$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: iwTGTha+T0DDBlHl4eTS/9Iujjvri+L6GQTRxlOwZSg= Subject key identifier: E1:54:60:DA:7A:C6:D7:14:4C:E4:D6:F7:81:BA:23:98:8C:88:21:AC Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 0FBAD1BB1EE15C56462D800E13076E1ADAD4D56C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 0150 Signing time: Mon 02 Mar 2026 11:20:53 +0000 Manifest this update: Mon 02 Mar 2026 11:15:53 +0000 Manifest next update: Thu 05 Mar 2026 13:40:53 +0000 Files and hashes: 1: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: kO9gt9D5IOMga3kG9ggePQd3jRVJY/6RFeuFWE81AxA=) 2: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 13:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:ba:d1:bb:1e:e1:5c:56:46:2d:80:0e:13:07:6e:1a:da:d4:d5:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Mar 2 11:15:53 2026 GMT Not After : Mar 5 13:40:53 2026 GMT Subject: CN=E15460DA7AC6D7144CE4D6F781BA23988C8821AC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:60:8c:c8:2a:08:b0:24:f6:52:68:64:a4:f9: a7:35:9a:86:91:47:cf:e5:cd:50:67:4f:60:62:25: 04:25:c9:4a:7b:86:f2:14:b3:2c:ca:df:16:88:52: 15:ee:84:09:c5:5b:9c:0d:9c:d5:9b:41:9a:01:f5: 94:65:d9:41:70:27:91:00:c4:fb:21:f9:7d:f8:74: e9:7b:10:e3:d0:be:0c:4c:f6:bb:95:fc:f5:35:80: 1d:fb:11:76:8d:8c:47:4c:1b:02:fe:b2:55:09:19: ba:74:68:c9:df:6a:83:73:43:61:ce:24:b9:96:35: d5:56:3a:2a:a2:23:68:03:cd:a1:f8:fb:ab:6c:4e: af:f7:ba:06:c8:34:c0:e3:7b:ba:5f:f8:79:01:b5: b6:0f:8a:d7:b9:99:a0:27:33:e9:7e:51:1f:78:ea: f8:9d:d2:5d:23:8f:93:9e:51:c6:19:cb:dc:60:a5: 49:3b:b5:75:da:ec:ca:95:42:2c:31:35:6e:35:15: d3:30:63:63:1f:22:60:36:4a:00:89:c9:9c:ac:32: fd:34:b9:39:0d:62:0f:16:78:04:96:fa:16:b7:8b: 4c:20:2e:bf:52:54:f9:4b:8a:cb:10:19:d8:81:b0: ac:f5:74:bf:a9:3e:b8:a6:b2:45:58:d8:39:44:85: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:54:60:DA:7A:C6:D7:14:4C:E4:D6:F7:81:BA:23:98:8C:88:21:AC X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:c4:23:65:0e:b1:f0:21:5a:97:41:e6:41:48:a8:66:d2:78: 7f:6f:e7:78:a6:f1:e0:d3:42:81:08:dd:bd:52:86:da:b3:c8: 72:bc:ef:c8:fb:d2:c8:c3:22:3e:da:b5:3b:a4:bd:d9:e3:3e: f5:c0:dc:f5:5a:3b:a0:e8:7b:6b:6f:f6:b6:a7:3b:7c:c3:f6: 03:93:a5:af:ca:e5:22:25:46:75:da:fc:d7:9b:25:da:5f:94: 72:1e:61:f6:e7:6f:29:96:d7:1f:a5:98:b2:89:d1:62:25:3e: 23:a3:90:5b:aa:46:b6:2d:85:1f:48:d2:75:dd:61:f4:49:30: c8:be:08:c2:2f:8e:77:f1:e8:62:4f:22:44:4f:f5:d3:ee:31: da:91:c3:79:1f:2a:0a:21:5e:a8:05:83:7a:a9:a5:f1:7e:ec: cc:86:fd:23:e2:4b:ee:5b:a1:38:a2:bc:9b:0c:a4:8d:87:f1: 28:a6:e0:80:64:c5:c6:a9:11:ec:48:9f:8a:f2:ef:39:32:3b: 27:88:e1:d9:66:08:4d:de:aa:29:5b:9c:5b:9d:63:30:4e:0e: 73:45:07:79:1c:b2:fb:3a:d7:a0:db:7c:d1:75:37:fc:32:1d: 76:e6:61:e2:ce:8a:94:5f:98:63:bd:9d:64:d6:15:5e:e9:53: 96:3d:0f:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7rRux7hXFZGLYAOEwduGtrU1WwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNjAzMDIxMTE1NTNaFw0yNjAzMDUxMzQwNTNaMDMxMTAvBgNV BAMTKEUxNTQ2MERBN0FDNkQ3MTQ0Q0U0RDZGNzgxQkEyMzk4OEM4ODIxQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPYIzIKgiwJPZSaGSk+ac1moaR R8/lzVBnT2BiJQQlyUp7hvIUsyzK3xaIUhXuhAnFW5wNnNWbQZoB9ZRl2UFwJ5EA xPsh+X34dOl7EOPQvgxM9ruV/PU1gB37EXaNjEdMGwL+slUJGbp0aMnfaoNzQ2HO JLmWNdVWOiqiI2gDzaH4+6tsTq/3ugbINMDje7pf+HkBtbYPite5maAnM+l+UR94 6vid0l0jj5OeUcYZy9xgpUk7tXXa7MqVQiwxNW41FdMwY2MfImA2SgCJyZysMv00 uTkNYg8WeASW+ha3i0wgLr9SVPlLissQGdiBsKz1dL+pPrimskVY2DlEhdV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4VRg2nrG1xRM5Nb3gbojmIyIIawwHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH/EI2UOsfAhWpdB5kFIqGbSeH9v53im8eDT QoEI3b1ShtqzyHK878j70sjDIj7atTukvdnjPvXA3PVaO6Doe2tv9ranO3zD9gOT pa/K5SIlRnXa/NebJdpflHIeYfbnbymW1x+lmLKJ0WIlPiOjkFuqRrYthR9I0nXd YfRJMMi+CMIvjnfx6GJPIkRP9dPuMdqRw3kfKgohXqgFg3qppfF+7MyG/SPiS+5b oTiivJsMpI2H8Sim4IBkxcapEexIn4ry7zkyOyeI4dlmCE3eqilbnFudYzBODnNF B3kcsvs616DbfNF1N/wyHXbmYeLOipRfmGO9nWTWFV7pU5Y9D/w= -----END CERTIFICATE-----Generated at Tue Mar 3 01:15:45 2026 by rpki-client