$ rpki-client -vvf repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft File: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft (raw, json) Hash identifier: KwepGAtKUCFtuOHFUXJB2YOceipiYW0gSlp1FZRLNb4= Subject key identifier: 2A:2A:66:EB:D5:46:DF:0F:B0:37:A2:CE:7A:5F:9A:6F:27:4B:F4:97 Authority key identifier: 24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 Certificate issuer: /CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Certificate serial: 6EC8D628B2C339540348275E722296D78811C047 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft Manifest number: 010D Signing time: Mon 02 Mar 2026 14:31:53 +0000 Manifest this update: Mon 02 Mar 2026 14:26:53 +0000 Manifest next update: Fri 06 Mar 2026 02:06:53 +0000 Files and hashes: 1: 24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl (hash: Ni91NgvzQSs14xLC9Rrng032xWUGAzTTDrbwEszYKEg=) 2: 3136302e32352e33352e302f32342d3234203d3e20313532383331.roa (hash: +gBVwNw7mH+NkrJk5YLfGGsFiQ/hE9AOEiojhde40e4=) 3: 3136302e32352e33342e302f32342d3234203d3e20313532383331.roa (hash: 07AYTQCRXN9L1KmjaIr5Q8Dzp8wOL7x5otWYmSe9QU0=) 4: 3136302e32352e33342e302f32332d3234203d3e20313532383331.roa (hash: 0U+NdxzY7vmT7oHxOmUZVL0R1y6tciRJXLTpjbtqaPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 02:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:c8:d6:28:b2:c3:39:54:03:48:27:5e:72:22:96:d7:88:11:c0:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8 Validity Not Before: Mar 2 14:26:53 2026 GMT Not After : Mar 6 02:06:53 2026 GMT Subject: CN=2A2A66EBD546DF0FB037A2CE7A5F9A6F274BF497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:cf:5e:f2:12:66:47:49:31:bd:10:49:bb:e0: c1:9b:b3:af:28:ea:c7:18:33:38:b9:26:1c:fb:6a: 67:42:29:df:d9:b6:85:d0:2c:8d:73:3c:c3:44:14: a8:2a:c1:bd:49:45:d2:c5:1b:13:03:53:25:07:fc: d2:f3:72:5b:7d:77:fd:03:1a:47:35:ca:b0:71:08: 03:ee:61:52:42:71:22:67:c6:2c:46:66:63:22:84: 47:0f:16:12:22:c4:09:54:c5:c8:92:10:b1:56:7c: bf:48:0b:af:b1:22:1e:e3:5a:ed:d5:14:89:0c:54: 45:c4:71:10:4c:4c:c6:26:60:58:d2:85:29:f8:b0: de:8d:21:c1:68:b5:38:ce:ed:bf:1f:3b:80:01:fd: a9:ca:10:ae:7e:45:8f:b5:49:ca:61:b6:f3:1f:f3: 96:19:73:c0:1b:14:c7:a5:95:7f:14:98:93:9d:2f: 48:d5:f6:20:bc:df:c1:c6:97:47:a1:d6:bd:be:fa: 6a:a5:b0:70:3e:71:e3:c4:1c:f4:cf:23:db:16:34: cd:c1:ad:07:42:ed:27:1d:99:79:0a:23:c9:a1:a6: b6:b5:9c:9a:2d:a3:69:0b:f2:55:73:31:a0:ce:63: 7d:7e:5a:83:af:7e:52:24:84:75:61:0d:26:7e:4c: a5:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:2A:66:EB:D5:46:DF:0F:B0:37:A2:CE:7A:5F:9A:6F:27:4B:F4:97 X509v3 Authority Key Identifier: keyid:24:AE:CD:D0:A0:82:7A:48:D5:FB:AE:F5:01:FE:D3:F4:C6:2A:AB:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d6c9b8c-3be7-4c02-9551-fbc6ffc4070f/0/24AECDD0A0827A48D5FBAEF501FED3F4C62AABD8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:69:21:c7:d7:9e:05:19:e5:e6:36:80:b6:70:df:bc:00:41: dc:d2:54:4e:8a:cd:70:bf:72:1e:5b:04:f7:18:14:71:1e:ad: 0e:f5:a7:1b:21:7d:38:a3:9b:e7:3b:0b:a4:bd:37:7b:ff:fc: ab:46:57:09:be:d8:5b:6a:64:84:fd:7d:e7:bc:a3:b0:59:e4: 8b:7b:b6:a6:33:52:53:02:49:76:ad:79:4d:0e:bb:6e:d2:19: 6f:6c:2f:9a:1b:5c:37:04:39:d1:7f:ca:99:2f:72:91:73:c5: e4:43:ca:f5:43:42:cc:99:6f:19:1a:aa:40:e0:03:37:ba:43: 23:60:c6:c6:70:88:ae:ee:78:0a:9e:5a:75:f3:d6:8d:19:28: ca:18:60:d4:aa:88:3f:54:c4:bf:28:53:a4:b9:b1:e7:3d:20: 0d:89:56:d1:1e:52:81:1b:6e:b3:26:7a:ed:b3:d8:a2:87:e8: 24:35:f9:0a:85:e9:b3:49:21:d4:98:61:eb:7a:43:38:b5:a1: 3a:39:3a:21:d1:c2:cc:78:c9:15:3c:ea:24:42:3b:67:1a:66: 50:1c:71:12:97:85:7d:c1:63:6c:cd:c7:41:bb:e8:f7:c7:ed: 63:fc:53:24:ee:22:b2:db:68:a9:ba:db:0a:a7:22:3b:30:dd: 26:bb:04:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbsjWKLLDOVQDSCdeciKW14gRwEcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRD NjJBQUJEODAeFw0yNjAzMDIxNDI2NTNaFw0yNjAzMDYwMjA2NTNaMDMxMTAvBgNV BAMTKDJBMkE2NkVCRDU0NkRGMEZCMDM3QTJDRTdBNUY5QTZGMjc0QkY0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGz17yEmZHSTG9EEm74MGbs68o 6scYMzi5Jhz7amdCKd/ZtoXQLI1zPMNEFKgqwb1JRdLFGxMDUyUH/NLzclt9d/0D Gkc1yrBxCAPuYVJCcSJnxixGZmMihEcPFhIixAlUxciSELFWfL9IC6+xIh7jWu3V FIkMVEXEcRBMTMYmYFjShSn4sN6NIcFotTjO7b8fO4AB/anKEK5+RY+1ScphtvMf 85YZc8AbFMellX8UmJOdL0jV9iC838HGl0eh1r2++mqlsHA+cePEHPTPI9sWNM3B rQdC7ScdmXkKI8mhpra1nJoto2kL8lVzMaDOY31+WoOvflIkhHVhDSZ+TKXrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKipm69VG3w+wN6LOel+abydL9JcwHwYDVR0j BBgwFoAUJK7N0KCCekjV+671Af7T9MYqq9gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDZjOWI4Yy0zYmU3LTRjMDItOTU1MS1mYmM2ZmZjNDA3MGYvMC8yNEFFQ0REMEEw ODI3QTQ4RDVGQkFFRjUwMUZFRDNGNEM2MkFBQkQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQzRjRDNjJB QUJEOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQ2YzliOGMtM2JlNy00YzAyLTk1 NTEtZmJjNmZmYzQwNzBmLzAvMjRBRUNERDBBMDgyN0E0OEQ1RkJBRUY1MDFGRUQz RjRDNjJBQUJEOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADxpIcfXngUZ5eY2gLZw37wAQdzSVE6KzXC/ ch5bBPcYFHEerQ71pxshfTijm+c7C6S9N3v//KtGVwm+2FtqZIT9fee8o7BZ5It7 tqYzUlMCSXateU0Ou27SGW9sL5obXDcEOdF/ypkvcpFzxeRDyvVDQsyZbxkaqkDg Aze6QyNgxsZwiK7ueAqeWnXz1o0ZKMoYYNSqiD9UxL8oU6S5sec9IA2JVtEeUoEb brMmeu2z2KKH6CQ1+QqF6bNJIdSYYet6Qzi1oTo5OiHRwsx4yRU86iRCO2caZlAc cRKXhX3BY2zNx0G76PfH7WP8UyTuIrLbaKm62wqnIjsw3Sa7BF8= -----END CERTIFICATE-----Generated at Mon Mar 2 22:20:39 2026 by rpki-client