$ rpki-client -vvf repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft File: 4E02702CF90D4075367826B5C5EA64C61B170BFA.mft (raw, json) Hash identifier: 0oNQZ8PFew6j0gTyE1fHPR3OrO9d0G2R7nblWGGvZ88= Subject key identifier: 2C:BB:60:07:16:B2:17:67:49:26:E2:EF:01:86:26:9A:8D:D9:86:23 Authority key identifier: 4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA Certificate issuer: /CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Certificate serial: 2F63080BE9C6DC85049B9294E6A9C26A7F854D7C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft Manifest number: 0281 Signing time: Thu 26 Mar 2026 14:51:24 +0000 Manifest this update: Thu 26 Mar 2026 14:46:24 +0000 Manifest next update: Mon 30 Mar 2026 02:22:24 +0000 Files and hashes: 1: 3130332e34312e3230302e302f32322d3234203d3e203633353132.roa (hash: ETQdd76cYP93QUaMlJn8vH6AoLbhhgOLKNK/6Zul2Pw=) 2: 4E02702CF90D4075367826B5C5EA64C61B170BFA.crl (hash: 5lZ2+I44pcc8cN4jDzrET5wC6pJoKFbgnUf/0xBy9R8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Mar 2026 00:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:63:08:0b:e9:c6:dc:85:04:9b:92:94:e6:a9:c2:6a:7f:85:4d:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4E02702CF90D4075367826B5C5EA64C61B170BFA Validity Not Before: Mar 26 14:46:24 2026 GMT Not After : Mar 30 02:22:24 2026 GMT Subject: CN=2CBB600716B217674926E2EF0186269A8DD98623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:23:27:6d:dc:3b:bf:a2:d9:ee:e5:03:19:3b: 97:bb:e9:a7:94:18:47:06:a2:a0:6d:38:70:a3:f1: 69:9c:ff:19:11:a2:fd:5e:5f:1d:d1:4f:56:4a:11: 99:06:3d:a9:9b:7b:37:f2:16:d6:f8:72:e8:59:52: 12:ee:0c:a1:8a:a2:3c:f7:a3:86:35:be:3f:1a:26: 6d:a9:9f:1f:ac:6e:c6:43:bf:ca:2a:82:a7:d4:00: e3:f9:e8:53:33:38:be:02:0f:d0:d6:e7:43:af:78: e9:e8:69:d2:8f:e6:de:f8:2f:b3:9a:9f:9c:6c:b2: 4e:89:36:c5:17:18:3f:0f:f5:48:32:42:8f:34:4a: c6:bc:0c:49:21:7c:b3:e9:1b:49:3e:52:96:2f:ef: 5a:d3:c0:19:f8:18:00:a3:0a:06:60:b9:d2:d1:5f: df:38:d8:4a:12:3d:3a:65:a3:15:2d:51:b8:97:5d: 0d:10:d1:78:ba:67:3d:95:a9:5a:ad:3f:8d:e2:2b: c0:16:17:ef:c2:20:00:da:7c:d4:08:47:1e:d9:58: 71:45:6c:5a:65:e3:1b:8e:a9:0b:92:47:43:fc:e7: 34:34:6f:dd:52:d0:54:99:38:a9:00:62:d7:26:25: c1:85:0f:70:cd:94:27:1f:00:c1:33:e8:cc:ad:3f: 33:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BB:60:07:16:B2:17:67:49:26:E2:EF:01:86:26:9A:8D:D9:86:23 X509v3 Authority Key Identifier: keyid:4E:02:70:2C:F9:0D:40:75:36:78:26:B5:C5:EA:64:C6:1B:17:0B:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4E02702CF90D4075367826B5C5EA64C61B170BFA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4794ffd2-4572-4553-9a33-21d60ef2f0be/0/4E02702CF90D4075367826B5C5EA64C61B170BFA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:c8:59:24:dd:76:fd:e5:8c:b4:e0:5d:59:32:2f:0a:25:ec: e3:83:0d:48:58:a0:9d:3b:5f:d1:b8:3d:71:8c:98:1b:06:32: 19:43:16:49:fe:74:3a:2d:74:b0:b4:6f:fe:6b:c1:36:8a:cd: 72:11:50:08:0f:bd:f5:9c:b7:64:da:e4:3c:46:0f:a6:cc:0b: 71:ef:75:29:4d:43:98:2c:0b:8c:1a:14:69:ce:f5:07:20:76: 34:c0:4f:30:c8:6a:97:b7:69:7c:d0:a3:89:f9:00:89:d0:8a: 50:85:43:87:24:8f:d7:39:28:11:e9:fd:cb:e4:c1:b5:a9:80: d0:d5:41:e8:8c:f5:e8:e9:7e:74:78:78:27:82:63:bf:69:7c: 66:04:16:78:39:02:f0:da:98:b6:75:df:22:87:aa:a9:7c:1f: 08:85:0a:d9:2a:fd:ae:84:52:6e:5b:04:62:48:25:5b:8b:3e: 9d:d9:6f:3a:53:ed:89:7d:a0:04:47:58:c5:fb:bd:a4:1c:fe: 8a:54:dc:d6:74:da:37:f2:66:34:a0:01:d6:26:e6:49:b6:ed: 76:d2:a1:89:5a:a9:f1:b8:7a:30:46:5d:80:bd:4d:ef:fd:96: 1d:3e:a6:87:83:db:8e:60:0d:01:07:19:bf:98:a2:31:c0:10: 5d:8b:55:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL2MIC+nG3IUEm5KU5qnCan+FTXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYx QjE3MEJGQTAeFw0yNjAzMjYxNDQ2MjRaFw0yNjAzMzAwMjIyMjRaMDMxMTAvBgNV BAMTKDJDQkI2MDA3MTZCMjE3Njc0OTI2RTJFRjAxODYyNjlBOEREOTg2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIydt3Du/otnu5QMZO5e76aeU GEcGoqBtOHCj8Wmc/xkRov1eXx3RT1ZKEZkGPambezfyFtb4cuhZUhLuDKGKojz3 o4Y1vj8aJm2pnx+sbsZDv8oqgqfUAOP56FMzOL4CD9DW50OveOnoadKP5t74L7Oa n5xssk6JNsUXGD8P9UgyQo80Ssa8DEkhfLPpG0k+UpYv71rTwBn4GACjCgZgudLR X9842EoSPTploxUtUbiXXQ0Q0Xi6Zz2VqVqtP43iK8AWF+/CIADafNQIRx7ZWHFF bFpl4xuOqQuSR0P85zQ0b91S0FSZOKkAYtcmJcGFD3DNlCcfAMEz6MytPzMpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULLtgBxayF2dJJuLvAYYmmo3ZhiMwHwYDVR0j BBgwFoAUTgJwLPkNQHU2eCa1xepkxhsXC/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 Nzk0ZmZkMi00NTcyLTQ1NTMtOWEzMy0yMWQ2MGVmMmYwYmUvMC80RTAyNzAyQ0Y5 MEQ0MDc1MzY3ODI2QjVDNUVBNjRDNjFCMTcwQkZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0QzYxQjE3 MEJGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5NGZmZDItNDU3Mi00NTUzLTlh MzMtMjFkNjBlZjJmMGJlLzAvNEUwMjcwMkNGOTBENDA3NTM2NzgyNkI1QzVFQTY0 QzYxQjE3MEJGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAInIWSTddv3ljLTgXVkyLwol7OODDUhYoJ07 X9G4PXGMmBsGMhlDFkn+dDotdLC0b/5rwTaKzXIRUAgPvfWct2Ta5DxGD6bMC3Hv dSlNQ5gsC4waFGnO9QcgdjTATzDIape3aXzQo4n5AInQilCFQ4ckj9c5KBHp/cvk wbWpgNDVQeiM9ejpfnR4eCeCY79pfGYEFng5AvDamLZ13yKHqql8HwiFCtkq/a6E Um5bBGJIJVuLPp3ZbzpT7Yl9oARHWMX7vaQc/opU3NZ02jfyZjSgAdYm5km27XbS oYlaqfG4ejBGXYC9Te/9lh0+poeD245gDQEHGb+YojHAEF2LVc4= -----END CERTIFICATE-----Generated at Thu Mar 26 19:31:09 2026 by rpki-client