$ rpki-client -vvf repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft File: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft (raw, json) Hash identifier: dWnbphvCNkFloKFUIyDAgJAuEIUykLUY93Mp8XMqaKY= Subject key identifier: 85:26:0C:93:17:F3:F5:8A:19:40:47:C0:D2:64:85:0A:55:C5:C7:5A Authority key identifier: 26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 Certificate issuer: /CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Certificate serial: 401A1BBF71E186A248F71A11E040FC2523BB67AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject info access: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft Manifest number: 0268 Signing time: Sun 07 Sep 2025 04:42:11 +0000 Manifest this update: Sun 07 Sep 2025 04:37:11 +0000 Manifest next update: Wed 10 Sep 2025 07:07:11 +0000 Files and hashes: 1: 3130332e3136342e3135312e302f32342d3234203d3e20313431393039.roa (hash: 74TGkae1+QCuTSaWAZ/1dR0+kJTY94tmxgSufeIPFe8=) 2: 3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (hash: d1iOOjv6qaBSXhMhm+Csiy2EgfiQomEVVv4AskXzPBg=) 3: 323030313a6466373a376438303a3a2f34382d3438203d3e20313431393039.roa (hash: 1ypZTh1uqX7Kh/HgM6WUDlwDLRHdZ90Km18x/Ynnn+Y=) 4: 26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl (hash: 6yBIP+tRrYaamIpzIW/RkXwmdCwUzyaRVyAwpdtWtBU=) 5: 3130332e3136342e3135302e302f32332d3233203d3e20313431393039.roa (hash: sGDel48okAqvaV/rcb1x3ACW4s1s006aJg3vUEaDkGw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 07:07:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:1a:1b:bf:71:e1:86:a2:48:f7:1a:11:e0:40:fc:25:23:bb:67:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=26C01247693F68CFDA1F8CB6B88F7A3700D30001 Validity Not Before: Sep 7 04:37:11 2025 GMT Not After : Sep 10 07:07:11 2025 GMT Subject: CN=85260C9317F3F58A194047C0D264850A55C5C75A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:99:fb:8c:ed:bf:1e:50:ed:6a:40:ca:b4:ab: 64:da:fb:4f:08:55:53:a7:34:ad:b0:72:d8:64:4e: 9e:85:5c:d0:79:a0:87:55:f4:cb:5c:d4:b3:b6:36: dd:b1:80:b6:b0:14:44:b3:c2:b5:61:43:c1:af:59: 40:a6:3a:e8:f6:11:ab:43:b3:fb:c9:cc:95:49:2f: a2:7c:a0:0c:38:fb:45:e6:9f:3d:de:f7:80:0e:9b: 34:28:01:dd:5a:55:22:ac:7a:eb:a3:a9:83:c9:cd: 7d:10:9a:ac:bc:cb:8d:9a:09:90:8a:10:b4:6f:a5: 1a:6c:92:9c:27:66:2d:c9:c7:91:79:58:42:0d:fe: 65:0e:33:54:21:3b:9a:a2:7b:a8:dc:8f:ce:05:b2: 89:63:63:d0:6c:af:7a:b1:c5:9e:f0:aa:d7:83:eb: 99:86:15:79:1a:9c:97:5e:31:12:df:bd:5f:87:15: eb:60:53:43:d7:d5:fa:e5:32:da:e2:83:51:1c:a9: 29:b7:1d:61:fd:d0:18:06:86:ee:9a:3a:f8:fb:6e: 7a:0e:6c:9d:e0:64:9c:91:f4:bf:c6:9e:78:cb:a4: 51:3a:d6:a2:01:d9:fd:f5:da:4f:c4:e0:37:36:13: f9:fe:bf:07:78:1d:d6:6d:41:e8:05:5c:be:3d:8e: 7f:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:0C:93:17:F3:F5:8A:19:40:47:C0:D2:64:85:0A:55:C5:C7:5A X509v3 Authority Key Identifier: keyid:26:C0:12:47:69:3F:68:CF:DA:1F:8C:B6:B8:8F:7A:37:00:D3:00:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26C01247693F68CFDA1F8CB6B88F7A3700D30001.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/401c4d61-dcef-4a20-bd4c-a282a37aa69e/0/26C01247693F68CFDA1F8CB6B88F7A3700D30001.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:74:10:b5:ff:f4:0e:41:d1:80:a9:97:36:9b:ec:50:22:58: 61:33:1b:b4:a9:b9:21:ae:34:9b:94:6e:fe:e9:cc:13:90:78: bf:c9:54:50:02:3e:0c:78:2e:65:4e:5c:cb:0e:59:20:d4:47: a5:f2:09:eb:60:c2:f0:00:d3:54:97:28:8b:61:35:61:6b:9c: 15:34:d6:91:17:9c:d3:88:62:eb:6b:d3:be:9d:ca:ed:05:1b: 77:dc:7c:1f:25:82:13:95:51:99:36:85:d1:42:f3:f5:c9:39: d8:09:d7:6f:f0:51:b6:77:a5:65:32:eb:c2:01:3e:68:4c:62: 99:df:57:f3:d3:33:5c:4b:49:11:67:d1:a6:37:7b:96:a5:5c: fb:eb:0f:a8:dc:74:45:d7:e2:9a:f9:d4:f4:be:fb:e5:01:d9: 07:41:35:4c:64:a2:14:0a:ef:b5:3a:6a:7a:79:46:f1:23:0c: 7b:9c:46:cc:ee:9d:d9:ee:ab:0c:0d:3c:11:8c:cf:d0:82:0c: f1:ad:fe:18:de:1c:87:bb:3f:7b:9f:57:6d:a5:3e:74:45:31: 4a:78:12:6c:af:38:51:d2:e0:b7:a8:f4:b8:04:0d:2c:20:cc: 30:27:60:0d:a2:d7:7b:52:d2:dd:4b:37:9c:db:61:e6:05:d7: 10:02:aa:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQBobv3HhhqJI9xoR4ED8JSO7Z60wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcw MEQzMDAwMTAeFw0yNTA5MDcwNDM3MTFaFw0yNTA5MTAwNzA3MTFaMDMxMTAvBgNV BAMTKDg1MjYwQzkzMTdGM0Y1OEExOTQwNDdDMEQyNjQ4NTBBNTVDNUM3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFmfuM7b8eUO1qQMq0q2Ta+08I VVOnNK2wcthkTp6FXNB5oIdV9Mtc1LO2Nt2xgLawFESzwrVhQ8GvWUCmOuj2EatD s/vJzJVJL6J8oAw4+0Xmnz3e94AOmzQoAd1aVSKseuujqYPJzX0Qmqy8y42aCZCK ELRvpRpskpwnZi3Jx5F5WEIN/mUOM1QhO5qie6jcj84FsoljY9Bsr3qxxZ7wqteD 65mGFXkanJdeMRLfvV+HFetgU0PX1frlMtrig1EcqSm3HWH90BgGhu6aOvj7bnoO bJ3gZJyR9L/GnnjLpFE61qIB2f312k/E4Dc2E/n+vwd4HdZtQegFXL49jn+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSYMkxfz9YoZQEfA0mSFClXFx1owHwYDVR0j BBgwFoAUJsASR2k/aM/aH4y2uI96NwDTAAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MDFjNGQ2MS1kY2VmLTRhMjAtYmQ0Yy1hMjgyYTM3YWE2OWUvMC8yNkMwMTI0NzY5 M0Y2OENGREExRjhDQjZCODhGN0EzNzAwRDMwMDAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdBMzcwMEQz MDAwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDAxYzRkNjEtZGNlZi00YTIwLWJk NGMtYTI4MmEzN2FhNjllLzAvMjZDMDEyNDc2OTNGNjhDRkRBMUY4Q0I2Qjg4RjdB MzcwMEQzMDAwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC10ELX/9A5B0YCplzab7FAiWGEzG7SpuSGu NJuUbv7pzBOQeL/JVFACPgx4LmVOXMsOWSDUR6XyCetgwvAA01SXKIthNWFrnBU0 1pEXnNOIYutr076dyu0FG3fcfB8lghOVUZk2hdFC8/XJOdgJ12/wUbZ3pWUy68IB PmhMYpnfV/PTM1xLSRFn0aY3e5alXPvrD6jcdEXX4pr51PS+++UB2QdBNUxkohQK 77U6anp5RvEjDHucRszundnuqwwNPBGMz9CCDPGt/hjeHIe7P3ufV22lPnRFMUp4 EmyvOFHS4Leo9LgEDSwgzDAnYA2i13tS0t1LN5zbYeYF1xACqms= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:08 2025 by rpki-client