$ rpki-client -vvf repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft File: 2E55483B906244D2DA357F014F9AFA606D95C345.mft (raw, json) Hash identifier: gu4r9P6etrUm2gg8G0A9/HV3BjnInizyNG6LEBSuvj0= Subject key identifier: ED:C1:07:88:01:98:36:A1:C7:9E:97:C0:19:56:2B:E8:A1:EE:88:39 Authority key identifier: 2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 Certificate issuer: /CN=2E55483B906244D2DA357F014F9AFA606D95C345 Certificate serial: 0C43FAA68344DAE9FF9254E422AC2DA11A638B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft Manifest number: 0127 Signing time: Sun 01 Mar 2026 12:21:21 +0000 Manifest this update: Sun 01 Mar 2026 12:16:21 +0000 Manifest next update: Wed 04 Mar 2026 18:03:21 +0000 Files and hashes: 1: 3230322e35322e35382e302f32342d3234203d3e203436303538.roa (hash: UMm8CVytUz3mnXPaURu9cvBWCMEG+/Kh9q1dvGzVdN0=) 2: 3230322e35322e35382e302f32332d3233203d3e203436303538.roa (hash: d6+MpeOwnH/agtVVZkfqBxwK6cPDeJjFB6fgvTWTTwY=) 3: 3230322e35322e35392e302f32342d3234203d3e203436303538.roa (hash: Du41YA1NCiK2HlEV88F/QDnyK1sLmVF33xCMfe54rMI=) 4: 2E55483B906244D2DA357F014F9AFA606D95C345.crl (hash: p8y1eXcpM7P9Qg7PWsklSa3A98/k8Sthiwv1H6Aq4XM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 18:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:43:fa:a6:83:44:da:e9:ff:92:54:e4:22:ac:2d:a1:1a:63:8b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E55483B906244D2DA357F014F9AFA606D95C345 Validity Not Before: Mar 1 12:16:21 2026 GMT Not After : Mar 4 18:03:21 2026 GMT Subject: CN=EDC10788019836A1C79E97C019562BE8A1EE8839 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:56:93:9d:28:36:cd:cc:39:56:1c:53:a9:0c: 73:d1:05:47:8a:ce:b2:ac:9c:88:54:64:7f:98:0b: d4:5d:a6:c7:06:b1:40:50:88:2c:40:92:a6:55:f5: 3c:ba:61:94:f4:6e:ae:b4:16:0f:57:61:fc:d8:0c: 04:52:c4:cf:e4:29:a7:0b:22:72:41:6a:c4:ce:6e: e3:46:b0:d5:c3:79:4d:ce:81:10:a9:17:80:07:eb: 04:92:90:e1:b1:7f:4e:e5:71:29:d6:ff:c6:41:33: 34:1c:df:23:36:69:f5:b4:e6:cd:ce:4a:14:b2:8f: d0:29:0a:98:09:65:dd:b1:05:68:b1:dc:30:48:fa: 1e:40:75:34:a7:95:10:00:bd:6c:64:0d:a2:3b:af: a9:18:f2:13:06:56:b5:06:93:e8:b5:16:f5:b3:81: 85:6c:b1:42:55:87:14:7c:f6:36:db:f5:2c:33:25: 78:a4:d6:38:10:0d:16:64:2a:3c:61:c1:e8:ea:ff: 4a:ff:ed:b7:8d:bc:4b:a2:f5:78:e0:93:ab:c5:db: fe:dd:29:0c:e7:9f:03:47:71:9a:df:d7:21:3d:03: db:e3:35:6e:91:08:fe:52:b4:85:62:69:97:0e:f5: b4:4d:59:83:ef:4c:3a:d2:68:04:c7:6f:74:1d:63: 1e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:C1:07:88:01:98:36:A1:C7:9E:97:C0:19:56:2B:E8:A1:EE:88:39 X509v3 Authority Key Identifier: keyid:2E:55:48:3B:90:62:44:D2:DA:35:7F:01:4F:9A:FA:60:6D:95:C3:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E55483B906244D2DA357F014F9AFA606D95C345.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a2e23dc4-4fd5-43e2-bb6a-4fdc387ebc58/0/2E55483B906244D2DA357F014F9AFA606D95C345.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:a5:5e:41:5b:73:68:48:aa:19:0a:30:d2:d2:97:d4:20:de: 4d:26:79:a0:15:45:94:02:41:2e:6c:fa:01:f9:d4:da:7d:d3: a5:f7:87:c4:04:ce:3d:d9:7a:84:15:09:ca:34:c6:12:60:75: d5:ee:85:c2:cb:f7:df:f8:82:3b:f6:a8:fe:71:9f:a9:b3:5c: 2f:5d:8f:bb:21:4a:85:cf:85:c2:ef:03:6a:bf:d4:2f:01:2a: c4:4d:80:2b:f9:10:2f:87:2a:52:d8:c8:29:57:40:97:7f:4a: 47:51:18:de:8b:d2:77:8c:4c:2d:45:34:7b:bc:d1:ce:19:d1: 98:92:99:f2:58:60:85:7b:c0:fd:4d:17:06:e1:d5:a0:55:4f: a9:ad:fd:ac:90:c8:69:3b:ab:ac:9e:74:9f:dd:3e:8c:0c:3c: 03:bb:db:4d:6f:e3:4a:f5:0b:76:91:30:77:a1:c7:0a:a4:ee: 2e:39:15:1e:18:f9:b2:39:af:f3:76:a8:1b:89:78:b6:e5:75: fe:6e:6c:a9:31:b3:32:31:f3:65:b4:dc:c1:da:4e:60:de:a9: 3c:01:97:ab:a3:2a:d8:c5:c7:79:8c:32:70:af:f0:35:27:c2: 30:6e:8c:92:71:ca:39:91:bc:82:18:0e:5e:5a:0e:cb:42:a6: 2d:8c:a5:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDEP6poNE2un/klTkIqwtoRpji00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2 RDk1QzM0NTAeFw0yNjAzMDExMjE2MjFaFw0yNjAzMDQxODAzMjFaMDMxMTAvBgNV BAMTKEVEQzEwNzg4MDE5ODM2QTFDNzlFOTdDMDE5NTYyQkU4QTFFRTg4MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVpOdKDbNzDlWHFOpDHPRBUeK zrKsnIhUZH+YC9RdpscGsUBQiCxAkqZV9Ty6YZT0bq60Fg9XYfzYDARSxM/kKacL InJBasTObuNGsNXDeU3OgRCpF4AH6wSSkOGxf07lcSnW/8ZBMzQc3yM2afW05s3O ShSyj9ApCpgJZd2xBWix3DBI+h5AdTSnlRAAvWxkDaI7r6kY8hMGVrUGk+i1FvWz gYVssUJVhxR89jbb9SwzJXik1jgQDRZkKjxhwejq/0r/7beNvEui9Xjgk6vF2/7d KQznnwNHcZrf1yE9A9vjNW6RCP5StIViaZcO9bRNWYPvTDrSaATHb3QdYx5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7cEHiAGYNqHHnpfAGVYr6KHuiDkwHwYDVR0j BBgwFoAULlVIO5BiRNLaNX8BT5r6YG2Vw0UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h MmUyM2RjNC00ZmQ1LTQzZTItYmI2YS00ZmRjMzg3ZWJjNTgvMC8yRTU1NDgzQjkw NjI0NEQyREEzNTdGMDE0RjlBRkE2MDZEOTVDMzQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZBNjA2RDk1 QzM0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTJlMjNkYzQtNGZkNS00M2UyLWJi NmEtNGZkYzM4N2ViYzU4LzAvMkU1NTQ4M0I5MDYyNDREMkRBMzU3RjAxNEY5QUZB NjA2RDk1QzM0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6lXkFbc2hIqhkKMNLSl9Qg3k0meaAVRZQC QS5s+gH51Np906X3h8QEzj3ZeoQVCco0xhJgddXuhcLL99/4gjv2qP5xn6mzXC9d j7shSoXPhcLvA2q/1C8BKsRNgCv5EC+HKlLYyClXQJd/SkdRGN6L0neMTC1FNHu8 0c4Z0ZiSmfJYYIV7wP1NFwbh1aBVT6mt/ayQyGk7q6yedJ/dPowMPAO7201v40r1 C3aRMHehxwqk7i45FR4Y+bI5r/N2qBuJeLbldf5ubKkxszIx82W03MHaTmDeqTwB l6ujKtjFx3mMMnCv8DUnwjBujJJxyjmRvIIYDl5aDstCpi2MpR0= -----END CERTIFICATE-----Generated at Mon Mar 2 13:00:22 2026 by rpki-client