$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft File: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft (raw, json) Hash identifier: LY9cUxs4HNWFu8GRERbQwhaiK+1w4iPcmDrm3Y9YCvI= Subject key identifier: A2:91:1E:98:CA:61:A5:15:EF:5C:33:50:87:C1:00:AA:A5:C9:40:88 Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 Certificate issuer: /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Certificate serial: 266E47E535068814DF019EC2F83DAF7D9580EB3B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft Manifest number: 0558 Signing time: Sun 01 Mar 2026 00:40:46 +0000 Manifest this update: Sun 01 Mar 2026 00:35:46 +0000 Manifest next update: Wed 04 Mar 2026 06:25:46 +0000 Files and hashes: 1: 3130332e3130372e38352e302f32342d3234203d3e20313336383739.roa (hash: 2H5831uY9aR1OjDn1Uun2zJ8vaTAjB4BokOjcc3Moq4=) 2: 3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (hash: kS4p5t1GMvH/jM8YbFoB1ZVwKWJDCBblcchgAgj/oBk=) 3: 3130332e3130372e38342e302f32332d3233203d3e20313336383739.roa (hash: pwYSccPX545l6tOoGmQeGSusfNrCtCRh4u2GvYkMfU8=) 4: 3130332e3130372e38342e302f32342d3234203d3e20313336383739.roa (hash: 1XeF70BDEHHHcVh1tuDQSwar3IQqxD2CsqUhmn5Rqx8=) 5: 3130332e3130352e3231372e302f32342d3234203d3e20313431313337.roa (hash: vjgtOZ549YGHCxNz1PUrDo34FNB9oleC45Iwzg+kYuo=) 6: 2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl (hash: RUpEfoNlf/6hSmMCHtjBmrSGMu2T2xrVvs4VpzE3zQc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 06:25:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:6e:47:e5:35:06:88:14:df:01:9e:c2:f8:3d:af:7d:95:80:eb:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1 Validity Not Before: Mar 1 00:35:46 2026 GMT Not After : Mar 4 06:25:46 2026 GMT Subject: CN=A2911E98CA61A515EF5C335087C100AAA5C94088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:67:71:2d:b8:76:ca:d4:53:96:2e:b7:98:92: 08:e3:7d:bb:8b:e8:36:b1:d4:3e:11:98:39:42:eb: c2:c4:7f:9d:17:e2:e7:e9:40:0f:e4:fe:88:eb:11: a2:1a:63:4a:a7:c6:d2:7a:20:cc:7b:2a:6f:21:61: 9f:6b:5d:09:ea:bf:9b:8a:cb:88:d4:e2:e5:07:5f: 37:bd:5a:a3:e9:82:c1:2d:04:f3:56:35:2d:18:c2: d3:ef:f4:fd:87:64:10:bf:56:86:f6:ae:20:5f:37: 67:2f:67:77:f3:43:b2:71:b7:99:17:24:58:e9:62: a8:40:7e:90:03:10:37:55:19:d1:2e:fb:59:20:83: d8:ed:27:96:c6:d9:b3:95:73:f0:9e:d9:e9:33:c4: 89:10:35:44:db:f4:e1:64:74:a8:b5:6c:ad:dc:3f: aa:eb:5e:de:2b:96:f2:c7:c8:e5:72:31:38:a0:ee: 6b:c1:5d:fc:d8:fa:a9:c2:07:2d:4c:54:1a:06:84: 27:26:0e:ec:e8:5e:0b:66:a2:c6:b0:5d:d5:c4:87: 5b:3e:4e:9a:ec:10:46:a3:8d:a7:a7:98:3f:60:ce: 62:6e:4b:32:19:15:a6:e7:9d:88:27:16:2b:d7:8b: ec:5a:5a:97:1c:25:c7:84:ec:fc:5d:c0:2e:e2:35: ce:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:91:1E:98:CA:61:A5:15:EF:5C:33:50:87:C1:00:AA:A5:C9:40:88 X509v3 Authority Key Identifier: keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:11:81:69:93:d7:bb:aa:e0:16:95:74:2b:79:df:8d:fc:ea: a3:3b:5e:6b:b0:1d:4d:71:14:22:37:70:6d:0d:b5:78:7f:9a: ef:36:44:d0:5b:f9:d0:70:0d:59:17:2d:dc:a2:cd:c9:f8:58: af:43:f1:49:d7:71:71:b7:d0:38:d1:e7:74:a5:31:26:01:33: b7:e7:a8:89:e1:b9:b5:73:ff:d0:d3:d1:59:a1:71:d0:67:b8: 3c:22:cf:b4:0a:e2:4f:7d:17:7c:e8:e1:a2:5e:9d:08:78:f7: af:f6:a5:cf:8f:9c:a1:0c:31:6a:3c:0d:1c:ab:ce:f3:6d:1b: b2:f8:c5:f7:c3:be:bf:a7:1f:17:c5:17:35:c6:a1:6c:e7:da: b6:a5:57:e1:44:1f:da:f9:ed:57:75:da:6d:66:3f:d9:7d:8d: 2a:98:eb:b7:3c:b5:25:fe:12:db:52:0a:a9:fa:08:56:1c:67: 3a:91:89:2e:5a:58:24:11:fa:0c:89:cb:53:a7:52:d3:c2:27: 62:aa:8e:56:c1:84:fc:02:91:c6:98:85:2b:b9:7e:b8:11:ba: 07:bd:95:86:82:a2:57:8d:19:0f:3a:e8:64:f2:f6:39:ec:55: 71:f2:19:56:5b:a3:19:9a:29:38:66:63:b5:54:41:85:c1:51: 74:bc:98:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJm5H5TUGiBTfAZ7C+D2vfZWA6zswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD NjJDREVCMTAeFw0yNjAzMDEwMDM1NDZaFw0yNjAzMDQwNjI1NDZaMDMxMTAvBgNV BAMTKEEyOTExRTk4Q0E2MUE1MTVFRjVDMzM1MDg3QzEwMEFBQTVDOTQwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXZ3EtuHbK1FOWLreYkgjjfbuL 6Dax1D4RmDlC68LEf50X4ufpQA/k/ojrEaIaY0qnxtJ6IMx7Km8hYZ9rXQnqv5uK y4jU4uUHXze9WqPpgsEtBPNWNS0YwtPv9P2HZBC/Vob2riBfN2cvZ3fzQ7Jxt5kX JFjpYqhAfpADEDdVGdEu+1kgg9jtJ5bG2bOVc/Ce2ekzxIkQNUTb9OFkdKi1bK3c P6rrXt4rlvLHyOVyMTig7mvBXfzY+qnCBy1MVBoGhCcmDuzoXgtmosawXdXEh1s+ TprsEEajjaenmD9gzmJuSzIZFabnnYgnFivXi+xaWpccJceE7PxdwC7iNc7ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUopEemMphpRXvXDNQh8EAqqXJQIgwHwYDVR0j BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD REVCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWRkZjE4MWYtMWU4OS00MDIyLTgy ZjgtZTBkYmE4NTllZTJlLzAvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRD NEVDNjJDREVCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0RgWmT17uq4BaVdCt534386qM7XmuwHU1x FCI3cG0NtXh/mu82RNBb+dBwDVkXLdyizcn4WK9D8UnXcXG30DjR53SlMSYBM7fn qInhubVz/9DT0VmhcdBnuDwiz7QK4k99F3zo4aJenQh496/2pc+PnKEMMWo8DRyr zvNtG7L4xffDvr+nHxfFFzXGoWzn2ralV+FEH9r57Vd12m1mP9l9jSqY67c8tSX+ EttSCqn6CFYcZzqRiS5aWCQR+gyJy1OnUtPCJ2KqjlbBhPwCkcaYhSu5frgRuge9 lYaColeNGQ866GTy9jnsVXHyGVZboxmaKThmY7VUQYXBUXS8mPg= -----END CERTIFICATE-----Generated at Mon Mar 2 05:50:16 2026 by rpki-client