$ rpki-client -vvf repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft File: C2E1998AC1681A41F68250BFABD05A982E00EA44.mft (raw, json) Hash identifier: np8tp59v24hqviljKmn/KSepQAdBzR1x6ttv0R8GK5g= Subject key identifier: 67:CD:68:58:1C:FD:D2:73:4E:CD:49:53:F0:B0:80:9B:5F:AD:94:58 Authority key identifier: C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 Certificate issuer: /CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Certificate serial: 3BB0430D4E314DB93692FDAC0D9F4BA16FDD13A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft Manifest number: 011B Signing time: Sat 28 Feb 2026 12:12:15 +0000 Manifest this update: Sat 28 Feb 2026 12:07:15 +0000 Manifest next update: Tue 03 Mar 2026 23:15:15 +0000 Files and hashes: 1: 323030313a6466333a653034303a3a2f34382d3438203d3e20313532383036.roa (hash: 7Sjy07nIz40VYuiQAAUvMHjSS6WBBJpcxOEZMkh16GE=) 2: C2E1998AC1681A41F68250BFABD05A982E00EA44.crl (hash: iMk/88hwkYqcwr9O6Ocy6gGG5A2R8XXZWL6Jk4B2lr4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:15:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:b0:43:0d:4e:31:4d:b9:36:92:fd:ac:0d:9f:4b:a1:6f:dd:13:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E1998AC1681A41F68250BFABD05A982E00EA44 Validity Not Before: Feb 28 12:07:15 2026 GMT Not After : Mar 3 23:15:15 2026 GMT Subject: CN=67CD68581CFDD2734ECD4953F0B0809B5FAD9458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:3f:b5:d4:20:de:9b:eb:0a:ce:9a:ec:26:88: 88:1e:7d:30:fc:0f:5a:78:bc:05:e0:be:6b:bd:5f: 8a:a6:dd:f9:83:f3:b5:20:c9:7b:02:d4:5f:7c:6b: 96:5d:ef:8f:07:ba:07:52:cf:f7:ef:7c:74:67:b2: ff:39:30:cb:85:d6:fd:ca:92:78:4f:a9:a6:3e:ea: d0:a8:98:74:02:1a:57:2c:d2:19:46:1f:cf:09:b9: 7c:3e:6b:b7:64:d3:82:39:f0:a4:39:69:ec:2d:dc: 95:13:c9:bb:58:33:2d:24:7b:23:ab:34:25:5e:ee: ee:4a:73:fd:6e:90:37:41:c4:01:2a:94:14:d4:d8: 1b:66:a5:58:46:7f:96:8d:e6:4b:72:4e:f2:59:54: b2:7f:cc:10:99:15:24:5c:2c:d0:ac:ab:dc:d7:00: 20:b6:ec:91:6c:7c:dd:3b:52:29:11:23:7c:72:d8: db:0e:52:a4:2b:f1:13:44:d8:31:fd:ec:fa:c3:50: 07:3a:b0:c8:4e:40:fb:11:ce:98:ef:5a:3e:05:91: fd:d1:ce:5c:61:4a:4c:5f:85:97:9b:0f:8b:8d:2a: 30:f6:82:f5:af:96:85:7b:40:3f:3a:b2:74:28:10: ae:ca:17:88:ec:d3:6c:84:ec:94:68:fa:c2:f8:36: 96:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:CD:68:58:1C:FD:D2:73:4E:CD:49:53:F0:B0:80:9B:5F:AD:94:58 X509v3 Authority Key Identifier: keyid:C2:E1:99:8A:C1:68:1A:41:F6:82:50:BF:AB:D0:5A:98:2E:00:EA:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E1998AC1681A41F68250BFABD05A982E00EA44.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bdce391-a5d3-411b-a97b-e862fbf5631c/1/C2E1998AC1681A41F68250BFABD05A982E00EA44.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d1:58:86:db:f8:e6:11:c8:5a:c8:55:59:aa:99:1d:19:6e: a5:c7:50:28:c7:bd:05:3d:0e:00:7a:1c:15:44:c1:53:5f:ca: 5d:3d:dc:6a:e0:5e:d1:13:a9:62:f6:9d:ba:02:15:ba:84:b1: 19:a1:cd:66:dd:f1:d1:85:57:38:38:02:bb:45:5f:1c:93:dd: 48:32:92:70:8d:26:11:a6:8d:04:5b:31:36:79:44:1e:2e:84: 8e:44:6b:11:ff:1b:42:3d:1e:ff:d5:40:bb:b2:3a:3b:fb:d6: 15:1e:50:e2:f5:0f:4f:a2:d4:d4:12:7b:6f:1b:dd:1e:75:39: 96:68:4a:a7:d2:01:a6:27:0f:c4:d0:dd:78:cd:13:a8:08:ef: f2:09:56:d0:1a:8e:6c:82:2b:d0:03:07:ec:53:0c:a5:86:bd: db:9f:7e:53:23:52:38:d0:52:d6:83:1f:c8:28:eb:42:15:42: ee:72:f4:2c:20:58:ec:f8:4b:89:fd:f3:cd:05:7b:a0:95:28: 93:89:13:cd:7f:c1:49:91:a0:c2:da:3d:91:b1:a1:75:50:04: ad:82:20:41:90:fb:7c:de:eb:b1:81:55:c5:be:70:f7:c4:1f: 42:18:f9:1d:40:a2:50:ad:5d:20:38:04:1c:3c:e5:e4:33:4b: 44:45:76:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO7BDDU4xTbk2kv2sDZ9LoW/dE6YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgy RTAwRUE0NDAeFw0yNjAyMjgxMjA3MTVaFw0yNjAzMDMyMzE1MTVaMDMxMTAvBgNV BAMTKDY3Q0Q2ODU4MUNGREQyNzM0RUNENDk1M0YwQjA4MDlCNUZBRDk0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDuP7XUIN6b6wrOmuwmiIgefTD8 D1p4vAXgvmu9X4qm3fmD87UgyXsC1F98a5Zd748HugdSz/fvfHRnsv85MMuF1v3K knhPqaY+6tComHQCGlcs0hlGH88JuXw+a7dk04I58KQ5aewt3JUTybtYMy0keyOr NCVe7u5Kc/1ukDdBxAEqlBTU2BtmpVhGf5aN5ktyTvJZVLJ/zBCZFSRcLNCsq9zX ACC27JFsfN07UikRI3xy2NsOUqQr8RNE2DH97PrDUAc6sMhOQPsRzpjvWj4Fkf3R zlxhSkxfhZebD4uNKjD2gvWvloV7QD86snQoEK7KF4js02yE7JRo+sL4Npb9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ81oWBz90nNOzUlT8LCAm1+tlFgwHwYDVR0j BBgwFoAUwuGZisFoGkH2glC/q9BamC4A6kQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YmRjZTM5MS1hNWQzLTQxMWItYTk3Yi1lODYyZmJmNTYzMWMvMS9DMkUxOTk4QUMx NjgxQTQxRjY4MjUwQkZBQkQwNUE5ODJFMDBFQTQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVBOTgyRTAw RUE0NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWJkY2UzOTEtYTVkMy00MTFiLWE5 N2ItZTg2MmZiZjU2MzFjLzEvQzJFMTk5OEFDMTY4MUE0MUY2ODI1MEJGQUJEMDVB OTgyRTAwRUE0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzRWIbb+OYRyFrIVVmqmR0ZbqXHUCjHvQU9 DgB6HBVEwVNfyl093GrgXtETqWL2nboCFbqEsRmhzWbd8dGFVzg4ArtFXxyT3Ugy knCNJhGmjQRbMTZ5RB4uhI5EaxH/G0I9Hv/VQLuyOjv71hUeUOL1D0+i1NQSe28b 3R51OZZoSqfSAaYnD8TQ3XjNE6gI7/IJVtAajmyCK9ADB+xTDKWGvdufflMjUjjQ UtaDH8go60IVQu5y9CwgWOz4S4n9880Fe6CVKJOJE81/wUmRoMLaPZGxoXVQBK2C IEGQ+3ze67GBVcW+cPfEH0IY+R1AolCtXSA4BBw85eQzS0RFdtc= -----END CERTIFICATE-----Generated at Mon Mar 2 00:37:03 2026 by rpki-client