$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: TL08oiVoOnh11xJyvx0HCezotHrDuSAGE+peRJBfZ7o= Subject key identifier: 04:C0:28:86:01:F7:A3:76:18:AF:FA:A2:33:89:71:0A:73:4B:27:A8 Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 32C4BD980DFB41757486E58E96D2705063A42BA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 0251 Signing time: Sat 28 Feb 2026 07:12:04 +0000 Manifest this update: Sat 28 Feb 2026 07:07:04 +0000 Manifest next update: Tue 03 Mar 2026 10:14:04 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: fsIFY8s0PjD/7N11akX6pcXGbYdy0M9GSs5WwkiQ8wM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 10:14:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c4:bd:98:0d:fb:41:75:74:86:e5:8e:96:d2:70:50:63:a4:2b:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Feb 28 07:07:04 2026 GMT Not After : Mar 3 10:14:04 2026 GMT Subject: CN=04C0288601F7A37618AFFAA23389710A734B27A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:3f:7b:84:4b:47:c9:88:40:c2:cc:04:f3:30: 23:16:0d:61:b4:b1:e4:ab:1c:7a:1f:f3:8c:b9:1f: c3:8a:d0:b1:00:28:0c:4d:2c:16:c3:07:a4:0d:1e: f1:9c:d1:a7:62:41:22:35:e5:2d:22:15:90:d6:f4: 79:9c:93:c5:31:dc:ac:e6:45:b5:f3:13:5e:ed:a4: de:4c:63:ea:f8:26:78:1d:50:e9:52:65:27:fe:f0: 17:e0:9a:72:6a:3c:8f:b1:7d:ba:82:02:3d:c3:54: 6e:8f:8b:2e:e4:25:f2:b1:85:a8:c9:e2:75:52:8f: fa:28:bf:fa:0e:94:18:ec:a2:48:3d:dc:cd:50:e7: 48:3e:f1:c9:4f:38:87:c3:6b:30:d5:67:74:25:d3: 1b:b0:46:09:45:4d:a8:6a:6f:45:20:18:4c:4a:1e: 64:0d:74:8b:c5:f9:84:2c:59:c4:b0:8b:98:1d:df: 89:ba:6e:85:e5:fa:10:22:02:3f:17:b3:54:ea:44: cd:ae:4c:c8:ce:45:0e:78:87:9a:0e:2d:37:0d:29: 50:c1:e5:83:95:e5:c2:3e:81:85:39:2d:05:1d:cc: 71:28:2d:6b:ff:57:2b:17:8f:c7:a8:41:b6:84:a8: d9:3a:fd:c3:76:bf:af:71:e9:79:bc:c8:a1:d8:89: 44:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:C0:28:86:01:F7:A3:76:18:AF:FA:A2:33:89:71:0A:73:4B:27:A8 X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:db:14:69:a1:46:80:f1:14:d0:b7:9d:97:81:89:7c:bb:57: 1d:10:c6:f0:0c:84:29:22:32:99:88:77:5e:8c:aa:f4:a6:04: 34:d5:dc:35:4f:bf:46:a4:e9:72:c3:de:6d:54:40:25:c4:ee: 69:20:fe:a6:c0:5a:63:ad:3b:38:53:04:ea:01:55:ba:0f:5d: dc:fa:89:8a:65:b8:04:d2:f6:07:65:ed:60:28:e1:41:0c:7b: af:3e:27:37:52:53:a7:d5:f7:55:35:ee:08:9c:15:74:ff:ed: 64:54:5b:61:59:46:18:57:b0:aa:56:16:aa:55:d7:25:a2:be: 4a:2a:0f:55:3a:91:f3:ce:e0:f3:0e:d9:22:cb:fc:b4:7d:52: a5:99:07:99:81:1c:40:4f:52:1b:64:36:3d:9f:8e:fd:2a:d7: 34:b2:90:32:35:c5:4b:96:7b:a8:ff:5d:4e:ce:3a:c1:af:1c: c1:fc:40:db:a3:4c:dc:c0:04:20:6c:2c:d1:32:ad:28:7f:4b: 86:77:f8:d5:dc:59:68:65:9a:46:19:3b:f5:ae:13:14:36:8a: c0:55:7a:38:9d:d1:fb:a6:24:c2:db:db:3a:02:c9:ab:6b:6c: 82:a0:96:86:f3:c3:de:00:41:0f:93:09:16:0c:58:b6:d1:54: 29:c2:f4:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMsS9mA37QXV0huWOltJwUGOkK6IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNjAyMjgwNzA3MDRaFw0yNjAzMDMxMDE0MDRaMDMxMTAvBgNV BAMTKDA0QzAyODg2MDFGN0EzNzYxOEFGRkFBMjMzODk3MTBBNzM0QjI3QTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7P3uES0fJiEDCzATzMCMWDWG0 seSrHHof84y5H8OK0LEAKAxNLBbDB6QNHvGc0adiQSI15S0iFZDW9Hmck8Ux3Kzm RbXzE17tpN5MY+r4JngdUOlSZSf+8BfgmnJqPI+xfbqCAj3DVG6Piy7kJfKxhajJ 4nVSj/oov/oOlBjsokg93M1Q50g+8clPOIfDazDVZ3Ql0xuwRglFTahqb0UgGExK HmQNdIvF+YQsWcSwi5gd34m6boXl+hAiAj8Xs1TqRM2uTMjORQ54h5oOLTcNKVDB 5YOV5cI+gYU5LQUdzHEoLWv/VysXj8eoQbaEqNk6/cN2v69x6Xm8yKHYiUTrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBMAohgH3o3YYr/qiM4lxCnNLJ6gwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALvbFGmhRoDxFNC3nZeBiXy7Vx0QxvAMhCki MpmId16MqvSmBDTV3DVPv0ak6XLD3m1UQCXE7mkg/qbAWmOtOzhTBOoBVboPXdz6 iYpluATS9gdl7WAo4UEMe68+JzdSU6fV91U17gicFXT/7WRUW2FZRhhXsKpWFqpV 1yWivkoqD1U6kfPO4PMO2SLL/LR9UqWZB5mBHEBPUhtkNj2fjv0q1zSykDI1xUuW e6j/XU7OOsGvHMH8QNujTNzABCBsLNEyrSh/S4Z3+NXcWWhlmkYZO/WuExQ2isBV ejid0fumJMLb2zoCyatrbIKglobzw94AQQ+TCRYMWLbRVCnC9Bw= -----END CERTIFICATE-----Generated at Mon Mar 2 02:22:11 2026 by rpki-client