA86A1727D924EB83598A Validity Not Before: Feb 28 14:16:38 2026 GMT Not After : Mar 3 17:48:38 2026 GMT Subject: CN=A6D24D25EF63376A414AB5AFB6B7A235589C2077 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d1:60:f4:ed:b0:9f:f4:a4:a4:7b:6c:4b:e2: f1:25:43:64:17:58:14:6c:dc:70:d9:85:1c:13:cc: a1:7a:02:71:eb:3b:6d:d9:80:a9:0d:bd:ba:c3:b3: ed:bf:83:42:eb:de:3b:3f:16:45:4b:45:89:74:dc: c7:d6:73:cb:3c:f8:82:0a:81:07:14:b2:00:af:d9: c6:06:b1:1a:77:e5:ca:7c:f0:4d:02:0f:d2:97:3b: e0:0f:96:92:a9:a3:01:51:d2:a2:bb:89:13:c6:8e: c0:c3:44:72:09:76:df:f8:f3:71:99:4a:b1:b8:cd: 94:b4:09:3f:69:3a:52:b4:c7:7e:80:17:74:b4:8d: f9:a9:5f:ab:2c:be:7f:79:6e:72:eb:c4:8a:35:15: 93:02:07:5b:51:af:d0:ab:a1:ab:53:6d:60:bd:73: be:97:f1:8f:f7:25:44:7f:61:31:71:2c:99:2a:a6: ff:c4:e4:59:d6:97:3b:62:22:80:59:9a:bf:e3:69: 93:74:0d:63:8e:25:4c:5c:a2:ba:74:e3:4a:30:c7: b0:1a:9f:96:01:8b:6c:ad:ce:e5:1d:6a:bc:06:07: 24:da:cd:99:ec:c1:4f:09:6f:71:74:45:f9:1e:3d: 05:9c:8a:e2:b1:01:7c:02:a7:b8:26:2a:42:ec:eb: e7:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:D2:4D:25:EF:63:37:6A:41:4A:B5:AF:B6:B7:A2:35:58:9C:20:77 X509v3 Authority Key Identifier: keyid:4C:C7:10:73:C4:D5:09:5D:16:2A:A8:6A:17:27:D9:24:EB:83:59:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4CC71073C4D5095D162AA86A1727D924EB83598A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f236f060-e862-4f1c-b81a-01fcba3ff77c/0/4CC71073C4D5095D162AA86A1727D924EB83598A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8f:8e:b2:3e:6b:9e:a8:40:5e:24:68:84:2f:9b:8b:13:cf:9f: 95:d1:07:79:3a:5a:b3:ab:90:d1:53:40:5a:bd:22:7a:b1:32: 07:0d:c0:d4:d6:79:98:79:f1:22:f5:35:2b:55:5d:01:94:0b: 6e:3e:16:4d:9b:a9:a7:ea:13:3f:3a:ba:31:14:aa:20:ca:93: c2:97:8b:f9:d6:e4:0b:44:53:5b:cd:e8:c1:b9:21:c2:13:f9: c1:62:55:ee:ee:fb:37:9c:78:d4:cc:4a:8e:8d:af:25:45:73: ef:35:ad:fe:f0:26:8e:8f:d7:ef:6e:09:2b:9e:82:04:76:17: 22:b4:37:42:f2:75:75:47:cb:e3:39:0b:4e:0b:2e:fa:e9:54: c0:26:2c:84:14:6b:32:7d:1a:e2:7d:ef:17:ac:17:ab:da:0d: 93:63:b0:35:85:13:ad:ff:54:c3:90:27:bb:5a:8e:d0:c0:04: f9:21:29:df:6b:89:98:50:32:af:8e:f4:bb:ab:55:0e:5b:77: bd:4b:1a:b8:02:84:ff:93:85:fd:81:a1:18:56:74:7e:e5:7d: 10:69:f3:e3:87:5e:58:36:7c:7b:f4:f9:a6:a7:12:58:65:cc: 4d:5c:17:fe:b2:8d:c7:c0:ae:0b:85:c3:e3:31:23:28:9f:0f: de:1e:7b:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZtgc8PezPRvxZexDUDTQX+7MRmMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRF QjgzNTk4QTAeFw0yNjAyMjgxNDE2MzhaFw0yNjAzMDMxNzQ4MzhaMDMxMTAvBgNV BAMTKEE2RDI0RDI1RUY2MzM3NkE0MTRBQjVBRkI2QjdBMjM1NTg5QzIwNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80WD07bCf9KSke2xL4vElQ2QX WBRs3HDZhRwTzKF6AnHrO23ZgKkNvbrDs+2/g0Lr3js/FkVLRYl03MfWc8s8+IIK gQcUsgCv2cYGsRp35cp88E0CD9KXO+APlpKpowFR0qK7iRPGjsDDRHIJdt/483GZ SrG4zZS0CT9pOlK0x36AF3S0jfmpX6ssvn95bnLrxIo1FZMCB1tRr9CroatTbWC9 c76X8Y/3JUR/YTFxLJkqpv/E5FnWlztiIoBZmr/jaZN0DWOOJUxcorp040owx7Aa n5YBi2ytzuUdarwGByTazZnswU8Jb3F0RfkePQWciuKxAXwCp7gmKkLs6+cVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUptJNJe9jN2pBSrWvtreiNVicIHcwHwYDVR0j BBgwFoAUTMcQc8TVCV0WKqhqFyfZJOuDWYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MjM2ZjA2MC1lODYyLTRmMWMtYjgxYS0wMWZjYmEzZmY3N2MvMC80Q0M3MTA3M0M0 RDUwOTVEMTYyQUE4NkExNzI3RDkyNEVCODM1OThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5MjRFQjgz NTk4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjIzNmYwNjAtZTg2Mi00ZjFjLWI4 MWEtMDFmY2JhM2ZmNzdjLzAvNENDNzEwNzNDNEQ1MDk1RDE2MkFBODZBMTcyN0Q5 MjRFQjgzNTk4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI+Osj5rnqhAXiRohC+bixPPn5XRB3k6WrOr kNFTQFq9InqxMgcNwNTWeZh58SL1NStVXQGUC24+Fk2bqafqEz86ujEUqiDKk8KX i/nW5AtEU1vN6MG5IcIT+cFiVe7u+zeceNTMSo6NryVFc+81rf7wJo6P1+9uCSue ggR2FyK0N0LydXVHy+M5C04LLvrpVMAmLIQUazJ9GuJ97xesF6vaDZNjsDWFE63/ VMOQJ7tajtDABPkhKd9riZhQMq+O9LurVQ5bd71LGrgChP+Thf2BoRhWdH7lfRBp 8+OHXlg2fHv0+aanElhlzE1cF/6yjcfArguFw+MxIyifD94ee5Y= -----END CERTIFICATE-----Generated at Mon Mar 2 02:28:40 2026 by rpki-client