$ rpki-client -vvf repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft File: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft (raw, json) Hash identifier: GpjZbUDrJ6ov5F6JbWiS+OfwEt2bvI67fCS92BaR/nw= Subject key identifier: 11:D0:54:90:B3:E6:F2:59:D3:BD:EE:02:66:54:49:D1:71:6C:79:3B Authority key identifier: 25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 Certificate issuer: /CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Certificate serial: 2DCC80BECD097B589C9D8B49F54F203DEAC5DB51 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft Manifest number: 0402 Signing time: Sun 01 Mar 2026 14:01:19 +0000 Manifest this update: Sun 01 Mar 2026 13:56:19 +0000 Manifest next update: Wed 04 Mar 2026 14:30:19 +0000 Files and hashes: 1: 3130332e3136312e37362e302f32342d3234203d3e20313431363131.roa (hash: N3FttKyUh2kuG9d8wHtOQP0mDLIwP98y5Nvn/Hjds0w=) 2: 256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl (hash: KVxvVcUbXu1ke/KTQQKpLm2BnW79z8MVc3tDDyna9EA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 14:30:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:cc:80:be:cd:09:7b:58:9c:9d:8b:49:f5:4f:20:3d:ea:c5:db:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=256270ED1D9ED1E43E86D602DAC63FF52F2BD499 Validity Not Before: Mar 1 13:56:19 2026 GMT Not After : Mar 4 14:30:19 2026 GMT Subject: CN=11D05490B3E6F259D3BDEE02665449D1716C793B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ed:1d:9e:f7:38:e6:08:8f:5e:05:44:83:a0: da:aa:6c:89:1b:32:f2:02:79:ff:9c:c9:15:ad:0f: 8e:79:8a:93:d7:88:fb:26:12:9d:1f:b0:4a:76:24: 18:6e:dc:3f:ff:2c:1d:fb:9d:03:03:90:84:3c:05: 17:55:2c:54:68:c5:aa:0b:a8:a9:80:42:a4:34:fa: cb:e7:7a:b7:33:54:e1:66:55:22:cc:bf:81:e1:04: dc:ee:52:3c:a3:1d:73:b9:f4:29:0b:c4:63:cc:76: d9:14:d9:21:22:6a:1c:31:d1:30:c5:8b:69:bc:fb: 7e:7e:99:3e:3d:8a:d3:bd:ad:1f:49:50:f1:f4:1d: e1:dc:ba:1b:3b:14:17:33:e1:f0:90:2c:84:20:c2: cd:ea:06:fc:68:72:8f:29:18:4c:d6:c4:d1:81:2f: 3f:96:e8:13:4a:94:a5:f6:bb:5f:70:f9:d3:88:ab: 40:80:8f:5c:12:d8:05:d4:a4:a4:a1:c8:fb:fe:c7: 4b:0c:69:a2:fb:0a:b7:21:e0:7c:38:f6:be:2d:fa: f6:75:36:13:0f:80:0c:e7:e8:91:af:53:d2:ce:13: 53:22:ae:da:cd:c7:f4:85:cc:4b:c9:c4:bc:61:5f: 67:4f:58:ae:4f:8f:a6:7c:da:3a:35:55:c0:dc:06: 73:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:D0:54:90:B3:E6:F2:59:D3:BD:EE:02:66:54:49:D1:71:6C:79:3B X509v3 Authority Key Identifier: keyid:25:62:70:ED:1D:9E:D1:E4:3E:86:D6:02:DA:C6:3F:F5:2F:2B:D4:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a92de805-c80e-4b5c-99c6-d73d97154db5/0/256270ED1D9ED1E43E86D602DAC63FF52F2BD499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:93:be:db:d2:31:c0:b9:45:84:9c:41:a1:4f:fc:b9:01:c6: bf:86:a8:cd:08:b9:ed:f3:77:47:b4:cd:ab:8e:9b:44:01:4c: 4a:42:c4:7f:fe:84:01:2c:d6:87:45:be:98:07:76:bb:4e:62: 33:55:72:24:7d:f1:c9:95:c6:aa:79:e4:ac:0d:9b:a4:ff:e6: b2:f2:0d:32:b7:3a:ed:96:c4:a4:1a:1f:92:b6:df:e6:00:ed: 8f:a0:41:45:ec:69:5c:bf:78:84:73:65:a4:96:ed:26:1c:22: 51:64:d7:bd:0f:bf:c8:d8:83:68:29:c3:98:b8:57:67:0f:47: ff:e5:1d:9e:ae:6c:e3:d1:44:9a:95:85:7d:ec:88:51:2f:79: 26:4a:30:9a:c7:7a:2e:3f:c2:bd:ff:77:cc:2a:58:61:99:9a: 2b:73:7e:2a:8d:f9:a6:24:c4:93:4d:2c:7e:27:6f:4f:e3:a5: 59:d6:54:66:79:e9:f5:5b:bf:4a:5a:23:ca:48:4f:cc:06:98: fd:f0:8c:78:f3:cc:f7:e1:fb:67:e5:01:7d:37:43:04:8c:43: a0:32:f6:68:17:98:b2:c5:c5:98:5c:62:44:10:fc:a0:ac:00: e8:dd:b8:70:ac:fc:07:5f:44:71:ca:48:c7:01:34:f6:ef:b6: 45:9e:5e:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULcyAvs0Je1icnYtJ9U8gPerF21EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUy RjJCRDQ5OTAeFw0yNjAzMDExMzU2MTlaFw0yNjAzMDQxNDMwMTlaMDMxMTAvBgNV BAMTKDExRDA1NDkwQjNFNkYyNTlEM0JERUUwMjY2NTQ0OUQxNzE2Qzc5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7R2e9zjmCI9eBUSDoNqqbIkb MvICef+cyRWtD455ipPXiPsmEp0fsEp2JBhu3D//LB37nQMDkIQ8BRdVLFRoxaoL qKmAQqQ0+svnerczVOFmVSLMv4HhBNzuUjyjHXO59CkLxGPMdtkU2SEiahwx0TDF i2m8+35+mT49itO9rR9JUPH0HeHcuhs7FBcz4fCQLIQgws3qBvxoco8pGEzWxNGB Lz+W6BNKlKX2u19w+dOIq0CAj1wS2AXUpKShyPv+x0sMaaL7Crch4Hw49r4t+vZ1 NhMPgAzn6JGvU9LOE1MirtrNx/SFzEvJxLxhX2dPWK5Pj6Z82jo1VcDcBnPhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEdBUkLPm8lnTve4CZlRJ0XFseTswHwYDVR0j BBgwFoAUJWJw7R2e0eQ+htYC2sY/9S8r1JkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OTJkZTgwNS1jODBlLTRiNWMtOTljNi1kNzNkOTcxNTRkYjUvMC8yNTYyNzBFRDFE OUVEMUU0M0U4NkQ2MDJEQUM2M0ZGNTJGMkJENDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNGRjUyRjJC RDQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTkyZGU4MDUtYzgwZS00YjVjLTk5 YzYtZDczZDk3MTU0ZGI1LzAvMjU2MjcwRUQxRDlFRDFFNDNFODZENjAyREFDNjNG RjUyRjJCRDQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6TvtvSMcC5RYScQaFP/LkBxr+GqM0Iue3z d0e0zauOm0QBTEpCxH/+hAEs1odFvpgHdrtOYjNVciR98cmVxqp55KwNm6T/5rLy DTK3Ou2WxKQaH5K23+YA7Y+gQUXsaVy/eIRzZaSW7SYcIlFk170Pv8jYg2gpw5i4 V2cPR//lHZ6ubOPRRJqVhX3siFEveSZKMJrHei4/wr3/d8wqWGGZmitzfiqN+aYk xJNNLH4nb0/jpVnWVGZ56fVbv0paI8pIT8wGmP3wjHjzzPfh+2flAX03QwSMQ6Ay 9mgXmLLFxZhcYkQQ/KCsAOjduHCs/AdfRHHKSMcBNPbvtkWeXrA= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:45 2026 by rpki-client