$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: cFqRNMDViKp0UAv6rA3xNei1XlIpW/5+wbw1adAWD14= Subject key identifier: F5:69:3E:4B:E7:08:C8:4E:E5:D4:6F:F7:89:93:5D:44:E7:5E:CD:B5 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 4460275B54A7634BC237E98379C3DA6EAE9A823F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 0553 Signing time: Sat 28 Feb 2026 22:30:56 +0000 Manifest this update: Sat 28 Feb 2026 22:25:56 +0000 Manifest next update: Tue 03 Mar 2026 23:30:56 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: 89CQN+9ADl6QvlIqK2rkeuAvimCntZ+tG9Ka3khOFFE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 23:30:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:60:27:5b:54:a7:63:4b:c2:37:e9:83:79:c3:da:6e:ae:9a:82:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Feb 28 22:25:56 2026 GMT Not After : Mar 3 23:30:56 2026 GMT Subject: CN=F5693E4BE708C84EE5D46FF789935D44E75ECDB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:67:29:26:43:88:e5:36:e9:9d:91:50:de:70: b6:e5:7d:91:8f:a8:6d:1f:d9:2e:70:14:00:b1:0a: 48:cc:72:4d:03:62:4e:c0:76:b8:87:02:42:0b:a7: 37:47:52:af:95:b3:b4:20:e0:65:3c:9b:df:c9:71: a6:de:4f:8d:36:ed:3b:64:a8:b0:06:45:1b:eb:4c: 6b:1f:ff:8a:8c:54:a9:72:25:fe:35:98:31:d5:4e: a8:39:c2:78:aa:2c:1a:e4:35:ca:79:81:af:d6:e9: 93:3f:b7:0d:f3:f3:96:ce:b1:83:44:8d:1c:43:10: 7d:5c:13:48:84:6d:1e:66:cd:26:b8:92:52:2a:2b: 6e:19:c3:8d:eb:ba:57:aa:cd:36:6c:97:8c:69:0a: 5e:68:d6:c4:88:aa:e5:b9:65:18:5f:10:fc:18:15: 71:81:e7:89:04:0a:2d:90:a7:a4:02:34:2c:f2:79: a0:79:9e:de:b6:1b:e5:08:ec:2f:0c:60:85:c6:3b: fb:02:97:6a:e1:c4:a2:34:d7:04:a5:d6:da:09:35: 40:62:fb:cc:f5:3d:75:7f:f2:af:6c:93:6b:8e:c6: 65:13:f9:6e:0e:b3:34:a7:46:61:d3:81:db:5a:b8: 92:36:af:2b:8b:aa:0b:c6:8e:2f:06:45:19:35:bc: 81:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:69:3E:4B:E7:08:C8:4E:E5:D4:6F:F7:89:93:5D:44:E7:5E:CD:B5 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:fb:ca:51:50:6a:16:c7:68:17:b3:18:7f:52:fb:1c:50:51: 83:36:fa:f6:b5:17:ea:a8:9c:9d:31:63:5f:ea:5c:2d:6c:ef: e5:8e:57:96:2c:df:f9:bf:30:59:06:3f:81:1c:b4:13:8b:18: 28:55:22:d6:0f:c7:91:2d:89:12:6a:01:41:87:9d:a2:7b:4a: d0:ef:9d:94:46:c4:55:a8:15:36:49:20:7e:d1:92:44:97:5c: 62:fa:ac:cc:ff:a9:3f:67:66:a9:62:9b:e7:22:5b:b9:23:df: 43:4c:96:a7:12:fa:d1:db:1e:1f:e4:18:08:33:4d:a4:35:1c: 3b:5f:ef:0b:8a:41:f7:11:a3:05:4e:25:54:41:70:0d:0f:e1: f5:f9:88:c4:9b:db:a4:76:ed:90:25:4a:5c:02:b0:05:7d:58: 91:ef:bc:8f:dc:c9:0c:a6:3d:b8:b4:c1:e8:28:61:59:3d:2c: 34:ce:43:16:86:76:f4:09:4c:08:36:e8:35:1b:0f:70:15:23: e0:1e:00:c0:3d:99:6f:a2:7b:5b:f6:59:51:41:f2:e9:18:95: c1:0e:5d:59:5b:9c:58:15:fb:fc:ec:40:d1:07:09:fb:b3:2c: e0:18:6b:02:ab:94:5a:0e:65:9d:f8:02:8e:8d:7c:7d:0e:31: 65:60:d1:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURGAnW1SnY0vCN+mDecPabq6agj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNjAyMjgyMjI1NTZaFw0yNjAzMDMyMzMwNTZaMDMxMTAvBgNV BAMTKEY1NjkzRTRCRTcwOEM4NEVFNUQ0NkZGNzg5OTM1RDQ0RTc1RUNEQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXZykmQ4jlNumdkVDecLblfZGP qG0f2S5wFACxCkjMck0DYk7AdriHAkILpzdHUq+Vs7Qg4GU8m9/JcabeT4027Ttk qLAGRRvrTGsf/4qMVKlyJf41mDHVTqg5wniqLBrkNcp5ga/W6ZM/tw3z85bOsYNE jRxDEH1cE0iEbR5mzSa4klIqK24Zw43ruleqzTZsl4xpCl5o1sSIquW5ZRhfEPwY FXGB54kECi2Qp6QCNCzyeaB5nt62G+UI7C8MYIXGO/sCl2rhxKI01wSl1toJNUBi +8z1PXV/8q9sk2uOxmUT+W4OszSnRmHTgdtauJI2ryuLqgvGji8GRRk1vIGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9Wk+S+cIyE7l1G/3iZNdROdezbUwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL/7ylFQahbHaBezGH9S+xxQUYM2+va1F+qo nJ0xY1/qXC1s7+WOV5Ys3/m/MFkGP4EctBOLGChVItYPx5EtiRJqAUGHnaJ7StDv nZRGxFWoFTZJIH7RkkSXXGL6rMz/qT9nZqlim+ciW7kj30NMlqcS+tHbHh/kGAgz TaQ1HDtf7wuKQfcRowVOJVRBcA0P4fX5iMSb26R27ZAlSlwCsAV9WJHvvI/cyQym Pbi0wegoYVk9LDTOQxaGdvQJTAg26DUbD3AVI+AeAMA9mW+ie1v2WVFB8ukYlcEO XVlbnFgV+/zsQNEHCfuzLOAYawKrlFoOZZ34Ao6NfH0OMWVg0Zs= -----END CERTIFICATE-----Generated at Mon Mar 2 01:13:05 2026 by rpki-client