$ rpki-client -vvf repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft File: 2FD08E6755CF1CCAAF9D5834449797848A706B57.mft (raw, json) Hash identifier: JmISiFmxaCW6+r5hEf+HmaPj9tiJ1SCSoe5smx4EtOs= Subject key identifier: 64:72:AB:8D:DD:D7:19:36:29:8B:16:01:36:2E:78:F6:AC:4E:35:EF Authority key identifier: 2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 Certificate issuer: /CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Certificate serial: 188A3ECD0E32E84347CB7AD7BA5D79F585CAE870 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft Manifest number: 03FA Signing time: Sun 01 Mar 2026 08:32:12 +0000 Manifest this update: Sun 01 Mar 2026 08:27:12 +0000 Manifest next update: Wed 04 Mar 2026 17:44:12 +0000 Files and hashes: 1: 2FD08E6755CF1CCAAF9D5834449797848A706B57.crl (hash: Jdmtuku88IYLvs9OUGt/a5Mpko094u0jJ+/D4LS6ytk=) 2: 3130332e3136332e3232382e302f32332d3233203d3e20313431383935.roa (hash: XjGDHZwetIWHjLp7+uPq3/exRvIl0m5tUGNnQVZ+/fU=) 3: 3130332e3136332e3232382e302f32342d3234203d3e20313431383935.roa (hash: QZlEVkF+HK3hEYAiWRapnYHmq7/bX0k5ZRTsDh0lSOE=) 4: 3130332e3136332e3232392e302f32342d3234203d3e20313431383935.roa (hash: 73VvZzU4m43+fgjvOlr3Vv7ZHMtLS9jm+/QTGsOwFck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:8a:3e:cd:0e:32:e8:43:47:cb:7a:d7:ba:5d:79:f5:85:ca:e8:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FD08E6755CF1CCAAF9D5834449797848A706B57 Validity Not Before: Mar 1 08:27:12 2026 GMT Not After : Mar 4 17:44:12 2026 GMT Subject: CN=6472AB8DDDD71936298B1601362E78F6AC4E35EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:d6:e7:54:a8:b0:6f:32:d8:c8:81:82:8c:e2: 5e:71:1d:26:89:9a:37:0e:90:b5:32:17:ef:17:f1: c9:c8:3a:53:13:b8:a7:a5:4f:9f:7b:d7:c7:e5:a3: 0f:af:d0:d2:44:81:34:59:f2:1d:dd:93:dd:76:e2: 27:b6:e4:43:6c:7c:46:80:f1:fc:75:ca:bf:9a:e1: 94:2b:77:2e:26:5c:1e:dd:b1:a1:b7:46:52:4c:0e: 33:df:72:cf:ec:b3:26:af:cd:c7:26:25:72:f2:6f: 3d:df:d1:06:d1:fc:a7:a5:6c:ca:d3:dc:62:5e:bd: 74:f0:9a:77:06:8c:39:aa:b8:17:c8:68:20:31:f2: 75:24:04:b9:a3:32:9c:2e:e9:8e:04:d9:08:80:42: be:75:9c:d9:9d:ab:e8:3c:18:49:56:eb:a5:2f:5f: b3:1e:a5:6b:8e:20:6c:e9:92:23:63:f0:d0:65:e5: 36:ac:a6:15:75:4f:59:81:8c:08:75:a1:dc:a9:b6: ba:e1:3c:6c:af:c1:4b:e9:37:64:cc:cd:d2:4d:d6: 3c:a2:e9:11:3d:cf:de:67:a4:0e:2a:96:58:0c:3e: be:8f:7e:5d:f8:50:46:4a:f1:1d:68:18:54:97:1d: 9a:e4:4f:e9:e8:00:5b:5a:37:7e:9e:6a:a7:52:9a: 44:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:72:AB:8D:DD:D7:19:36:29:8B:16:01:36:2E:78:F6:AC:4E:35:EF X509v3 Authority Key Identifier: keyid:2F:D0:8E:67:55:CF:1C:CA:AF:9D:58:34:44:97:97:84:8A:70:6B:57 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FD08E6755CF1CCAAF9D5834449797848A706B57.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cd0d7fa-d6f8-4c22-b48a-58b8ed8edda7/0/2FD08E6755CF1CCAAF9D5834449797848A706B57.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:a9:fc:cd:88:71:91:2a:92:f5:3c:ca:09:ee:4f:66:20:d3: 0c:79:1c:5b:57:a0:ea:db:3c:91:2e:62:2d:ec:33:95:78:e8: 1e:e8:9f:a6:30:24:96:1c:f2:13:59:be:52:47:be:2b:24:d7: 1a:c4:d8:83:64:92:7f:19:7e:e3:fd:06:f0:56:a2:82:ae:a2: f8:31:50:26:c4:8b:fb:e0:17:42:b8:14:ec:47:97:2a:7f:9c: 3c:bf:8d:29:d3:6d:d9:bc:1d:1b:2b:a9:16:71:d2:ae:bc:99: 13:c7:db:27:c1:32:55:f8:36:0d:66:42:ca:00:7c:8b:04:00: d0:19:c5:b2:c8:2c:19:07:a9:98:f3:43:cb:b7:5a:0d:2d:bb: 77:7a:b1:6d:78:56:2a:56:0a:c0:d5:30:08:69:53:c0:e4:a5: 13:a8:4c:68:4f:aa:bc:26:c0:57:b1:56:9b:fe:81:72:31:24: 82:1e:d1:ec:9c:42:23:22:e1:df:c2:c7:ae:3b:ff:a7:77:09: 76:58:ee:c3:64:52:e9:b7:57:4f:21:55:1f:68:cd:f8:4b:a8: 85:d8:f0:63:13:93:92:34:24:59:fd:ea:21:72:76:a6:61:96: 3f:84:f1:07:5c:8a:de:24:6e:82:45:9e:d6:15:67:aa:71:a4: 84:9e:79:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIo+zQ4y6ENHy3rXul159YXK6HAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4 QTcwNkI1NzAeFw0yNjAzMDEwODI3MTJaFw0yNjAzMDQxNzQ0MTJaMDMxMTAvBgNV BAMTKDY0NzJBQjhERERENzE5MzYyOThCMTYwMTM2MkU3OEY2QUM0RTM1RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM1udUqLBvMtjIgYKM4l5xHSaJ mjcOkLUyF+8X8cnIOlMTuKelT59718flow+v0NJEgTRZ8h3dk9124ie25ENsfEaA 8fx1yr+a4ZQrdy4mXB7dsaG3RlJMDjPfcs/ssyavzccmJXLybz3f0QbR/KelbMrT 3GJevXTwmncGjDmquBfIaCAx8nUkBLmjMpwu6Y4E2QiAQr51nNmdq+g8GElW66Uv X7MepWuOIGzpkiNj8NBl5TasphV1T1mBjAh1odyptrrhPGyvwUvpN2TMzdJN1jyi 6RE9z95npA4qllgMPr6Pfl34UEZK8R1oGFSXHZrkT+noAFtaN36eaqdSmkRxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZHKrjd3XGTYpixYBNi549qxONe8wHwYDVR0j BBgwFoAUL9COZ1XPHMqvnVg0RJeXhIpwa1cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Y2QwZDdmYS1kNmY4LTRjMjItYjQ4YS01OGI4ZWQ4ZWRkYTcvMC8yRkQwOEU2NzU1 Q0YxQ0NBQUY5RDU4MzQ0NDk3OTc4NDhBNzA2QjU3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3ODQ4QTcw NkI1Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGNkMGQ3ZmEtZDZmOC00YzIyLWI0 OGEtNThiOGVkOGVkZGE3LzAvMkZEMDhFNjc1NUNGMUNDQUFGOUQ1ODM0NDQ5Nzk3 ODQ4QTcwNkI1Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIqp/M2IcZEqkvU8ygnuT2Yg0wx5HFtXoOrb PJEuYi3sM5V46B7on6YwJJYc8hNZvlJHvisk1xrE2INkkn8ZfuP9BvBWooKuovgx UCbEi/vgF0K4FOxHlyp/nDy/jSnTbdm8HRsrqRZx0q68mRPH2yfBMlX4Ng1mQsoA fIsEANAZxbLILBkHqZjzQ8u3Wg0tu3d6sW14VipWCsDVMAhpU8DkpROoTGhPqrwm wFexVpv+gXIxJIIe0eycQiMi4d/Cx647/6d3CXZY7sNkUum3V08hVR9ozfhLqIXY 8GMTk5I0JFn96iFydqZhlj+E8Qdcit4kboJFntYVZ6pxpISeeZI= -----END CERTIFICATE-----Generated at Mon Mar 2 02:17:57 2026 by rpki-client