$ rpki-client -vvf repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft File: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft (raw, json) Hash identifier: i5iLFQ4D8X69rPKmq2oDJO0udAMqB6jILGJZ6M6dZLg= Subject key identifier: 3B:19:19:8B:64:8B:B4:F6:F2:5C:9A:2A:E8:73:6C:7A:AD:5A:E4:32 Authority key identifier: 2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 Certificate issuer: /CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Certificate serial: 7A6C618A82943F895702E5885BEB1A0987CC2492 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft Manifest number: 0277 Signing time: Sun 01 Mar 2026 03:02:16 +0000 Manifest this update: Sun 01 Mar 2026 02:57:16 +0000 Manifest next update: Wed 04 Mar 2026 03:32:16 +0000 Files and hashes: 1: 2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl (hash: k/AeZsKfR33qhY9PfPBXZgYqW5i0rSV8fHFo+7jUpHM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 03:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6c:61:8a:82:94:3f:89:57:02:e5:88:5b:eb:1a:09:87:cc:24:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9 Validity Not Before: Mar 1 02:57:16 2026 GMT Not After : Mar 4 03:32:16 2026 GMT Subject: CN=3B19198B648BB4F6F25C9A2AE8736C7AAD5AE432 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:cc:d7:59:0f:6d:09:47:b1:c5:96:c1:bd: 65:16:11:8f:60:f3:82:78:2b:fc:1d:1a:96:74:5e: bb:0b:67:7f:3f:91:4f:19:cb:7e:08:7b:84:3f:5c: d2:2a:2f:5a:76:9b:4b:96:65:1b:98:a1:7d:80:02: 5a:a3:be:3a:9e:95:0e:bb:20:bd:94:bb:fc:2a:4e: 0e:9f:62:c0:bc:e0:13:c7:3f:6c:1d:36:94:67:47: e1:b0:22:c4:cb:38:c5:4f:5e:3e:05:e7:3d:3f:8f: af:65:8a:dd:de:73:3c:7e:62:55:31:b4:3e:9f:4f: 43:93:08:70:3f:9a:41:32:ea:9a:a2:92:5c:b6:d2: ba:53:73:eb:90:c4:75:e5:41:17:94:f7:3b:ea:81: 66:ad:e0:fc:ec:b1:67:9d:39:9a:75:85:87:92:0a: ac:95:41:2b:4f:af:36:9d:39:9c:d4:f9:45:ca:48: a1:df:c2:20:69:22:43:7d:b0:01:fe:93:5a:17:e2: fc:9d:18:67:a9:b4:fa:fb:82:8b:d2:88:13:65:bd: 98:7d:db:2c:75:63:c8:06:a6:55:9e:0d:f2:34:4a: 26:25:c4:bc:81:75:35:69:15:95:b4:5f:b0:c8:fb: 83:31:81:a5:86:fe:97:80:a7:7a:87:7c:66:38:c0: 9e:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:19:19:8B:64:8B:B4:F6:F2:5C:9A:2A:E8:73:6C:7A:AD:5A:E4:32 X509v3 Authority Key Identifier: keyid:2E:A5:E6:62:51:DD:59:1E:7F:1F:48:55:AF:4B:AF:BB:64:4B:08:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cb2928e-9b39-4a90-97d2-04cf65fe9578/0/2EA5E66251DD591E7F1F4855AF4BAFBB644B08A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:46:86:4f:23:fe:55:bc:02:22:34:58:09:56:88:89:c9:cd: db:59:b1:1d:92:d8:18:be:d1:83:05:e8:cf:40:6f:c5:4e:f7: 8b:fc:b5:35:de:e2:93:bd:60:82:d7:50:f9:bc:3c:52:ce:eb: be:cb:6e:ff:64:06:ac:8d:82:57:2b:8a:2c:5d:ab:ce:fd:0c: 1c:ec:54:ee:af:0e:a7:d3:cc:12:13:37:59:d8:f4:bc:c8:5c: 4c:a1:72:5d:56:ed:42:29:5d:4c:f9:41:32:12:72:67:b0:6e: 28:3f:c0:56:fd:ff:b0:74:95:18:e8:cc:8c:0e:52:21:19:0d: c8:5a:87:17:a6:15:b8:74:b1:08:2b:ff:0b:72:0c:75:83:03: 27:b6:e5:68:bd:fe:11:a2:9a:8b:95:38:4c:22:e2:f5:bb:fd: ae:4c:58:d8:34:d7:da:c5:3e:da:de:fe:2c:2a:25:c4:56:be: 8e:00:b5:bc:a8:4b:52:a6:0e:a2:e0:eb:b4:b8:15:78:c8:c1: 62:09:a3:67:6c:e0:f4:02:c5:63:72:0e:30:a6:15:57:39:5b: 1d:34:9a:bf:f0:1d:f1:c5:b7:f2:3b:58:bb:4c:e8:20:6a:c8: 2f:e4:f4:f6:23:04:00:9c:b0:fa:5f:ea:5f:e0:f5:7f:0b:11: 67:4e:2c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUemxhioKUP4lXAuWIW+saCYfMJJIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2 NDRCMDhBOTAeFw0yNjAzMDEwMjU3MTZaFw0yNjAzMDQwMzMyMTZaMDMxMTAvBgNV BAMTKDNCMTkxOThCNjQ4QkI0RjZGMjVDOUEyQUU4NzM2QzdBQUQ1QUU0MzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzszXWQ9tCUexxZbBvWUWEY9g 84J4K/wdGpZ0XrsLZ38/kU8Zy34Ie4Q/XNIqL1p2m0uWZRuYoX2AAlqjvjqelQ67 IL2Uu/wqTg6fYsC84BPHP2wdNpRnR+GwIsTLOMVPXj4F5z0/j69lit3eczx+YlUx tD6fT0OTCHA/mkEy6pqikly20rpTc+uQxHXlQReU9zvqgWat4PzssWedOZp1hYeS CqyVQStPrzadOZzU+UXKSKHfwiBpIkN9sAH+k1oX4vydGGeptPr7govSiBNlvZh9 2yx1Y8gGplWeDfI0SiYlxLyBdTVpFZW0X7DI+4MxgaWG/peAp3qHfGY4wJ7BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOxkZi2SLtPbyXJoq6HNseq1a5DIwHwYDVR0j BBgwFoAULqXmYlHdWR5/H0hVr0uvu2RLCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 Y2IyOTI4ZS05YjM5LTRhOTAtOTdkMi0wNGNmNjVmZTk1NzgvMC8yRUE1RTY2MjUx REQ1OTFFN0YxRjQ4NTVBRjRCQUZCQjY0NEIwOEE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFGQkI2NDRC MDhBOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmNiMjkyOGUtOWIzOS00YTkwLTk3 ZDItMDRjZjY1ZmU5NTc4LzAvMkVBNUU2NjI1MURENTkxRTdGMUY0ODU1QUY0QkFG QkI2NDRCMDhBOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL9Ghk8j/lW8AiI0WAlWiInJzdtZsR2S2Bi+ 0YMF6M9Ab8VO94v8tTXe4pO9YILXUPm8PFLO677Lbv9kBqyNglcriixdq879DBzs VO6vDqfTzBITN1nY9LzIXEyhcl1W7UIpXUz5QTIScmewbig/wFb9/7B0lRjozIwO UiEZDchahxemFbh0sQgr/wtyDHWDAye25Wi9/hGimouVOEwi4vW7/a5MWNg019rF Ptre/iwqJcRWvo4AtbyoS1KmDqLg67S4FXjIwWIJo2ds4PQCxWNyDjCmFVc5Wx00 mr/wHfHFt/I7WLtM6CBqyC/k9PYjBACcsPpf6l/g9X8LEWdOLCM= -----END CERTIFICATE-----Generated at Mon Mar 2 09:09:42 2026 by rpki-client