$ rpki-client -vvf repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft File: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft (raw, json) Hash identifier: rTP07qwel4pcarfs9gnX/OOTVdzi8LWyWSVvrKnYeIE= Subject key identifier: 94:E7:CD:65:B1:40:B9:66:15:4D:9C:E4:D4:CC:4F:A5:68:34:3F:7E Authority key identifier: 25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 Certificate issuer: /CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Certificate serial: 5F28B2C28599F5DC6A8AF18F63D8726C30DE8C9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 02:51:45 +0000 Manifest this update: Sun 01 Mar 2026 02:46:45 +0000 Manifest next update: Wed 04 Mar 2026 05:02:45 +0000 Files and hashes: 1: 3230322e35312e3232342e302f32302d3234203d3e203338313434.roa (hash: N2YGkCBG++ItZbATxx+8Wnv+w5mJADtnDrbFxCasjwk=) 2: 253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl (hash: /g9Pyls1dDNtO6tUmP+Six4EfmiPd6A5QoItDrQUbDA=) 3: 36302e3235332e39362e302f31392d3234203d3e203338313434.roa (hash: gI7OgYv6GfwsEVRaXvd5tRlYtRW/gCZ+OwdOGTRV5w8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 05:02:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:28:b2:c2:85:99:f5:dc:6a:8a:f1:8f:63:d8:72:6c:30:de:8c:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=253E2BB4DE467AF08F191AF7632EE3BD058DA101 Validity Not Before: Mar 1 02:46:45 2026 GMT Not After : Mar 4 05:02:45 2026 GMT Subject: CN=94E7CD65B140B966154D9CE4D4CC4FA568343F7E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7e:40:67:4a:78:03:9a:d4:33:db:ae:92:7e: 1d:4b:09:c8:70:b1:38:4b:e0:05:44:29:4c:8c:eb: d9:57:a6:e9:77:e1:d6:1e:03:38:97:0d:d3:6c:06: 1f:91:61:ed:1e:00:ee:a0:aa:61:38:29:8f:09:bd: 5c:35:56:51:a7:09:67:23:6f:3c:75:b2:5e:64:e9: 60:3a:e8:a9:69:13:54:a3:f8:7c:1b:c9:c2:11:ce: 29:fb:29:d7:c9:7e:3f:f6:57:c4:2c:ba:c1:6a:8c: 9b:53:5f:46:d9:27:a2:d4:b5:66:6d:0e:fb:b4:6f: 7e:4e:95:43:bf:1c:f9:26:ca:02:a2:69:b0:40:95: 9f:a6:8b:bd:78:f1:e7:25:3b:a4:1d:1b:2a:6a:22: 5e:d9:2d:fb:15:8a:52:af:4b:ea:e7:60:55:af:31: 56:9e:85:9a:af:44:cc:3e:0c:6d:22:d0:8c:95:01: 27:16:a0:e8:26:1b:b9:03:e2:ed:ef:67:f0:92:da: 07:34:0f:0f:7a:d6:4b:ea:ba:06:1f:7f:28:6f:5a: 20:06:42:22:9b:93:56:a1:33:c0:e7:73:ca:f4:bf: e8:06:71:16:d5:0e:77:82:82:7b:04:8f:52:7f:23: b5:8a:de:07:d8:28:51:81:d9:d5:e1:93:c2:d6:ca: 6e:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E7:CD:65:B1:40:B9:66:15:4D:9C:E4:D4:CC:4F:A5:68:34:3F:7E X509v3 Authority Key Identifier: keyid:25:3E:2B:B4:DE:46:7A:F0:8F:19:1A:F7:63:2E:E3:BD:05:8D:A1:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/253E2BB4DE467AF08F191AF7632EE3BD058DA101.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cd7536d-9e10-4d49-b6ca-041cc9a5914e/0/253E2BB4DE467AF08F191AF7632EE3BD058DA101.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:86:b0:a3:03:41:b3:e2:34:ff:85:cd:2f:b8:99:50:29:77: 15:bf:c4:43:17:0f:3f:6e:38:e4:0e:33:55:6d:f5:23:d2:27: fa:a7:3c:37:a3:db:78:2a:b9:29:a4:a6:03:52:09:4c:20:b5: 67:66:92:2f:20:23:ce:19:49:95:90:06:24:d6:95:54:fd:71: f3:a3:87:04:d4:84:23:eb:5f:b5:1e:23:0f:0b:1d:39:00:27: cc:4f:c0:30:09:76:73:54:30:42:d6:63:0f:3a:92:ec:0a:01: 79:f0:fb:1c:88:07:a0:b2:87:9f:14:bb:6c:7a:4f:81:7e:d6: bf:2b:cf:59:bd:06:16:f8:82:a3:da:47:8c:7d:8e:46:7e:a0: 2d:fe:1b:9e:df:64:9e:e0:33:f7:48:d7:dc:08:f9:9a:dc:18: 8f:02:cc:73:39:d1:d6:10:cf:04:8f:95:f1:ee:ba:2b:f3:e1: ec:f1:81:a3:56:f2:c0:ab:4e:6b:2a:f3:58:5e:ac:31:ab:1f: 8f:38:83:97:b6:77:91:f9:54:a1:91:36:bc:25:eb:2f:6e:21: 9b:d3:12:b0:c2:3f:73:c9:29:95:f4:e6:1e:24:cd:b5:91:d1: 33:01:21:de:68:c1:79:e7:f8:16:eb:59:3b:0c:f3:30:b6:c1: ec:6b:c8:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXyiywoWZ9dxqivGPY9hybDDejJ0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQw NThEQTEwMTAeFw0yNjAzMDEwMjQ2NDVaFw0yNjAzMDQwNTAyNDVaMDMxMTAvBgNV BAMTKDk0RTdDRDY1QjE0MEI5NjYxNTREOUNFNEQ0Q0M0RkE1NjgzNDNGN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCofkBnSngDmtQz266Sfh1LCchw sThL4AVEKUyM69lXpul34dYeAziXDdNsBh+RYe0eAO6gqmE4KY8JvVw1VlGnCWcj bzx1sl5k6WA66KlpE1Sj+HwbycIRzin7KdfJfj/2V8QsusFqjJtTX0bZJ6LUtWZt Dvu0b35OlUO/HPkmygKiabBAlZ+mi7148eclO6QdGypqIl7ZLfsVilKvS+rnYFWv MVaehZqvRMw+DG0i0IyVAScWoOgmG7kD4u3vZ/CS2gc0Dw961kvqugYffyhvWiAG QiKbk1ahM8Dnc8r0v+gGcRbVDneCgnsEj1J/I7WK3gfYKFGB2dXhk8LWym57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlOfNZbFAuWYVTZzk1MxPpWg0P34wHwYDVR0j BBgwFoAUJT4rtN5GevCPGRr3Yy7jvQWNoQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2Q3NTM2ZC05ZTEwLTRkNDktYjZjYS0wNDFjYzlhNTkxNGUvMC8yNTNFMkJCNERF NDY3QUYwOEYxOTFBRjc2MzJFRTNCRDA1OERBMTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUzQkQwNThE QTEwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNkNzUzNmQtOWUxMC00ZDQ5LWI2 Y2EtMDQxY2M5YTU5MTRlLzAvMjUzRTJCQjRERTQ2N0FGMDhGMTkxQUY3NjMyRUUz QkQwNThEQTEwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFuGsKMDQbPiNP+FzS+4mVApdxW/xEMXDz9u OOQOM1Vt9SPSJ/qnPDej23gquSmkpgNSCUwgtWdmki8gI84ZSZWQBiTWlVT9cfOj hwTUhCPrX7UeIw8LHTkAJ8xPwDAJdnNUMELWYw86kuwKAXnw+xyIB6Cyh58Uu2x6 T4F+1r8rz1m9Bhb4gqPaR4x9jkZ+oC3+G57fZJ7gM/dI19wI+ZrcGI8CzHM50dYQ zwSPlfHuuivz4ezxgaNW8sCrTmsq81herDGrH484g5e2d5H5VKGRNrwl6y9uIZvT ErDCP3PJKZX05h4kzbWR0TMBId5owXnn+BbrWTsM8zC2wexryKY= -----END CERTIFICATE-----Generated at Mon Mar 2 02:15:50 2026 by rpki-client