$ rpki-client -vvf repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft File: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft (raw, json) Hash identifier: BTYMYAfcim0yywsVNsabn8g9O7Ksl4TFaL3JJhEHpQ0= Subject key identifier: BC:AC:FA:B5:02:C8:2A:04:BA:EA:BD:40:99:CC:64:CE:2C:24:63:01 Authority key identifier: C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF Certificate issuer: /CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Certificate serial: 193254E32491613494A3AF2157CD386755A11DF0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft Manifest number: 0438 Signing time: Sat 28 Feb 2026 19:12:18 +0000 Manifest this update: Sat 28 Feb 2026 19:07:18 +0000 Manifest next update: Tue 03 Mar 2026 22:20:18 +0000 Files and hashes: 1: 3130332e3135382e3235302e302f32332d3234203d3e20313431313334.roa (hash: mHrQdAWzgukpq1uhfthGMPrahr33iPxszxBReLubhDU=) 2: C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl (hash: ZhfkMuAmNkHiWwpmfPKwmhTD2eLbvJYr0uqOteYxTSQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 22:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:32:54:e3:24:91:61:34:94:a3:af:21:57:cd:38:67:55:a1:1d:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF Validity Not Before: Feb 28 19:07:18 2026 GMT Not After : Mar 3 22:20:18 2026 GMT Subject: CN=BCACFAB502C82A04BAEABD4099CC64CE2C246301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:2a:1e:1e:64:c8:de:f6:46:a0:d5:76:fb:be: 2e:0a:f8:a4:27:cf:52:61:21:2a:81:34:72:ff:0e: 55:be:3b:51:5a:85:d5:1a:98:1a:f0:2e:ea:63:77: cb:61:db:8c:c3:85:10:95:5d:70:ab:56:f8:d5:cd: f2:44:9e:7c:83:34:09:d7:ce:2d:26:8c:fb:5c:61: 2e:2e:f1:d9:db:a8:82:62:4c:4f:5e:d9:fe:21:c0: f8:f8:15:11:bf:f7:7d:c6:0d:dc:b7:f6:d2:6c:75: 6d:a2:d5:1e:04:08:7e:84:ba:bc:39:78:e8:8a:14: 89:f5:7a:55:e0:3a:1b:b9:dc:28:4a:a8:aa:dd:36: e8:79:af:dc:30:35:43:44:ff:7f:38:63:fc:60:3d: 8e:1f:db:c4:e0:b5:ca:2d:67:67:53:37:6a:35:37: 5b:f0:51:37:13:f1:dd:ce:ea:58:44:c9:6a:45:5a: d5:d6:d5:7c:fd:f0:44:9c:d2:06:74:a4:db:b6:09: 6e:c1:53:9c:60:02:9a:b1:07:95:79:98:91:84:fa: cd:f7:fc:e9:c7:b8:9a:f4:8f:92:01:46:81:60:e7: 6d:42:44:6f:50:8a:38:45:6e:54:f8:d5:ab:72:72: db:03:68:25:2b:a5:29:7c:84:3f:8e:9f:45:08:30: 22:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:AC:FA:B5:02:C8:2A:04:BA:EA:BD:40:99:CC:64:CE:2C:24:63:01 X509v3 Authority Key Identifier: keyid:C5:54:E8:91:C5:83:CE:2A:BF:2D:B5:DE:E8:21:F6:B6:30:BF:F5:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cd7c7ac2-5a9b-492a-a4c5-1f13590dae06/0/C554E891C583CE2ABF2DB5DEE821F6B630BFF5DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:3a:48:cf:53:21:c3:14:ac:bc:0f:47:26:63:f4:89:4f:d3: 1d:be:b2:e3:b9:41:2c:af:bb:44:47:38:13:be:46:7e:f5:d1: fa:b9:8d:41:8e:27:93:97:25:67:6f:33:18:de:04:04:7e:c4: 81:46:48:b7:c1:d8:aa:3c:4f:a2:03:6f:a4:b3:eb:af:63:75: 22:51:08:2a:75:73:31:6e:ff:8f:6d:c6:c2:50:2d:cb:80:35: 56:58:d8:a2:47:90:4f:09:a0:3c:1f:30:fa:81:3a:8b:c5:62: 8c:9b:a3:2d:fb:77:95:67:6f:a5:ae:74:54:15:da:a6:41:88: a3:cd:6c:04:b4:16:99:3e:04:76:d4:46:c6:ad:ca:e2:a4:ea: 4e:63:1c:85:41:05:4b:d2:f8:7c:c7:bc:ee:77:1c:a7:49:1c: 5d:71:5b:05:c2:68:04:0d:88:be:8f:c7:ee:8a:11:93:66:9a: 7c:32:ba:01:6b:8b:8f:c6:eb:83:19:21:29:94:7d:7f:3a:a7: 57:bd:92:07:60:6f:62:bf:ff:1d:c3:62:74:6e:67:0b:18:23: 8f:fb:19:54:4a:0c:fa:bd:89:1d:cf:62:85:c8:ef:5b:cd:dd: a7:3f:9b:c7:40:95:24:12:72:5d:0b:08:6f:d2:b0:c4:fa:8e: ff:f7:68:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGTJU4ySRYTSUo68hV804Z1WhHfAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYz MEJGRjVERjAeFw0yNjAyMjgxOTA3MThaFw0yNjAzMDMyMjIwMThaMDMxMTAvBgNV BAMTKEJDQUNGQUI1MDJDODJBMDRCQUVBQkQ0MDk5Q0M2NENFMkMyNDYzMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXKh4eZMje9kag1Xb7vi4K+KQn z1JhISqBNHL/DlW+O1FahdUamBrwLupjd8th24zDhRCVXXCrVvjVzfJEnnyDNAnX zi0mjPtcYS4u8dnbqIJiTE9e2f4hwPj4FRG/933GDdy39tJsdW2i1R4ECH6Eurw5 eOiKFIn1elXgOhu53ChKqKrdNuh5r9wwNUNE/384Y/xgPY4f28TgtcotZ2dTN2o1 N1vwUTcT8d3O6lhEyWpFWtXW1Xz98ESc0gZ0pNu2CW7BU5xgApqxB5V5mJGE+s33 /OnHuJr0j5IBRoFg521CRG9QijhFblT41atyctsDaCUrpSl8hD+On0UIMCLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvKz6tQLIKgS66r1AmcxkziwkYwEwHwYDVR0j BBgwFoAUxVTokcWDziq/LbXe6CH2tjC/9d8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZDdjN2FjMi01YTliLTQ5MmEtYTRjNS0xZjEzNTkwZGFlMDYvMC9DNTU0RTg5MUM1 ODNDRTJBQkYyREI1REVFODIxRjZCNjMwQkZGNURGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2QjYzMEJG RjVERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2Q3YzdhYzItNWE5Yi00OTJhLWE0 YzUtMWYxMzU5MGRhZTA2LzAvQzU1NEU4OTFDNTgzQ0UyQUJGMkRCNURFRTgyMUY2 QjYzMEJGRjVERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKY6SM9TIcMUrLwPRyZj9IlP0x2+suO5QSyv u0RHOBO+Rn710fq5jUGOJ5OXJWdvMxjeBAR+xIFGSLfB2Ko8T6IDb6Sz669jdSJR CCp1czFu/49txsJQLcuANVZY2KJHkE8JoDwfMPqBOovFYoyboy37d5Vnb6WudFQV 2qZBiKPNbAS0Fpk+BHbURsatyuKk6k5jHIVBBUvS+HzHvO53HKdJHF1xWwXCaAQN iL6Px+6KEZNmmnwyugFri4/G64MZISmUfX86p1e9kgdgb2K//x3DYnRuZwsYI4/7 GVRKDPq9iR3PYoXI71vN3ac/m8dAlSQScl0LCG/SsMT6jv/3aIA= -----END CERTIFICATE-----Generated at Mon Mar 2 13:01:05 2026 by rpki-client