$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json) Hash identifier: d4JgwrcE8dyx3XOagbLsFoVlhvfDW9ADcGZJB/6lFhU= Subject key identifier: D5:14:6A:31:35:B0:02:CF:A8:C2:D6:66:01:3C:88:AD:4E:62:F7:9E Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Certificate serial: 5E7986E277F471CEC5E2258BA08BAE746553FA03 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft Manifest number: 025C Signing time: Sun 19 Oct 2025 06:50:39 +0000 Manifest this update: Sun 19 Oct 2025 06:45:39 +0000 Manifest next update: Wed 22 Oct 2025 18:08:39 +0000 Files and hashes: 1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: iq5IAgV/ZMFtmge6dr231dN4pxG0uQlklK/RGgI/gfc=) 2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: 9Y+dv1ubLJjpj3Eq8ePmSnjNO3gF9XEsyFx3D6UDQmg=) 3: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: S+DWNiTde/cIHYi0h61Qt1UukmLtZA67ssazg+oSk/I=) 4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: D79Y8BsRJ6VHRaHIcDQn8DwQcFro3NZoMHr7zu28hbo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 18:08:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:79:86:e2:77:f4:71:ce:c5:e2:25:8b:a0:8b:ae:74:65:53:fa:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Validity Not Before: Oct 19 06:45:39 2025 GMT Not After : Oct 22 18:08:39 2025 GMT Subject: CN=D5146A3135B002CFA8C2D666013C88AD4E62F79E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:d5:58:e7:23:8c:06:a9:40:9f:09:2e:54:c6: 2c:70:ef:66:52:7b:ba:8c:b8:c6:75:fb:47:75:09: ba:4c:f5:64:a8:a2:16:53:e5:d8:e4:8f:58:df:63: 03:cd:e6:9d:c4:ba:db:f7:0e:ab:e1:8b:08:fe:24: 48:84:d5:5e:b2:4e:88:ac:3f:e8:3e:c3:20:2c:47: 9a:d2:8c:ab:c1:a7:e4:16:92:b3:52:9c:65:87:0e: 9e:e6:02:f8:44:0e:5f:d9:5b:95:fa:f6:b9:fc:f7: 6f:3c:8c:56:ec:dd:e3:a4:f2:75:ee:33:d4:d2:ee: d1:b2:81:19:39:35:a4:fb:9b:08:94:6c:d7:21:94: 60:f1:f6:b1:c0:59:f7:14:33:7e:e8:49:cf:47:a5: 23:9e:87:4a:96:5a:8a:12:b2:94:c5:8a:aa:34:36: de:40:e4:6d:b8:67:06:a9:ae:77:00:83:2e:50:3a: df:3a:3f:c1:3b:f0:46:b5:87:94:60:bd:45:67:01: a5:e7:95:dd:57:19:a0:d0:05:3d:b4:27:b2:a4:a3: 17:9d:88:1b:03:23:f8:dc:12:78:97:0c:00:0a:08: 38:29:75:83:2a:4f:e5:5d:af:8e:82:1d:00:fc:5c: ba:b0:a2:e6:1a:63:94:7c:3a:db:9c:e4:4b:21:b8: 06:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:14:6A:31:35:B0:02:CF:A8:C2:D6:66:01:3C:88:AD:4E:62:F7:9E X509v3 Authority Key Identifier: keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:85:43:46:70:3f:78:40:bb:b6:93:11:33:71:69:6c:96:25: 45:b7:49:d6:3f:1f:4c:ae:2f:16:02:1c:21:d2:2e:cb:e3:7c: da:a8:67:6d:53:e7:ab:07:04:d3:1f:d2:38:1e:eb:1d:a7:91: 2d:8c:79:dc:82:8d:55:db:5b:c4:e6:ac:89:5e:df:b2:a8:82: 8b:70:a1:a9:5a:a3:04:60:b7:45:c4:22:eb:a2:40:fb:f9:4b: af:d7:34:b6:0f:4a:0a:4e:cb:21:f0:2c:9b:b5:dd:39:1d:f2: 70:69:aa:3a:50:f3:53:02:91:d5:97:10:b1:2f:f4:a1:c9:fe: 2a:26:8c:66:54:c0:76:66:b4:8f:55:1d:e4:88:b8:2a:cf:9f: a8:c7:64:82:74:95:ae:b1:6a:9b:09:fc:0e:ec:68:94:2c:c7: 76:70:3b:c1:5b:4d:98:86:f4:3c:08:9e:c8:31:60:72:af:b1: f7:f2:01:bb:15:da:ed:d6:c4:f8:5f:a7:fa:9f:d8:ec:74:d8: db:7d:97:6f:aa:0b:01:f2:b8:96:da:1d:45:d8:3a:6f:f4:98: ac:bb:be:e5:2f:1e:53:9d:dc:62:23:5a:e8:69:d8:ca:6f:af: 94:d4:2a:8c:82:03:f9:1e:90:7d:06:60:ef:74:b8:76:18:35: 73:54:ed:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXnmG4nf0cc7F4iWLoIuudGVT+gMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw MjNGQjcwRjAeFw0yNTEwMTkwNjQ1MzlaFw0yNTEwMjIxODA4MzlaMDMxMTAvBgNV BAMTKEQ1MTQ2QTMxMzVCMDAyQ0ZBOEMyRDY2NjAxM0M4OEFENEU2MkY3OUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk1VjnI4wGqUCfCS5Uxixw72ZS e7qMuMZ1+0d1CbpM9WSoohZT5djkj1jfYwPN5p3Eutv3Dqvhiwj+JEiE1V6yTois P+g+wyAsR5rSjKvBp+QWkrNSnGWHDp7mAvhEDl/ZW5X69rn89288jFbs3eOk8nXu M9TS7tGygRk5NaT7mwiUbNchlGDx9rHAWfcUM37oSc9HpSOeh0qWWooSspTFiqo0 Nt5A5G24ZwaprncAgy5QOt86P8E78Ea1h5RgvUVnAaXnld1XGaDQBT20J7Kkoxed iBsDI/jcEniXDAAKCDgpdYMqT+Vdr46CHQD8XLqwouYaY5R8Otuc5EshuAaXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1RRqMTWwAs+owtZmATyIrU5i954wHwYDVR0j BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG QjcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1 RUUwMjNGQjcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiFQ0ZwP3hAu7aTETNxaWyWJUW3SdY/H0yu LxYCHCHSLsvjfNqoZ21T56sHBNMf0jge6x2nkS2MedyCjVXbW8TmrIle37Kogotw oalaowRgt0XEIuuiQPv5S6/XNLYPSgpOyyHwLJu13Tkd8nBpqjpQ81MCkdWXELEv 9KHJ/iomjGZUwHZmtI9VHeSIuCrPn6jHZIJ0la6xapsJ/A7saJQsx3ZwO8FbTZiG 9DwInsgxYHKvsffyAbsV2u3WxPhfp/qf2Ox02Nt9l2+qCwHyuJbaHUXYOm/0mKy7 vuUvHlOd3GIjWuhp2Mpvr5TUKoyCA/kekH0GYO90uHYYNXNU7Q4= -----END CERTIFICATE-----Generated at Mon Oct 20 18:08:10 2025 by rpki-client