$ rpki-client -vvf repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft File: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft (raw, json) Hash identifier: ynM87bINuhsjFIYJ0eFhuuNY80qvLG5ZsflVnN0zD3E= Subject key identifier: 5D:EA:1F:A7:F7:EE:67:7E:1F:64:CE:4B:BB:B7:61:D2:96:8F:0F:7C Authority key identifier: 23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D Certificate issuer: /CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Certificate serial: 3FA36E54710013CEEDCEDBFF3CBF07C8F869A91A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft Manifest number: 0556 Signing time: Sat 28 Feb 2026 12:21:58 +0000 Manifest this update: Sat 28 Feb 2026 12:16:58 +0000 Manifest next update: Tue 03 Mar 2026 23:34:58 +0000 Files and hashes: 1: 233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl (hash: Xrh9q3k16nYv/yEIZoe4Nkqo+DAivJvsHwA+CnYbCs0=) 2: 3230322e3136352e33322e302f32302d3234203d3e203137353338.roa (hash: bVRLDmnlkDr+Er81GecVOu1gTofkGixwnSL4beQ/iNg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:34:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a3:6e:54:71:00:13:ce:ed:ce:db:ff:3c:bf:07:c8:f8:69:a9:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D Validity Not Before: Feb 28 12:16:58 2026 GMT Not After : Mar 3 23:34:58 2026 GMT Subject: CN=5DEA1FA7F7EE677E1F64CE4BBBB761D2968F0F7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:e7:1c:90:92:90:72:f7:94:f1:7f:a8:f8:5b: 81:c6:e3:f5:63:e0:be:a4:b4:e3:65:9c:7a:3d:dc: de:2e:26:cf:07:4b:97:3e:6d:ae:1a:96:7e:d2:d6: 21:9c:0a:39:db:fc:fd:9a:eb:41:c5:8c:94:b5:9e: 81:8e:32:fd:b6:7b:52:db:b1:37:b5:f7:fe:b2:bb: 53:43:0a:e1:38:11:dc:06:8b:f4:33:5d:fb:c7:9f: 88:1b:6f:32:d8:ed:54:fc:17:fd:d0:b8:90:fa:a3: 25:95:59:5b:88:30:51:d0:d0:fe:35:29:73:81:56: d0:eb:07:75:45:6b:d6:c4:4d:79:a6:05:aa:cc:2f: bc:84:4b:c2:b9:1c:18:4b:5c:ff:52:1c:7c:36:1a: 38:c1:69:6a:a0:ce:35:cf:a8:fd:b2:d0:ef:61:4a: 97:39:79:51:fe:76:47:30:b3:7d:cc:47:f3:4b:a1: 5a:ab:80:3c:c3:86:ec:4b:50:7c:1c:9a:c0:ac:7c: 4f:31:ef:96:d2:e5:0d:9e:f1:c9:ff:9a:8c:58:b2: 2e:eb:06:e8:b8:b1:60:3d:5b:5f:79:b0:37:3c:5b: aa:c4:3c:91:eb:a1:e0:46:34:9f:77:9c:ff:b6:7e: ae:62:c0:c0:75:21:f9:82:d2:28:84:3e:5f:9a:0c: 28:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:EA:1F:A7:F7:EE:67:7E:1F:64:CE:4B:BB:B7:61:D2:96:8F:0F:7C X509v3 Authority Key Identifier: keyid:23:3A:F2:6D:7D:AE:6C:35:9E:B0:3A:D5:C6:FB:4B:4E:05:DD:F2:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c55eac97-31b5-4f33-82f4-5241470cbbbe/0/233AF26D7DAE6C359EB03AD5C6FB4B4E05DDF23D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:2b:c0:e8:9a:59:d5:79:33:85:27:35:78:80:2b:42:bf:bd: fb:3f:65:9c:d0:94:c0:3b:cd:45:de:76:d8:c4:9a:33:6e:ee: 70:60:f3:a9:5c:d3:c0:64:1c:64:69:bd:45:67:18:36:98:55: 08:4d:4c:24:a7:81:b3:ff:dd:13:65:82:09:98:79:68:bc:66: 8c:8f:9f:2b:35:b1:19:99:a0:de:bd:e4:82:59:54:b4:ea:af: 6c:fd:2c:82:80:33:0b:6e:6d:d9:d6:4e:9a:e9:14:b4:6c:8a: 8f:75:c5:f3:70:09:81:b6:2d:fe:9b:2f:27:19:f1:fb:3f:d0: 1b:0a:c2:eb:79:b6:ea:05:79:30:6d:da:a8:51:46:4a:69:cb: 10:78:69:d1:a9:80:d2:0b:09:20:76:9b:c8:9f:4a:9e:f0:d6: 0e:be:10:c5:34:82:bc:49:04:05:a9:9e:1c:d1:f6:79:26:b8: ba:62:64:8f:04:93:55:4f:5f:f6:ef:30:c7:ac:7b:11:ec:a6: b0:d9:17:2b:ed:48:eb:49:76:62:b3:01:30:1e:cd:e6:ea:6a: 75:d1:ad:b0:35:79:f3:9b:5f:be:74:c0:49:bd:62:54:1d:2c: c3:ff:a2:e0:8d:70:9f:da:c4:21:40:de:80:85:30:33:72:c9: 73:42:66:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6NuVHEAE87tztv/PL8HyPhpqRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUw NURERjIzRDAeFw0yNjAyMjgxMjE2NThaFw0yNjAzMDMyMzM0NThaMDMxMTAvBgNV BAMTKDVERUExRkE3RjdFRTY3N0UxRjY0Q0U0QkJCQjc2MUQyOTY4RjBGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC85xyQkpBy95Txf6j4W4HG4/Vj 4L6ktONlnHo93N4uJs8HS5c+ba4aln7S1iGcCjnb/P2a60HFjJS1noGOMv22e1Lb sTe19/6yu1NDCuE4EdwGi/QzXfvHn4gbbzLY7VT8F/3QuJD6oyWVWVuIMFHQ0P41 KXOBVtDrB3VFa9bETXmmBarML7yES8K5HBhLXP9SHHw2GjjBaWqgzjXPqP2y0O9h Spc5eVH+dkcws33MR/NLoVqrgDzDhuxLUHwcmsCsfE8x75bS5Q2e8cn/moxYsi7r Bui4sWA9W195sDc8W6rEPJHroeBGNJ93nP+2fq5iwMB1IfmC0iiEPl+aDCjPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXeofp/fuZ34fZM5Lu7dh0paPD3wwHwYDVR0j BBgwFoAUIzrybX2ubDWesDrVxvtLTgXd8j0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NTVlYWM5Ny0zMWI1LTRmMzMtODJmNC01MjQxNDcwY2JiYmUvMC8yMzNBRjI2RDdE QUU2QzM1OUVCMDNBRDVDNkZCNEI0RTA1RERGMjNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRCNEUwNURE RjIzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzU1ZWFjOTctMzFiNS00ZjMzLTgy ZjQtNTI0MTQ3MGNiYmJlLzAvMjMzQUYyNkQ3REFFNkMzNTlFQjAzQUQ1QzZGQjRC NEUwNURERjIzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMQrwOiaWdV5M4UnNXiAK0K/vfs/ZZzQlMA7 zUXedtjEmjNu7nBg86lc08BkHGRpvUVnGDaYVQhNTCSngbP/3RNlggmYeWi8ZoyP nys1sRmZoN695IJZVLTqr2z9LIKAMwtubdnWTprpFLRsio91xfNwCYG2Lf6bLycZ 8fs/0BsKwut5tuoFeTBt2qhRRkppyxB4adGpgNILCSB2m8ifSp7w1g6+EMU0grxJ BAWpnhzR9nkmuLpiZI8Ek1VPX/bvMMesexHsprDZFyvtSOtJdmKzATAezebqanXR rbA1efObX750wEm9YlQdLMP/ouCNcJ/axCFA3oCFMDNyyXNCZoo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:29 2026 by rpki-client