$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: ESv3hGjzaJAgVOAlYSB6Nekm+gWXHAM+eGOGnU29nus= Subject key identifier: 22:85:86:46:A7:AC:FD:12:CA:62:AA:B3:5B:FD:A5:7C:D7:67:F1:20 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 5DD47E65B838F6231AD244E399CC4CC5AF926FA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 0127 Signing time: Mon 02 Mar 2026 13:40:45 +0000 Manifest this update: Mon 02 Mar 2026 13:35:45 +0000 Manifest next update: Thu 05 Mar 2026 20:26:45 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: /vod0E44e56pmm86sTYKKgGe3bA/Vly8wsTWyInDp+U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:d4:7e:65:b8:38:f6:23:1a:d2:44:e3:99:cc:4c:c5:af:92:6f:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Mar 2 13:35:45 2026 GMT Not After : Mar 5 20:26:45 2026 GMT Subject: CN=22858646A7ACFD12CA62AAB35BFDA57CD767F120 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:35:0f:d5:d3:7e:58:39:2f:03:df:03:f4:57: 6d:53:ab:6a:64:20:e1:ab:3f:2d:4e:a8:9e:e9:c6: 22:1a:50:77:3d:c7:88:07:6d:46:d5:a0:de:2b:be: c5:a0:2d:25:6d:8e:ba:40:d5:a3:e9:47:49:02:6b: 91:32:b7:7d:fb:7d:c1:92:95:92:91:2b:fc:98:d4: 4f:91:15:32:8b:73:b5:61:e2:b1:45:77:37:f1:79: de:99:0c:7c:1b:43:e8:9a:fa:7e:47:86:ea:17:81: 3e:db:d2:16:46:f8:77:cb:27:49:8f:65:7e:11:4f: 63:90:7b:85:c8:0b:20:2b:e1:28:17:ff:b9:7d:aa: 82:87:aa:ec:96:a9:d7:bc:54:92:6c:dd:06:ea:f7: 33:ac:06:1f:61:f0:90:f8:d5:a6:f8:78:b3:9c:cc: 73:25:9e:e6:b3:59:b9:85:70:98:8b:a3:0b:a8:46: 5a:6d:b1:24:76:77:16:2f:5f:13:55:67:30:16:8c: a6:fa:66:0e:f4:87:5a:a0:b1:98:7d:fc:bf:0e:05: d8:bb:0b:58:c9:db:fb:25:21:a4:bb:6b:05:00:eb: d2:d1:e6:48:d3:9b:27:b5:38:1b:51:2a:eb:4f:58: 4b:f7:63:27:a9:7c:8f:45:10:e5:66:0d:cf:34:de: c8:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:85:86:46:A7:AC:FD:12:CA:62:AA:B3:5B:FD:A5:7C:D7:67:F1:20 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ed:d1:f6:30:f7:d6:49:e5:a0:eb:2d:4f:5a:15:a1:1f:59: 09:69:38:84:6a:68:92:c3:36:67:4b:7e:0c:ce:86:68:81:b6: 31:62:aa:66:ef:ef:11:36:a2:fc:39:77:fb:f7:4d:0f:c5:cb: 0b:47:69:19:2e:64:ed:a0:cd:ba:ca:33:43:ee:56:50:a0:ff: 46:06:91:15:91:14:f8:b3:f9:4f:9c:2c:57:be:d3:4a:ba:6e: 89:c7:20:34:a9:cd:a9:45:53:df:a5:2c:69:d4:ca:84:77:3d: 7f:71:81:91:b5:b0:e5:4a:1c:a2:ea:b8:40:cb:f4:af:aa:58: f7:15:a6:d0:0c:ef:21:b0:b9:51:6d:7f:ec:cb:20:71:d7:02: ae:d3:1e:c9:6e:ea:75:17:e2:c6:8c:a5:94:76:c7:c4:25:be: dd:f3:1f:8d:0c:e8:6f:e3:14:1c:11:23:e8:1d:b3:21:f5:a1: 27:50:af:f9:d9:c7:8a:1a:32:8c:7e:25:71:82:e2:6f:b9:6f: 7c:7e:4d:da:8c:53:38:f1:1b:71:20:e2:88:61:0d:c8:55:e3: 38:7f:e9:af:8e:88:f2:1c:e2:7f:31:0e:6c:ee:62:dd:0c:3d: a4:4a:df:2e:0c:ac:1e:05:19:ac:06:ba:0a:60:fc:3b:cc:af: 21:78:01:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXdR+Zbg49iMa0kTjmcxMxa+Sb6cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNjAzMDIxMzM1NDVaFw0yNjAzMDUyMDI2NDVaMDMxMTAvBgNV BAMTKDIyODU4NjQ2QTdBQ0ZEMTJDQTYyQUFCMzVCRkRBNTdDRDc2N0YxMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTNQ/V035YOS8D3wP0V21Tq2pk IOGrPy1OqJ7pxiIaUHc9x4gHbUbVoN4rvsWgLSVtjrpA1aPpR0kCa5Eyt337fcGS lZKRK/yY1E+RFTKLc7Vh4rFFdzfxed6ZDHwbQ+ia+n5HhuoXgT7b0hZG+HfLJ0mP ZX4RT2OQe4XICyAr4SgX/7l9qoKHquyWqde8VJJs3Qbq9zOsBh9h8JD41ab4eLOc zHMlnuazWbmFcJiLowuoRlptsSR2dxYvXxNVZzAWjKb6Zg70h1qgsZh9/L8OBdi7 C1jJ2/slIaS7awUA69LR5kjTmye1OBtRKutPWEv3YyepfI9FEOVmDc803sjvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIoWGRqes/RLKYqqzW/2lfNdn8SAwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXt0fYw99ZJ5aDrLU9aFaEfWQlpOIRqaJLD NmdLfgzOhmiBtjFiqmbv7xE2ovw5d/v3TQ/FywtHaRkuZO2gzbrKM0PuVlCg/0YG kRWRFPiz+U+cLFe+00q6bonHIDSpzalFU9+lLGnUyoR3PX9xgZG1sOVKHKLquEDL 9K+qWPcVptAM7yGwuVFtf+zLIHHXAq7THslu6nUX4saMpZR2x8Qlvt3zH40M6G/j FBwRI+gdsyH1oSdQr/nZx4oaMox+JXGC4m+5b3x+TdqMUzjxG3Eg4ohhDchV4zh/ 6a+OiPIc4n8xDmzuYt0MPaRK3y4MrB4FGawGugpg/DvMryF4Afg= -----END CERTIFICATE-----Generated at Mon Mar 2 18:12:33 2026 by rpki-client