$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: TOaLe4sgdLp99iPyRBJKyJUo/EdVlrzCC2SXxXWuADc= Subject key identifier: 33:C2:6B:40:D0:5A:90:C6:C5:BB:4E:93:33:08:0B:DC:4D:8D:B6:FB Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 436C894FDA5F0A3631B2D62106132FFEB217FF3E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0555 Signing time: Sun 01 Mar 2026 08:11:50 +0000 Manifest this update: Sun 01 Mar 2026 08:06:50 +0000 Manifest next update: Wed 04 Mar 2026 13:40:50 +0000 Files and hashes: 1: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 2: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 3: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 5: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: sqyr7DwN04Mo7UssQYWEhwOy/UUHGk6cIc68P/zslGY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:40:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:6c:89:4f:da:5f:0a:36:31:b2:d6:21:06:13:2f:fe:b2:17:ff:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Mar 1 08:06:50 2026 GMT Not After : Mar 4 13:40:50 2026 GMT Subject: CN=33C26B40D05A90C6C5BB4E9333080BDC4D8DB6FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:08:ff:68:37:35:08:0b:47:c4:b2:19:b5:9e: 33:00:de:4f:ad:50:e1:1e:0f:80:a7:3b:7b:80:bc: 58:72:b3:a7:0e:00:4e:22:db:8d:42:f5:ca:99:53: 01:bc:f9:cc:c0:15:ea:6a:b9:2e:60:a7:66:f5:e7: e3:85:12:3d:c5:2e:cd:8a:b8:27:e9:ad:d1:35:3e: 56:3f:d1:60:45:8e:36:0f:96:43:60:27:9c:d5:5a: 6e:29:a5:42:82:e0:d7:4c:9c:f9:7e:c1:47:27:92: 4d:0d:7e:8e:78:68:b9:00:9e:b6:f6:3b:8e:67:1c: 72:69:d8:ba:5d:a1:6f:d5:b8:01:81:67:0a:35:94: 44:db:ce:dc:cf:0f:d1:6d:de:07:fb:66:c6:17:f6: 8c:c8:14:36:15:49:7b:7d:a7:0a:57:b2:d4:d7:18: d4:d3:d8:fd:fe:dd:b1:da:56:5f:c3:e2:7b:92:84: 67:12:d3:34:ba:97:f5:45:95:f5:23:4c:89:9b:9a: 28:74:3d:1d:56:fa:db:88:72:92:30:a8:45:94:a4: 15:50:b8:56:6c:00:4f:05:1f:47:08:ae:c3:84:fd: 57:05:bc:8d:ee:57:80:75:5f:98:b4:c8:22:a1:10: 9a:60:88:b4:c0:5b:a0:86:25:41:03:68:b5:dc:66: ae:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:C2:6B:40:D0:5A:90:C6:C5:BB:4E:93:33:08:0B:DC:4D:8D:B6:FB X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:38:08:2c:fd:c4:8d:cf:a0:6a:64:4d:b2:7c:d8:c1:f3:3c: d6:a2:b2:b3:a2:27:49:35:e3:1f:81:0d:37:8e:2e:43:10:02: 3a:07:c1:5f:d9:39:51:14:cf:39:d8:23:a3:4a:09:bb:db:2d: 73:4c:d5:af:29:5b:25:b2:9b:43:43:01:7d:99:38:58:91:be: 51:dd:93:7b:3d:1a:17:f4:30:28:64:a2:ba:1f:90:9a:d8:c8: 8e:13:32:3a:df:c1:72:0c:86:5a:45:82:4b:69:86:b4:26:5f: f7:d5:3b:d0:00:95:ee:50:73:a7:a8:2d:80:85:c0:f5:dd:44: 5c:0b:29:19:55:7d:b2:b7:77:f3:06:d6:70:9e:07:46:88:6e: c2:ac:ab:16:b1:2f:8e:ec:39:b0:d8:fe:ae:00:d5:31:c2:74: 04:c1:6a:f6:96:e1:49:74:29:c4:64:17:67:6d:8e:86:b4:90: ee:a8:13:62:8d:bf:ac:67:63:94:52:97:cf:50:19:2c:bf:2f: 0f:6b:a7:04:9e:20:b0:46:c9:c7:4e:9f:c3:35:2b:44:9a:1f: 00:89:75:fe:b0:77:25:93:e4:99:74:7b:ec:e7:0f:f3:ee:32: 1e:84:5f:52:df:d5:88:8e:30:bd:b7:45:ce:e7:e7:72:9c:75: a3:32:6e:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ2yJT9pfCjYxstYhBhMv/rIX/z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNjAzMDEwODA2NTBaFw0yNjAzMDQxMzQwNTBaMDMxMTAvBgNV BAMTKDMzQzI2QjQwRDA1QTkwQzZDNUJCNEU5MzMzMDgwQkRDNEQ4REI2RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0CP9oNzUIC0fEshm1njMA3k+t UOEeD4CnO3uAvFhys6cOAE4i241C9cqZUwG8+czAFepquS5gp2b15+OFEj3FLs2K uCfprdE1PlY/0WBFjjYPlkNgJ5zVWm4ppUKC4NdMnPl+wUcnkk0Nfo54aLkAnrb2 O45nHHJp2LpdoW/VuAGBZwo1lETbztzPD9Ft3gf7ZsYX9ozIFDYVSXt9pwpXstTX GNTT2P3+3bHaVl/D4nuShGcS0zS6l/VFlfUjTImbmih0PR1W+tuIcpIwqEWUpBVQ uFZsAE8FH0cIrsOE/VcFvI3uV4B1X5i0yCKhEJpgiLTAW6CGJUEDaLXcZq5JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM8JrQNBakMbFu06TMwgL3E2NtvswHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIw4CCz9xI3PoGpkTbJ82MHzPNaisrOiJ0k1 4x+BDTeOLkMQAjoHwV/ZOVEUzznYI6NKCbvbLXNM1a8pWyWym0NDAX2ZOFiRvlHd k3s9Ghf0MChkorofkJrYyI4TMjrfwXIMhlpFgktphrQmX/fVO9AAle5Qc6eoLYCF wPXdRFwLKRlVfbK3d/MG1nCeB0aIbsKsqxaxL47sObDY/q4A1THCdATBavaW4Ul0 KcRkF2dtjoa0kO6oE2KNv6xnY5RSl89QGSy/Lw9rpwSeILBGycdOn8M1K0SaHwCJ df6wdyWT5Jl0e+znD/PuMh6EX1Lf1YiOML23Rc7n53KcdaMybps= -----END CERTIFICATE-----Generated at Mon Mar 2 06:06:25 2026 by rpki-client