$ rpki-client -vvf repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft File: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft (raw, json) Hash identifier: +atoOdiEnUIy/SzkpzPSDXQ0BDkx/MmBRSexx7dJa3E= Subject key identifier: 09:F1:9D:FF:7C:2A:18:42:80:33:28:10:96:81:3A:3C:0B:9C:FB:9A Authority key identifier: 2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 Certificate issuer: /CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Certificate serial: 02ED5EBB7FD825F48D86EFB106AA2AF442B534F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft Manifest number: 04E3 Signing time: Fri 27 Feb 2026 23:51:12 +0000 Manifest this update: Fri 27 Feb 2026 23:46:12 +0000 Manifest next update: Tue 03 Mar 2026 08:56:12 +0000 Files and hashes: 1: 2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl (hash: WMdnCa9+DOPlsS3KPcCIQevnpyuRw5ct6GgEreL051k=) 2: 3130332e3135382e3130332e302f32342d3234203d3e203435333137.roa (hash: w2a2u6qdVWhlCkR970rhojHnih1HccbKX6TZhhdF+IA=) 3: 3130332e3135382e3130322e302f32342d3234203d3e20313431313239.roa (hash: itrcHe3qx7ogs61DE3/P3ZuuNKltdZ7fAYSLqG5ktLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 08:56:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:ed:5e:bb:7f:d8:25:f4:8d:86:ef:b1:06:aa:2a:f4:42:b5:34:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9 Validity Not Before: Feb 27 23:46:12 2026 GMT Not After : Mar 3 08:56:12 2026 GMT Subject: CN=09F19DFF7C2A18428033281096813A3C0B9CFB9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:57:ad:fe:6a:ea:8a:d8:3d:15:7a:76:ef:bd: 47:dd:41:18:74:0f:8d:31:47:4c:8b:24:cf:cc:72: bf:27:f8:82:35:be:37:af:18:9c:a3:eb:a9:66:05: a0:fd:5f:8b:cf:41:0f:0d:21:11:85:87:53:83:16: 0b:08:b6:52:8d:b0:b9:e6:1e:e1:03:74:09:61:98: 38:19:bc:8c:a3:57:5a:8d:4b:5f:74:a7:01:f6:4f: 46:39:25:25:72:bb:db:72:c3:98:d8:af:f0:5b:18: 10:fb:19:9e:8d:59:6a:5c:5e:7e:80:5a:11:d2:40: 01:61:2d:30:66:4d:a5:ca:bd:52:c6:9b:d6:97:77: dc:2e:67:5c:21:de:2e:d6:1c:1a:85:69:ef:1a:51: 9b:03:a0:5d:f9:4e:51:d8:04:96:89:55:52:86:75: e9:3c:a6:31:d5:e6:68:d4:bb:44:84:dd:02:f4:45: 90:6e:1a:c5:ef:af:79:44:fa:04:c1:be:3c:12:7d: ea:dd:75:42:e1:a4:34:35:38:a3:b0:46:3c:ad:67: b1:8b:72:b9:43:2e:1b:9f:73:c6:9e:20:e1:31:29: 18:c8:83:06:7d:65:e4:7e:38:dc:27:c7:a1:ff:69: 38:f0:80:92:41:bb:31:3b:82:ad:88:3b:d1:10:5b: 1b:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:F1:9D:FF:7C:2A:18:42:80:33:28:10:96:81:3A:3C:0B:9C:FB:9A X509v3 Authority Key Identifier: keyid:2E:EF:78:44:53:62:AF:4F:7C:AE:B2:41:FA:E6:B9:74:7E:C2:D2:F9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b724e45b-254b-4feb-bf8e-7bf120912af7/0/2EEF78445362AF4F7CAEB241FAE6B9747EC2D2F9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:46:b5:ff:c3:af:1c:8c:96:1b:e9:63:0d:38:cb:9d:e5:4f: ee:b7:56:19:30:3c:3e:68:46:72:0a:8e:84:24:1b:cc:48:34: 06:b6:d3:bd:f3:58:20:34:8d:68:e8:de:9d:50:bf:41:4f:9d: cb:47:9c:f6:12:95:09:97:12:bd:43:cf:12:ab:2e:b2:cd:e7: d3:60:10:ed:1b:e7:e5:45:b0:f1:90:fc:9a:27:50:ab:f0:b8: f0:63:f3:b5:6a:64:f0:b8:d7:76:55:ac:18:40:57:0b:ff:fa: 38:c6:53:02:e4:59:ba:50:22:13:dd:f3:b3:d5:1f:40:86:00: cd:06:f4:23:b9:ab:31:16:a2:5d:1e:e4:5b:4c:89:54:90:fe: 4c:01:3b:b3:84:64:f3:db:f5:93:85:48:85:69:24:15:bd:c3: 11:31:32:98:d9:8c:eb:19:0e:54:3d:7b:69:0a:18:ae:2d:85: 73:02:26:13:ee:8e:a3:11:29:8f:63:97:1c:c1:1f:f1:61:7b: 78:ab:ed:8f:52:37:38:19:99:df:7b:3f:b8:46:41:30:67:10: 14:86:43:55:91:33:e7:0b:6a:61:19:56:1c:05:7e:2f:4f:63: a6:f4:bd:bf:85:04:7e:33:69:d8:9c:10:aa:46:0e:b4:d5:07: 45:56:16:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAu1eu3/YJfSNhu+xBqoq9EK1NPIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3 RUMyRDJGOTAeFw0yNjAyMjcyMzQ2MTJaFw0yNjAzMDMwODU2MTJaMDMxMTAvBgNV BAMTKDA5RjE5REZGN0MyQTE4NDI4MDMzMjgxMDk2ODEzQTNDMEI5Q0ZCOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpV63+auqK2D0VenbvvUfdQRh0 D40xR0yLJM/Mcr8n+II1vjevGJyj66lmBaD9X4vPQQ8NIRGFh1ODFgsItlKNsLnm HuEDdAlhmDgZvIyjV1qNS190pwH2T0Y5JSVyu9tyw5jYr/BbGBD7GZ6NWWpcXn6A WhHSQAFhLTBmTaXKvVLGm9aXd9wuZ1wh3i7WHBqFae8aUZsDoF35TlHYBJaJVVKG dek8pjHV5mjUu0SE3QL0RZBuGsXvr3lE+gTBvjwSferddULhpDQ1OKOwRjytZ7GL crlDLhufc8aeIOExKRjIgwZ9ZeR+ONwnx6H/aTjwgJJBuzE7gq2IO9EQWxv/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCfGd/3wqGEKAMygQloE6PAuc+5owHwYDVR0j BBgwFoAULu94RFNir098rrJB+ua5dH7C0vkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NzI0ZTQ1Yi0yNTRiLTRmZWItYmY4ZS03YmYxMjA5MTJhZjcvMC8yRUVGNzg0NDUz NjJBRjRGN0NBRUIyNDFGQUU2Qjk3NDdFQzJEMkY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5NzQ3RUMy RDJGOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjcyNGU0NWItMjU0Yi00ZmViLWJm OGUtN2JmMTIwOTEyYWY3LzAvMkVFRjc4NDQ1MzYyQUY0RjdDQUVCMjQxRkFFNkI5 NzQ3RUMyRDJGOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABJGtf/DrxyMlhvpYw04y53lT+63VhkwPD5o RnIKjoQkG8xINAa2073zWCA0jWjo3p1Qv0FPnctHnPYSlQmXEr1DzxKrLrLN59Ng EO0b5+VFsPGQ/JonUKvwuPBj87VqZPC413ZVrBhAVwv/+jjGUwLkWbpQIhPd87PV H0CGAM0G9CO5qzEWol0e5FtMiVSQ/kwBO7OEZPPb9ZOFSIVpJBW9wxExMpjZjOsZ DlQ9e2kKGK4thXMCJhPujqMRKY9jlxzBH/Fhe3ir7Y9SNzgZmd97P7hGQTBnEBSG Q1WRM+cLamEZVhwFfi9PY6b0vb+FBH4zadicEKpGDrTVB0VWFmc= -----END CERTIFICATE-----Generated at Mon Mar 2 03:43:42 2026 by rpki-client