$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: upyyWs0UDSJOOTRtdlGd2ItGOAANpz0pTZ1ZMEpFPzc= Subject key identifier: 24:D7:37:19:50:F9:71:0D:CB:6E:AC:2F:0F:50:AD:3B:15:9B:58:CE Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 1EB1363B73B9C39709E3484AA6A00B5EABD36F0E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 0350 Signing time: Mon 02 Mar 2026 12:12:11 +0000 Manifest this update: Mon 02 Mar 2026 12:07:11 +0000 Manifest next update: Thu 05 Mar 2026 20:43:11 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: Are8zrgPQhteUMILytD/baZlBT+99nvekwCrjWu8fsA=) 2: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) 3: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 4: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Mar 2026 06:31:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:b1:36:3b:73:b9:c3:97:09:e3:48:4a:a6:a0:0b:5e:ab:d3:6f:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Mar 2 12:07:11 2026 GMT Not After : Mar 5 20:43:11 2026 GMT Subject: CN=24D7371950F9710DCB6EAC2F0F50AD3B159B58CE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:5f:00:49:1f:ac:a2:7c:c5:80:4d:60:f3: 9f:ae:5e:19:d7:b3:8f:95:fa:ea:68:af:b0:55:aa: 26:ae:33:34:d1:14:90:f3:9e:e1:0c:ea:47:0d:2e: f4:f9:46:f4:c7:a6:1c:a1:bd:4c:ac:f5:7f:c3:2d: 0b:41:96:51:2c:e9:8e:6b:13:c1:45:7e:dc:a9:0e: 6d:bc:51:47:af:4d:28:1d:44:e5:49:10:33:eb:aa: a6:3f:c7:ca:1f:7f:e7:de:72:de:d5:d8:71:9c:12: 39:1a:ac:1c:f4:be:fd:1a:c7:57:fc:bb:84:e9:21: 56:92:99:72:05:15:35:92:36:10:47:76:43:ad:13: 7d:da:e4:4a:cc:90:c0:2e:25:a8:c9:95:e9:66:9d: d9:f7:5d:41:60:fb:15:4c:b1:25:6b:7a:f2:75:5a: 02:a8:0c:a4:0a:6b:6c:2d:73:2b:08:cf:6c:fa:02: 92:c0:5b:a5:14:a9:87:17:e8:16:4d:34:c1:98:84: 4c:4c:c6:05:de:c7:f2:81:fe:5f:d9:eb:61:57:23: 23:c5:d0:b1:20:46:03:49:71:bf:b2:78:41:88:50: 01:a2:e6:54:d2:0a:8d:6e:ed:a3:f2:f9:7e:c8:b6: 3e:48:7f:2a:f4:81:3b:5a:10:83:ca:dd:4b:21:ae: 40:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D7:37:19:50:F9:71:0D:CB:6E:AC:2F:0F:50:AD:3B:15:9B:58:CE X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:64:cf:1c:63:54:0a:a3:44:7c:f3:89:12:e1:94:02:c3:ef: b3:24:84:f3:6a:2b:9e:2d:2a:66:f9:38:2c:a4:d6:3a:85:de: c5:d5:05:4d:0b:b2:59:b0:63:ea:43:8e:90:32:66:bc:6b:c5: 59:9a:11:2a:f5:b8:58:cb:88:98:dc:3d:ab:43:c2:b4:8a:77: ad:92:8a:b6:e1:f0:b6:f1:7b:80:c2:67:54:ce:e5:da:8b:f0: b3:66:8d:56:e9:bf:ae:af:70:fd:8d:53:a1:69:03:96:97:95: ce:ee:d0:19:71:fc:0b:4e:c5:c7:f5:16:39:18:f9:49:35:e6: 5a:00:43:d7:22:27:99:82:4c:66:b2:30:0a:12:6d:d7:d6:09: 66:74:7a:10:e6:76:57:f8:ad:a7:ac:15:7b:5b:93:d4:d0:71: 9a:e2:fc:9b:91:1f:62:8f:7d:05:c4:05:1f:64:2c:65:ac:ea: f8:63:94:6b:1c:6c:1e:8c:3c:82:87:ca:8c:d4:92:85:27:18: 80:f2:5c:cd:06:b4:9d:a7:85:74:cb:2e:79:49:1e:62:d1:a7: cd:31:db:9a:7b:85:93:ba:6c:90:9f:40:39:55:29:4c:36:0a: 73:c5:e4:9b:fe:cf:df:ac:ab:07:e1:39:b6:28:38:95:5d:da: 17:21:49:10 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHrE2O3O5w5cJ40hKpqALXqvTbw4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNjAzMDIxMjA3MTFaFw0yNjAzMDUyMDQzMTFaMDMxMTAvBgNV BAMTKDI0RDczNzE5NTBGOTcxMERDQjZFQUMyRjBGNTBBRDNCMTU5QjU4Q0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA18ASR+sonzFgE1g85+uXhnX s4+V+upor7BVqiauMzTRFJDznuEM6kcNLvT5RvTHphyhvUys9X/DLQtBllEs6Y5r E8FFftypDm28UUevTSgdROVJEDPrqqY/x8off+fect7V2HGcEjkarBz0vv0ax1f8 u4TpIVaSmXIFFTWSNhBHdkOtE33a5ErMkMAuJajJlelmndn3XUFg+xVMsSVrevJ1 WgKoDKQKa2wtcysIz2z6ApLAW6UUqYcX6BZNNMGYhExMxgXex/KB/l/Z62FXIyPF 0LEgRgNJcb+yeEGIUAGi5lTSCo1u7aPy+X7Itj5Ifyr0gTtaEIPK3UshrkCdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNc3GVD5cQ3LbqwvD1CtOxWbWM4wHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAENkzxxjVAqjRHzziRLhlALD77MkhPNqK54t Kmb5OCyk1jqF3sXVBU0LslmwY+pDjpAyZrxrxVmaESr1uFjLiJjcPatDwrSKd62S irbh8Lbxe4DCZ1TO5dqL8LNmjVbpv66vcP2NU6FpA5aXlc7u0Blx/AtOxcf1FjkY +Uk15loAQ9ciJ5mCTGayMAoSbdfWCWZ0ehDmdlf4raesFXtbk9TQcZri/JuRH2KP fQXEBR9kLGWs6vhjlGscbB6MPIKHyozUkoUnGIDyXM0GtJ2nhXTLLnlJHmLRp80x 25p7hZO6bJCfQDlVKUw2CnPF5Jv+z9+sqwfhObYoOJVd2hchSRA= -----END CERTIFICATE-----Generated at Mon Mar 2 15:52:44 2026 by rpki-client