$ rpki-client -vvf repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft File: 251859FA726E84EB8EF1585C6B1F3D925581A938.mft (raw, json) Hash identifier: 0nKBjzWsB8trTg0lNwMfL0GEmfipTmvjYXIUgyCE31Y= Subject key identifier: 1F:5B:C8:C6:D8:23:09:E2:D2:5E:C7:84:6E:A9:E0:BC:C2:30:43:9A Authority key identifier: 25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 Certificate issuer: /CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Certificate serial: 70671EE810F9FF4C80737162B329CC16A9E614AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft Manifest number: 04F6 Signing time: Wed 25 Mar 2026 12:21:24 +0000 Manifest this update: Wed 25 Mar 2026 12:16:24 +0000 Manifest next update: Sat 28 Mar 2026 17:42:24 +0000 Files and hashes: 1: 251859FA726E84EB8EF1585C6B1F3D925581A938.crl (hash: Zd6HHXULeQVG5oqMdhgddYpeZVHHuiDpDfyWsyQeIx8=) 2: 323430343a636463303a3a2f33322d3332203d3e20313338383432.roa (hash: fOtgd90l6YKA0pJYOUhs+MVJ6TtfFnXek+6jELFm240=) 3: 3130332e3133382e36392e302f32342d3234203d3e20313338383432.roa (hash: 6pDvqDjIlcQkZPcI9oy/Uawt6R25Hk17d81YNhRXRmY=) 4: 3130332e3133382e36382e302f32332d3234203d3e20313338383432.roa (hash: pCMyJ/CDctVRd1Fs9qRQyHuJ7biOZTx5YqB4FZP9gKI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:42:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:67:1e:e8:10:f9:ff:4c:80:73:71:62:b3:29:cc:16:a9:e6:14:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=251859FA726E84EB8EF1585C6B1F3D925581A938 Validity Not Before: Mar 25 12:16:24 2026 GMT Not After : Mar 28 17:42:24 2026 GMT Subject: CN=1F5BC8C6D82309E2D25EC7846EA9E0BCC230439A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2c:d3:9b:ce:99:eb:48:98:3d:5c:37:e7:87: 05:a0:47:07:1d:ca:19:2d:12:d5:b7:d2:8d:f2:4c: ad:1c:5d:ee:a6:5a:de:93:0e:6d:02:50:e5:ad:c9: 7f:c2:0f:7d:90:b3:20:b4:b9:86:02:62:86:6a:65: d4:6d:71:08:e6:1c:05:98:21:71:54:e2:33:bf:d6: 79:13:bb:b4:3e:95:7c:fb:06:4f:76:94:45:46:37: c4:27:4e:1e:9f:1a:53:fd:41:ff:b4:86:92:11:db: b4:d1:2c:6b:3b:75:e1:4f:be:77:44:5c:f9:6f:07: f5:dd:8a:07:65:43:63:bd:f7:b0:fe:3a:2d:d5:c7: 62:1f:4d:24:a9:d3:2b:7c:e3:4e:f7:d1:3f:3a:f5: 02:53:eb:1f:2f:66:03:fa:4d:ad:a5:24:91:08:3c: 60:56:b8:35:86:33:3d:70:f0:7f:ed:9a:39:80:cd: d2:d4:38:08:92:8a:46:c5:4c:87:69:89:76:8a:96: f0:49:cc:ea:d2:ac:34:ba:7d:67:eb:2a:d3:82:65: ef:87:f1:a9:71:5a:34:54:11:dd:b7:1a:7d:60:67: 1a:ef:d2:6a:4f:0f:02:40:d2:3e:d3:4a:02:5e:90: cf:4f:e2:dc:b2:0a:41:42:ec:6b:49:d8:38:9b:8d: 19:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:5B:C8:C6:D8:23:09:E2:D2:5E:C7:84:6E:A9:E0:BC:C2:30:43:9A X509v3 Authority Key Identifier: keyid:25:18:59:FA:72:6E:84:EB:8E:F1:58:5C:6B:1F:3D:92:55:81:A9:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/251859FA726E84EB8EF1585C6B1F3D925581A938.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93674a6-114f-4bb5-85bb-cbb67db2a955/0/251859FA726E84EB8EF1585C6B1F3D925581A938.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:40:47:f5:f5:cf:e5:fe:63:41:51:e6:1b:d3:af:cb:ed:61: db:b0:9d:2f:d8:75:0d:55:21:33:03:9b:7f:4e:d8:5e:1e:53: 84:63:da:e0:d6:3c:de:7b:8c:82:1e:9e:1f:7c:ef:e3:f7:3f: 0b:8d:1d:52:87:6e:a7:6e:94:34:b9:f7:1a:53:8c:c6:f7:bf: e2:63:3e:76:3a:a8:72:0f:a7:77:e8:2e:53:0b:80:72:d0:34: 93:f5:fe:e0:bc:f5:93:1a:f7:af:6c:9d:1c:ab:cd:86:0d:02: 26:41:db:f8:bb:04:b5:14:46:e2:0c:40:be:74:1b:57:cb:f4: a1:d4:1b:03:5b:e3:4d:11:ee:43:1a:46:6a:6a:a4:7e:75:3c: 6d:3f:e0:70:6a:40:11:ca:ac:88:47:2a:97:c7:27:3f:cc:02: bc:f7:95:d2:c9:1a:bf:60:b1:5a:d9:36:86:33:67:2f:4f:97: bb:b5:11:53:50:fe:63:7c:2a:82:54:77:1e:0e:09:93:f2:fe: 6f:b2:2a:ca:d4:a5:9d:da:9a:1b:ad:c5:fa:c0:50:22:c9:0d: e6:a4:20:cd:6a:fb:77:bd:99:c7:25:3c:d8:1c:63:83:36:6e: 06:e7:7b:1f:14:0f:bb:e9:5e:25:78:67:97:18:29:ec:71:2f: 97:f3:f7:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcGce6BD5/0yAc3FisynMFqnmFK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1 NTgxQTkzODAeFw0yNjAzMjUxMjE2MjRaFw0yNjAzMjgxNzQyMjRaMDMxMTAvBgNV BAMTKDFGNUJDOEM2RDgyMzA5RTJEMjVFQzc4NDZFQTlFMEJDQzIzMDQzOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5LNObzpnrSJg9XDfnhwWgRwcd yhktEtW30o3yTK0cXe6mWt6TDm0CUOWtyX/CD32QsyC0uYYCYoZqZdRtcQjmHAWY IXFU4jO/1nkTu7Q+lXz7Bk92lEVGN8QnTh6fGlP9Qf+0hpIR27TRLGs7deFPvndE XPlvB/XdigdlQ2O997D+Oi3Vx2IfTSSp0yt840730T869QJT6x8vZgP6Ta2lJJEI PGBWuDWGMz1w8H/tmjmAzdLUOAiSikbFTIdpiXaKlvBJzOrSrDS6fWfrKtOCZe+H 8alxWjRUEd23Gn1gZxrv0mpPDwJA0j7TSgJekM9P4tyyCkFC7GtJ2DibjRnfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUH1vIxtgjCeLSXseEbqngvMIwQ5owHwYDVR0j BBgwFoAUJRhZ+nJuhOuO8Vhcax89klWBqTgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTM2NzRhNi0xMTRmLTRiYjUtODViYi1jYmI2N2RiMmE5NTUvMC8yNTE4NTlGQTcy NkU4NEVCOEVGMTU4NUM2QjFGM0Q5MjU1ODFBOTM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNEOTI1NTgx QTkzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkzNjc0YTYtMTE0Zi00YmI1LTg1 YmItY2JiNjdkYjJhOTU1LzAvMjUxODU5RkE3MjZFODRFQjhFRjE1ODVDNkIxRjNE OTI1NTgxQTkzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGxAR/X1z+X+Y0FR5hvTr8vtYduwnS/YdQ1V ITMDm39O2F4eU4Rj2uDWPN57jIIenh987+P3PwuNHVKHbqdulDS59xpTjMb3v+Jj PnY6qHIPp3foLlMLgHLQNJP1/uC89ZMa969snRyrzYYNAiZB2/i7BLUURuIMQL50 G1fL9KHUGwNb400R7kMaRmpqpH51PG0/4HBqQBHKrIhHKpfHJz/MArz3ldLJGr9g sVrZNoYzZy9Pl7u1EVNQ/mN8KoJUdx4OCZPy/m+yKsrUpZ3amhutxfrAUCLJDeak IM1q+3e9mcclPNgcY4M2bgbnex8UD7vpXiV4Z5cYKexxL5fz9y0= -----END CERTIFICATE-----Generated at Thu Mar 26 13:09:10 2026 by rpki-client