$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: WhqbtqfedZJSIlKAAJp5oyG7IWHsTtNeyVN89rrdfZM= Subject key identifier: FE:B4:77:7D:62:D4:F4:E0:3E:2E:1E:7B:E1:2D:D3:4E:FF:93:A5:2C Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 6120921F96DF71FB68F5FE454622B122AA3C6467 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 0119 Signing time: Sun 01 Mar 2026 14:20:41 +0000 Manifest this update: Sun 01 Mar 2026 14:15:41 +0000 Manifest next update: Wed 04 Mar 2026 16:47:41 +0000 Files and hashes: 1: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: a3wrFKWCa2BsB3ehTlmLPP+ebhp+vnYe3M5vv4wCDsg=) 2: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 16:47:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:20:92:1f:96:df:71:fb:68:f5:fe:45:46:22:b1:22:aa:3c:64:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Mar 1 14:15:41 2026 GMT Not After : Mar 4 16:47:41 2026 GMT Subject: CN=FEB4777D62D4F4E03E2E1E7BE12DD34EFF93A52C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:36:d9:f4:cd:f1:60:fe:8f:73:cf:24:b3:7f: c6:ae:22:f5:87:88:65:bd:a7:16:a9:e2:5c:f3:bc: 4e:07:74:04:a8:05:db:13:92:b1:b9:2f:ad:9b:a2: 1d:ee:2d:33:20:56:06:f9:b2:f0:fd:f7:9f:fb:8e: 72:a9:75:8d:95:99:01:62:8e:ec:68:b5:be:19:9d: af:da:26:f4:af:bc:c3:53:31:af:91:3c:c7:dd:6d: 54:75:c3:58:3f:62:33:d6:4d:ff:15:54:1c:1d:76: 0b:df:30:78:29:17:f6:65:96:27:20:92:67:a1:6d: 51:b2:68:b4:e7:49:96:ed:fe:41:0a:37:61:1a:8c: c9:48:e1:87:fc:b3:a0:5f:76:31:2e:62:b0:7b:84: 4c:e9:a0:63:f3:56:bf:59:38:2b:6f:7c:d2:89:c2: 75:e4:14:d4:e5:1b:8a:52:cb:07:cb:8c:1a:47:2e: 94:43:0b:e5:a1:ba:83:9d:e6:ca:45:fd:54:0f:3a: ec:b1:4d:8a:df:27:7d:77:e6:0e:3e:a7:bd:d9:c8: 72:63:80:0f:7d:46:1f:ab:85:39:98:51:12:36:6f: f7:2f:bb:60:14:a2:72:a3:e8:55:5b:9e:8f:87:61: 3f:dc:05:63:a0:ca:f2:e6:bf:7c:71:1a:15:bd:a1: f9:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:B4:77:7D:62:D4:F4:E0:3E:2E:1E:7B:E1:2D:D3:4E:FF:93:A5:2C X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:e6:9f:55:05:80:e4:71:1f:a3:62:75:63:b7:eb:68:6d:f1: 15:bb:e1:94:8e:a6:1b:cc:93:d7:04:da:6f:b3:61:aa:6e:8e: cf:1e:ac:16:71:e4:40:21:c4:ef:30:e1:93:34:fc:05:31:b3: 7a:00:87:90:16:c8:2d:c8:ce:39:8f:89:81:eb:b2:0d:26:14: 4a:e2:48:fa:78:1c:13:bf:ee:17:f1:f7:51:83:7d:38:05:f2: d4:f5:c4:b5:c7:af:96:27:41:82:7b:05:bc:d2:10:f7:3a:1b: 82:94:2d:bf:d8:f8:0d:3e:52:66:92:3f:24:5b:e7:2a:74:07: 3b:9d:0b:ed:89:23:07:ff:ae:e5:4b:b3:8c:ed:7e:2b:00:7b: cb:58:a4:4b:47:4b:2d:8d:99:eb:80:4c:f1:94:5a:a6:02:38: 1e:b8:49:6c:29:e2:23:2d:52:c7:e5:52:7a:e3:74:05:ac:33: 24:75:d6:b6:7b:3d:b8:98:ea:62:aa:e4:ca:dc:42:85:c8:21: 4b:0b:ab:68:36:a5:7f:e9:2a:14:3a:5c:99:df:99:d2:59:2e: 94:4d:de:1c:bf:9b:8b:0e:87:64:68:a0:aa:7e:7f:9e:e3:2e: 8c:f3:0d:a4:61:c1:90:95:82:e8:07:68:44:71:da:db:aa:ce: 0d:10:4c:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSCSH5bfcfto9f5FRiKxIqo8ZGcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNjAzMDExNDE1NDFaFw0yNjAzMDQxNjQ3NDFaMDMxMTAvBgNV BAMTKEZFQjQ3NzdENjJENEY0RTAzRTJFMUU3QkUxMkREMzRFRkY5M0E1MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNNtn0zfFg/o9zzySzf8auIvWH iGW9pxap4lzzvE4HdASoBdsTkrG5L62boh3uLTMgVgb5svD995/7jnKpdY2VmQFi juxotb4Zna/aJvSvvMNTMa+RPMfdbVR1w1g/YjPWTf8VVBwddgvfMHgpF/Zllicg kmehbVGyaLTnSZbt/kEKN2EajMlI4Yf8s6BfdjEuYrB7hEzpoGPzVr9ZOCtvfNKJ wnXkFNTlG4pSywfLjBpHLpRDC+WhuoOd5spF/VQPOuyxTYrfJ3135g4+p73ZyHJj gA99Rh+rhTmYURI2b/cvu2AUonKj6FVbno+HYT/cBWOgyvLmv3xxGhW9ofmFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/rR3fWLU9OA+Lh574S3TTv+TpSwwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbmn1UFgORxH6NidWO362ht8RW74ZSOphvM k9cE2m+zYapujs8erBZx5EAhxO8w4ZM0/AUxs3oAh5AWyC3IzjmPiYHrsg0mFEri SPp4HBO/7hfx91GDfTgF8tT1xLXHr5YnQYJ7BbzSEPc6G4KULb/Y+A0+UmaSPyRb 5yp0BzudC+2JIwf/ruVLs4ztfisAe8tYpEtHSy2NmeuATPGUWqYCOB64SWwp4iMt UsflUnrjdAWsMyR11rZ7PbiY6mKq5MrcQoXIIUsLq2g2pX/pKhQ6XJnfmdJZLpRN 3hy/m4sOh2RooKp+f57jLozzDaRhwZCVgugHaERx2tuqzg0QTG8= -----END CERTIFICATE-----Generated at Mon Mar 2 18:49:32 2026 by rpki-client