$ rpki-client -vvf repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft File: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft (raw, json) Hash identifier: XHx9XxhIy4JRl2yoJK4k3DBxCoikQZxnT7z0GP9shcc= Subject key identifier: 8F:BF:3D:07:B4:EB:EF:7A:AE:C0:5B:45:9A:DF:3E:60:77:7D:BE:84 Authority key identifier: 2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC Certificate issuer: /CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Certificate serial: 588016855249AF19B42D51FD8A5A664533872B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft Manifest number: 0126 Signing time: Sat 28 Feb 2026 08:50:44 +0000 Manifest this update: Sat 28 Feb 2026 08:45:44 +0000 Manifest next update: Tue 03 Mar 2026 13:39:44 +0000 Files and hashes: 1: 3135372e32302e3234342e302f32342d3234203d3e20313338303839.roa (hash: teoM6MXntxfZebuRvj4HuDCmBJE7bmAYK9p8NliSwzQ=) 2: 2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl (hash: SAYVM8A6pU47akXmeImemA+vM4Pf31LF/R2FO4cbnfA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 13:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:80:16:85:52:49:af:19:b4:2d:51:fd:8a:5a:66:45:33:87:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2ADDD4035173FAC3BB3949CB36CCEF2553798BFC Validity Not Before: Feb 28 08:45:44 2026 GMT Not After : Mar 3 13:39:44 2026 GMT Subject: CN=8FBF3D07B4EBEF7AAEC05B459ADF3E60777DBE84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2b:f7:d3:36:f5:cb:07:b1:2d:f0:a9:35:ae: f9:0a:36:37:b6:e1:7c:ec:c4:eb:12:44:2c:17:47: 0d:19:f4:c3:74:a9:b9:79:eb:1b:2e:9a:7d:34:45: b8:19:5e:36:29:14:76:1c:fb:d3:f8:2b:8d:57:3c: 85:b0:0a:dd:1f:f2:c1:5a:72:44:75:72:c5:82:29: 86:cb:ed:b3:86:cc:a1:23:eb:9b:bf:bd:49:f6:e5: 34:93:3b:77:34:1b:9e:41:9b:4f:02:e6:7e:02:9f: c3:17:10:e7:d3:63:d8:14:63:35:aa:78:83:48:67: 88:b5:8d:eb:ad:18:fa:4d:69:a2:96:09:e6:66:81: 9e:ca:4e:35:59:ad:6b:a4:3d:9b:c7:59:56:5c:c6: be:41:e2:04:96:e0:3a:71:8a:7c:fd:d3:a3:a0:50: c7:e5:b0:de:28:66:b2:85:8e:09:7e:64:2a:d4:fe: f1:4d:08:37:ae:02:93:f8:b5:62:55:d4:74:8d:ee: 73:16:4f:b6:2b:fb:02:70:10:28:5f:f6:4b:84:ca: ec:b2:57:5d:29:53:5e:5a:e4:e7:ad:29:4c:1b:15: 6c:ab:fa:de:40:5c:5f:02:d4:07:67:92:68:3c:96: 35:c9:31:d6:92:e8:d4:43:68:22:4d:36:2d:e5:1f: 70:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:BF:3D:07:B4:EB:EF:7A:AE:C0:5B:45:9A:DF:3E:60:77:7D:BE:84 X509v3 Authority Key Identifier: keyid:2A:DD:D4:03:51:73:FA:C3:BB:39:49:CB:36:CC:EF:25:53:79:8B:FC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2867a2ee-d411-4ff8-9f5c-35d034123f84/0/2ADDD4035173FAC3BB3949CB36CCEF2553798BFC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:a4:ca:c2:05:ab:18:bf:b3:f8:3a:d5:22:b9:37:08:39:6a: 07:54:b0:cf:ed:1a:68:7c:68:a4:99:67:33:d7:3b:63:96:a8: 8d:63:91:b2:75:5c:a7:b4:f5:00:a7:4f:4d:aa:72:f9:e1:73: bc:40:67:33:39:2e:51:67:b8:6a:6f:60:4c:0b:58:43:05:99: d1:ce:56:a2:80:b1:84:03:aa:f0:e5:d0:91:2e:86:b8:17:d5: 51:b4:c8:8a:6a:fd:a9:a0:fc:9d:26:8b:4c:8d:34:97:92:28: 7a:10:51:f9:f1:28:06:5b:ca:12:be:a2:92:e9:bd:86:6f:72: 3b:fa:ed:4e:54:0c:46:22:7b:33:3e:5c:c2:63:a7:be:aa:bc: fb:ab:e6:a2:01:ef:9e:b4:7b:0c:72:a4:bf:82:3f:b2:7a:47: 57:dd:0f:09:15:76:c3:45:cb:13:fb:d2:99:fd:78:c2:7f:40: 0b:08:29:5f:00:4a:c0:95:c0:93:c8:d3:70:26:81:dc:69:b4: 0a:38:a0:9a:df:31:2f:4b:76:17:0b:c0:96:59:ee:86:72:54: 96:41:ef:a4:91:93:75:2b:6c:99:95:78:17:e1:98:f9:4b:9f: e3:10:6a:3c:55:93:47:04:51:de:fa:3f:37:5c:95:d3:f7:90: 48:85:78:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWIAWhVJJrxm0LVH9ilpmRTOHK3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1 Mzc5OEJGQzAeFw0yNjAyMjgwODQ1NDRaFw0yNjAzMDMxMzM5NDRaMDMxMTAvBgNV BAMTKDhGQkYzRDA3QjRFQkVGN0FBRUMwNUI0NTlBREYzRTYwNzc3REJFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvK/fTNvXLB7Et8Kk1rvkKNje2 4XzsxOsSRCwXRw0Z9MN0qbl56xsumn00RbgZXjYpFHYc+9P4K41XPIWwCt0f8sFa ckR1csWCKYbL7bOGzKEj65u/vUn25TSTO3c0G55Bm08C5n4Cn8MXEOfTY9gUYzWq eINIZ4i1jeutGPpNaaKWCeZmgZ7KTjVZrWukPZvHWVZcxr5B4gSW4Dpxinz906Og UMflsN4oZrKFjgl+ZCrU/vFNCDeuApP4tWJV1HSN7nMWT7Yr+wJwEChf9kuEyuyy V10pU15a5OetKUwbFWyr+t5AXF8C1Adnkmg8ljXJMdaS6NRDaCJNNi3lH3ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj789B7Tr73quwFtFmt8+YHd9voQwHwYDVR0j BBgwFoAUKt3UA1Fz+sO7OUnLNszvJVN5i/wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ODY3YTJlZS1kNDExLTRmZjgtOWY1Yy0zNWQwMzQxMjNmODQvMC8yQURERDQwMzUx NzNGQUMzQkIzOTQ5Q0IzNkNDRUYyNTUzNzk4QkZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VGMjU1Mzc5 OEJGQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjg2N2EyZWUtZDQxMS00ZmY4LTlm NWMtMzVkMDM0MTIzZjg0LzAvMkFEREQ0MDM1MTczRkFDM0JCMzk0OUNCMzZDQ0VG MjU1Mzc5OEJGQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGakysIFqxi/s/g61SK5Nwg5agdUsM/tGmh8 aKSZZzPXO2OWqI1jkbJ1XKe09QCnT02qcvnhc7xAZzM5LlFnuGpvYEwLWEMFmdHO VqKAsYQDqvDl0JEuhrgX1VG0yIpq/amg/J0mi0yNNJeSKHoQUfnxKAZbyhK+opLp vYZvcjv67U5UDEYiezM+XMJjp76qvPur5qIB7560ewxypL+CP7J6R1fdDwkVdsNF yxP70pn9eMJ/QAsIKV8ASsCVwJPI03AmgdxptAo4oJrfMS9LdhcLwJZZ7oZyVJZB 76SRk3UrbJmVeBfhmPlLn+MQajxVk0cEUd76PzdcldP3kEiFeM8= -----END CERTIFICATE-----Generated at Mon Mar 2 15:10:09 2026 by rpki-client