$ rpki-client -vvf repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft File: 2B90BB17E78B62C15179029C6583E42BD7E18277.mft (raw, json) Hash identifier: JYvY0UsdPKEObqiPdiuDKeyVM05vw3ffSspQUqYL3No= Subject key identifier: 30:89:E5:92:97:1F:67:24:89:05:97:6E:37:D1:11:16:CF:A2:F7:B6 Authority key identifier: 2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 Certificate issuer: /CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Certificate serial: 04AD90542503A5C783E0CBDA2293A39D9CB0FDF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject info access: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft Manifest number: CF Signing time: Sun 01 Mar 2026 13:50:43 +0000 Manifest this update: Sun 01 Mar 2026 13:45:43 +0000 Manifest next update: Wed 04 Mar 2026 17:12:43 +0000 Files and hashes: 1: 3130332e38302e3231342e302f32332d3233203d3e20313533303932.roa (hash: /bOtG6Hq4cCxQBrZ1Nbmvs+Hrm8cpxmM7Q2j13q5aYY=) 2: 2B90BB17E78B62C15179029C6583E42BD7E18277.crl (hash: VnvYXWpkemhVhdXwX37MP/oTF82cuaT2vpK26Ho9e0U=) 3: 3130332e38302e3231342e302f32342d3234203d3e20313533303932.roa (hash: E7LmVcTtrOc0QLca3OKgAjrGPUq24WcKvpibpJhqwMo=) 4: 3130332e38302e3231352e302f32342d3234203d3e20313533303932.roa (hash: E4Gvpo5D/NeUbbz+zUDpV78niTppp2APH+i1gYLD2PM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 17:12:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:ad:90:54:25:03:a5:c7:83:e0:cb:da:22:93:a3:9d:9c:b0:fd:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B90BB17E78B62C15179029C6583E42BD7E18277 Validity Not Before: Mar 1 13:45:43 2026 GMT Not After : Mar 4 17:12:43 2026 GMT Subject: CN=3089E592971F67248905976E37D11116CFA2F7B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:86:ae:3c:1b:4b:66:69:3e:7e:db:49:e3:a1: ee:85:1a:e7:6f:41:d7:8a:ac:8c:74:14:12:af:20: 6c:4b:58:b8:45:9d:4c:15:b4:4f:31:f2:07:d7:9f: 4a:64:22:74:00:3e:0d:1b:09:02:90:81:88:9b:e5: 9c:92:9c:ee:d9:ed:2c:5c:65:6d:84:e5:86:c4:fa: 8d:72:27:db:3b:de:01:36:6b:76:97:92:9a:97:77: cd:e6:b4:66:03:ff:e5:6c:ca:20:26:df:51:4c:65: 2e:68:93:e1:49:c3:03:f9:ca:88:6a:24:c5:42:0c: f5:cb:68:91:69:2f:78:45:81:59:97:06:54:1b:63: b5:82:45:93:52:b8:d4:da:c9:c5:9f:02:f5:73:92: 74:ca:19:74:61:66:17:71:80:4b:d8:b6:3d:de:94: 0e:4b:9b:73:f3:77:8d:25:ba:41:02:4d:ce:7b:f5: d4:cd:88:00:50:b3:73:99:9b:22:b8:9e:78:7e:9d: c3:80:eb:e1:ee:fd:0d:e9:9a:d3:ce:49:c5:b7:76: 26:7a:47:72:bb:4b:be:3a:6a:76:e4:2c:a8:71:17: 40:79:03:90:39:52:d5:45:5c:5a:4b:7c:20:2c:e6: f2:c6:95:8a:28:52:d7:7d:47:9f:fb:3c:07:ff:66: fb:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:89:E5:92:97:1F:67:24:89:05:97:6E:37:D1:11:16:CF:A2:F7:B6 X509v3 Authority Key Identifier: keyid:2B:90:BB:17:E7:8B:62:C1:51:79:02:9C:65:83:E4:2B:D7:E1:82:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B90BB17E78B62C15179029C6583E42BD7E18277.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de5a5e6d-91ee-4497-b417-8d32f653e4b0/0/2B90BB17E78B62C15179029C6583E42BD7E18277.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:20:fc:7d:c1:40:eb:8c:6d:7b:32:28:2d:fa:da:65:51:c1: ca:00:da:20:e4:ee:54:78:e7:48:7a:78:45:18:82:dd:fc:46: fe:db:b3:10:fe:fd:da:99:a6:a8:a4:7f:6e:a7:6c:16:97:89: 82:81:48:8c:3e:a3:d3:fe:00:cf:64:ab:25:cc:32:26:64:a9: 3c:22:d3:cc:92:2b:03:62:c1:8b:92:2c:2c:d9:69:da:f2:66: 24:af:54:49:d1:20:04:ea:9a:3b:33:5c:a1:de:4a:68:72:51: 8b:6f:c7:b4:96:17:c7:de:ad:38:d3:fc:03:3b:51:0e:cc:f3: 87:66:b5:28:20:40:9c:77:f9:f7:d0:a4:3e:2c:42:e2:78:92: c2:c9:46:01:67:1d:c7:5b:e1:73:f0:78:ca:cc:fe:11:ac:78: 57:f5:4b:db:f3:de:06:c2:21:ee:cb:a1:41:b9:fe:d1:a3:76: df:b1:e3:7d:28:44:22:27:a2:3e:35:0b:db:35:d4:33:08:ef: ef:eb:37:11:0e:b6:58:44:1a:d9:57:26:25:a6:db:4b:32:a1: 37:8d:b3:58:d4:95:ff:b5:6c:c8:46:59:61:6b:9d:62:5d:ea: f9:57:70:9e:34:65:2e:3f:87:09:7a:20:9f:4a:b1:d8:4e:6e: 7b:03:3d:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBK2QVCUDpceD4MvaIpOjnZyw/fYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJE N0UxODI3NzAeFw0yNjAzMDExMzQ1NDNaFw0yNjAzMDQxNzEyNDNaMDMxMTAvBgNV BAMTKDMwODlFNTkyOTcxRjY3MjQ4OTA1OTc2RTM3RDExMTE2Q0ZBMkY3QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuhq48G0tmaT5+20njoe6FGudv QdeKrIx0FBKvIGxLWLhFnUwVtE8x8gfXn0pkInQAPg0bCQKQgYib5ZySnO7Z7Sxc ZW2E5YbE+o1yJ9s73gE2a3aXkpqXd83mtGYD/+VsyiAm31FMZS5ok+FJwwP5yohq JMVCDPXLaJFpL3hFgVmXBlQbY7WCRZNSuNTaycWfAvVzknTKGXRhZhdxgEvYtj3e lA5Lm3Pzd40lukECTc579dTNiABQs3OZmyK4nnh+ncOA6+Hu/Q3pmtPOScW3diZ6 R3K7S746anbkLKhxF0B5A5A5UtVFXFpLfCAs5vLGlYooUtd9R5/7PAf/ZvtnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMInlkpcfZySJBZduN9ERFs+i97YwHwYDVR0j BBgwFoAUK5C7F+eLYsFReQKcZYPkK9fhgncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZTVhNWU2ZC05MWVlLTQ0OTctYjQxNy04ZDMyZjY1M2U0YjAvMC8yQjkwQkIxN0U3 OEI2MkMxNTE3OTAyOUM2NTgzRTQyQkQ3RTE4Mjc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0MkJEN0Ux ODI3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGU1YTVlNmQtOTFlZS00NDk3LWI0 MTctOGQzMmY2NTNlNGIwLzAvMkI5MEJCMTdFNzhCNjJDMTUxNzkwMjlDNjU4M0U0 MkJEN0UxODI3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABEg/H3BQOuMbXsyKC362mVRwcoA2iDk7lR4 50h6eEUYgt38Rv7bsxD+/dqZpqikf26nbBaXiYKBSIw+o9P+AM9kqyXMMiZkqTwi 08ySKwNiwYuSLCzZadryZiSvVEnRIATqmjszXKHeSmhyUYtvx7SWF8ferTjT/AM7 UQ7M84dmtSggQJx3+ffQpD4sQuJ4ksLJRgFnHcdb4XPweMrM/hGseFf1S9vz3gbC Ie7LoUG5/tGjdt+x430oRCInoj41C9s11DMI7+/rNxEOtlhEGtlXJiWm20syoTeN s1jUlf+1bMhGWWFrnWJd6vlXcJ40ZS4/hwl6IJ9KsdhObnsDPeQ= -----END CERTIFICATE-----Generated at Mon Mar 2 17:44:13 2026 by rpki-client