$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft File: 255AA179563123A815C2B4073AD84B69F0967F4D.mft (raw, json) Hash identifier: nmVqy12tEeCYvUiXAp2X43uY+8BCxJmyvQInJyUqRkM= Subject key identifier: 17:9E:BB:09:66:46:AA:4F:F1:4C:E8:27:D1:14:AF:B9:29:E6:AA:63 Authority key identifier: 25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D Certificate issuer: /CN=255AA179563123A815C2B4073AD84B69F0967F4D Certificate serial: 7C01C82DB724F013AF9CA7A1C5824C29D5638831 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft Manifest number: 0534 Signing time: Thu 26 Mar 2026 03:30:59 +0000 Manifest this update: Thu 26 Mar 2026 03:25:59 +0000 Manifest next update: Sun 29 Mar 2026 12:56:59 +0000 Files and hashes: 1: 3130332e3132362e3137332e302f32342d3234203d3e20313338313132.roa (hash: dTbIHUhiEUknjm2UJq3m/hFm+UD2w30xmsm34dF+xX0=) 2: 255AA179563123A815C2B4073AD84B69F0967F4D.crl (hash: MamlnALdfAZ3I0raDGWlVJResrORHGqZewFI8da8Op4=) 3: 3130332e3132362e3137352e302f32342d3234203d3e20313338313132.roa (hash: SXXLWSftmV1ALVHZrOGiOsQ6UfYjWN8tTipC9o8sUVM=) 4: 3130332e3132362e3137342e302f32342d3234203d3e20313338313132.roa (hash: bGN1vyn9h6Yc+MemoAPYX3r1I/c2y6YPOsVFWuo0Dr0=) 5: 323430343a6563303a3a2f33322d3332203d3e20313338313132.roa (hash: ikejIzym3riHv/Wk7MAPoXCGoRFxR1pASpxS+fJWi4g=) 6: 3130332e3132362e3137322e302f32342d3234203d3e20313338313132.roa (hash: YV5y0yJ3U9p9cvlNvG3FnXx2SHMj2wa+fG9Y04B6wcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 12:56:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:01:c8:2d:b7:24:f0:13:af:9c:a7:a1:c5:82:4c:29:d5:63:88:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=255AA179563123A815C2B4073AD84B69F0967F4D Validity Not Before: Mar 26 03:25:59 2026 GMT Not After : Mar 29 12:56:59 2026 GMT Subject: CN=179EBB096646AA4FF14CE827D114AFB929E6AA63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:27:b5:5a:c7:e9:07:52:b5:84:71:c8:42:a8: bc:77:6d:d2:62:a9:b7:22:29:a1:38:65:db:a6:ca: 1c:1b:b4:5f:71:ff:76:49:1a:cd:f5:0d:d1:42:a1: bc:cf:50:cf:44:0b:4f:a5:b9:78:14:35:af:8e:41: bc:cd:b1:39:aa:00:20:06:85:b5:54:1b:86:f5:f7: 71:6e:76:05:b8:99:25:c3:d5:3b:27:4f:e1:5e:45: 11:25:f9:4d:61:23:b0:a2:e2:aa:38:38:fd:9c:fb: 30:61:2c:cd:c5:88:ee:25:23:ad:c8:17:a0:72:e9: 08:6f:ff:44:c1:81:4a:d1:9f:b5:78:d5:78:a4:f0: 6f:71:5a:50:6d:92:8a:4d:37:52:23:56:6e:92:f6: 3a:cb:e8:c1:0a:ac:b6:5f:7b:0c:5f:9b:dc:46:9d: 28:6a:0b:ff:7f:7c:8c:3d:41:ab:57:3a:98:ca:1c: 2b:b2:7e:17:ed:ad:34:e2:db:57:e1:a4:ff:df:83: 14:f6:83:65:42:f0:8b:c2:f9:e9:8c:1b:f6:86:f9: f9:df:77:5d:45:6d:c1:b6:6c:ae:b4:67:ea:4e:09: dc:dc:a5:74:d3:95:5e:2e:04:cc:3a:88:5e:d1:6c: ba:b8:da:a4:24:31:65:28:f0:7b:e2:54:11:61:84: ab:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:9E:BB:09:66:46:AA:4F:F1:4C:E8:27:D1:14:AF:B9:29:E6:AA:63 X509v3 Authority Key Identifier: keyid:25:5A:A1:79:56:31:23:A8:15:C2:B4:07:3A:D8:4B:69:F0:96:7F:4D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/255AA179563123A815C2B4073AD84B69F0967F4D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb8d908-1b99-455c-ac76-8d624dfa43b6/0/255AA179563123A815C2B4073AD84B69F0967F4D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:2e:69:94:75:7a:f4:8b:ef:9b:63:9f:cd:71:7e:71:bd:52: 34:f8:bb:bb:dd:d8:10:d6:b1:f0:a4:fd:05:6f:10:96:49:87: a3:9a:31:bf:76:fc:36:8f:64:8b:dc:08:3f:e4:15:c5:bc:be: ef:c6:93:1a:1d:d3:19:4e:77:6f:88:46:e0:b6:81:d0:11:cb: 1a:d7:75:a4:b2:22:2b:84:4d:7b:68:c0:a8:ef:c2:6d:96:3e: 63:f1:06:05:a2:1e:31:b8:77:3e:d1:9a:9f:75:83:f5:34:70: 3c:bd:ef:48:cf:4f:2e:66:8e:21:4f:5f:db:3f:91:1f:a1:c3: b3:2e:6d:08:71:d4:a2:63:c8:9f:ba:f7:34:73:f3:a9:b4:de: 55:81:0b:30:e0:ff:b9:8c:9c:64:02:68:14:8e:88:7a:27:5f: be:4b:5e:5c:2d:0a:cb:f3:cb:61:9f:5d:fb:c9:7d:c6:7c:8d: 87:e7:1b:21:32:4a:63:ec:6b:7f:fa:83:d8:43:a1:7c:f8:06: e7:4d:83:6e:db:1b:69:81:3d:a0:cb:ae:c9:b5:5e:61:31:35: 07:d3:d1:17:5d:c9:7b:77:a0:a4:d4:4c:a1:e5:5e:88:96:90: 2a:44:71:38:76:88:3f:18:3c:27:19:6d:d3:a4:31:fa:18:44: 9d:49:4e:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAHILbck8BOvnKehxYJMKdVjiDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlG MDk2N0Y0RDAeFw0yNjAzMjYwMzI1NTlaFw0yNjAzMjkxMjU2NTlaMDMxMTAvBgNV BAMTKDE3OUVCQjA5NjY0NkFBNEZGMTRDRTgyN0QxMTRBRkI5MjlFNkFBNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJ7Vax+kHUrWEcchCqLx3bdJi qbciKaE4ZdumyhwbtF9x/3ZJGs31DdFCobzPUM9EC0+luXgUNa+OQbzNsTmqACAG hbVUG4b193FudgW4mSXD1TsnT+FeRREl+U1hI7Ci4qo4OP2c+zBhLM3FiO4lI63I F6By6Qhv/0TBgUrRn7V41Xik8G9xWlBtkopNN1IjVm6S9jrL6MEKrLZfewxfm9xG nShqC/9/fIw9QatXOpjKHCuyfhftrTTi21fhpP/fgxT2g2VC8IvC+emMG/aG+fnf d11FbcG2bK60Z+pOCdzcpXTTlV4uBMw6iF7RbLq42qQkMWUo8HviVBFhhKt/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF567CWZGqk/xTOgn0RSvuSnmqmMwHwYDVR0j BBgwFoAUJVqheVYxI6gVwrQHOthLafCWf00wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZGI4ZDkwOC0xYjk5LTQ1NWMtYWM3Ni04ZDYyNGRmYTQzYjYvMC8yNTVBQTE3OTU2 MzEyM0E4MTVDMkI0MDczQUQ4NEI2OUYwOTY3RjRELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRCNjlGMDk2 N0Y0RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGRiOGQ5MDgtMWI5OS00NTVjLWFj NzYtOGQ2MjRkZmE0M2I2LzAvMjU1QUExNzk1NjMxMjNBODE1QzJCNDA3M0FEODRC NjlGMDk2N0Y0RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMkuaZR1evSL75tjn81xfnG9UjT4u7vd2BDW sfCk/QVvEJZJh6OaMb92/DaPZIvcCD/kFcW8vu/Gkxod0xlOd2+IRuC2gdARyxrX daSyIiuETXtowKjvwm2WPmPxBgWiHjG4dz7Rmp91g/U0cDy970jPTy5mjiFPX9s/ kR+hw7MubQhx1KJjyJ+69zRz86m03lWBCzDg/7mMnGQCaBSOiHonX75LXlwtCsvz y2GfXfvJfcZ8jYfnGyEySmPsa3/6g9hDoXz4BudNg27bG2mBPaDLrsm1XmExNQfT 0RddyXt3oKTUTKHlXoiWkCpEcTh2iD8YPCcZbdOkMfoYRJ1JTog= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:13 2026 by rpki-client