$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: Wrc1GnDHfP3upIK41uvf5MlKoX+m46VEUPfjHtLDiiI= Subject key identifier: 7C:49:DC:0F:DC:5E:A9:8C:61:B1:C0:52:F7:C5:46:AF:3E:FB:30:7E Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 0896E0B62376BAF45C6F5E7622A17273396504AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0179 Signing time: Sun 01 Mar 2026 07:30:56 +0000 Manifest this update: Sun 01 Mar 2026 07:25:56 +0000 Manifest next update: Wed 04 Mar 2026 12:03:56 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: 12wpMTZAq1comvmg7cMiFwyaZICLIpy6UFsW3iXDNKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 12:03:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:96:e0:b6:23:76:ba:f4:5c:6f:5e:76:22:a1:72:73:39:65:04:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Mar 1 07:25:56 2026 GMT Not After : Mar 4 12:03:56 2026 GMT Subject: CN=7C49DC0FDC5EA98C61B1C052F7C546AF3EFB307E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:17:a0:7e:f4:48:53:24:f9:18:d9:8e:d7:e1: 22:6e:72:04:ae:24:29:1c:99:13:e4:ed:2a:3e:8e: 69:57:4b:cb:31:1d:6e:47:46:ec:74:07:13:4e:c0: bd:d5:e6:48:d5:0d:b3:12:db:d5:62:8a:cd:01:45: 8b:a9:d5:9a:81:ce:e1:3f:ec:5b:cf:05:39:c3:68: 1a:87:6d:7d:63:ef:a8:5d:a3:01:d8:f0:ea:df:8f: 96:0b:a5:7e:93:6f:cd:3e:d9:e6:a5:85:2f:a5:df: 7a:ab:17:93:cd:a2:03:1a:9c:9e:cc:fa:e4:fa:a3: 29:f0:b3:1f:d4:51:37:c5:5c:09:48:0d:15:85:eb: 5c:a6:70:14:82:8a:91:bd:8a:1c:79:8b:67:c9:97: bc:ef:32:50:66:e3:d2:d7:bb:6d:0a:7a:38:f7:7d: 6d:49:d0:5f:48:66:f7:93:3f:06:a0:65:7f:0b:cb: ec:ac:40:79:2d:8b:db:35:69:88:9e:c0:ca:5a:11: 7a:87:f6:76:f7:5d:40:f1:e6:6f:e9:a8:7f:9d:65: 83:6b:aa:fd:f4:53:ad:a5:c7:ce:e4:93:04:59:1e: 7b:2d:e6:11:f9:a6:74:d0:36:6c:c5:a7:bd:39:c1: 52:93:b0:4a:c1:56:35:b4:71:07:0b:56:4a:e4:e0: 14:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:49:DC:0F:DC:5E:A9:8C:61:B1:C0:52:F7:C5:46:AF:3E:FB:30:7E X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:c5:db:4b:23:74:1e:ca:73:4c:e9:40:0f:c7:f8:65:8f:68: e5:63:4b:d6:56:d8:c2:2d:3c:50:32:09:39:7d:73:ce:50:1f: 90:13:ca:71:b8:98:ff:3f:77:29:e9:e5:fd:5c:d0:b6:30:5c: 2a:b1:75:96:ee:17:09:55:03:d9:9e:c5:dc:31:86:74:dd:fa: f7:bb:70:b5:1b:30:aa:87:05:9a:4f:05:b9:b9:3f:b4:54:89: 06:67:49:70:79:90:1f:91:a5:6b:28:1f:1e:c6:21:b6:b9:55: d3:90:dc:66:e5:7f:bb:2d:24:53:39:f4:d5:c1:b9:e0:19:d1: 4b:85:4d:62:88:f5:5d:9f:64:af:49:f1:44:df:d5:83:e4:62: 41:85:f3:d7:9e:f2:2a:b7:2b:b9:7f:8e:65:e5:9a:86:3b:a3: 33:7c:4d:e5:60:f9:2c:b5:40:58:b5:e8:df:2e:34:b1:89:3c: 85:c9:1c:76:3f:5c:9c:61:ec:f8:4f:13:de:89:34:c3:ae:fb: a8:d5:95:b2:3b:aa:87:f0:b4:ac:ec:10:14:1d:19:a8:fc:81: 1c:de:02:94:f5:a2:14:f6:0f:6d:6f:66:8b:a3:96:25:39:0b: d2:12:5f:65:a2:63:93:fc:6d:27:ad:7f:ae:e6:c4:ca:2c:41: 48:9e:5a:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCJbgtiN2uvRcb152IqFyczllBKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNjAzMDEwNzI1NTZaFw0yNjAzMDQxMjAzNTZaMDMxMTAvBgNV BAMTKDdDNDlEQzBGREM1RUE5OEM2MUIxQzA1MkY3QzU0NkFGM0VGQjMwN0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2F6B+9EhTJPkY2Y7X4SJucgSu JCkcmRPk7So+jmlXS8sxHW5HRux0BxNOwL3V5kjVDbMS29Viis0BRYup1ZqBzuE/ 7FvPBTnDaBqHbX1j76hdowHY8Orfj5YLpX6Tb80+2ealhS+l33qrF5PNogManJ7M +uT6oynwsx/UUTfFXAlIDRWF61ymcBSCipG9ihx5i2fJl7zvMlBm49LXu20Kejj3 fW1J0F9IZveTPwagZX8Ly+ysQHkti9s1aYiewMpaEXqH9nb3XUDx5m/pqH+dZYNr qv30U62lx87kkwRZHnst5hH5pnTQNmzFp705wVKTsErBVjW0cQcLVkrk4BShAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfEncD9xeqYxhscBS98VGrz77MH4wHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAETF20sjdB7Kc0zpQA/H+GWPaOVjS9ZW2MIt PFAyCTl9c85QH5ATynG4mP8/dynp5f1c0LYwXCqxdZbuFwlVA9mexdwxhnTd+ve7 cLUbMKqHBZpPBbm5P7RUiQZnSXB5kB+RpWsoHx7GIba5VdOQ3Gblf7stJFM59NXB ueAZ0UuFTWKI9V2fZK9J8UTf1YPkYkGF89ee8iq3K7l/jmXlmoY7ozN8TeVg+Sy1 QFi16N8uNLGJPIXJHHY/XJxh7PhPE96JNMOu+6jVlbI7qofwtKzsEBQdGaj8gRze ApT1ohT2D21vZoujliU5C9ISX2WiY5P8bSetf67mxMosQUieWsM= -----END CERTIFICATE-----Generated at Mon Mar 2 13:20:29 2026 by rpki-client