$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: wnzLx6soV1s+smnWnb7Ag7XLENRyS66vTruoVegA0XM= Subject key identifier: 77:FD:9C:E5:5D:2B:9B:6E:2F:0E:B1:30:40:B3:38:8C:BC:19:DA:EB Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 2766EAF3D3588252FC70B9456541A4F4D806D910 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03CE Signing time: Sun 01 Mar 2026 01:02:16 +0000 Manifest this update: Sun 01 Mar 2026 00:57:16 +0000 Manifest next update: Wed 04 Mar 2026 02:43:16 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: PKDPOwMkAXohe+/12kl7qXM83r+YRMKf1K+cEt+L4EM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 02:43:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:66:ea:f3:d3:58:82:52:fc:70:b9:45:65:41:a4:f4:d8:06:d9:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Mar 1 00:57:16 2026 GMT Not After : Mar 4 02:43:16 2026 GMT Subject: CN=77FD9CE55D2B9B6E2F0EB13040B3388CBC19DAEB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:21:29:ee:c8:e1:fb:93:f2:59:7a:c5:1f:35: c6:d8:fc:df:79:95:7e:9c:3e:95:2a:7e:11:3d:9e: 80:ac:f1:28:3b:32:88:50:ff:ae:b4:84:37:78:c4: d5:d5:f5:67:86:e8:e9:0e:16:74:eb:94:a2:ca:77: 2c:c2:c6:b1:38:06:10:e1:e0:b3:c5:eb:fc:73:8a: 2c:52:0b:83:52:a9:c9:d9:6b:df:c9:09:3b:08:65: 25:72:74:5e:30:e3:f8:69:4b:0d:63:3b:c1:12:a9: 5b:b4:c8:a7:60:35:03:c6:c1:ba:d7:58:58:00:fb: e4:80:d7:7b:77:e3:a7:39:15:48:70:38:42:c9:f9: 70:60:cf:85:b4:3c:ef:3a:2f:d1:3a:23:85:8d:ac: d1:8b:47:00:c7:97:d7:f2:b8:b4:72:80:87:5f:db: ef:c4:4e:9d:00:30:96:60:21:6a:9a:98:61:67:ea: 9a:6c:c0:b7:2b:40:41:ee:b1:00:7a:1f:71:2a:5c: 7e:13:e0:35:39:4b:a4:87:0a:d1:9d:a9:b4:05:8b: 90:b4:47:ff:13:c1:3f:a6:6c:e8:e6:67:72:81:74: 2d:4e:05:79:58:a9:ad:fb:d8:35:76:fc:ff:55:71: 3f:db:f8:18:2c:39:fc:60:80:f3:85:e0:c1:63:54: 72:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:FD:9C:E5:5D:2B:9B:6E:2F:0E:B1:30:40:B3:38:8C:BC:19:DA:EB X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:04:13:b0:c0:70:da:92:24:d8:08:3d:79:b5:cc:c2:4c:7f: a6:97:8b:11:ad:23:6b:36:5a:f5:b8:2f:ba:b1:f3:47:47:39: 87:2e:2d:74:c0:33:03:c1:d3:44:07:8f:31:a1:ab:d2:c3:4d: 67:11:30:86:ca:db:32:c5:56:9a:d0:18:c6:27:ec:d8:a6:b5: 85:c9:72:0d:02:e3:d0:56:f3:42:26:6d:b9:5f:77:03:41:11: 48:dd:9b:4e:7e:07:ba:a7:f4:3b:19:86:eb:fc:e2:8b:5a:84: 64:c9:5e:6d:e0:61:be:a9:46:a6:66:a2:29:68:d4:e8:6c:20: 24:f4:f1:df:3c:a3:e3:f7:04:4e:89:0c:c1:ae:5b:78:2c:b1: 2e:27:eb:72:3c:93:ac:54:f7:73:0d:a6:29:bb:44:51:be:77: cb:68:2e:75:4a:90:6e:01:e6:45:0d:c8:57:e7:f8:43:5d:77: 7b:69:ba:d4:fa:54:86:49:c8:6b:0f:34:ec:9c:3f:c6:46:41: 63:f2:5d:ce:1a:10:75:47:98:59:aa:de:62:cb:46:7b:20:7b: 2b:20:dd:bf:29:f5:d0:b2:9b:75:e1:c6:69:c2:94:b9:a5:44: 7f:93:ab:94:2e:7a:d4:d4:54:1f:64:f4:1a:19:ed:27:2a:8a: df:3c:70:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ2bq89NYglL8cLlFZUGk9NgG2RAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjAzMDEwMDU3MTZaFw0yNjAzMDQwMjQzMTZaMDMxMTAvBgNV BAMTKDc3RkQ5Q0U1NUQyQjlCNkUyRjBFQjEzMDQwQjMzODhDQkMxOURBRUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSISnuyOH7k/JZesUfNcbY/N95 lX6cPpUqfhE9noCs8Sg7MohQ/660hDd4xNXV9WeG6OkOFnTrlKLKdyzCxrE4BhDh 4LPF6/xziixSC4NSqcnZa9/JCTsIZSVydF4w4/hpSw1jO8ESqVu0yKdgNQPGwbrX WFgA++SA13t346c5FUhwOELJ+XBgz4W0PO86L9E6I4WNrNGLRwDHl9fyuLRygIdf 2+/ETp0AMJZgIWqamGFn6ppswLcrQEHusQB6H3EqXH4T4DU5S6SHCtGdqbQFi5C0 R/8TwT+mbOjmZ3KBdC1OBXlYqa372DV2/P9VcT/b+BgsOfxggPOF4MFjVHKlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd/2c5V0rm24vDrEwQLM4jLwZ2uswHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEEEE7DAcNqSJNgIPXm1zMJMf6aXixGtI2s2 WvW4L7qx80dHOYcuLXTAMwPB00QHjzGhq9LDTWcRMIbK2zLFVprQGMYn7NimtYXJ cg0C49BW80ImbblfdwNBEUjdm05+B7qn9DsZhuv84otahGTJXm3gYb6pRqZmoilo 1OhsICT08d88o+P3BE6JDMGuW3gssS4n63I8k6xU93MNpim7RFG+d8toLnVKkG4B 5kUNyFfn+ENdd3tputT6VIZJyGsPNOycP8ZGQWPyXc4aEHVHmFmq3mLLRnsgeysg 3b8p9dCym3XhxmnClLmlRH+Tq5QuetTUVB9k9BoZ7Scqit88cH4= -----END CERTIFICATE-----Generated at Mon Mar 2 12:40:54 2026 by rpki-client