$ rpki-client -vvf repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft File: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft (raw, json) Hash identifier: Ya9DeUNPQt9hvuUBVKnpLd2c4X5sEyCkxobAsKpU+4I= Subject key identifier: 31:C4:EF:3C:A6:99:4F:53:E4:68:CB:A7:BC:59:79:F3:20:05:4F:0E Authority key identifier: 22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F Certificate issuer: /CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Certificate serial: 74A4E76F0FADA7F0509A2C2C4684EF279C1B7050 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft Manifest number: 0133 Signing time: Fri 06 Mar 2026 11:52:18 +0000 Manifest this update: Fri 06 Mar 2026 11:47:18 +0000 Manifest next update: Mon 09 Mar 2026 16:53:18 +0000 Files and hashes: 1: 3135372e31352e3134342e302f32332d3233203d3e20313532333736.roa (hash: IVmWA0sjnzoOPblA5LQxkIVu3A/hMUXTdT7CieN07mY=) 2: 2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl (hash: 7ijUTAzKnXXZoE6YljpjobCracazXd2iYXa8J4dI6xY=) 3: 3135372e31352e3134342e302f32342d3234203d3e20313532333736.roa (hash: RowmG35PUWlTBVXWCWFnv7EvaYbGN8PKQsduBtyMpF4=) 4: 3135372e31352e3134352e302f32342d3234203d3e20313532333736.roa (hash: xFffnrBfGrqinSzTOcLoNlqUPiFPKVW2xknOINPEUaI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Mar 2026 08:48:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:a4:e7:6f:0f:ad:a7:f0:50:9a:2c:2c:46:84:ef:27:9c:1b:70:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F Validity Not Before: Mar 6 11:47:18 2026 GMT Not After : Mar 9 16:53:18 2026 GMT Subject: CN=31C4EF3CA6994F53E468CBA7BC5979F320054F0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:a1:9f:90:a9:c4:46:aa:df:03:81:fd:27:84: 70:78:1c:c1:05:41:31:00:aa:57:9c:57:41:f9:03: 5b:7f:42:1b:29:28:0d:d9:37:fe:b8:7c:60:50:8a: 85:34:e3:08:f3:bf:1d:99:d4:00:66:1e:78:74:7f: ca:53:b4:ba:73:1e:0c:12:79:bc:a9:ce:2d:2a:cb: 99:45:b1:cb:5c:22:6e:96:ee:3b:fb:ac:94:b0:39: 79:e0:b3:4a:63:07:d1:66:8c:cc:0a:7e:37:36:6c: e4:43:36:cf:c8:99:c9:a2:7c:08:a1:f4:98:f7:c6: 0e:f9:d3:9e:96:aa:92:14:f6:1d:7a:30:df:bb:18: 59:eb:bb:a7:2f:d7:e6:10:77:25:ff:0e:64:78:5e: 0a:70:d6:f8:4e:89:cf:8a:8e:64:52:41:28:d0:3d: e0:2c:78:7a:97:58:fb:c4:0f:f0:1c:46:d7:ba:16: be:7f:f3:8b:47:1d:c1:ca:55:36:fa:92:a4:4f:ef: 08:e1:43:8d:7b:bd:c9:80:37:78:50:97:be:f0:c1: d6:bc:c2:6a:20:fb:79:09:31:f6:88:1a:d5:12:60: 52:94:b4:cd:e7:84:0f:6d:1f:45:69:9c:b1:ac:43: 07:92:e7:4e:53:00:6e:73:ed:93:87:ed:3f:42:e4: 02:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:C4:EF:3C:A6:99:4F:53:E4:68:CB:A7:BC:59:79:F3:20:05:4F:0E X509v3 Authority Key Identifier: keyid:22:46:01:5F:FF:2F:C5:5F:EF:B9:C4:4A:8A:D4:16:B5:5F:A5:E7:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a56eccb7-e917-40f5-acee-03d68be5fd97/0/2246015FFF2FC55FEFB9C44A8AD416B55FA5E73F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:ef:9b:dd:68:3d:ed:09:d2:95:36:24:b5:77:2e:90:ee:3b: 3a:b9:70:b0:48:23:46:81:00:42:0d:a6:28:12:e2:1d:5b:c3: ad:2f:0b:fd:bf:3f:24:da:e1:a0:38:2b:ca:2f:18:8d:a2:16: f9:d6:75:52:e6:91:47:85:fc:d0:01:97:04:ac:81:f6:5a:0f: 54:ee:56:ed:a1:42:79:aa:94:a5:73:24:f4:29:3f:0b:40:17: dc:9a:8c:1c:22:c3:dd:92:7e:1b:28:2f:72:45:32:f4:36:3c: 86:0e:33:22:73:bb:46:c3:f7:c2:8c:d5:dd:bc:cf:51:87:64: 79:82:82:ce:30:5c:32:c8:b0:40:76:63:73:39:3d:c2:5f:29: dd:36:03:74:4a:09:36:8d:94:a5:4b:d1:69:07:91:1b:f0:1d: c1:4e:8d:89:6e:7d:42:48:2b:06:c2:ef:ac:79:e6:39:22:a4: 15:6f:70:01:d3:ea:55:1f:72:01:df:3e:65:17:26:c7:56:d4: 75:e7:fc:2e:82:fc:0f:30:1e:b9:4f:99:21:10:90:cb:00:09: 29:22:b3:5b:af:59:5a:98:e9:4f:8c:29:1e:96:fd:5c:a0:d7: 10:ca:63:7c:e1:5a:18:42:19:9f:32:b9:72:a9:0e:01:97:25: 91:b9:f0:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdKTnbw+tp/BQmiwsRoTvJ5wbcFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1 RkE1RTczRjAeFw0yNjAzMDYxMTQ3MThaFw0yNjAzMDkxNjUzMThaMDMxMTAvBgNV BAMTKDMxQzRFRjNDQTY5OTRGNTNFNDY4Q0JBN0JDNTk3OUYzMjAwNTRGMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCioZ+QqcRGqt8Dgf0nhHB4HMEF QTEAqlecV0H5A1t/QhspKA3ZN/64fGBQioU04wjzvx2Z1ABmHnh0f8pTtLpzHgwS ebypzi0qy5lFsctcIm6W7jv7rJSwOXngs0pjB9FmjMwKfjc2bORDNs/ImcmifAih 9Jj3xg75056WqpIU9h16MN+7GFnru6cv1+YQdyX/DmR4Xgpw1vhOic+KjmRSQSjQ PeAseHqXWPvED/AcRte6Fr5/84tHHcHKVTb6kqRP7wjhQ417vcmAN3hQl77wwda8 wmog+3kJMfaIGtUSYFKUtM3nhA9tH0VpnLGsQweS505TAG5z7ZOH7T9C5AI1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMcTvPKaZT1PkaMunvFl58yAFTw4wHwYDVR0j BBgwFoAUIkYBX/8vxV/vucRKitQWtV+l5z8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NTZlY2NiNy1lOTE3LTQwZjUtYWNlZS0wM2Q2OGJlNWZkOTcvMC8yMjQ2MDE1RkZG MkZDNTVGRUZCOUM0NEE4QUQ0MTZCNTVGQTVFNzNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2QjU1RkE1 RTczRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTU2ZWNjYjctZTkxNy00MGY1LWFj ZWUtMDNkNjhiZTVmZDk3LzAvMjI0NjAxNUZGRjJGQzU1RkVGQjlDNDRBOEFENDE2 QjU1RkE1RTczRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3vm91oPe0J0pU2JLV3LpDuOzq5cLBII0aB AEINpigS4h1bw60vC/2/PyTa4aA4K8ovGI2iFvnWdVLmkUeF/NABlwSsgfZaD1Tu Vu2hQnmqlKVzJPQpPwtAF9yajBwiw92SfhsoL3JFMvQ2PIYOMyJzu0bD98KM1d28 z1GHZHmCgs4wXDLIsEB2Y3M5PcJfKd02A3RKCTaNlKVL0WkHkRvwHcFOjYlufUJI KwbC76x55jkipBVvcAHT6lUfcgHfPmUXJsdW1HXn/C6C/A8wHrlPmSEQkMsACSki s1uvWVqY6U+MKR6W/Vyg1xDKY3zhWhhCGZ8yuXKpDgGXJZG58E8= -----END CERTIFICATE-----Generated at Sat Mar 7 17:48:43 2026 by rpki-client