$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft File: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft (raw, json) Hash identifier: NoJCtkoOKWbiwNAFiQwKECGFR5Vh7YtmRnj9Oha861g= Subject key identifier: 1B:A4:E2:AC:72:AE:C7:66:51:56:EA:27:F9:A6:44:62:77:94:A3:75 Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F Certificate issuer: /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Certificate serial: 448B4A35D7E7997FC42ACECB4371CD6F4819FFF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft Manifest number: 02A2 Signing time: Wed 25 Mar 2026 21:30:44 +0000 Manifest this update: Wed 25 Mar 2026 21:25:44 +0000 Manifest next update: Sun 29 Mar 2026 00:18:44 +0000 Files and hashes: 1: 3130332e3138302e312e302f32342d3234203d3e2039333431.roa (hash: ikGxWPZOEbgUDak1S8/4CtTFLYGMeDrUhJdgA4v8gic=) 2: 3130332e3138302e302e302f32332d3233203d3e2039333431.roa (hash: +s+ZoPDcwc45gGow9YdBPADqPzbPO8zvkcvI3KhfKWg=) 3: 26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl (hash: FmETiBqe9iZ5QfkrpCWvWv0i4wqThD32waGePsEZyBY=) 4: 3130332e3138302e302e302f32342d3234203d3e2039333431.roa (hash: 8QADEgAErVDYeQ0m0w7xjODJNew42ezz18E9+und7b8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:18:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8b:4a:35:d7:e7:99:7f:c4:2a:ce:cb:43:71:cd:6f:48:19:ff:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F Validity Not Before: Mar 25 21:25:44 2026 GMT Not After : Mar 29 00:18:44 2026 GMT Subject: CN=1BA4E2AC72AEC7665156EA27F9A644627794A375 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:37:1f:02:e9:6e:2b:7f:02:51:e3:27:50:44: 27:49:d5:6b:7b:c1:16:37:35:e8:88:3f:cd:48:2f: 53:7f:45:08:75:d3:50:5f:13:f1:3b:d9:77:40:95: ee:91:1c:81:3f:ed:ec:7a:c1:32:95:54:50:c1:2c: dc:86:4a:cf:f5:c5:24:93:68:bc:e6:fa:0c:65:6a: 06:35:5a:35:48:4e:20:1f:10:c5:e2:56:72:c7:8d: 02:b0:10:13:ce:c7:df:f7:ab:bf:a1:ab:24:ce:61: 42:cc:22:82:36:e9:89:ab:d9:89:fa:52:59:bb:d4: 1d:a5:e3:84:e5:84:f9:38:0f:de:87:1f:a1:7e:db: 2d:4a:d0:6e:d5:44:8d:c5:ca:31:40:05:fa:75:8d: fa:1a:f0:12:b3:2f:d7:ce:17:07:bb:73:aa:4b:57: 77:dd:a1:9f:d2:5b:ac:3e:65:a8:59:c1:6d:43:9b: dc:c6:7d:d4:96:02:81:53:d9:7e:89:20:ea:9e:3d: 49:bf:92:9c:34:68:08:c4:f4:7e:13:df:88:69:cb: e4:3a:6b:31:bf:7a:f7:8b:88:c0:00:9c:c2:02:85: 2f:47:d7:c9:ef:79:0c:a0:7d:4d:7b:fa:76:20:dc: 4d:34:27:ac:3d:a6:93:56:e9:dc:cd:b6:f1:b7:47: 5f:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:A4:E2:AC:72:AE:C7:66:51:56:EA:27:F9:A6:44:62:77:94:A3:75 X509v3 Authority Key Identifier: keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:f1:ee:1e:0d:22:fc:d6:d3:e3:4b:c2:3d:10:4b:f7:81:23: 5a:57:fa:35:f3:25:a0:c1:87:7e:25:ad:f9:9a:b3:fa:8c:ea: 3e:d0:0e:a6:bc:6e:58:d7:0a:bf:71:51:6f:58:84:85:6e:c8: df:a0:f2:92:8e:28:ac:91:3f:31:01:ed:6a:c3:12:da:fb:e1: 66:9a:b8:a9:03:7e:80:dc:cd:91:90:21:54:f2:e2:21:03:86: d0:14:87:00:b9:96:55:8b:b9:74:63:3e:a2:c1:f0:ea:42:4c: 9c:87:c3:89:9f:64:d3:0c:fd:32:5e:54:70:cc:0a:5a:94:b9: 61:58:5c:d0:27:f4:c9:b8:65:0b:f7:fe:49:3a:18:7b:34:1d: 57:0f:4b:56:3b:2a:ed:cf:88:09:b8:83:55:1a:25:54:a4:9a: 04:33:7f:2f:c6:06:92:26:df:9e:91:87:a0:d0:98:1d:14:0e: 99:7a:a6:1e:9d:d8:ff:f7:e8:bc:cc:f1:f4:8b:8a:f1:7c:ca: 11:68:31:3a:7f:b8:a0:fd:17:92:e6:be:34:03:71:79:92:f3: d6:52:d9:d7:e7:a9:2f:fe:15:19:ff:81:a2:79:33:f0:be:45: 5d:23:a0:43:bd:83:7a:9e:e8:16:16:d3:1c:39:61:6a:bf:1b: fc:ce:80:82 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURItKNdfnmX/EKs7LQ3HNb0gZ//kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw MjNGQjcwRjAeFw0yNjAzMjUyMTI1NDRaFw0yNjAzMjkwMDE4NDRaMDMxMTAvBgNV BAMTKDFCQTRFMkFDNzJBRUM3NjY1MTU2RUEyN0Y5QTY0NDYyNzc5NEEzNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDANx8C6W4rfwJR4ydQRCdJ1Wt7 wRY3NeiIP81IL1N/RQh101BfE/E72XdAle6RHIE/7ex6wTKVVFDBLNyGSs/1xSST aLzm+gxlagY1WjVITiAfEMXiVnLHjQKwEBPOx9/3q7+hqyTOYULMIoI26Ymr2Yn6 Ulm71B2l44TlhPk4D96HH6F+2y1K0G7VRI3FyjFABfp1jfoa8BKzL9fOFwe7c6pL V3fdoZ/SW6w+ZahZwW1Dm9zGfdSWAoFT2X6JIOqePUm/kpw0aAjE9H4T34hpy+Q6 azG/eveLiMAAnMIChS9H18nveQygfU17+nYg3E00J6w9ppNW6dzNtvG3R19nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG6TirHKux2ZRVuon+aZEYneUo3UwHwYDVR0j BBgwFoAUJrBDMfPbpwtpTy//NxyF7gI/tw8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8yNkIwNDMzMUYz REJBNzBCNjk0RjJGRkYzNzFDODVFRTAyM0ZCNzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUwMjNG QjcwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3 ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1 RUUwMjNGQjcwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJfx7h4NIvzW0+NLwj0QS/eBI1pX+jXzJaDB h34lrfmas/qM6j7QDqa8bljXCr9xUW9YhIVuyN+g8pKOKKyRPzEB7WrDEtr74Waa uKkDfoDczZGQIVTy4iEDhtAUhwC5llWLuXRjPqLB8OpCTJyHw4mfZNMM/TJeVHDM ClqUuWFYXNAn9Mm4ZQv3/kk6GHs0HVcPS1Y7Ku3PiAm4g1UaJVSkmgQzfy/GBpIm 356Rh6DQmB0UDpl6ph6d2P/36LzM8fSLivF8yhFoMTp/uKD9F5LmvjQDcXmS89ZS 2dfnqS/+FRn/gaJ5M/C+RV0joEO9g3qe6BYW0xw5YWq/G/zOgII= -----END CERTIFICATE-----Generated at Thu Mar 26 08:54:18 2026 by rpki-client