$ rpki-client -vvf repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft File: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft (raw, json) Hash identifier: BwsLrmhjtU39ISr73vA/xUyDvFlIfdJfXQzo34Vr0ZU= Subject key identifier: 70:F2:38:20:53:53:F0:E2:24:79:F1:7E:94:47:3C:5D:18:7E:21:C3 Authority key identifier: 2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 Certificate issuer: /CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Certificate serial: 5F7D6861F18BDA5E2DFEE585A18BEB3DDABE2349 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 09:31:32 +0000 Manifest this update: Sun 01 Mar 2026 09:26:32 +0000 Manifest next update: Wed 04 Mar 2026 11:56:32 +0000 Files and hashes: 1: 2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl (hash: M1R33vpjz7SsFel+Qu0qOor10JkWs0g9du91WQ4f00Q=) 2: 3130332e3134342e3130332e302f32342d3234203d3e20313339343231.roa (hash: /ZqmuN0x+ZwpTTLsOK93bf5aWydgNNzXSi3NS4bqhi0=) 3: 3130332e3134342e3130322e302f32342d3234203d3e20313339343231.roa (hash: bV9xBqFWWdQNpl4xPPj/IRLaOQzWewk+JeafEOq6H8g=) 4: 3130332e3134342e3130322e302f32332d3234203d3e20313339343231.roa (hash: cdpLxSADx6mq88cWkf5UoxPyeajYM3Kq/Bc+NW2yaec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 11:56:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:7d:68:61:f1:8b:da:5e:2d:fe:e5:85:a1:8b:eb:3d:da:be:23:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D9D9137D4427A9D34E1B15F16C5C689A8C549D9 Validity Not Before: Mar 1 09:26:32 2026 GMT Not After : Mar 4 11:56:32 2026 GMT Subject: CN=70F238205353F0E22479F17E94473C5D187E21C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:9b:44:b6:fb:7b:76:46:52:73:29:65:6b:92: a7:83:a3:5c:78:ec:58:48:12:41:9a:05:8a:73:60: f2:2e:b6:bc:9a:04:e8:2b:50:24:ce:dc:77:25:d2: 57:d9:2f:81:17:78:41:1c:fc:3a:19:d1:4a:0a:75: cd:e8:52:fc:02:dd:b3:c4:9a:c4:6f:df:a5:35:4a: 9a:1e:bd:68:ee:1f:02:32:fd:26:af:3e:50:fb:e5: 8b:c4:01:44:2e:9c:33:6c:be:26:a6:96:35:83:87: 89:60:58:ac:54:9c:71:ee:e1:b7:f2:bd:1c:bc:b0: fd:54:de:5d:b5:0a:37:7f:4a:96:5f:b8:cf:50:d3: 32:a3:31:2f:e6:49:c8:7e:75:54:d0:fe:89:33:27: 50:6f:11:68:7f:af:c6:40:87:3d:06:9f:32:44:1a: a5:f9:df:4f:fa:00:8f:f6:e9:88:42:27:8e:a9:1e: cd:56:f5:c9:ac:b6:f4:3f:81:fe:5f:31:b2:5a:39: 34:7d:73:57:05:d6:73:6c:85:c4:e0:11:76:71:a3: 37:35:56:4c:2d:3b:09:64:99:b9:f1:77:ae:4c:fb: 5f:d8:ec:7e:4d:bd:de:73:91:87:b4:4d:ae:d2:54: 14:dd:7e:01:9d:64:5e:ce:a6:fc:0f:53:4a:94:40: 3d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:F2:38:20:53:53:F0:E2:24:79:F1:7E:94:47:3C:5D:18:7E:21:C3 X509v3 Authority Key Identifier: keyid:2D:9D:91:37:D4:42:7A:9D:34:E1:B1:5F:16:C5:C6:89:A8:C5:49:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a5341e8-22d8-449c-a753-e47bbfc48538/0/2D9D9137D4427A9D34E1B15F16C5C689A8C549D9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:77:01:95:89:01:7c:28:54:d4:fc:05:a5:51:63:bf:33:a1: 3e:ba:74:ae:47:b0:5e:1c:53:21:9c:f7:40:a6:8d:e2:8e:db: a8:ea:f5:51:4c:42:4a:f7:03:47:1e:d7:e9:75:5b:64:7b:03: d0:aa:3c:5c:f3:57:dc:b4:8d:87:88:51:2c:a6:27:96:0b:57: 37:a4:80:9b:23:73:de:ca:1e:db:0b:7f:74:6e:fd:9c:28:2b: ac:b2:ca:59:2d:77:ef:66:a7:f4:ee:c3:6d:7c:8f:1e:fb:2b: 2d:5f:40:2e:a1:4f:ca:dc:95:68:1d:93:db:e2:c8:3e:6b:77: 93:e3:34:5d:0c:86:51:38:71:51:7a:5b:56:e7:6a:28:e5:17: 52:82:7a:d2:46:82:7a:ac:3f:d7:af:6b:5c:db:02:02:49:7f: c7:ff:41:46:93:5e:41:65:ea:2f:56:9a:bd:1b:c0:bd:60:39: 1b:77:07:83:40:d8:c6:ad:ae:92:7e:f8:6f:6d:e2:0e:32:c4: 81:16:2b:42:f4:e2:06:29:e8:12:ac:4c:06:6f:93:77:ac:5f: 63:bc:b7:8d:2a:76:9d:a2:3d:51:b6:80:c5:86:6d:62:12:d1: 3c:c3:84:f2:ad:17:f2:3a:b4:54:7c:a1:c1:15:85:28:b7:21: e4:96:0b:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX31oYfGL2l4t/uWFoYvrPdq+I0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlB OEM1NDlEOTAeFw0yNjAzMDEwOTI2MzJaFw0yNjAzMDQxMTU2MzJaMDMxMTAvBgNV BAMTKDcwRjIzODIwNTM1M0YwRTIyNDc5RjE3RTk0NDczQzVEMTg3RTIxQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFm0S2+3t2RlJzKWVrkqeDo1x4 7FhIEkGaBYpzYPIutryaBOgrUCTO3Hcl0lfZL4EXeEEc/DoZ0UoKdc3oUvwC3bPE msRv36U1SpoevWjuHwIy/SavPlD75YvEAUQunDNsviamljWDh4lgWKxUnHHu4bfy vRy8sP1U3l21Cjd/SpZfuM9Q0zKjMS/mSch+dVTQ/okzJ1BvEWh/r8ZAhz0GnzJE GqX530/6AI/26YhCJ46pHs1W9cmstvQ/gf5fMbJaOTR9c1cF1nNshcTgEXZxozc1 VkwtOwlkmbnxd65M+1/Y7H5Nvd5zkYe0Ta7SVBTdfgGdZF7OpvwPU0qUQD3rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcPI4IFNT8OIkefF+lEc8XRh+IcMwHwYDVR0j BBgwFoAULZ2RN9RCep004bFfFsXGiajFSdkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTUzNDFlOC0yMmQ4LTQ0OWMtYTc1My1lNDdiYmZjNDg1MzgvMC8yRDlEOTEzN0Q0 NDI3QTlEMzRFMUIxNUYxNkM1QzY4OUE4QzU0OUQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2ODlBOEM1 NDlEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE1MzQxZTgtMjJkOC00NDljLWE3 NTMtZTQ3YmJmYzQ4NTM4LzAvMkQ5RDkxMzdENDQyN0E5RDM0RTFCMTVGMTZDNUM2 ODlBOEM1NDlEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACJ3AZWJAXwoVNT8BaVRY78zoT66dK5HsF4c UyGc90CmjeKO26jq9VFMQkr3A0ce1+l1W2R7A9CqPFzzV9y0jYeIUSymJ5YLVzek gJsjc97KHtsLf3Ru/ZwoK6yyylktd+9mp/Tuw218jx77Ky1fQC6hT8rclWgdk9vi yD5rd5PjNF0MhlE4cVF6W1bnaijlF1KCetJGgnqsP9eva1zbAgJJf8f/QUaTXkFl 6i9Wmr0bwL1gORt3B4NA2MatrpJ++G9t4g4yxIEWK0L04gYp6BKsTAZvk3esX2O8 t40qdp2iPVG2gMWGbWIS0TzDhPKtF/I6tFR8ocEVhSi3IeSWC6w= -----END CERTIFICATE-----Generated at Mon Mar 2 09:45:53 2026 by rpki-client