$ rpki-client -vvf repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft File: 26425B70294F98035D38788E597A4A6CEB9C9CE5.mft (raw, json) Hash identifier: B4dzoznXDw0N4QPktnyJq3bnVHVgYaoq8eXbwko2BJw= Subject key identifier: 32:31:5F:1D:DC:2F:B0:75:E8:40:CE:13:41:D4:0C:7A:29:B2:7B:FB Authority key identifier: 26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 Certificate issuer: /CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Certificate serial: 1C49EF050ABA52A3167AD5EA7F82FC2C295C7417 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft Manifest number: 0551 Signing time: Sat 28 Feb 2026 15:50:01 +0000 Manifest this update: Sat 28 Feb 2026 15:45:01 +0000 Manifest next update: Wed 04 Mar 2026 00:43:01 +0000 Files and hashes: 1: 26425B70294F98035D38788E597A4A6CEB9C9CE5.crl (hash: DuzyfkrOTrpT0qaeGnUMPH2vP1RVQJkx4onObK8amv4=) 2: 35382e3134352e3137322e302f32342d3234203d3e203436303534.roa (hash: GllxH/PgbP6S2bfFvEpAEeVFKqOz04XhxUteJc/lpd0=) 3: 35382e3134352e3137312e302f32342d3234203d3e203436303534.roa (hash: pPJorPhtoURcHfFuZaHPY1347QHf/vc9r8CP1wzserg=) 4: 35382e3134352e3137332e302f32342d3234203d3e203436303534.roa (hash: OH7ZCJTwnLCxXMNsgmtlP1c6T2EBORCMxpBSErbjzUQ=) 5: 35382e3134352e3136382e302f32342d3234203d3e203436303534.roa (hash: N6AEmETFQ4NGMx3FYjWNV2pifT99NOMKn0cAzmtwEPs=) 6: 35382e3134352e3136392e302f32342d3234203d3e203436303534.roa (hash: FphOhbOvD7rhQc2k+v+l+2rQkAehuLUzPlPUYQrzCzw=) 7: 35382e3134352e3137302e302f32342d3234203d3e203436303534.roa (hash: Hb5P0TDeMBn1cOFH2oq3loUzifYWvfep94RtX5Q9BTY=) 8: 35382e3134352e3137352e302f32342d3234203d3e203436303534.roa (hash: sSjIG0LDeS5saZQ8C2CVyK81s+5ejD72CH0is00YDY4=) 9: 35382e3134352e3136382e302f32312d3231203d3e203436303534.roa (hash: Lu9azehLR4chvFlJHbgACl9g/2sKz1G6TYe/wHO70OY=) 10: 35382e3134352e3137342e302f32342d3234203d3e203436303534.roa (hash: JNMmXBJmRLeZ0v7hbRMvuNCKgvK7sZzrdM1QwWkvKok=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 00:43:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:49:ef:05:0a:ba:52:a3:16:7a:d5:ea:7f:82:fc:2c:29:5c:74:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26425B70294F98035D38788E597A4A6CEB9C9CE5 Validity Not Before: Feb 28 15:45:01 2026 GMT Not After : Mar 4 00:43:01 2026 GMT Subject: CN=32315F1DDC2FB075E840CE1341D40C7A29B27BFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:32:c4:f8:97:33:e6:22:80:96:20:18:d1:29: cc:0c:bc:92:95:bf:05:83:da:c5:2b:8d:81:d7:d4: 6f:cd:ac:98:af:8e:d9:f3:72:40:6f:f3:40:eb:2b: 81:b7:bc:cc:ee:c4:02:2c:f9:0e:bc:0d:f2:34:5b: bd:5e:fb:7b:08:96:99:b3:fb:cc:0c:10:31:c2:a5: c1:4c:12:b0:a9:29:39:83:61:2f:38:9f:04:31:9c: 2c:03:08:7d:ed:82:9f:93:f7:dc:f2:50:f4:8b:07: 87:d6:e7:27:3e:7c:14:77:90:5a:ec:67:f3:53:32: 76:c1:3e:c7:e7:d5:c0:b2:1a:f6:0d:ae:02:fc:cb: 5f:61:73:3a:ce:36:2d:da:6e:d6:3d:27:70:e7:20: 98:b4:9e:f2:79:9d:a8:13:fd:bf:76:0c:65:d7:75: 60:e6:d6:2e:52:35:96:f8:4b:2c:2d:36:32:4e:e2: d7:78:40:c2:98:66:2b:70:66:e8:d1:e3:11:85:4b: 8e:f7:bc:73:4e:e7:a8:05:93:46:4e:8c:74:1f:25: 14:69:7b:eb:e5:b4:92:2a:b1:63:e9:b4:83:4e:0c: 7c:1a:f1:fe:8b:73:ea:70:33:b2:8a:24:bb:6f:03: 9b:35:02:eb:94:a2:0d:cf:56:90:98:51:a5:08:a7: e9:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:31:5F:1D:DC:2F:B0:75:E8:40:CE:13:41:D4:0C:7A:29:B2:7B:FB X509v3 Authority Key Identifier: keyid:26:42:5B:70:29:4F:98:03:5D:38:78:8E:59:7A:4A:6C:EB:9C:9C:E5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26425B70294F98035D38788E597A4A6CEB9C9CE5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cf30936-c750-433b-9c2a-8ff5f38e63d4/0/26425B70294F98035D38788E597A4A6CEB9C9CE5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:2f:49:41:2b:bd:64:af:00:ba:5c:72:ec:6b:cb:d5:ed:bf: 69:2a:aa:a9:a8:23:77:0f:ed:4f:70:40:3a:1a:aa:1f:8c:70: 64:6f:f5:a4:fe:08:85:f1:07:43:64:f9:ef:fa:99:a6:9e:47: 69:bf:08:54:bc:dd:e6:e3:ef:c5:03:c5:8d:96:2a:06:d9:ef: 6d:ee:c9:f9:37:43:34:d3:69:4b:ad:02:9c:96:f1:34:29:57: c6:99:49:57:ba:25:e7:6d:5a:83:5f:ca:28:e4:05:fc:d8:f7: 72:45:ef:70:7c:fd:41:f9:d9:ce:f3:f7:fc:90:a3:64:54:a8: 3c:ea:38:2c:9b:11:02:6a:98:c9:80:2e:f9:32:6d:51:bc:82: 4b:48:2e:91:8a:5e:87:42:9d:4c:27:ca:a9:ef:59:23:51:34: 78:23:aa:43:3a:84:0d:dc:90:37:93:23:21:4b:53:1c:e6:6a: 9a:b2:cd:93:16:8a:d5:3d:bc:f7:74:de:3e:b5:aa:cd:dc:af: e9:c1:8c:b6:0b:67:dc:0d:f5:54:35:2a:72:c0:91:92:bb:18: 7c:aa:6b:a9:11:79:39:a9:99:55:b8:58:46:42:24:b4:6b:c6: d3:82:b6:86:a0:b2:c3:2b:af:37:2b:da:9b:d7:fc:97:32:02: be:c0:b6:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHEnvBQq6UqMWetXqf4L8LClcdBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNF QjlDOUNFNTAeFw0yNjAyMjgxNTQ1MDFaFw0yNjAzMDQwMDQzMDFaMDMxMTAvBgNV BAMTKDMyMzE1RjFEREMyRkIwNzVFODQwQ0UxMzQxRDQwQzdBMjlCMjdCRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpMsT4lzPmIoCWIBjRKcwMvJKV vwWD2sUrjYHX1G/NrJivjtnzckBv80DrK4G3vMzuxAIs+Q68DfI0W71e+3sIlpmz +8wMEDHCpcFMErCpKTmDYS84nwQxnCwDCH3tgp+T99zyUPSLB4fW5yc+fBR3kFrs Z/NTMnbBPsfn1cCyGvYNrgL8y19hczrONi3abtY9J3DnIJi0nvJ5nagT/b92DGXX dWDm1i5SNZb4SywtNjJO4td4QMKYZitwZujR4xGFS473vHNO56gFk0ZOjHQfJRRp e+vltJIqsWPptINODHwa8f6Lc+pwM7KKJLtvA5s1AuuUog3PVpCYUaUIp+nDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMjFfHdwvsHXoQM4TQdQMeimye/swHwYDVR0j BBgwFoAUJkJbcClPmANdOHiOWXpKbOucnOUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2YzMDkzNi1jNzUwLTQzM2ItOWMyYS04ZmY1ZjM4ZTYzZDQvMC8yNjQyNUI3MDI5 NEY5ODAzNUQzODc4OEU1OTdBNEE2Q0VCOUM5Q0U1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRBNkNFQjlD OUNFNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NmMzA5MzYtYzc1MC00MzNiLTlj MmEtOGZmNWYzOGU2M2Q0LzAvMjY0MjVCNzAyOTRGOTgwMzVEMzg3ODhFNTk3QTRB NkNFQjlDOUNFNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALIvSUErvWSvALpccuxry9Xtv2kqqqmoI3cP 7U9wQDoaqh+McGRv9aT+CIXxB0Nk+e/6maaeR2m/CFS83ebj78UDxY2WKgbZ723u yfk3QzTTaUutApyW8TQpV8aZSVe6JedtWoNfyijkBfzY93JF73B8/UH52c7z9/yQ o2RUqDzqOCybEQJqmMmALvkybVG8gktILpGKXodCnUwnyqnvWSNRNHgjqkM6hA3c kDeTIyFLUxzmapqyzZMWitU9vPd03j61qs3cr+nBjLYLZ9wN9VQ1KnLAkZK7GHyq a6kReTmpmVW4WEZCJLRrxtOCtoagssMrrzcr2pvX/JcyAr7Atgg= -----END CERTIFICATE-----Generated at Mon Mar 2 14:42:13 2026 by rpki-client