$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: Et39yqHIeoFx/U+LaKWI5gAsg4h8b582K6R+gvrGrK4= Subject key identifier: E4:C0:02:8B:C5:94:55:67:EE:E9:7A:5B:D1:CC:FF:F0:CC:A1:80:F6 Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 6DB6E415B5168BA65192E327AF302A3641334ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 0121 Signing time: Sun 01 Mar 2026 15:12:19 +0000 Manifest this update: Sun 01 Mar 2026 15:07:19 +0000 Manifest next update: Wed 04 Mar 2026 23:44:19 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 2: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: C2WAXknaxKYrn7n9hp746WCx7RvqsHrxHrd0DVDWGMY=) 3: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 23:44:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b6:e4:15:b5:16:8b:a6:51:92:e3:27:af:30:2a:36:41:33:4a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Mar 1 15:07:19 2026 GMT Not After : Mar 4 23:44:19 2026 GMT Subject: CN=E4C0028BC5945567EEE97A5BD1CCFFF0CCA180F6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:a6:1a:94:d2:cc:41:24:d1:b9:86:fd:3e:ae: ac:bf:94:f7:ba:69:29:28:c3:52:96:fc:7d:eb:0c: 3c:85:31:2e:e4:b7:b6:32:2b:57:9b:6a:a5:58:bb: 92:fc:95:08:33:3e:d9:24:79:36:f4:0b:a1:94:bf: 5a:36:78:e1:28:50:89:7b:fa:1f:82:b9:c0:89:3e: e6:4f:4d:d7:33:3a:63:08:e5:da:8a:b0:9a:ac:29: e7:26:7f:6c:3c:d4:16:79:7c:6b:c7:76:01:18:f3: 90:14:8c:cb:1f:38:70:21:c6:9a:06:20:45:2e:ce: 82:0c:b4:87:06:a9:3c:dd:4e:48:80:38:b9:a8:aa: 16:92:f1:72:81:b0:49:e9:e4:24:ab:03:7f:15:6f: d4:a5:58:f2:70:e4:5c:f3:25:91:00:cc:5b:0e:16: e9:09:ad:ba:f0:44:79:b9:05:57:bb:e4:72:22:49: aa:4c:4d:8f:69:b6:e9:fa:65:dc:dd:01:56:26:2d: 46:5d:99:4d:2d:4d:95:9a:b2:cb:ac:48:59:3d:6a: b6:dd:b0:67:47:f8:5e:76:d9:83:4d:c8:82:a2:3d: d7:59:0c:ca:e8:e2:8f:a8:d5:33:af:32:07:8b:52: 64:ea:d8:4a:cc:77:fd:0a:dc:d7:60:72:be:41:88: 0d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:C0:02:8B:C5:94:55:67:EE:E9:7A:5B:D1:CC:FF:F0:CC:A1:80:F6 X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 94:df:da:b5:a2:4a:40:55:03:30:82:62:ff:0e:0c:fb:4f:1b: 44:61:3a:27:d2:27:b6:d8:bc:ee:d6:35:f2:59:4f:f2:32:06: a7:ad:48:38:50:da:3c:e4:c2:ed:af:54:94:ae:15:74:e8:a3: d9:21:80:a3:40:c4:6a:75:bf:27:a7:cf:53:f3:27:e3:f3:68: 2b:ae:ef:64:83:02:e6:72:e0:e5:3c:3e:0e:5d:09:b3:4e:d2: 3a:fe:20:39:b0:d5:10:37:04:0c:cb:3d:3f:72:71:a8:a1:2c: e9:be:15:9b:b7:e4:ed:d4:17:58:4d:bd:ee:6c:cd:fa:00:89: 29:05:d2:32:93:26:a2:56:00:33:92:d4:ce:01:1a:21:e8:8a: dc:77:cc:e8:e3:ee:da:92:aa:3b:3d:49:5c:76:73:ac:03:cd: 78:1f:44:ff:c1:44:2d:df:a6:b0:4f:67:54:09:30:cb:74:e2: 2d:da:78:18:ca:9a:50:be:56:8c:7e:25:29:ce:67:4e:6f:c4: 27:ec:44:5f:aa:a5:78:89:c9:a4:00:4c:aa:d5:7d:8b:bc:be: a6:00:50:3f:47:d9:81:5e:68:7c:1b:24:65:82:18:91:2b:de: 62:4f:0f:12:20:35:bc:ae:89:fe:8f:76:64:a8:50:0d:8c:fc: aa:53:ba:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbbbkFbUWi6ZRkuMnrzAqNkEzSrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNjAzMDExNTA3MTlaFw0yNjAzMDQyMzQ0MTlaMDMxMTAvBgNV BAMTKEU0QzAwMjhCQzU5NDU1NjdFRUU5N0E1QkQxQ0NGRkYwQ0NBMTgwRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClphqU0sxBJNG5hv0+rqy/lPe6 aSkow1KW/H3rDDyFMS7kt7YyK1ebaqVYu5L8lQgzPtkkeTb0C6GUv1o2eOEoUIl7 +h+CucCJPuZPTdczOmMI5dqKsJqsKecmf2w81BZ5fGvHdgEY85AUjMsfOHAhxpoG IEUuzoIMtIcGqTzdTkiAOLmoqhaS8XKBsEnp5CSrA38Vb9SlWPJw5FzzJZEAzFsO FukJrbrwRHm5BVe75HIiSapMTY9ptun6ZdzdAVYmLUZdmU0tTZWassusSFk9arbd sGdH+F522YNNyIKiPddZDMro4o+o1TOvMgeLUmTq2ErMd/0K3Ndgcr5BiA37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5MACi8WUVWfu6Xpb0cz/8MyhgPYwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJTf2rWiSkBVAzCCYv8ODPtPG0RhOifSJ7bY vO7WNfJZT/IyBqetSDhQ2jzkwu2vVJSuFXToo9khgKNAxGp1vyenz1PzJ+PzaCuu 72SDAuZy4OU8Pg5dCbNO0jr+IDmw1RA3BAzLPT9ycaihLOm+FZu35O3UF1hNve5s zfoAiSkF0jKTJqJWADOS1M4BGiHoitx3zOjj7tqSqjs9SVx2c6wDzXgfRP/BRC3f prBPZ1QJMMt04i3aeBjKmlC+Vox+JSnOZ05vxCfsRF+qpXiJyaQATKrVfYu8vqYA UD9H2YFeaHwbJGWCGJEr3mJPDxIgNbyuif6PdmSoUA2M/KpTuvw= -----END CERTIFICATE-----Generated at Mon Mar 2 20:37:52 2026 by rpki-client