$ rpki-client -vvf repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft File: 2253C6371953B026517446858EB433A938FA4B06.mft (raw, json) Hash identifier: vUV/MEr9/BPMvMXlMXKO65N5SU6Ll5wKihhl2yxQTx8= Subject key identifier: C4:80:C5:39:6C:58:1B:F7:A1:BA:17:40:AF:05:2B:07:46:86:1F:9E Authority key identifier: 22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 Certificate issuer: /CN=2253C6371953B026517446858EB433A938FA4B06 Certificate serial: 4E25CC1571BC2ABDC4CA9816893B69C82F6D6327 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject info access: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft Manifest number: F7 Signing time: Sat 28 Feb 2026 23:42:39 +0000 Manifest this update: Sat 28 Feb 2026 23:37:39 +0000 Manifest next update: Wed 04 Mar 2026 11:08:39 +0000 Files and hashes: 1: 2253C6371953B026517446858EB433A938FA4B06.crl (hash: rAw+B31D13tyqQ1/32WDQePBctV635S+GuoEh/u/5AA=) 2: 3130332e3232372e32342e302f32342d3234203d3e203536323436.roa (hash: p2JbTeALyG9aK8WKnnAwuAWEvzJMkTyQIFNlD05DkyQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:25:cc:15:71:bc:2a:bd:c4:ca:98:16:89:3b:69:c8:2f:6d:63:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2253C6371953B026517446858EB433A938FA4B06 Validity Not Before: Feb 28 23:37:39 2026 GMT Not After : Mar 4 11:08:39 2026 GMT Subject: CN=C480C5396C581BF7A1BA1740AF052B0746861F9E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:3f:da:b9:51:24:60:12:c4:c4:4c:54:ab:3c: e3:40:57:0d:d5:a6:be:9a:81:6a:c4:78:6d:d5:40: 4b:d8:d0:78:b8:40:a4:6c:29:6f:79:77:e8:7b:19: 7f:b3:e7:a3:e2:33:85:3c:55:03:ad:d4:32:fc:72: 64:19:04:03:62:17:77:b6:98:71:19:75:a8:1e:8f: 78:f2:8b:90:aa:97:76:05:3d:f6:1b:8f:7d:2a:f8: e4:f1:88:c4:5c:27:24:5f:21:18:6d:99:73:48:63: 37:84:95:7d:ed:b2:af:2f:83:fd:d0:7a:b0:ee:9b: 88:cc:d6:34:48:3d:13:b4:80:50:15:12:a1:72:75: 86:a4:62:da:a1:25:c8:97:ec:5e:c5:02:0d:7e:01: b0:6f:8d:5e:ea:25:ab:33:b1:80:1c:f5:ef:bc:e4: 21:fa:75:f0:fc:37:f7:ce:89:64:0b:e8:fc:0a:e7: 18:35:85:a2:9e:e6:f2:fd:05:9b:36:ac:22:a4:bf: e7:f9:32:42:c0:c8:ba:ea:6c:45:39:b1:c9:49:04: ca:b4:37:e8:7e:1b:cf:85:51:a4:60:27:19:39:f3: 93:6a:e8:36:3a:c4:1d:9d:03:e4:51:26:45:ba:75: 98:7b:64:f8:68:bd:23:cb:f0:a6:33:8f:45:f7:a1: ca:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:80:C5:39:6C:58:1B:F7:A1:BA:17:40:AF:05:2B:07:46:86:1F:9E X509v3 Authority Key Identifier: keyid:22:53:C6:37:19:53:B0:26:51:74:46:85:8E:B4:33:A9:38:FA:4B:06 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2253C6371953B026517446858EB433A938FA4B06.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/696e95c2-4887-47fc-8bac-10bb1da97003/0/2253C6371953B026517446858EB433A938FA4B06.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:4d:93:0e:93:6d:b6:09:ff:8b:02:de:64:e6:ff:15:17:37: e8:a5:6c:82:9d:8e:2e:b6:ca:2c:e2:fb:9e:07:c4:e4:1f:7d: df:08:9f:e4:5a:bf:2b:a9:c5:f1:04:8b:3b:49:c4:e2:0b:9a: 75:a3:8e:46:18:3b:93:86:92:3f:25:2c:d6:a6:18:52:73:e2: 57:ab:c2:f7:84:7e:61:b5:3b:cd:5d:8b:1f:79:62:41:d5:49: e0:08:06:da:f4:50:45:8a:6d:89:4d:fe:78:4c:d9:91:5d:28: f1:4a:5c:fe:46:5b:21:d8:2b:08:1b:7c:b5:47:c5:39:15:6a: a3:b5:3e:b0:16:1d:59:29:ba:fd:cf:42:cf:6b:ee:e2:92:63: c3:15:1f:b4:4f:f4:f9:a1:e9:58:f0:ab:b9:6c:d7:99:db:88: 12:d8:3e:ef:e4:91:35:59:45:80:9c:2d:76:11:1c:4f:7f:8e: 3c:5b:ce:c1:4f:51:47:78:76:32:b6:7f:9b:f2:29:ea:a4:b3: 91:b3:52:7f:01:2f:88:5d:07:4f:40:83:42:ed:4c:89:c3:81: 3a:85:71:19:57:44:8a:d0:1f:03:71:42:26:b7:b0:3f:ba:5a: 03:5b:eb:38:54:13:3f:d2:54:46:a0:b6:78:b0:ab:31:2e:88: eb:8d:03:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTiXMFXG8Kr3EypgWiTtpyC9tYycwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkz OEZBNEIwNjAeFw0yNjAyMjgyMzM3MzlaFw0yNjAzMDQxMTA4MzlaMDMxMTAvBgNV BAMTKEM0ODBDNTM5NkM1ODFCRjdBMUJBMTc0MEFGMDUyQjA3NDY4NjFGOUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhP9q5USRgEsTETFSrPONAVw3V pr6agWrEeG3VQEvY0Hi4QKRsKW95d+h7GX+z56PiM4U8VQOt1DL8cmQZBANiF3e2 mHEZdagej3jyi5Cql3YFPfYbj30q+OTxiMRcJyRfIRhtmXNIYzeElX3tsq8vg/3Q erDum4jM1jRIPRO0gFAVEqFydYakYtqhJciX7F7FAg1+AbBvjV7qJaszsYAc9e+8 5CH6dfD8N/fOiWQL6PwK5xg1haKe5vL9BZs2rCKkv+f5MkLAyLrqbEU5sclJBMq0 N+h+G8+FUaRgJxk585Nq6DY6xB2dA+RRJkW6dZh7ZPhovSPL8KYzj0X3ocolAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxIDFOWxYG/ehuhdArwUrB0aGH54wHwYDVR0j BBgwFoAUIlPGNxlTsCZRdEaFjrQzqTj6SwYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 OTZlOTVjMi00ODg3LTQ3ZmMtOGJhYy0xMGJiMWRhOTcwMDMvMC8yMjUzQzYzNzE5 NTNCMDI2NTE3NDQ2ODU4RUI0MzNBOTM4RkE0QjA2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMzQTkzOEZB NEIwNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjk2ZTk1YzItNDg4Ny00N2ZjLThi YWMtMTBiYjFkYTk3MDAzLzAvMjI1M0M2MzcxOTUzQjAyNjUxNzQ0Njg1OEVCNDMz QTkzOEZBNEIwNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1Nkw6TbbYJ/4sC3mTm/xUXN+ilbIKdji62 yizi+54HxOQffd8In+RavyupxfEEiztJxOILmnWjjkYYO5OGkj8lLNamGFJz4ler wveEfmG1O81dix95YkHVSeAIBtr0UEWKbYlN/nhM2ZFdKPFKXP5GWyHYKwgbfLVH xTkVaqO1PrAWHVkpuv3PQs9r7uKSY8MVH7RP9Pmh6Vjwq7ls15nbiBLYPu/kkTVZ RYCcLXYRHE9/jjxbzsFPUUd4djK2f5vyKeqks5GzUn8BL4hdB09Ag0LtTInDgTqF cRlXRIrQHwNxQia3sD+6WgNb6zhUEz/SVEagtniwqzEuiOuNA3A= -----END CERTIFICATE-----Generated at Mon Mar 2 12:26:31 2026 by rpki-client