$ rpki-client -vvf repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft File: 248C652A73F35EA32B7EC526D977784EB15D2C7D.mft (raw, json) Hash identifier: RbgtDbpMaXuhOvAWuak6fNEX/7jrujFGZwS+CAmLOmk= Subject key identifier: 8B:F2:03:DD:58:E3:43:B8:DE:84:17:F9:8F:B8:6E:82:33:D3:8F:A1 Authority key identifier: 24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D Certificate issuer: /CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Certificate serial: E2CAF52D0AA2DF13D52873BD5650B19A1E5999 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft Manifest number: 017D Signing time: Sat 28 Feb 2026 22:12:14 +0000 Manifest this update: Sat 28 Feb 2026 22:07:14 +0000 Manifest next update: Tue 03 Mar 2026 23:38:14 +0000 Files and hashes: 1: 248C652A73F35EA32B7EC526D977784EB15D2C7D.crl (hash: +SXYWtCXnA5it3pbWIZknP06akBk64njlq40xHWyiB0=) 2: 3130332e39312e35352e302f32342d3234203d3e20313530323538.roa (hash: hrEA+sbnpkWh5dltJTQ7io5F8zxoqQPqvRB5+Ub+z3c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:38:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: e2:ca:f5:2d:0a:a2:df:13:d5:28:73:bd:56:50:b1:9a:1e:59:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=248C652A73F35EA32B7EC526D977784EB15D2C7D Validity Not Before: Feb 28 22:07:14 2026 GMT Not After : Mar 3 23:38:14 2026 GMT Subject: CN=8BF203DD58E343B8DE8417F98FB86E8233D38FA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ef:44:32:a2:83:37:a1:02:ff:6a:1f:47:6a: a7:6a:78:7b:e3:a5:d3:e3:54:76:46:fc:b3:ff:d8: 1f:01:28:52:9a:46:b4:12:4d:cf:ae:eb:d9:d9:d4: fe:39:83:90:92:0f:40:24:18:47:31:ee:bf:06:f8: e2:96:6f:f8:d1:5f:f9:ce:dd:dd:83:2a:63:f8:84: 08:cf:f8:33:24:b3:c4:fa:71:e3:40:05:cd:9c:50: 2b:e7:c3:84:91:82:eb:0f:9b:76:a5:e5:dc:20:29: 17:8e:56:5a:e4:2e:d8:7b:ba:e0:f3:26:e6:a0:f1: ac:9f:6d:a2:97:8f:3b:52:77:cd:6f:5f:4d:d2:89: 03:99:3e:bd:fc:5e:c5:3a:60:75:70:00:0f:cf:72: ab:b2:45:d6:7d:86:a8:21:e3:57:98:d2:0e:3a:90: 77:b7:2f:64:18:f0:7f:c6:5d:6e:61:2c:2c:7d:65: 73:8e:6c:76:ba:bd:7a:86:df:7f:e3:1e:22:3e:f7: b1:72:9f:2c:11:b1:b1:9e:9f:32:4f:79:c4:01:03: cc:cf:1a:5d:88:1e:ff:df:c5:73:72:b7:92:5e:c5: a7:48:86:b7:30:85:e7:47:c4:bc:d1:9a:8d:29:ad: 2c:60:6a:55:01:46:5d:f0:3f:1c:6d:f6:d9:07:61: 5b:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:F2:03:DD:58:E3:43:B8:DE:84:17:F9:8F:B8:6E:82:33:D3:8F:A1 X509v3 Authority Key Identifier: keyid:24:8C:65:2A:73:F3:5E:A3:2B:7E:C5:26:D9:77:78:4E:B1:5D:2C:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/248C652A73F35EA32B7EC526D977784EB15D2C7D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2ffbaf71-2d57-4e4a-91d0-cac8ab0acefe/0/248C652A73F35EA32B7EC526D977784EB15D2C7D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:5f:f7:48:83:cc:99:ea:60:1f:4b:a6:8a:11:f9:0a:e3:9b: 9a:e6:59:09:08:dc:2f:41:a5:f7:bf:8e:ac:82:9c:2a:ae:e7: b0:1f:30:c8:97:5b:37:5f:11:aa:9b:b7:59:1e:be:5e:a1:e2: 52:f7:bf:04:77:72:ea:ea:a9:39:59:51:59:73:84:1e:0b:76: 84:8a:e0:15:e1:86:79:80:ce:f3:6a:3b:d4:fc:16:ab:45:b4: a4:fe:da:04:a8:2d:44:1f:17:4c:50:07:43:c0:b9:fb:f9:a0: 4d:50:56:e8:23:0d:bf:7b:83:ba:c0:7c:c9:c6:80:f2:e9:b5: 1a:39:17:99:d2:e7:cc:e1:5e:46:85:39:a5:23:7d:cd:a9:ad: 7b:89:74:46:5a:5a:4c:17:95:ec:64:82:11:a2:62:06:67:aa: 6b:ed:f8:8f:03:b1:cb:c4:97:dc:89:4d:8e:f3:27:f9:c2:40: 5a:8f:9a:86:c0:a1:98:f5:86:ff:f7:66:78:52:ab:26:9e:ff: bd:e3:97:6d:9f:2a:2c:f3:03:b4:76:00:23:b5:71:f7:b7:6b: 23:b9:8e:33:77:88:55:01:e2:b4:db:17:e5:d6:37:76:f2:e9: 59:d7:4a:25:df:9a:3a:3f:37:19:14:11:c9:b0:6f:bc:ec:aa: 0a:20:99:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAOLK9S0Kot8T1ShzvVZQsZoeWZkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVC MTVEMkM3RDAeFw0yNjAyMjgyMjA3MTRaFw0yNjAzMDMyMzM4MTRaMDMxMTAvBgNV BAMTKDhCRjIwM0RENThFMzQzQjhERTg0MTdGOThGQjg2RTgyMzNEMzhGQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq70QyooM3oQL/ah9HaqdqeHvj pdPjVHZG/LP/2B8BKFKaRrQSTc+u69nZ1P45g5CSD0AkGEcx7r8G+OKWb/jRX/nO 3d2DKmP4hAjP+DMks8T6ceNABc2cUCvnw4SRgusPm3al5dwgKReOVlrkLth7uuDz Juag8ayfbaKXjztSd81vX03SiQOZPr38XsU6YHVwAA/PcquyRdZ9hqgh41eY0g46 kHe3L2QY8H/GXW5hLCx9ZXOObHa6vXqG33/jHiI+97FynywRsbGenzJPecQBA8zP Gl2IHv/fxXNyt5JexadIhrcwhedHxLzRmo0prSxgalUBRl3wPxxt9tkHYVtrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi/ID3VjjQ7jehBf5j7hugjPTj6EwHwYDVR0j BBgwFoAUJIxlKnPzXqMrfsUm2Xd4TrFdLH0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZmZiYWY3MS0yZDU3LTRlNGEtOTFkMC1jYWM4YWIwYWNlZmUvMC8yNDhDNjUyQTcz RjM1RUEzMkI3RUM1MjZEOTc3Nzg0RUIxNUQyQzdELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4NEVCMTVE MkM3RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmZmYmFmNzEtMmQ1Ny00ZTRhLTkx ZDAtY2FjOGFiMGFjZWZlLzAvMjQ4QzY1MkE3M0YzNUVBMzJCN0VDNTI2RDk3Nzc4 NEVCMTVEMkM3RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAChf90iDzJnqYB9LpooR+Qrjm5rmWQkI3C9B pfe/jqyCnCqu57AfMMiXWzdfEaqbt1kevl6h4lL3vwR3curqqTlZUVlzhB4LdoSK 4BXhhnmAzvNqO9T8FqtFtKT+2gSoLUQfF0xQB0PAufv5oE1QVugjDb97g7rAfMnG gPLptRo5F5nS58zhXkaFOaUjfc2prXuJdEZaWkwXlexkghGiYgZnqmvt+I8DscvE l9yJTY7zJ/nCQFqPmobAoZj1hv/3ZnhSqyae/73jl22fKizzA7R2ACO1cfe3ayO5 jjN3iFUB4rTbF+XWN3by6VnXSiXfmjo/NxkUEcmwb7zsqgogmQs= -----END CERTIFICATE-----Generated at Mon Mar 2 03:56:13 2026 by rpki-client