$ rpki-client -vvf repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft File: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft (raw, json) Hash identifier: htVqlpdeH1gnwqfCh+KgR/J1vRmiQQMCnKwmECA0q8k= Subject key identifier: 44:17:1E:21:D9:FA:B3:EB:34:9E:CC:FD:C3:E8:B6:B7:06:25:3E:FE Authority key identifier: 4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 Certificate issuer: /CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Certificate serial: 259AC571E49FB51BDB459FD440728BA1E055BC8C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft Manifest number: 0247 Signing time: Thu 05 Mar 2026 22:00:55 +0000 Manifest this update: Thu 05 Mar 2026 21:55:55 +0000 Manifest next update: Mon 09 Mar 2026 00:35:55 +0000 Files and hashes: 1: 3130332e38362e3132382e302f32332d3234203d3e2034383030.roa (hash: D4xO8SkIE8jeNebf9M5hiqlhcLrsrkGAhopy0O7d3p0=) 2: 4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl (hash: B/aWxvoiO5ghsELQbL0bAlJaWrWoNjnkbieuhcwbFgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 00:35:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9a:c5:71:e4:9f:b5:1b:db:45:9f:d4:40:72:8b:a1:e0:55:bc:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50 Validity Not Before: Mar 5 21:55:55 2026 GMT Not After : Mar 9 00:35:55 2026 GMT Subject: CN=44171E21D9FAB3EB349ECCFDC3E8B6B706253EFE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:90:9d:83:94:09:94:49:ec:67:5c:7c:a7:33: 10:11:96:97:c3:11:b0:49:fc:13:7b:01:90:6b:f2: 7c:40:26:4f:72:2b:c1:9e:3b:e3:66:f1:2e:12:d3: 96:d0:35:c2:0c:1d:63:d9:5c:6f:1e:40:53:a3:da: 57:67:d9:df:51:24:af:ad:c8:4f:76:1e:22:4e:27: 8c:e5:88:74:9d:d0:0e:69:59:46:ea:7f:d5:84:57: ce:6f:fe:d9:66:55:a9:f2:bc:65:78:90:66:7a:85: 97:11:0e:c7:50:cf:1c:49:e4:a0:0c:c0:ba:43:7e: 66:57:1f:56:88:50:e9:eb:c4:63:64:c7:ee:d8:1e: 72:a6:69:10:05:5d:f7:96:e6:8a:3b:dc:55:25:82: 97:65:ef:ae:00:5e:ca:50:8f:70:c0:90:9c:b4:5c: 55:9f:18:58:f0:ae:49:5e:43:b4:4e:4d:35:e5:2a: 1c:47:f5:b8:b7:c6:82:2a:40:94:f3:00:67:a3:98: f6:05:41:6a:5f:d9:69:df:31:89:df:78:e5:cf:57: f2:f4:71:64:ac:8e:da:8d:b4:88:58:56:b3:2f:54: e4:b5:42:67:c4:f7:40:cf:70:4e:c1:37:e2:93:9b: cd:0b:16:85:d5:39:69:a7:84:52:fb:33:7f:ea:99: 58:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:17:1E:21:D9:FA:B3:EB:34:9E:CC:FD:C3:E8:B6:B7:06:25:3E:FE X509v3 Authority Key Identifier: keyid:4B:E0:EB:AF:EF:1E:20:6C:AD:8B:4E:AD:6D:6A:08:D3:A8:C0:1B:50 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98a7f355-f225-48f3-87f8-0bfb0c8e58f0/0/4BE0EBAFEF1E206CAD8B4EAD6D6A08D3A8C01B50.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:96:6d:40:b0:79:d5:b5:27:7c:65:4d:e6:da:5d:be:ca:80: 34:2b:7b:df:d8:df:07:11:27:9f:72:d7:15:a6:96:e3:83:16: bf:ce:70:52:22:8a:9d:49:e7:f2:d1:96:30:47:fc:7a:6b:a9: 9f:b1:c7:ae:19:dd:07:dd:0b:fa:b2:92:10:bd:bc:5a:c0:de: 53:05:b6:db:6b:1d:97:40:64:4a:7e:1c:96:99:a4:22:87:b4: bc:2a:30:ab:0e:96:b2:6f:fc:b3:39:73:5b:b1:d9:bb:94:5d: 73:00:a8:77:4c:8c:9f:0f:73:26:bd:46:0e:a3:27:f3:e5:f1: 86:54:58:a7:86:86:bb:f2:e7:96:7c:67:67:72:d9:e4:98:6c: c6:c3:4e:d9:19:7d:f5:35:92:7b:e4:71:6a:e1:34:9b:6e:57: a5:a3:85:ec:2a:01:9f:67:41:df:15:02:bf:f3:11:c3:7e:3f: 87:9f:e7:6f:7a:e7:43:17:9a:8a:00:5e:2c:61:6b:fe:d9:cd: 9c:6d:15:48:0c:5a:bc:c7:ab:47:b9:97:f3:3c:81:ce:35:04: 41:32:d9:e0:cd:5c:90:40:67:52:26:51:cf:36:25:06:be:bb: c1:b1:a9:43:b6:a5:f2:b6:f3:94:9a:6f:cf:47:cc:c2:ae:55: 17:c1:a3:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZrFceSftRvbRZ/UQHKLoeBVvIwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNB OEMwMUI1MDAeFw0yNjAzMDUyMTU1NTVaFw0yNjAzMDkwMDM1NTVaMDMxMTAvBgNV BAMTKDQ0MTcxRTIxRDlGQUIzRUIzNDlFQ0NGREMzRThCNkI3MDYyNTNFRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMkJ2DlAmUSexnXHynMxARlpfD EbBJ/BN7AZBr8nxAJk9yK8GeO+Nm8S4S05bQNcIMHWPZXG8eQFOj2ldn2d9RJK+t yE92HiJOJ4zliHSd0A5pWUbqf9WEV85v/tlmVanyvGV4kGZ6hZcRDsdQzxxJ5KAM wLpDfmZXH1aIUOnrxGNkx+7YHnKmaRAFXfeW5oo73FUlgpdl764AXspQj3DAkJy0 XFWfGFjwrkleQ7ROTTXlKhxH9bi3xoIqQJTzAGejmPYFQWpf2WnfMYnfeOXPV/L0 cWSsjtqNtIhYVrMvVOS1QmfE90DPcE7BN+KTm80LFoXVOWmnhFL7M3/qmVixAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURBceIdn6s+s0nsz9w+i2twYlPv4wHwYDVR0j BBgwFoAUS+Drr+8eIGyti06tbWoI06jAG1AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OGE3ZjM1NS1mMjI1LTQ4ZjMtODdmOC0wYmZiMGM4ZTU4ZjAvMC80QkUwRUJBRkVG MUUyMDZDQUQ4QjRFQUQ2RDZBMDhEM0E4QzAxQjUwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4RDNBOEMw MUI1MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOThhN2YzNTUtZjIyNS00OGYzLTg3 ZjgtMGJmYjBjOGU1OGYwLzAvNEJFMEVCQUZFRjFFMjA2Q0FEOEI0RUFENkQ2QTA4 RDNBOEMwMUI1MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADmWbUCwedW1J3xlTebaXb7KgDQre9/Y3wcR J59y1xWmluODFr/OcFIiip1J5/LRljBH/HprqZ+xx64Z3QfdC/qykhC9vFrA3lMF tttrHZdAZEp+HJaZpCKHtLwqMKsOlrJv/LM5c1ux2buUXXMAqHdMjJ8Pcya9Rg6j J/Pl8YZUWKeGhrvy55Z8Z2dy2eSYbMbDTtkZffU1knvkcWrhNJtuV6WjhewqAZ9n Qd8VAr/zEcN+P4ef529650MXmooAXixha/7ZzZxtFUgMWrzHq0e5l/M8gc41BEEy 2eDNXJBAZ1ImUc82JQa+u8GxqUO2pfK285Sab89HzMKuVRfBo6g= -----END CERTIFICATE-----Generated at Sat Mar 7 21:18:28 2026 by rpki-client