$ rpki-client -vvf repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft File: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft (raw, json) Hash identifier: wrA5UEq9gzXC9li0yKk8rbhx1qqjSymysvNnklW8uP8= Subject key identifier: C9:0E:40:9C:1E:E7:D5:59:AC:C7:DA:AD:3B:74:FF:A1:68:33:FD:CD Authority key identifier: 46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B Certificate issuer: /CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Certificate serial: 19BB51DD8C67662A67F19A1723A63038E3C3635F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft Manifest number: 0145 Signing time: Fri 06 Mar 2026 21:11:19 +0000 Manifest this update: Fri 06 Mar 2026 21:06:19 +0000 Manifest next update: Mon 09 Mar 2026 22:48:19 +0000 Files and hashes: 1: 4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl (hash: pUAXq6LEQz4FWAjv10j1j9xtlgQG/shWRzcnXJskbeU=) 2: 3135372e31352e34342e302f32332d3233203d3e20313532333931.roa (hash: O3sKicmk2yGnkx/tY8M39vxITAxZv+eItzqmfEpZHaM=) 3: 3135372e31352e34352e302f32342d3234203d3e20313532333931.roa (hash: x6ZV1Wl+WBaRGXPvArCfDSB+gNTaB80RBBLsR8syzeM=) 4: 3135372e31352e34342e302f32342d3234203d3e20313532333931.roa (hash: /J4LqqzzRfOuCjdKMN+a1hzCP36QvC7oDLsxBPgXP0g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:bb:51:dd:8c:67:66:2a:67:f1:9a:17:23:a6:30:38:e3:c3:63:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4617272EE875B55CD5F2A88330A95F6410A3EB1B Validity Not Before: Mar 6 21:06:19 2026 GMT Not After : Mar 9 22:48:19 2026 GMT Subject: CN=C90E409C1EE7D559ACC7DAAD3B74FFA16833FDCD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:22:da:25:6b:23:b7:29:62:87:5b:4d:88:40: 63:d1:3c:0e:01:52:11:84:75:f8:96:23:b7:24:4f: 10:ce:dd:e8:6a:b7:48:47:a0:79:b7:1e:7f:11:0b: 55:a6:5c:11:db:40:70:bc:ec:44:ac:44:66:1c:5d: cb:4d:aa:ab:d0:21:2a:ed:de:b2:ef:45:ec:0f:c1: 6d:ea:c5:80:62:fe:50:af:04:e2:4d:6a:56:38:ca: 2b:c0:f6:ca:c9:31:24:0d:3a:4a:12:15:b1:30:71: 67:f3:cd:89:21:93:07:f1:07:61:32:0a:1e:a2:52: 49:83:da:13:af:ce:43:f9:fa:39:fe:51:c6:be:34: 4b:69:81:9b:70:0f:94:54:99:bc:b3:4f:53:d6:18: 8e:c8:3a:48:3c:f0:3c:c0:c9:1d:75:1d:53:61:13: 9c:a7:0f:06:04:4a:d2:00:43:db:02:85:5a:da:79: 1e:49:a0:af:0a:12:d0:12:08:b4:ac:fb:f1:b8:4b: 4a:53:26:2e:17:1d:09:a1:e8:f0:5a:75:83:ec:dd: 95:56:aa:c6:06:5e:1c:68:6f:6b:59:9a:31:5a:f8: ff:a8:d0:72:23:44:c2:0f:13:5f:3f:55:0b:f7:16: a7:58:6c:0e:4e:54:d3:69:a9:04:dc:c9:74:a4:90: 5d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:0E:40:9C:1E:E7:D5:59:AC:C7:DA:AD:3B:74:FF:A1:68:33:FD:CD X509v3 Authority Key Identifier: keyid:46:17:27:2E:E8:75:B5:5C:D5:F2:A8:83:30:A9:5F:64:10:A3:EB:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/4617272EE875B55CD5F2A88330A95F6410A3EB1B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fdaf06a-f624-42cf-bb19-b6bbf931aac8/0/4617272EE875B55CD5F2A88330A95F6410A3EB1B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:b6:97:78:d0:cf:cd:fa:0b:33:07:23:ab:67:2d:05:d4:23: 3c:a4:28:82:4d:29:ef:22:b9:4f:4c:48:d6:25:3b:64:cc:3c: 01:d1:ff:47:83:4e:43:2b:bf:d2:8c:a5:92:27:78:9c:fd:8f: 6f:1f:a1:d1:2b:81:5e:c6:43:ce:57:97:cd:8e:39:e2:f6:46: cc:91:1a:ec:06:99:ff:6a:e7:40:4b:f9:77:b4:0b:23:48:57: ad:56:05:10:01:30:fc:d2:89:7c:a2:7c:da:ec:a3:a6:ba:90: 3a:44:37:34:37:6b:54:43:9d:51:3c:ce:ee:f7:d3:76:72:86: 2c:9a:f6:cb:c1:78:65:5f:8e:b1:ab:8d:26:e3:36:b8:78:fb: bf:0a:92:8a:79:25:a3:6d:dd:c2:4e:10:8c:b7:f1:d0:80:a3: f3:93:cf:cc:ee:5f:88:09:b6:1a:34:25:85:e7:1f:e8:38:48: 90:2a:ef:23:d0:73:79:3e:46:00:f6:bb:d7:6a:cc:1d:84:d8: f6:76:2c:05:89:cc:7c:77:2a:4d:a3:23:2f:44:8f:24:e3:d5: d5:d4:54:a3:64:e8:62:b0:71:33:88:f6:7e:86:0f:6f:6f:55: 9c:c9:37:2d:5b:15:d3:63:45:8a:e8:4a:8c:6e:1d:d2:e1:31: 69:d5:fd:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGbtR3YxnZipn8ZoXI6YwOOPDY18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQx MEEzRUIxQjAeFw0yNjAzMDYyMTA2MTlaFw0yNjAzMDkyMjQ4MTlaMDMxMTAvBgNV BAMTKEM5MEU0MDlDMUVFN0Q1NTlBQ0M3REFBRDNCNzRGRkExNjgzM0ZEQ0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ItolayO3KWKHW02IQGPRPA4B UhGEdfiWI7ckTxDO3ehqt0hHoHm3Hn8RC1WmXBHbQHC87ESsRGYcXctNqqvQISrt 3rLvRewPwW3qxYBi/lCvBOJNalY4yivA9srJMSQNOkoSFbEwcWfzzYkhkwfxB2Ey Ch6iUkmD2hOvzkP5+jn+Uca+NEtpgZtwD5RUmbyzT1PWGI7IOkg88DzAyR11HVNh E5ynDwYEStIAQ9sChVraeR5JoK8KEtASCLSs+/G4S0pTJi4XHQmh6PBadYPs3ZVW qsYGXhxob2tZmjFa+P+o0HIjRMIPE18/VQv3FqdYbA5OVNNpqQTcyXSkkF3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyQ5AnB7n1Vmsx9qtO3T/oWgz/c0wHwYDVR0j BBgwFoAURhcnLuh1tVzV8qiDMKlfZBCj6xswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZmRhZjA2YS1mNjI0LTQyY2YtYmIxOS1iNmJiZjkzMWFhYzgvMC80NjE3MjcyRUU4 NzVCNTVDRDVGMkE4ODMzMEE5NUY2NDEwQTNFQjFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVGNjQxMEEz RUIxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWZkYWYwNmEtZjYyNC00MmNmLWJi MTktYjZiYmY5MzFhYWM4LzAvNDYxNzI3MkVFODc1QjU1Q0Q1RjJBODgzMzBBOTVG NjQxMEEzRUIxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJa2l3jQz836CzMHI6tnLQXUIzykKIJNKe8i uU9MSNYlO2TMPAHR/0eDTkMrv9KMpZIneJz9j28fodErgV7GQ85Xl82OOeL2RsyR GuwGmf9q50BL+Xe0CyNIV61WBRABMPzSiXyifNrso6a6kDpENzQ3a1RDnVE8zu73 03Zyhiya9svBeGVfjrGrjSbjNrh4+78Kkop5JaNt3cJOEIy38dCAo/OTz8zuX4gJ tho0JYXnH+g4SJAq7yPQc3k+RgD2u9dqzB2E2PZ2LAWJzHx3Kk2jIy9EjyTj1dXU VKNk6GKwcTOI9n6GD29vVZzJNy1bFdNjRYroSoxuHdLhMWnV/U8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:58:29 2026 by rpki-client