$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft File: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft (raw, json) Hash identifier: efErnf8/md94uoVm5z9AOJfLkQAPyXLC7edT54oSER0= Subject key identifier: FB:95:5D:38:0E:99:8C:B8:09:AF:CA:1F:8B:5C:56:61:E8:25:8A:B6 Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 Certificate issuer: /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Certificate serial: 6A7ED6EA5AC1F190D9202D185B6D910396DA2A45 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft Manifest number: 025E Signing time: Sun 01 Mar 2026 00:51:02 +0000 Manifest this update: Sun 01 Mar 2026 00:46:02 +0000 Manifest next update: Wed 04 Mar 2026 09:23:02 +0000 Files and hashes: 1: 3130332e3138392e3235302e302f32332d3234203d3e20313530323437.roa (hash: nZ1CR/rbID4ESxk42tIk0CS9T1eppeEb7s7cp74yVZ4=) 2: 1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl (hash: apq9Fd/tVvZhAcdaZ4rKfWp+3SyBqVM+ua0uzIRU46g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 09:23:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:7e:d6:ea:5a:c1:f1:90:d9:20:2d:18:5b:6d:91:03:96:da:2a:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6 Validity Not Before: Mar 1 00:46:02 2026 GMT Not After : Mar 4 09:23:02 2026 GMT Subject: CN=FB955D380E998CB809AFCA1F8B5C5661E8258AB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:57:50:42:c1:ef:79:0a:1e:2b:ef:2b:a3:56: 01:1c:e8:e4:f0:47:eb:a2:7c:7d:df:80:1f:35:ac: 52:8a:3b:33:ea:e2:f0:6f:fa:99:f7:66:ea:fd:d7: 2c:47:40:1a:a1:00:e5:12:53:4c:37:0b:cb:c8:c5: 2f:99:ad:28:ba:92:7e:57:b0:aa:32:f8:27:8a:b1: d2:b2:90:b7:22:22:97:79:d9:c3:a6:39:c1:02:a0: ff:80:14:be:4a:64:a4:bf:8a:9d:b8:1e:d6:ab:c7: cb:95:99:a1:4c:3a:ee:eb:c6:fa:2b:37:58:13:92: 82:dc:58:a0:5e:35:a7:2d:56:3a:23:43:26:09:69: 2d:c0:38:b3:48:b1:94:10:94:ed:ba:55:b5:cb:af: d4:57:d0:b6:03:8e:e7:f3:90:15:d2:f1:51:df:86: 3c:3c:10:ff:f5:74:84:9b:1e:b7:24:c3:ed:4a:46: 4a:d1:11:17:74:87:3f:6e:30:7a:bf:65:80:7b:28: 06:58:c3:df:2c:a9:1d:fb:6f:ab:ee:09:92:58:e9: f7:55:0c:d4:51:c4:33:eb:31:35:ef:c8:7b:7a:94: ea:29:f4:b1:ee:41:6e:cf:d0:12:36:02:8e:71:ac: 2a:81:f9:13:60:c1:9a:ea:88:b0:51:e8:b8:8d:83: 30:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:95:5D:38:0E:99:8C:B8:09:AF:CA:1F:8B:5C:56:61:E8:25:8A:B6 X509v3 Authority Key Identifier: keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:38:8a:d5:84:a9:fb:85:f5:b9:61:b3:1b:63:9d:9a:36:44: 75:89:9e:3b:9a:37:a8:f3:a1:6b:da:10:57:d3:19:d4:1d:d8: f2:d3:85:26:4d:57:ef:3b:1f:bc:b9:d2:aa:6f:21:a6:fc:ae: 24:67:08:62:ec:ec:07:b3:f4:29:4f:99:3f:7b:18:15:39:71: 50:c2:41:34:8b:50:52:6e:ce:ae:2e:2e:02:68:a3:49:6a:86: 64:c6:e7:51:4c:51:f2:82:57:37:ae:90:f2:5d:bc:db:12:d0: 6e:8d:8c:3b:55:7b:78:e0:7d:ca:f1:9b:58:1a:b6:1a:40:cc: 54:2a:c7:42:1d:7c:27:cd:a5:bf:4c:34:a5:23:48:50:ad:e9: 5b:b4:22:8b:1f:b7:ee:f5:42:7b:47:d1:9e:20:e2:f0:f6:e9: e8:92:e3:f5:41:66:f4:18:1a:62:bc:02:7d:c3:f5:d1:bd:08: 13:18:42:cf:87:5f:c8:90:49:90:3b:88:28:03:9e:3f:53:f0: 3e:0a:e0:7d:79:d5:d6:7a:4d:c8:00:61:a7:a8:65:e7:92:77: 4c:18:00:da:ac:60:19:ea:7f:3c:8f:e7:7f:8e:6e:ec:bc:e0: 9a:75:be:20:51:51:3b:7f:a6:b1:dc:c9:a0:2f:b2:4a:3f:53: d9:d2:ee:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUan7W6lrB8ZDZIC0YW22RA5baKkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0Iy QkE4RTJFNjAeFw0yNjAzMDEwMDQ2MDJaFw0yNjAzMDQwOTIzMDJaMDMxMTAvBgNV BAMTKEZCOTU1RDM4MEU5OThDQjgwOUFGQ0ExRjhCNUM1NjYxRTgyNThBQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoV1BCwe95Ch4r7yujVgEc6OTw R+uifH3fgB81rFKKOzPq4vBv+pn3Zur91yxHQBqhAOUSU0w3C8vIxS+ZrSi6kn5X sKoy+CeKsdKykLciIpd52cOmOcECoP+AFL5KZKS/ip24Htarx8uVmaFMOu7rxvor N1gTkoLcWKBeNactVjojQyYJaS3AOLNIsZQQlO26VbXLr9RX0LYDjufzkBXS8VHf hjw8EP/1dISbHrckw+1KRkrRERd0hz9uMHq/ZYB7KAZYw98sqR37b6vuCZJY6fdV DNRRxDPrMTXvyHt6lOop9LHuQW7P0BI2Ao5xrCqB+RNgwZrqiLBR6LiNgzAPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+5VdOA6ZjLgJr8ofi1xWYeglirYwHwYDVR0j BBgwFoAUEyaopCE3iRpws8C7MBzWyyuo4uYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjExMjZkMy0xM2JlLTQ1MDgtYjk3ZC0xM2ZlNjVhNWI0ZDYvMC8xMzI2QThBNDIx Mzc4OTFBNzBCM0MwQkIzMDFDRDZDQjJCQThFMkU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2Q0IyQkE4 RTJFNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjIxMTI2ZDMtMTNiZS00NTA4LWI5 N2QtMTNmZTY1YTViNGQ2LzAvMTMyNkE4QTQyMTM3ODkxQTcwQjNDMEJCMzAxQ0Q2 Q0IyQkE4RTJFNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJE4itWEqfuF9blhsxtjnZo2RHWJnjuaN6jz oWvaEFfTGdQd2PLThSZNV+87H7y50qpvIab8riRnCGLs7Aez9ClPmT97GBU5cVDC QTSLUFJuzq4uLgJoo0lqhmTG51FMUfKCVzeukPJdvNsS0G6NjDtVe3jgfcrxm1ga thpAzFQqx0IdfCfNpb9MNKUjSFCt6Vu0Iosft+71QntH0Z4g4vD26eiS4/VBZvQY GmK8An3D9dG9CBMYQs+HX8iQSZA7iCgDnj9T8D4K4H151dZ6TcgAYaeoZeeSd0wY ANqsYBnqfzyP53+Obuy84Jp1viBRUTt/prHcyaAvsko/U9nS7i4= -----END CERTIFICATE-----Generated at Mon Mar 2 15:34:27 2026 by rpki-client