$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: sjHkGh9hRgIg/r7m4UtiqB1grngBcpxhxtEU92It3BM= Subject key identifier: 9C:3F:CE:D4:77:2D:5F:BF:79:78:C3:E3:69:AA:73:23:97:17:CD:52 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 0596F3F4BFCE9A38729610A62208151939F8559C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 0528 Signing time: Fri 27 Feb 2026 18:40:59 +0000 Manifest this update: Fri 27 Feb 2026 18:35:59 +0000 Manifest next update: Tue 03 Mar 2026 02:33:59 +0000 Files and hashes: 1: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: l0tI+RrCuNbPtPx8KBkqjpOBFqva9Z5MQsHXOUeIREY=) 2: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 3: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 4: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 5: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 02:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:96:f3:f4:bf:ce:9a:38:72:96:10:a6:22:08:15:19:39:f8:55:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Feb 27 18:35:59 2026 GMT Not After : Mar 3 02:33:59 2026 GMT Subject: CN=9C3FCED4772D5FBF7978C3E369AA73239717CD52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:40:6c:6a:99:ff:64:01:f7:b8:cb:a5:aa:59: b4:7c:64:af:1a:bc:1b:87:9e:c6:f8:51:33:25:01: 38:16:01:ac:0c:1e:23:7e:0d:2d:98:ad:ba:2a:5e: e1:59:4a:0a:8a:9f:13:9c:d3:28:06:69:a5:0d:da: 3a:8f:bf:56:7e:82:7e:89:06:93:94:53:9f:30:cc: 4f:55:42:86:6b:9d:1d:19:c7:8e:6b:38:d2:d6:4a: ea:4e:45:9b:dd:52:3c:d2:b1:ba:fe:f3:b8:df:eb: 9c:46:4d:94:28:03:90:2c:1c:e2:f8:d0:7c:ec:18: ab:ab:16:2c:5a:cf:64:a4:69:8e:ca:71:79:5c:64: 9b:b7:37:5a:a6:b9:a2:10:53:2a:60:f3:0c:79:36: 57:91:fc:f7:e9:0d:84:c7:96:b4:d0:8b:8e:e1:8d: 6d:b2:5a:f4:cd:3b:2c:33:3e:49:b8:7c:65:62:f2: 37:1c:41:c5:6c:e4:3c:44:24:00:4a:0f:5a:8c:9e: c8:71:79:5a:b1:b7:9d:b8:64:83:47:9e:6b:83:a5: 98:13:58:0a:68:75:68:bd:44:2f:f7:48:7d:57:26: e0:56:e8:44:82:bb:0e:4c:09:56:de:78:c1:61:5b: 5a:86:8b:55:90:e9:ab:f2:23:bd:25:de:29:71:72: 88:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:3F:CE:D4:77:2D:5F:BF:79:78:C3:E3:69:AA:73:23:97:17:CD:52 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:3b:46:c7:b1:c2:31:29:fa:3c:6c:2c:71:1a:d2:83:5e:46: 89:09:f9:12:20:2c:ae:59:db:f4:a7:d5:9d:49:02:d1:05:f9: eb:10:73:e2:69:fc:44:b1:cf:e2:ae:ec:d4:ef:62:60:7e:2f: 18:76:f5:23:d9:96:79:92:c6:79:83:92:ff:2f:df:e8:c9:fc: 0c:c7:12:36:45:d7:c3:bc:e1:bf:86:98:69:5a:33:f3:89:a8: b6:ba:4a:b7:f8:06:a7:c8:74:41:ee:2e:3e:48:13:3f:19:07: 40:86:04:a0:a7:38:d1:a2:eb:67:6e:ea:c8:42:d6:67:16:a4: e8:04:57:82:12:77:f3:9b:7e:5d:d6:f2:4e:d6:2f:46:ac:06: ea:33:74:4a:d2:45:a1:ae:6f:79:2f:94:96:32:50:38:ae:ea: 99:88:c6:cb:c7:01:94:f3:3f:b8:7d:db:0c:fc:ff:70:d6:c3: 06:6c:92:ce:25:66:37:c2:0d:a4:a9:d1:b8:b8:10:5b:da:8a: 10:37:bf:88:80:a4:69:e4:f7:66:2a:5d:10:54:fc:62:9a:0d: 00:bf:c6:43:01:3e:10:83:da:c4:5b:52:69:39:72:77:63:7b: 8e:fb:45:8c:1b:8b:5a:5a:47:10:bd:14:89:f2:f0:fa:43:5f: f7:ca:25:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBZbz9L/OmjhylhCmIggVGTn4VZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNjAyMjcxODM1NTlaFw0yNjAzMDMwMjMzNTlaMDMxMTAvBgNV BAMTKDlDM0ZDRUQ0NzcyRDVGQkY3OTc4QzNFMzY5QUE3MzIzOTcxN0NENTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVQGxqmf9kAfe4y6WqWbR8ZK8a vBuHnsb4UTMlATgWAawMHiN+DS2YrboqXuFZSgqKnxOc0ygGaaUN2jqPv1Z+gn6J BpOUU58wzE9VQoZrnR0Zx45rONLWSupORZvdUjzSsbr+87jf65xGTZQoA5AsHOL4 0HzsGKurFixaz2SkaY7KcXlcZJu3N1qmuaIQUypg8wx5NleR/PfpDYTHlrTQi47h jW2yWvTNOywzPkm4fGVi8jccQcVs5DxEJABKD1qMnshxeVqxt524ZINHnmuDpZgT WApodWi9RC/3SH1XJuBW6ESCuw5MCVbeeMFhW1qGi1WQ6avyI70l3ilxcoiLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnD/O1HctX795eMPjaapzI5cXzVIwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGk7RsexwjEp+jxsLHEa0oNeRokJ+RIgLK5Z 2/Sn1Z1JAtEF+esQc+Jp/ESxz+Ku7NTvYmB+Lxh29SPZlnmSxnmDkv8v3+jJ/AzH EjZF18O84b+GmGlaM/OJqLa6Srf4BqfIdEHuLj5IEz8ZB0CGBKCnONGi62du6shC 1mcWpOgEV4ISd/Obfl3W8k7WL0asBuozdErSRaGub3kvlJYyUDiu6pmIxsvHAZTz P7h92wz8/3DWwwZsks4lZjfCDaSp0bi4EFvaihA3v4iApGnk92YqXRBU/GKaDQC/ xkMBPhCD2sRbUmk5cndje477RYwbi1paRxC9FIny8PpDX/fKJWE= -----END CERTIFICATE-----Generated at Mon Mar 2 02:33:20 2026 by rpki-client