$ rpki-client -vvf repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft File: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft (raw, json) Hash identifier: ceOTNrlc9rpW3m/cdVvblo5eC2B2WSzyLlb+lhFVwUo= Subject key identifier: 2A:41:B8:13:08:86:02:86:F1:49:B8:B9:ED:57:E8:09:62:80:4E:F3 Authority key identifier: 2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 Certificate issuer: /CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Certificate serial: 30F643128CDB09EE7870CC43650EB40E0D065BC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft Manifest number: 0234 Signing time: Sat 28 Feb 2026 15:01:04 +0000 Manifest this update: Sat 28 Feb 2026 14:56:04 +0000 Manifest next update: Wed 04 Mar 2026 01:46:04 +0000 Files and hashes: 1: 3130332e3133382e31302e302f32342d3234203d3e20313338383335.roa (hash: G/xb7tdZk9UZaq4hfvb/m2IU6lYeHr5mMwL3BOuVZMU=) 2: 2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl (hash: IfVxsMLJtPVc19f/Yq3aamkhdLciWHC41nM45VQMR0k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 01:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:f6:43:12:8c:db:09:ee:78:70:cc:43:65:0e:b4:0e:0d:06:5b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D23C629ED956F1736B7DAECCD2AAF31C4F17C26 Validity Not Before: Feb 28 14:56:04 2026 GMT Not After : Mar 4 01:46:04 2026 GMT Subject: CN=2A41B81308860286F149B8B9ED57E80962804EF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:2c:17:6e:21:e6:90:1b:1e:c6:d3:34:35:35: f4:09:70:f0:74:4d:f3:16:df:77:83:37:4d:cc:6f: 3f:05:d2:de:73:78:7a:6a:b0:c2:e0:86:01:97:59: 7c:76:24:d3:d0:96:1b:08:84:9c:13:57:a9:9a:2a: 3a:25:07:18:82:0b:16:70:d3:d9:c2:84:d3:78:cb: 93:82:92:44:51:78:95:f1:78:bb:2b:d6:9a:88:8a: df:6c:bb:eb:03:bd:7d:02:f7:bd:e4:e2:f1:c3:0e: 5b:fd:01:d4:36:41:dd:07:a4:b2:6b:50:72:a3:d2: c7:af:3f:9f:dc:8e:b0:55:d8:a6:5f:95:a8:33:03: e8:65:65:87:c6:17:50:49:5c:e8:55:39:8e:9e:80: 4c:92:d1:43:7c:ab:22:f0:e3:e2:07:cc:b8:ca:ba: 4f:05:73:5f:57:9a:9c:6e:a7:7a:38:d9:c1:54:89: 74:4c:e3:6c:4d:58:4d:b2:f9:0f:ce:29:92:84:75: 96:d5:1d:0e:f8:39:58:5c:2c:27:7b:f7:e6:48:63: 77:7c:65:99:9e:0a:cb:f6:4f:e4:66:c1:2c:13:17: 1c:9e:bf:2f:13:1b:66:89:e6:b0:26:fa:23:73:b2: 33:c6:ae:b6:cf:d5:02:9f:d0:c3:9e:08:6c:59:a9: 4d:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:41:B8:13:08:86:02:86:F1:49:B8:B9:ED:57:E8:09:62:80:4E:F3 X509v3 Authority Key Identifier: keyid:2D:23:C6:29:ED:95:6F:17:36:B7:DA:EC:CD:2A:AF:31:C4:F1:7C:26 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d868cf22-d029-45e2-9e21-d9892d3af7a6/0/2D23C629ED956F1736B7DAECCD2AAF31C4F17C26.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:4e:6e:c8:cf:43:7f:5c:1e:35:59:47:12:1f:65:c0:c9:58: fa:e8:a7:6a:52:5e:8d:74:39:d2:bd:f9:15:37:1f:e6:f1:8f: d7:b6:11:fa:5e:17:bb:c6:1c:aa:3b:33:1b:5d:38:52:5b:c3: c5:7a:23:c3:ee:3e:8c:01:a7:8e:ad:7b:40:c0:8f:33:aa:dc: da:ad:b6:1f:f5:63:f7:d7:64:76:ad:86:43:a1:1e:cb:c6:91: a3:37:22:5d:09:b7:bd:a7:9f:47:56:f7:0b:b3:a1:30:67:ce: d6:61:fb:2b:89:e8:0e:66:2d:2f:be:c1:ea:e0:e0:54:fb:6b: 56:d8:67:46:d3:f5:0b:44:19:d5:ac:a1:ae:96:66:5e:6f:5e: b2:dc:f8:ca:f0:2f:0f:9b:4b:8f:0d:17:ca:c3:27:56:6a:28: ab:71:06:e2:c9:d1:e8:86:25:a2:97:50:6f:92:2f:3c:54:71: 08:3a:93:2e:12:68:55:51:2a:32:85:46:0a:6b:b5:44:78:29: fc:8d:91:91:64:8d:14:ff:2d:e6:17:38:4f:9d:b2:4e:75:05: 88:32:d3:96:50:f2:94:e6:be:57:d7:e3:66:15:a7:87:8a:e4: 53:1c:ad:e3:d3:f6:20:c3:9a:08:66:37:06:c7:ca:34:97:13: e0:89:0d:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMPZDEozbCe54cMxDZQ60Dg0GW8AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFD NEYxN0MyNjAeFw0yNjAyMjgxNDU2MDRaFw0yNjAzMDQwMTQ2MDRaMDMxMTAvBgNV BAMTKDJBNDFCODEzMDg4NjAyODZGMTQ5QjhCOUVENTdFODA5NjI4MDRFRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCULBduIeaQGx7G0zQ1NfQJcPB0 TfMW33eDN03Mbz8F0t5zeHpqsMLghgGXWXx2JNPQlhsIhJwTV6maKjolBxiCCxZw 09nChNN4y5OCkkRReJXxeLsr1pqIit9su+sDvX0C973k4vHDDlv9AdQ2Qd0HpLJr UHKj0sevP5/cjrBV2KZflagzA+hlZYfGF1BJXOhVOY6egEyS0UN8qyLw4+IHzLjK uk8Fc19Xmpxup3o42cFUiXRM42xNWE2y+Q/OKZKEdZbVHQ74OVhcLCd79+ZIY3d8 ZZmeCsv2T+RmwSwTFxyevy8TG2aJ5rAm+iNzsjPGrrbP1QKf0MOeCGxZqU0nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKkG4EwiGAobxSbi57VfoCWKATvMwHwYDVR0j BBgwFoAULSPGKe2Vbxc2t9rszSqvMcTxfCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODY4Y2YyMi1kMDI5LTQ1ZTItOWUyMS1kOTg5MmQzYWY3YTYvMC8yRDIzQzYyOUVE OTU2RjE3MzZCN0RBRUNDRDJBQUYzMUM0RjE3QzI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFGMzFDNEYx N0MyNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg2OGNmMjItZDAyOS00NWUyLTll MjEtZDk4OTJkM2FmN2E2LzAvMkQyM0M2MjlFRDk1NkYxNzM2QjdEQUVDQ0QyQUFG MzFDNEYxN0MyNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGlObsjPQ39cHjVZRxIfZcDJWProp2pSXo10 OdK9+RU3H+bxj9e2EfpeF7vGHKo7MxtdOFJbw8V6I8PuPowBp46te0DAjzOq3Nqt th/1Y/fXZHathkOhHsvGkaM3Il0Jt72nn0dW9wuzoTBnztZh+yuJ6A5mLS++werg 4FT7a1bYZ0bT9QtEGdWsoa6WZl5vXrLc+MrwLw+bS48NF8rDJ1ZqKKtxBuLJ0eiG JaKXUG+SLzxUcQg6ky4SaFVRKjKFRgprtUR4KfyNkZFkjRT/LeYXOE+dsk51BYgy 05ZQ8pTmvlfX42YVp4eK5FMcrePT9iDDmghmNwbHyjSXE+CJDTU= -----END CERTIFICATE-----Generated at Mon Mar 2 02:07:56 2026 by rpki-client