$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: tyen8QSBnIyBh3y/Xa43Z++JWalfrud/1TJNvT4M5R8= Subject key identifier: 94:7E:85:52:88:30:C6:B3:39:B7:9B:96:AF:E5:9E:81:F1:CD:15:B9 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 0CEEEC2F409AD827A88570BCE27BA165F51963C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 01F9 Signing time: Sat 28 Feb 2026 19:10:48 +0000 Manifest this update: Sat 28 Feb 2026 19:05:48 +0000 Manifest next update: Tue 03 Mar 2026 20:31:48 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: 1IQoMzHGRbu5wVoDV725x/H5rNsAsBB+EB/+yCCjX5I=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:31:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:ee:ec:2f:40:9a:d8:27:a8:85:70:bc:e2:7b:a1:65:f5:19:63:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Feb 28 19:05:48 2026 GMT Not After : Mar 3 20:31:48 2026 GMT Subject: CN=947E85528830C6B339B79B96AFE59E81F1CD15B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:9d:1b:e8:58:39:d9:d3:8d:d7:e0:2a:4c:c3: 0b:c4:fe:bd:30:ba:72:93:11:2b:6b:57:e4:48:d8: 65:3a:52:24:52:d5:24:ab:d0:d4:9c:6c:c6:e4:c8: 79:34:bd:5c:b3:cd:bb:2a:9c:79:7f:14:7e:23:27: c6:48:d3:4b:14:46:6f:dd:c0:f6:a5:aa:d6:bb:f3: 62:67:a1:2d:af:89:b6:90:e8:7c:d5:49:dc:e8:03: 4b:2b:fe:57:62:c6:f3:04:ee:85:ac:0b:3b:02:d2: 0a:19:af:f4:d9:c7:e7:d8:dc:ef:df:0a:e7:b7:f3: cd:5e:a4:cd:cf:56:ad:80:31:66:76:59:8c:f6:0b: 9a:11:d4:18:7e:50:b3:d1:3a:c3:94:0c:f6:95:53: 5c:3e:70:96:55:a9:61:a8:e9:46:68:47:b8:b0:e9: 77:62:de:b4:02:ed:b1:7c:3f:4e:5a:d3:0a:c2:38: 31:44:cd:85:1a:35:a1:d6:0a:d0:98:5e:e2:e1:d8: 8c:01:9b:3a:57:94:18:76:b3:e9:fa:3e:ce:7a:85: 53:7f:dd:c4:27:f2:d9:4f:28:48:47:9a:c8:b3:50: 48:71:f6:3c:eb:25:fe:16:65:cc:ce:d8:e1:5a:76: 41:32:7f:13:05:af:8c:3b:7f:74:8a:7b:fd:fe:af: ac:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:7E:85:52:88:30:C6:B3:39:B7:9B:96:AF:E5:9E:81:F1:CD:15:B9 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:f1:75:73:a7:bc:fb:61:00:e4:02:e5:e0:98:83:5f:27:b4: c6:a8:8d:4c:60:80:73:3c:0e:f4:46:e8:5e:7c:43:14:55:27: b8:cb:89:56:bd:de:89:36:47:80:42:20:4a:1f:66:b2:49:f0: c7:2f:3c:c9:c7:88:7d:b8:05:a9:b3:0a:bd:62:d9:c2:40:49: 07:46:b7:70:15:7c:81:a3:36:3e:fe:75:45:10:2d:0b:81:ae: da:fb:48:e3:7a:65:a0:ed:27:b5:d1:29:5f:da:3f:46:24:d1: 96:45:91:be:65:fb:88:12:7d:e1:d2:a9:d5:79:fd:14:6f:95: ac:e8:f9:5e:68:8b:e4:cf:bd:e0:a8:41:bb:ad:78:ea:5d:36: 92:69:43:50:f5:5e:ef:b4:b8:c7:ab:59:e3:83:60:a4:a4:87: d4:8f:1d:5f:74:9e:56:a3:b8:03:20:b2:c8:a9:14:cb:dc:17: 32:61:75:b7:f5:f2:c5:bd:1f:dc:3b:de:37:e1:6c:e8:1f:19: 3b:9a:c5:d4:48:d8:f9:d0:c5:cb:da:a8:2c:c5:b9:0b:c8:7b: ab:34:9b:0e:f0:72:96:97:c8:78:8d:16:44:12:94:2f:8a:f4: d6:63:ba:47:11:4e:01:b7:7d:7b:96:fe:f1:f6:46:fd:1d:66: 1b:91:79:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDO7sL0Ca2CeohXC84nuhZfUZY8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNjAyMjgxOTA1NDhaFw0yNjAzMDMyMDMxNDhaMDMxMTAvBgNV BAMTKDk0N0U4NTUyODgzMEM2QjMzOUI3OUI5NkFGRTU5RTgxRjFDRDE1QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrnRvoWDnZ043X4CpMwwvE/r0w unKTEStrV+RI2GU6UiRS1SSr0NScbMbkyHk0vVyzzbsqnHl/FH4jJ8ZI00sURm/d wPalqta782JnoS2vibaQ6HzVSdzoA0sr/ldixvME7oWsCzsC0goZr/TZx+fY3O/f Cue3881epM3PVq2AMWZ2WYz2C5oR1Bh+ULPROsOUDPaVU1w+cJZVqWGo6UZoR7iw 6Xdi3rQC7bF8P05a0wrCODFEzYUaNaHWCtCYXuLh2IwBmzpXlBh2s+n6Ps56hVN/ 3cQn8tlPKEhHmsizUEhx9jzrJf4WZczO2OFadkEyfxMFr4w7f3SKe/3+r6y1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlH6FUogwxrM5t5uWr+WegfHNFbkwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjxdXOnvPthAOQC5eCYg18ntMaojUxggHM8 DvRG6F58QxRVJ7jLiVa93ok2R4BCIEofZrJJ8McvPMnHiH24BamzCr1i2cJASQdG t3AVfIGjNj7+dUUQLQuBrtr7SON6ZaDtJ7XRKV/aP0Yk0ZZFkb5l+4gSfeHSqdV5 /RRvlazo+V5oi+TPveCoQbuteOpdNpJpQ1D1Xu+0uMerWeODYKSkh9SPHV90nlaj uAMgssipFMvcFzJhdbf18sW9H9w73jfhbOgfGTuaxdRI2PnQxcvaqCzFuQvIe6s0 mw7wcpaXyHiNFkQSlC+K9NZjukcRTgG3fXuW/vH2Rv0dZhuReTE= -----END CERTIFICATE-----Generated at Mon Mar 2 09:51:49 2026 by rpki-client