$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: wl+jCLXjtkKQ/dvpYiaktqTWT43hRVpqvPkRfF6vk04= Subject key identifier: 16:02:9D:88:36:D3:14:9D:14:58:07:CF:A1:3D:D1:C9:DE:22:6E:E4 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 27E95B5E7B3409669C255B760B8A558190AF2217 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 0108 Signing time: Sat 28 Feb 2026 18:01:56 +0000 Manifest this update: Sat 28 Feb 2026 17:56:56 +0000 Manifest next update: Tue 03 Mar 2026 20:26:56 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: 6dGs56RSQt6O10OoQeSZ/PCxYL+ilE77iZnarDWGuqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 20:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:e9:5b:5e:7b:34:09:66:9c:25:5b:76:0b:8a:55:81:90:af:22:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Feb 28 17:56:56 2026 GMT Not After : Mar 3 20:26:56 2026 GMT Subject: CN=16029D8836D3149D145807CFA13DD1C9DE226EE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:50:b6:71:ea:aa:f9:0b:2e:6b:b0:4b:f3:cf: 9b:cc:42:51:d3:d5:67:dd:9d:5b:52:a3:66:9c:15: de:ab:d6:a5:96:fd:ce:89:35:5f:75:84:70:24:01: 00:36:6f:1f:c4:5b:db:43:48:73:76:01:78:08:37: b7:82:1f:2b:35:01:8b:41:a7:fa:74:25:e5:55:5f: b8:cb:1d:ac:24:cc:50:cb:62:c2:3b:20:8d:40:38: f8:d1:59:a4:99:5c:d4:ef:1e:fa:af:17:77:cc:cf: 5a:ef:6f:45:e5:5f:1e:4b:98:47:63:40:e3:5a:d7: 0b:a3:65:7b:2d:11:cd:2b:59:7a:39:04:8a:3a:88: 1f:0e:aa:94:9d:f8:e6:30:25:71:40:6b:dc:d9:c7: 26:24:67:7c:3e:1c:6e:77:53:1e:8e:ed:c3:be:37: ad:98:6b:c4:3e:24:08:60:51:89:dd:ad:ab:1d:fc: 2d:f7:d0:04:e6:97:98:80:a5:cb:23:02:ef:c0:8e: 86:6a:d5:74:22:40:c1:65:f2:75:15:b6:92:4b:a8: d6:5e:dc:5a:c9:e7:5d:73:52:0d:6c:8d:4e:ee:db: d8:72:2c:7f:60:3b:99:22:49:7b:8b:96:ad:73:f7: 62:02:e2:b3:e1:73:f4:a4:96:18:ef:f0:9c:9f:56: 6e:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:02:9D:88:36:D3:14:9D:14:58:07:CF:A1:3D:D1:C9:DE:22:6E:E4 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:39:4a:f9:12:ed:2b:df:d5:24:fc:4a:21:fe:ea:6c:7c:d3: f6:44:a3:1d:29:2e:3e:ba:3f:9e:1c:e4:2e:26:70:f4:27:05: 11:74:a2:34:8d:78:d5:34:0f:45:68:38:46:de:4c:e2:db:1b: 20:a1:5e:66:28:ca:23:d5:bf:20:10:d4:35:c2:1d:31:06:f1: 25:5d:7a:1d:5e:a8:ae:34:a8:66:fc:36:06:3f:6a:b7:20:ba: 09:e0:52:11:bd:d4:be:31:b9:a1:ba:70:3c:3b:a8:1a:e8:eb: 0f:46:08:9c:7d:96:8f:7f:af:52:90:5c:4d:62:f0:d1:8c:c9: f8:39:1b:e7:9a:4e:aa:fc:f6:ac:38:46:2f:fc:fd:2a:b6:5c: 22:ff:40:9d:24:a8:a1:33:98:ec:82:ca:e8:91:7e:6a:0c:13: 7c:72:be:2a:14:93:8d:f2:44:0e:b1:c6:f9:7c:1b:ff:d6:10: 28:a7:9d:31:71:61:b0:23:29:0b:99:51:bb:2b:71:d7:30:70: 36:3c:92:19:ee:39:04:7c:d4:a8:d2:57:9d:b6:74:7d:06:c8: 1e:48:a0:12:33:2e:fc:1e:7b:7d:91:3b:17:e8:a7:9a:e9:ae: 9c:0d:89:40:9c:23:8a:c9:53:b8:ee:24:25:d3:e4:fe:81:84: 2e:61:1f:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ+lbXns0CWacJVt2C4pVgZCvIhcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNjAyMjgxNzU2NTZaFw0yNjAzMDMyMDI2NTZaMDMxMTAvBgNV BAMTKDE2MDI5RDg4MzZEMzE0OUQxNDU4MDdDRkExM0REMUM5REUyMjZFRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHULZx6qr5Cy5rsEvzz5vMQlHT 1WfdnVtSo2acFd6r1qWW/c6JNV91hHAkAQA2bx/EW9tDSHN2AXgIN7eCHys1AYtB p/p0JeVVX7jLHawkzFDLYsI7II1AOPjRWaSZXNTvHvqvF3fMz1rvb0XlXx5LmEdj QONa1wujZXstEc0rWXo5BIo6iB8OqpSd+OYwJXFAa9zZxyYkZ3w+HG53Ux6O7cO+ N62Ya8Q+JAhgUYndrasd/C330ATml5iApcsjAu/AjoZq1XQiQMFl8nUVtpJLqNZe 3FrJ511zUg1sjU7u29hyLH9gO5kiSXuLlq1z92IC4rPhc/Sklhjv8JyfVm5bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFgKdiDbTFJ0UWAfPoT3Ryd4ibuQwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHE5SvkS7Svf1ST8SiH+6mx80/ZEox0pLj66 P54c5C4mcPQnBRF0ojSNeNU0D0VoOEbeTOLbGyChXmYoyiPVvyAQ1DXCHTEG8SVd eh1eqK40qGb8NgY/arcgugngUhG91L4xuaG6cDw7qBro6w9GCJx9lo9/r1KQXE1i 8NGMyfg5G+eaTqr89qw4Ri/8/Sq2XCL/QJ0kqKEzmOyCyuiRfmoME3xyvioUk43y RA6xxvl8G//WECinnTFxYbAjKQuZUbsrcdcwcDY8khnuOQR81KjSV522dH0GyB5I oBIzLvwee32ROxfop5rprpwNiUCcI4rJU7juJCXT5P6BhC5hHxg= -----END CERTIFICATE-----Generated at Mon Mar 2 11:18:13 2026 by rpki-client