$ rpki-client -vvf repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft File: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft (raw, json) Hash identifier: qENhPGZ6BOAM3f5x+8m8PMqr2Uei7VHH/xDqh1gwQ/0= Subject key identifier: 6D:ED:5B:27:19:64:F0:90:7A:4A:6D:BE:D0:52:DB:31:F3:08:CB:5F Authority key identifier: 2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 Certificate issuer: /CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Certificate serial: 4DAA42601EC01463FD62CD10C56AB70053BB12F0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft Manifest number: 0126 Signing time: Sat 28 Feb 2026 05:30:40 +0000 Manifest this update: Sat 28 Feb 2026 05:25:40 +0000 Manifest next update: Tue 03 Mar 2026 12:53:40 +0000 Files and hashes: 1: 2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl (hash: 8eE/jGTuwa1xvEvU/PFZjvMNlh8Zuvw4ALpB/sUdGvM=) 2: 32372e3132342e36372e302f32342d3234203d3e20313532303339.roa (hash: s05NUxO3OCK6ljSM126JzvbuefrUbP5vbV9fxoiHqUw=) 3: 32372e3132342e36362e302f32342d3234203d3e20313532303339.roa (hash: Qk1aebZH6HpsmbRtyw6Zbd7LsZDQbi5L/mrlB31+AsU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 12:53:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:aa:42:60:1e:c0:14:63:fd:62:cd:10:c5:6a:b7:00:53:bb:12:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605 Validity Not Before: Feb 28 05:25:40 2026 GMT Not After : Mar 3 12:53:40 2026 GMT Subject: CN=6DED5B271964F0907A4A6DBED052DB31F308CB5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:2e:66:6d:fc:6f:a0:e1:f5:69:41:a2:4e:2f: 5b:b1:d6:77:27:9b:1c:aa:7d:f2:a9:8c:5f:05:40: 68:60:42:43:3d:d7:ac:97:e2:29:2b:c6:1f:44:e4: df:1f:1f:67:39:86:41:65:59:eb:08:37:c0:f7:b6: e2:45:43:ad:49:78:13:66:da:0d:48:6d:61:17:e9: c0:e3:df:62:3c:7d:a8:2e:aa:4f:e6:37:4e:38:24: 0e:70:5b:79:7d:7e:4e:fd:c0:70:b1:53:52:2d:5f: 71:61:1b:14:62:b1:52:e0:ca:7b:af:46:c5:f8:24: 29:e9:5d:d7:d3:88:6b:8c:5f:8b:0b:98:74:22:ee: 44:08:5e:33:dc:d9:4b:32:7b:db:ed:c1:d9:e6:fa: 71:90:f0:14:c8:44:49:ef:ae:26:13:e6:aa:03:31: 70:20:f4:fc:a6:60:a5:cd:ee:65:e8:a6:f3:90:88: 0e:b2:bd:4c:35:ac:42:fb:1d:24:f8:6c:41:80:bc: 2d:96:5a:50:98:d7:92:ec:08:08:81:7d:d8:32:d8: eb:4b:2b:73:2b:1b:14:e4:d4:1e:06:6e:84:79:73: a9:67:57:81:b8:31:78:98:14:6d:5c:0a:d6:7e:50: 5d:d5:e3:f8:76:b3:12:c7:22:58:71:60:35:7a:07: 9e:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:ED:5B:27:19:64:F0:90:7A:4A:6D:BE:D0:52:DB:31:F3:08:CB:5F X509v3 Authority Key Identifier: keyid:2C:FD:5B:DD:D1:DB:A6:D9:40:28:74:D6:22:3A:BD:7E:EE:E0:16:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b7e0bc0-761b-4ec3-8f42-82981b91a97a/0/2CFD5BDDD1DBA6D9402874D6223ABD7EEEE01605.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:d0:87:06:d1:6e:70:42:cc:a5:4d:f3:e2:ec:a3:54:25:98: dc:96:8b:ce:7a:03:c8:f0:fd:df:00:61:47:01:d1:24:c6:fd: 85:db:2f:3d:32:1e:c0:e0:da:f5:87:6b:47:01:7a:c4:0a:7c: 95:6c:03:35:8e:28:c1:3b:aa:a6:62:41:8f:b9:17:67:8a:ae: 4e:99:25:ed:9d:18:60:96:6a:ea:b0:9e:5e:41:4d:d4:6c:21: 68:81:3e:67:98:71:d2:8a:4e:61:07:52:78:73:6c:9b:fe:ae: 2a:70:dd:4f:4b:d8:58:12:5d:3e:73:9e:5e:2c:d0:38:ae:d8: c7:8a:6d:6d:21:32:f8:19:94:7a:db:25:d6:ff:6a:0c:c1:50: 98:86:d9:51:69:30:f9:1f:c7:43:16:08:6b:dc:a9:ff:df:c2: dd:21:e1:74:ff:71:56:ec:cc:a5:8c:2a:a8:57:3c:23:0b:e4: 57:a5:1f:cd:e5:1b:1e:fe:c2:e5:7e:a0:32:da:07:94:5a:93: 74:47:18:d4:40:a9:84:22:f1:27:e3:a5:5b:6b:b4:11:75:2f: 54:7d:ac:cb:91:7c:db:56:83:7d:31:ed:4e:7c:1b:5a:64:42: 26:6a:ac:c7:30:d2:e8:a7:79:e5:a0:aa:bd:d0:57:2f:07:bc: 65:39:0d:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTapCYB7AFGP9Ys0QxWq3AFO7EvAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VF RUUwMTYwNTAeFw0yNjAyMjgwNTI1NDBaFw0yNjAzMDMxMjUzNDBaMDMxMTAvBgNV BAMTKDZERUQ1QjI3MTk2NEYwOTA3QTRBNkRCRUQwNTJEQjMxRjMwOENCNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlLmZt/G+g4fVpQaJOL1ux1ncn mxyqffKpjF8FQGhgQkM916yX4ikrxh9E5N8fH2c5hkFlWesIN8D3tuJFQ61JeBNm 2g1IbWEX6cDj32I8faguqk/mN044JA5wW3l9fk79wHCxU1ItX3FhGxRisVLgynuv RsX4JCnpXdfTiGuMX4sLmHQi7kQIXjPc2Usye9vtwdnm+nGQ8BTIREnvriYT5qoD MXAg9PymYKXN7mXopvOQiA6yvUw1rEL7HST4bEGAvC2WWlCY15LsCAiBfdgy2OtL K3MrGxTk1B4GboR5c6lnV4G4MXiYFG1cCtZ+UF3V4/h2sxLHIlhxYDV6B56/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbe1bJxlk8JB6Sm2+0FLbMfMIy18wHwYDVR0j BBgwFoAULP1b3dHbptlAKHTWIjq9fu7gFgUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjdlMGJjMC03NjFiLTRlYzMtOGY0Mi04Mjk4MWI5MWE5N2EvMC8yQ0ZENUJEREQx REJBNkQ5NDAyODc0RDYyMjNBQkQ3RUVFRTAxNjA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJEN0VFRUUw MTYwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI3ZTBiYzAtNzYxYi00ZWMzLThm NDItODI5ODFiOTFhOTdhLzAvMkNGRDVCREREMURCQTZEOTQwMjg3NEQ2MjIzQUJE N0VFRUUwMTYwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALLQhwbRbnBCzKVN8+Lso1QlmNyWi856A8jw /d8AYUcB0STG/YXbLz0yHsDg2vWHa0cBesQKfJVsAzWOKME7qqZiQY+5F2eKrk6Z Je2dGGCWauqwnl5BTdRsIWiBPmeYcdKKTmEHUnhzbJv+ripw3U9L2FgSXT5znl4s 0Diu2MeKbW0hMvgZlHrbJdb/agzBUJiG2VFpMPkfx0MWCGvcqf/fwt0h4XT/cVbs zKWMKqhXPCML5FelH83lGx7+wuV+oDLaB5Rak3RHGNRAqYQi8SfjpVtrtBF1L1R9 rMuRfNtWg30x7U58G1pkQiZqrMcw0uineeWgqr3QVy8HvGU5Dfo= -----END CERTIFICATE-----Generated at Mon Mar 2 11:39:13 2026 by rpki-client