$ rpki-client -vvf repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft File: 014253C9E01BAC5FD1E7C286A296948F302AA578.mft (raw, json) Hash identifier: RXQgJhCs/UDdyVb3QjHySULc9BDO17g1FJen9NWc778= Subject key identifier: 8A:36:8B:B7:BE:40:B4:11:DA:CF:73:CB:17:27:C4:F6:80:74:64:61 Authority key identifier: 01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 Certificate issuer: /CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Certificate serial: 273CF9B49AA63F2FF62DE54AC3545C2A70979C0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject info access: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft Manifest number: CA Signing time: Sat 28 Feb 2026 11:01:59 +0000 Manifest this update: Sat 28 Feb 2026 10:56:59 +0000 Manifest next update: Tue 03 Mar 2026 16:37:59 +0000 Files and hashes: 1: 3231302e38372e3131382e302f32332d3234203d3e20313338383836.roa (hash: hOVkgGHGY/bobIqIByNpM3pWDrvyZ00Fy2/vUw4/OXQ=) 2: 014253C9E01BAC5FD1E7C286A296948F302AA578.crl (hash: CNs1OquGPmE9I0MD4LSDeJ1X/EvxlRr0ZhA6isoxTTM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 16:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:3c:f9:b4:9a:a6:3f:2f:f6:2d:e5:4a:c3:54:5c:2a:70:97:9c:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=014253C9E01BAC5FD1E7C286A296948F302AA578 Validity Not Before: Feb 28 10:56:59 2026 GMT Not After : Mar 3 16:37:59 2026 GMT Subject: CN=8A368BB7BE40B411DACF73CB1727C4F680746461 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:02:15:4e:57:67:2a:ea:e7:6f:57:df:a8:0f: 9d:0a:4c:b2:eb:41:9c:44:90:25:ed:0a:a9:77:b7: f3:38:b9:4f:aa:4d:71:e0:e9:e0:49:ce:e5:fe:29: 1e:07:ad:f7:8a:79:39:ae:84:9e:5c:b5:7a:e6:e5: b3:1a:33:44:3d:43:e3:d8:9f:a1:9f:c5:84:1a:96: c5:66:4f:81:26:c9:c8:1d:0b:03:c3:02:08:5a:c8: 4a:9a:0c:55:cf:41:dc:f0:fd:f2:98:bd:8b:c4:bb: dd:91:d3:5f:41:6a:f7:37:9b:01:b8:0b:f7:9d:db: c2:50:a2:f1:e1:27:c1:3b:34:f7:5a:1c:b6:ac:6b: 5f:79:d3:0d:af:f6:70:5c:87:9d:af:2a:3d:0a:ce: 49:be:59:f8:df:03:78:28:1f:a8:74:83:8b:2d:21: 6a:19:91:43:5e:bd:b2:35:2c:9c:23:66:df:f7:d9: 72:f5:c0:6c:a4:9e:ca:4f:90:b5:22:f6:34:e7:24: 36:9b:e1:f8:e9:d4:47:e4:7a:a9:ea:26:4b:0a:4c: 48:9d:53:89:f5:03:85:71:1e:37:46:83:e8:5d:fa: f4:dd:38:4f:4e:42:6b:80:3f:dc:c5:47:b1:bf:1c: e7:c9:d7:fa:a8:2e:de:af:73:32:03:c5:b9:94:8e: ad:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:36:8B:B7:BE:40:B4:11:DA:CF:73:CB:17:27:C4:F6:80:74:64:61 X509v3 Authority Key Identifier: keyid:01:42:53:C9:E0:1B:AC:5F:D1:E7:C2:86:A2:96:94:8F:30:2A:A5:78 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/014253C9E01BAC5FD1E7C286A296948F302AA578.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/12aec7c6-2b83-4cf0-8cd9-534ce77ff4b0/0/014253C9E01BAC5FD1E7C286A296948F302AA578.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4b:54:9b:7f:5e:21:62:43:19:07:d0:3f:61:05:6c:51:3c: 89:29:7e:cd:c7:de:b0:d8:65:e1:f5:77:4f:70:5d:7c:4f:8f: ab:a4:b9:05:50:e6:08:73:7e:3b:7a:2b:e9:96:a8:1f:37:fc: 8d:9c:6f:27:bd:25:60:fc:7c:eb:41:07:1e:e1:f2:b1:7c:0b: 3e:ad:6b:b1:af:77:8f:c7:64:16:ea:61:24:22:a6:9e:88:19: 4e:1f:21:26:12:ed:30:11:33:e8:03:93:fc:d6:31:9c:95:e8: 92:45:18:7a:26:1a:f4:da:dd:9c:6f:b1:ee:1f:ea:50:76:a5: a0:7b:11:4d:0e:0d:42:87:9f:ad:1e:89:35:60:7c:57:c8:d0: 1f:06:47:52:2b:cd:ab:5f:45:64:3b:5b:de:ce:26:c5:5d:42: f5:4e:56:b6:39:65:08:95:58:43:b9:cf:cb:44:09:6a:4f:3a: c2:6f:f2:7a:69:e0:c8:4a:3f:f8:86:cf:e5:47:5a:cf:89:09: 8e:a7:cc:f0:2b:ae:d3:c8:dc:6c:78:3b:4b:5e:b8:5f:86:60: 24:ed:32:2c:8e:4e:44:55:f5:1d:43:79:59:83:61:1e:59:aa: 81:76:a4:3b:be:1e:19:ac:ab:47:9b:3d:ae:71:0a:75:44:52: 4d:9a:21:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJzz5tJqmPy/2LeVKw1RcKnCXnA0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYz MDJBQTU3ODAeFw0yNjAyMjgxMDU2NTlaFw0yNjAzMDMxNjM3NTlaMDMxMTAvBgNV BAMTKDhBMzY4QkI3QkU0MEI0MTFEQUNGNzNDQjE3MjdDNEY2ODA3NDY0NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZAhVOV2cq6udvV9+oD50KTLLr QZxEkCXtCql3t/M4uU+qTXHg6eBJzuX+KR4HrfeKeTmuhJ5ctXrm5bMaM0Q9Q+PY n6GfxYQalsVmT4EmycgdCwPDAghayEqaDFXPQdzw/fKYvYvEu92R019Bavc3mwG4 C/ed28JQovHhJ8E7NPdaHLasa1950w2v9nBch52vKj0Kzkm+WfjfA3goH6h0g4st IWoZkUNevbI1LJwjZt/32XL1wGyknspPkLUi9jTnJDab4fjp1EfkeqnqJksKTEid U4n1A4VxHjdGg+hd+vTdOE9OQmuAP9zFR7G/HOfJ1/qoLt6vczIDxbmUjq2bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUijaLt75AtBHaz3PLFyfE9oB0ZGEwHwYDVR0j BBgwFoAUAUJTyeAbrF/R58KGopaUjzAqpXgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x MmFlYzdjNi0yYjgzLTRjZjAtOGNkOS01MzRjZTc3ZmY0YjAvMC8wMTQyNTNDOUUw MUJBQzVGRDFFN0MyODZBMjk2OTQ4RjMwMkFBNTc4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0OEYzMDJB QTU3OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTJhZWM3YzYtMmI4My00Y2YwLThj ZDktNTM0Y2U3N2ZmNGIwLzAvMDE0MjUzQzlFMDFCQUM1RkQxRTdDMjg2QTI5Njk0 OEYzMDJBQTU3OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVLVJt/XiFiQxkH0D9hBWxRPIkpfs3H3rDY ZeH1d09wXXxPj6ukuQVQ5ghzfjt6K+mWqB83/I2cbye9JWD8fOtBBx7h8rF8Cz6t a7Gvd4/HZBbqYSQipp6IGU4fISYS7TARM+gDk/zWMZyV6JJFGHomGvTa3Zxvse4f 6lB2paB7EU0ODUKHn60eiTVgfFfI0B8GR1IrzatfRWQ7W97OJsVdQvVOVrY5ZQiV WEO5z8tECWpPOsJv8npp4MhKP/iGz+VHWs+JCY6nzPArrtPI3Gx4O0teuF+GYCTt MiyOTkRV9R1DeVmDYR5ZqoF2pDu+Hhmsq0ebPa5xCnVEUk2aIXA= -----END CERTIFICATE-----Generated at Mon Mar 2 04:07:48 2026 by rpki-client