$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: 89oe2/aARSbcMhhvLL/0HLJe55cu5s0ZhjTUBM9YoNE= Subject key identifier: E3:80:87:1A:2E:55:FE:D0:A4:E4:D4:EA:AF:02:CC:60:73:E2:97:DD Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 610EB3E8AAAC5AEAD3C0E86AAE0C55B187678B09 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0155 Signing time: Sat 28 Feb 2026 23:31:33 +0000 Manifest this update: Sat 28 Feb 2026 23:26:33 +0000 Manifest next update: Wed 04 Mar 2026 04:12:33 +0000 Files and hashes: 1: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) 2: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: XCUixxd1b/pQBYn2CoahyOc5uPmg29hgnihfllVEkos=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 04:12:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:0e:b3:e8:aa:ac:5a:ea:d3:c0:e8:6a:ae:0c:55:b1:87:67:8b:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Feb 28 23:26:33 2026 GMT Not After : Mar 4 04:12:33 2026 GMT Subject: CN=E380871A2E55FED0A4E4D4EAAF02CC6073E297DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:91:3e:68:90:dc:b0:26:79:0b:ed:b0:de:d9: 92:e2:83:c3:73:84:03:15:42:9c:1f:e8:76:e6:ae: 49:64:58:79:3b:f3:7c:ca:49:90:0d:45:c5:90:10: f0:71:ee:bf:24:eb:16:b7:d7:56:b1:b1:ae:2c:8a: 09:5f:75:d5:44:d0:5c:7d:e1:81:f9:18:5f:b5:cc: da:7a:1a:2c:c5:a3:2c:20:b9:d8:99:b7:f2:c8:52: dc:f4:75:75:68:49:1f:40:9d:6d:c0:b5:45:3f:fe: 2c:ba:90:24:c7:e3:08:2c:a8:1a:c5:c6:50:dc:11: 5f:3c:0f:e1:a9:54:ae:d8:fa:85:66:ea:9d:be:16: 92:4b:d6:a5:ea:08:9a:09:3f:cc:c2:9b:e0:9f:c3: a4:ce:03:f1:48:ee:26:b5:9b:f0:1f:50:56:8d:53: 39:39:b8:ba:85:1c:f9:d7:13:cb:df:70:02:c1:a3: 48:2e:7d:e6:00:f7:b1:92:3a:fc:44:9b:35:89:e8: 80:99:5b:d5:5e:78:5a:4f:88:73:2a:d8:93:db:6e: dc:c7:fd:6e:f9:ee:bb:df:dc:9e:b1:5f:e0:a7:21: 79:33:96:e7:6f:3f:71:75:c1:4c:19:73:23:54:71: 95:04:a7:9f:99:b8:d9:5f:6d:ad:e5:24:38:4c:e4: dc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:80:87:1A:2E:55:FE:D0:A4:E4:D4:EA:AF:02:CC:60:73:E2:97:DD X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b8:cb:0c:96:a8:b7:9f:cb:cd:2f:ce:81:40:21:f0:e8:2c: 99:a9:3d:20:08:37:13:5c:ca:30:59:82:b4:9b:ac:bc:51:ae: d5:33:4b:d2:b6:1c:5c:2e:65:f1:97:35:78:74:85:cc:87:ed: bb:40:13:78:ca:3b:e2:3c:ea:c3:e4:46:af:ea:80:74:0b:2e: 5e:1e:2b:c9:2a:e1:9c:20:5f:fa:bc:e2:0f:21:34:da:f9:7d: 47:e6:0c:db:34:97:64:e4:ac:a7:10:8d:57:90:30:d6:79:7d: 48:a5:4c:dd:81:67:8a:39:59:ad:ba:2e:24:75:d2:f3:ee:ca: ea:2f:b0:01:00:c8:5d:fa:45:18:d9:05:bb:92:33:16:40:37: b4:ca:e0:92:34:75:13:05:70:c9:ad:e2:4a:a1:b6:9c:e7:15: 47:a8:62:18:06:24:7e:90:bf:63:39:b3:0c:c8:46:1e:8b:93: 03:14:87:5c:cb:11:19:3a:14:fe:40:d9:16:94:66:f1:e3:aa: c8:f2:31:a7:34:eb:5f:e7:aa:2d:42:90:48:76:24:e1:ef:4d: 47:47:e0:78:ef:3c:f2:33:0e:04:44:25:36:1e:31:5e:81:ce: 35:32:b2:3e:bd:77:0b:af:55:97:16:a6:a4:1c:5f:55:26:26: 8d:cd:07:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYQ6z6KqsWurTwOhqrgxVsYdniwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNjAyMjgyMzI2MzNaFw0yNjAzMDQwNDEyMzNaMDMxMTAvBgNV BAMTKEUzODA4NzFBMkU1NUZFRDBBNEU0RDRFQUFGMDJDQzYwNzNFMjk3REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkkT5okNywJnkL7bDe2ZLig8Nz hAMVQpwf6HbmrklkWHk783zKSZANRcWQEPBx7r8k6xa311axsa4siglfddVE0Fx9 4YH5GF+1zNp6GizFoywgudiZt/LIUtz0dXVoSR9AnW3AtUU//iy6kCTH4wgsqBrF xlDcEV88D+GpVK7Y+oVm6p2+FpJL1qXqCJoJP8zCm+Cfw6TOA/FI7ia1m/AfUFaN Uzk5uLqFHPnXE8vfcALBo0gufeYA97GSOvxEmzWJ6ICZW9VeeFpPiHMq2JPbbtzH /W757rvf3J6xX+CnIXkzludvP3F1wUwZcyNUcZUEp5+ZuNlfba3lJDhM5NzDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU44CHGi5V/tCk5NTqrwLMYHPil90wHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIS4ywyWqLefy80vzoFAIfDoLJmpPSAINxNc yjBZgrSbrLxRrtUzS9K2HFwuZfGXNXh0hcyH7btAE3jKO+I86sPkRq/qgHQLLl4e K8kq4ZwgX/q84g8hNNr5fUfmDNs0l2TkrKcQjVeQMNZ5fUilTN2BZ4o5Wa26LiR1 0vPuyuovsAEAyF36RRjZBbuSMxZAN7TK4JI0dRMFcMmt4kqhtpznFUeoYhgGJH6Q v2M5swzIRh6LkwMUh1zLERk6FP5A2RaUZvHjqsjyMac061/nqi1CkEh2JOHvTUdH 4HjvPPIzDgREJTYeMV6BzjUysj69dwuvVZcWpqQcX1UmJo3NB4Y= -----END CERTIFICATE-----Generated at Mon Mar 2 12:28:52 2026 by rpki-client