$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: WtxSW8gkDvnxOF+if3RSksB5cBbfVMwZKifPYVXa6nM= Subject key identifier: 66:B5:18:12:AD:DF:1F:12:99:FE:B3:76:7F:A5:17:84:B3:1F:37:07 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 7EE7F245B08C940076ED4911EB6E33B37A60B92A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 029B Signing time: Sat 28 Feb 2026 08:22:07 +0000 Manifest this update: Sat 28 Feb 2026 08:17:07 +0000 Manifest next update: Tue 03 Mar 2026 09:08:07 +0000 Files and hashes: 1: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: ifNEjfQukBEwJO7RYa04ZBgXH2R2g+wL0PbnjmkhA+U=) 2: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) 4: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 03 Mar 2026 09:08:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:e7:f2:45:b0:8c:94:00:76:ed:49:11:eb:6e:33:b3:7a:60:b9:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Feb 28 08:17:07 2026 GMT Not After : Mar 3 09:08:07 2026 GMT Subject: CN=66B51812ADDF1F1299FEB3767FA51784B31F3707 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:4d:ba:04:3f:54:18:50:61:7d:c0:1b:62:e8: 12:7f:7e:65:d5:75:64:54:5e:70:7c:6d:99:c1:09: 9d:52:83:c3:33:ab:43:dd:c1:2b:b2:6b:56:a3:b5: bb:ed:a0:0c:18:e2:53:c0:42:49:25:28:9d:3c:d7: 98:19:4e:e3:18:0b:c3:6b:00:ce:e2:93:bb:79:fe: d0:0d:4d:82:f8:16:eb:e0:a7:6e:b9:5a:e1:a4:ee: b3:7b:70:39:f2:89:f0:c5:77:9b:93:d2:08:31:b3: ae:bf:44:14:e2:f4:65:d5:5f:c0:22:89:4c:09:96: a4:d0:fa:1b:d6:1f:87:4d:13:fb:80:8e:07:c7:f0: 44:7c:c5:3e:72:39:3b:67:df:87:7f:2e:35:c3:ea: 71:85:c7:45:b9:a9:ba:71:e8:c6:8e:26:29:ba:79: 56:4d:d1:28:6c:84:c3:bc:93:1d:5c:09:40:c5:f0: 44:11:9a:89:91:9c:c6:1c:05:fe:f9:85:15:68:af: 56:fa:3b:3b:62:29:37:53:89:58:48:b0:32:2a:73: 64:cd:72:6b:4b:d9:58:d3:63:ee:3f:53:33:b0:c6: 2c:65:55:00:81:69:a8:d1:ab:03:12:91:76:0f:b9: be:98:f6:5d:b5:11:9f:0b:31:b0:58:20:64:30:d3: cb:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:B5:18:12:AD:DF:1F:12:99:FE:B3:76:7F:A5:17:84:B3:1F:37:07 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:be:02:5a:36:ff:ff:07:14:fa:ec:32:97:f5:26:2b:61:56: 40:d7:cf:b4:0d:33:eb:62:85:81:20:fe:24:4c:de:72:7d:07: 32:48:3e:c2:08:ff:11:24:44:3b:8f:51:1b:09:ba:36:45:79: bf:df:cc:97:08:2c:80:d3:ab:8a:05:15:25:5f:32:30:b9:0d: 26:8d:8d:6e:69:8e:86:1b:6a:c8:60:a8:3c:38:cc:8d:58:24: 05:43:2b:5d:4c:7e:fa:ed:db:e5:ee:4a:0c:2e:b7:14:17:41: 72:fe:d5:5f:ac:37:61:ec:72:53:f6:74:2c:ae:10:f7:4c:cd: 1d:69:62:04:2a:df:12:df:a7:b5:2a:52:10:4b:c6:97:43:b7: 8d:7e:ef:ab:19:9b:3b:0b:e4:20:3e:67:d7:c4:ac:2a:42:10: f8:98:dd:dc:00:a5:86:f5:b4:ac:4d:3d:b3:41:19:d4:51:b6: 26:70:d3:b0:05:18:93:c8:2e:75:1d:73:54:a0:a9:45:45:05: 52:4a:d1:b9:0a:b6:3a:6c:2f:90:ce:6c:3f:eb:38:27:cf:77: 92:5f:b0:f0:d8:d9:b0:59:42:7f:af:fa:5b:9f:12:12:f8:c2: f0:5d:0d:a6:0f:c5:04:f2:6d:ea:d6:c9:f5:1b:c6:61:6c:6a: bf:55:3b:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfufyRbCMlAB27UkR624zs3pguSowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNjAyMjgwODE3MDdaFw0yNjAzMDMwOTA4MDdaMDMxMTAvBgNV BAMTKDY2QjUxODEyQURERjFGMTI5OUZFQjM3NjdGQTUxNzg0QjMxRjM3MDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+TboEP1QYUGF9wBti6BJ/fmXV dWRUXnB8bZnBCZ1Sg8Mzq0PdwSuya1ajtbvtoAwY4lPAQkklKJ0815gZTuMYC8Nr AM7ik7t5/tANTYL4Fuvgp265WuGk7rN7cDnyifDFd5uT0ggxs66/RBTi9GXVX8Ai iUwJlqTQ+hvWH4dNE/uAjgfH8ER8xT5yOTtn34d/LjXD6nGFx0W5qbpx6MaOJim6 eVZN0ShshMO8kx1cCUDF8EQRmomRnMYcBf75hRVor1b6OztiKTdTiVhIsDIqc2TN cmtL2VjTY+4/UzOwxixlVQCBaajRqwMSkXYPub6Y9l21EZ8LMbBYIGQw08sBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZrUYEq3fHxKZ/rN2f6UXhLMfNwcwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJm+Alo2//8HFPrsMpf1JithVkDXz7QNM+ti hYEg/iRM3nJ9BzJIPsII/xEkRDuPURsJujZFeb/fzJcILIDTq4oFFSVfMjC5DSaN jW5pjoYbashgqDw4zI1YJAVDK11Mfvrt2+XuSgwutxQXQXL+1V+sN2HsclP2dCyu EPdMzR1pYgQq3xLfp7UqUhBLxpdDt41+76sZmzsL5CA+Z9fErCpCEPiY3dwApYb1 tKxNPbNBGdRRtiZw07AFGJPILnUdc1SgqUVFBVJK0bkKtjpsL5DObD/rOCfPd5Jf sPDY2bBZQn+v+lufEhL4wvBdDaYPxQTyberWyfUbxmFsar9VO2Y= -----END CERTIFICATE-----Generated at Mon Mar 2 09:48:36 2026 by rpki-client