$ rpki-client -vvf repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft File: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft (raw, json) Hash identifier: UF3RHnS7xcZzDaBD3z079RrztBOvirFq9qd70YHROoc= Subject key identifier: 44:92:FE:5D:5E:3A:37:93:D4:4F:06:2F:A9:EF:14:EA:63:EF:03:BC Authority key identifier: 2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 Certificate issuer: /CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Certificate serial: 0445C1F6035F2F455E4914272A8052B518859790 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft Manifest number: DA Signing time: Sun 01 Mar 2026 17:32:06 +0000 Manifest this update: Sun 01 Mar 2026 17:27:06 +0000 Manifest next update: Wed 04 Mar 2026 19:44:06 +0000 Files and hashes: 1: 3130332e3232352e31372e302f32342d3234203d3e20313532303632.roa (hash: 0PyZ1Izmcdz8RbI4pvamYzCkDML//PlzpXnY61vINZs=) 2: 2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl (hash: 3NOFiP47EdfsnIe8uuDKqz+cbu7T2bXDz7s4PltKeXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 19:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:45:c1:f6:03:5f:2f:45:5e:49:14:27:2a:80:52:b5:18:85:97:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0 Validity Not Before: Mar 1 17:27:06 2026 GMT Not After : Mar 4 19:44:06 2026 GMT Subject: CN=4492FE5D5E3A3793D44F062FA9EF14EA63EF03BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a7:ba:20:71:57:cc:80:bb:ec:a1:cd:da:29: 7e:af:64:4b:b4:9b:41:20:0e:47:6b:67:a1:16:84: 37:c1:a5:e3:ec:16:c1:df:6e:54:b6:70:83:0a:81: 9b:f2:14:0e:46:e9:af:d3:9c:40:37:a6:a3:16:6c: 63:61:8b:38:d2:37:84:ed:86:d9:7c:4b:15:40:50: da:1b:ad:40:90:75:da:cc:d1:38:ab:b0:3c:d7:d7: 57:d4:e3:e9:aa:7d:be:e2:64:0a:e5:20:1c:1a:35: e2:e0:e2:ce:44:0a:be:bb:76:eb:4b:50:e4:74:35: 05:2d:45:48:06:a3:e7:76:9d:1f:eb:4e:cb:bf:ed: 37:4d:f2:f1:46:ad:51:39:69:79:5c:ff:f7:04:4a: 6c:70:ec:b9:a4:9e:d7:2c:5b:27:4b:02:35:20:a5: b0:cf:bb:ca:99:a5:9a:e7:57:0b:6c:9f:c7:05:c1: fc:47:ef:06:b0:a0:4d:07:c9:fc:42:cd:7f:ea:4c: 9e:a9:ad:da:4a:ae:9f:ff:ff:05:90:44:7b:cc:1c: 72:17:e3:d9:64:6e:d9:03:f2:5c:76:a2:29:2a:bc: 69:11:98:e7:1f:8d:db:7e:61:5e:ef:fe:f4:7f:1b: b3:05:27:3f:b2:7f:22:cc:a8:40:4c:74:91:a9:2d: 27:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:92:FE:5D:5E:3A:37:93:D4:4F:06:2F:A9:EF:14:EA:63:EF:03:BC X509v3 Authority Key Identifier: keyid:2B:0D:3D:70:A0:27:B5:3C:7A:D2:17:FE:22:CA:0E:D1:11:FD:F3:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c72d3f5-dd53-4b74-947c-6bb510f4f503/0/2B0D3D70A027B53C7AD217FE22CA0ED111FDF3B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:9d:fd:83:a5:35:c4:28:6c:55:e5:c9:b1:d6:13:0f:a9:cd: cb:b8:d0:d1:49:60:d1:50:c9:b1:a5:57:c7:00:68:47:e4:c5: 48:f8:8f:2f:26:93:63:1a:5d:97:12:37:f9:a8:70:bf:00:57: 55:37:c0:9a:39:bb:aa:bb:43:17:f7:0a:2a:b0:75:d8:4e:9e: 03:2d:31:02:6b:b0:d2:6e:c3:89:0c:d7:a8:08:cb:71:6e:2e: 2e:3c:45:0d:32:1a:98:c9:db:bf:eb:16:f8:31:f5:9f:99:0d: f8:f7:37:e2:48:2c:0e:3c:91:53:51:26:96:28:52:97:d5:b0: e6:ca:01:ed:1f:13:e3:fb:22:67:68:ec:58:f3:05:32:77:0e: 39:e4:73:46:dc:fc:b3:9a:cf:83:15:a6:d4:61:e8:a3:a2:96: e5:c9:ce:1b:01:49:72:9a:65:b2:37:97:75:2d:6f:72:3f:65: 7f:2b:91:5e:e3:0e:ec:44:3a:4b:d2:39:ea:5a:b4:ff:c5:bb: 72:7d:ae:d6:19:25:2c:31:e6:53:b7:a6:d3:42:58:85:ad:be: f1:48:88:62:29:f1:e8:ac:b0:0b:ad:d4:ff:1e:06:f2:bf:06: ff:be:0b:12:04:63:32:26:e9:2b:c2:08:2f:e1:38:c2:05:01: 04:83:29:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBEXB9gNfL0VeSRQnKoBStRiFl5AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDEx MUZERjNCMDAeFw0yNjAzMDExNzI3MDZaFw0yNjAzMDQxOTQ0MDZaMDMxMTAvBgNV BAMTKDQ0OTJGRTVENUUzQTM3OTNENDRGMDYyRkE5RUYxNEVBNjNFRjAzQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCup7ogcVfMgLvsoc3aKX6vZEu0 m0EgDkdrZ6EWhDfBpePsFsHfblS2cIMKgZvyFA5G6a/TnEA3pqMWbGNhizjSN4Tt htl8SxVAUNobrUCQddrM0TirsDzX11fU4+mqfb7iZArlIBwaNeLg4s5ECr67dutL UOR0NQUtRUgGo+d2nR/rTsu/7TdN8vFGrVE5aXlc//cESmxw7LmkntcsWydLAjUg pbDPu8qZpZrnVwtsn8cFwfxH7wawoE0HyfxCzX/qTJ6prdpKrp///wWQRHvMHHIX 49lkbtkD8lx2oikqvGkRmOcfjdt+YV7v/vR/G7MFJz+yfyLMqEBMdJGpLSepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURJL+XV46N5PUTwYvqe8U6mPvA7wwHwYDVR0j BBgwFoAUKw09cKAntTx60hf+IsoO0RH987AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YzcyZDNmNS1kZDUzLTRiNzQtOTQ3Yy02YmI1MTBmNGY1MDMvMC8yQjBEM0Q3MEEw MjdCNTNDN0FEMjE3RkUyMkNBMEVEMTExRkRGM0IwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBFRDExMUZE RjNCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWM3MmQzZjUtZGQ1My00Yjc0LTk0 N2MtNmJiNTEwZjRmNTAzLzAvMkIwRDNENzBBMDI3QjUzQzdBRDIxN0ZFMjJDQTBF RDExMUZERjNCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2d/YOlNcQobFXlybHWEw+pzcu40NFJYNFQ ybGlV8cAaEfkxUj4jy8mk2MaXZcSN/mocL8AV1U3wJo5u6q7Qxf3CiqwddhOngMt MQJrsNJuw4kM16gIy3FuLi48RQ0yGpjJ27/rFvgx9Z+ZDfj3N+JILA48kVNRJpYo UpfVsObKAe0fE+P7Imdo7FjzBTJ3Djnkc0bc/LOaz4MVptRh6KOiluXJzhsBSXKa ZbI3l3Utb3I/ZX8rkV7jDuxEOkvSOepatP/Fu3J9rtYZJSwx5lO3ptNCWIWtvvFI iGIp8eissAut1P8eBvK/Bv++CxIEYzIm6SvCCC/hOMIFAQSDKeI= -----END CERTIFICATE-----Generated at Mon Mar 2 04:21:48 2026 by rpki-client