$ rpki-client -vvf repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft File: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft (raw, json) Hash identifier: eMefcReEp8kQ9Ms0FKF48DJ3BQOKW1F+knLnP0ZiDzE= Subject key identifier: AB:5A:BE:96:F6:81:F5:F5:0A:1C:90:36:6A:13:E3:E9:B3:7D:8C:3B Authority key identifier: 2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 Certificate issuer: /CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Certificate serial: 496FAE381AD9787D9A6204897365D0C0C93E7EEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft Manifest number: 0528 Signing time: Sun 01 Mar 2026 03:51:35 +0000 Manifest this update: Sun 01 Mar 2026 03:46:35 +0000 Manifest next update: Wed 04 Mar 2026 13:55:35 +0000 Files and hashes: 1: 2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl (hash: pCyRv624RYSMmbeUrUyUkfZHUf9J1/iDJh0S5w7lnb8=) 2: 3130332e3133372e33382e302f32332d3234203d3e20313338383232.roa (hash: mA/rP0hr8/EieVP2HKsGbfcjdkP2Kd8or4Jc67/Y7I0=) 3: 323430343a613463303a3a2f33322d3438203d3e20313338383232.roa (hash: jd8RzIV4pb6xOSx8M2iJByCvMa7m6mddhFLRaUaFvoI=) 4: 323430343a613463303a666163653a3a2f34382d3438203d3e20313338383232.roa (hash: Ymw3mKUJLuc3UElUh0Nq2GfPGIEzD27CcOXD4JJbHT8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 04 Mar 2026 13:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:6f:ae:38:1a:d9:78:7d:9a:62:04:89:73:65:d0:c0:c9:3e:7e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4 Validity Not Before: Mar 1 03:46:35 2026 GMT Not After : Mar 4 13:55:35 2026 GMT Subject: CN=AB5ABE96F681F5F50A1C90366A13E3E9B37D8C3B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:8d:ce:e7:70:7a:eb:2b:bc:48:2b:3d:f9:4d: 5f:33:64:0a:48:52:a9:26:2b:c8:5a:1f:92:75:77: 7e:d7:5f:46:a6:33:18:bf:a3:b8:38:3e:c9:99:20: da:af:d7:2e:37:10:81:b4:2e:c8:77:4c:16:7f:31: e0:ff:19:16:c8:0d:3d:48:d1:f1:4c:a6:0f:0a:4a: 8b:9a:33:ab:58:21:69:d7:0f:9e:56:fe:e9:99:7e: 9a:05:2d:d1:23:f0:88:6b:40:c5:0f:a8:e5:1a:79: 90:81:23:4a:a8:72:fb:62:8b:2a:29:59:47:74:69: 49:49:ff:f3:d0:42:91:43:85:e3:d7:72:c9:c9:7a: 63:37:a1:c7:aa:f5:eb:b6:14:ee:a9:dc:7d:43:d1: 1b:ee:8b:88:f0:ca:86:d3:b4:0a:77:f5:9c:72:64: cb:61:0b:f0:f0:f3:45:ab:7a:3f:d1:06:b6:56:65: 12:a1:e4:1a:b7:05:ac:88:88:8a:ef:a2:b2:fc:7a: 7a:fe:5e:ed:cf:a8:3c:1a:09:4b:f3:33:a7:68:49: 0b:c5:c2:38:54:bb:b2:7e:aa:18:88:20:a4:8a:34: e9:6c:20:6c:08:54:a8:d0:14:88:03:0e:1c:6f:ba: c3:88:8d:59:80:6e:af:70:35:f8:d2:26:b2:d8:79: 60:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:5A:BE:96:F6:81:F5:F5:0A:1C:90:36:6A:13:E3:E9:B3:7D:8C:3B X509v3 Authority Key Identifier: keyid:2D:EC:7D:B2:A5:C9:62:CF:A5:3D:57:8D:EA:7D:C8:43:83:A6:33:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3bbf1da-e317-48ef-ad6d-fe8a8bf08400/0/2DEC7DB2A5C962CFA53D578DEA7DC84383A633D4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:45:2d:17:24:0d:ff:cd:7a:ff:e4:4b:c4:a5:d0:d0:b8:60: 22:ac:6c:f3:93:d4:bc:d6:11:ec:b9:32:91:36:86:27:4a:b2: f7:7d:35:5f:95:0f:c1:66:d0:d9:fc:11:45:a9:6e:79:b8:55: 0c:4f:61:06:b4:5d:1b:ea:63:e0:cf:55:e2:37:cf:e5:83:e8: e8:8b:2d:20:4d:a2:89:b4:54:29:7d:0a:d4:0e:5c:3f:4a:6f: 9a:58:7a:56:59:1d:5d:02:cc:42:d1:f4:c9:78:7c:86:5d:79: 8e:c4:8f:c0:61:59:13:01:83:37:3e:9e:84:a3:57:73:8d:9d: 77:4a:1b:37:c2:48:7c:3a:92:54:26:c4:e9:6c:1e:d7:6c:84: 81:55:ef:8b:44:f5:cd:b2:35:3e:ab:1b:35:aa:aa:87:e9:ee: 35:bc:e6:d6:ca:fd:54:c6:68:77:79:4e:c3:1f:9b:9d:d3:c4: 24:7e:8d:f0:4f:98:ec:f0:8d:8b:6d:dd:ca:8f:cf:c2:cf:4a: 6c:8c:c7:dd:2c:ea:57:11:d4:bd:c7:fd:85:4c:72:57:99:98: a0:33:29:a3:f9:69:46:3a:c7:25:d8:74:90:9e:2a:bb:32:7d: 4b:85:05:3b:1d:69:54:71:74:49:4c:a1:59:6c:59:24:c9:99: 09:95:86:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSW+uOBrZeH2aYgSJc2XQwMk+fu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4 M0E2MzNENDAeFw0yNjAzMDEwMzQ2MzVaFw0yNjAzMDQxMzU1MzVaMDMxMTAvBgNV BAMTKEFCNUFCRTk2RjY4MUY1RjUwQTFDOTAzNjZBMTNFM0U5QjM3RDhDM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSjc7ncHrrK7xIKz35TV8zZApI UqkmK8haH5J1d37XX0amMxi/o7g4PsmZINqv1y43EIG0Lsh3TBZ/MeD/GRbIDT1I 0fFMpg8KSouaM6tYIWnXD55W/umZfpoFLdEj8IhrQMUPqOUaeZCBI0qocvtiiyop WUd0aUlJ//PQQpFDhePXcsnJemM3oceq9eu2FO6p3H1D0Rvui4jwyobTtAp39Zxy ZMthC/Dw80Wrej/RBrZWZRKh5Bq3BayIiIrvorL8enr+Xu3PqDwaCUvzM6doSQvF wjhUu7J+qhiIIKSKNOlsIGwIVKjQFIgDDhxvusOIjVmAbq9wNfjSJrLYeWBxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq1q+lvaB9fUKHJA2ahPj6bN9jDswHwYDVR0j BBgwFoAULex9sqXJYs+lPVeN6n3IQ4OmM9QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l M2JiZjFkYS1lMzE3LTQ4ZWYtYWQ2ZC1mZThhOGJmMDg0MDAvMC8yREVDN0RCMkE1 Qzk2MkNGQTUzRDU3OERFQTdEQzg0MzgzQTYzM0Q0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4NDM4M0E2 MzNENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTNiYmYxZGEtZTMxNy00OGVmLWFk NmQtZmU4YThiZjA4NDAwLzAvMkRFQzdEQjJBNUM5NjJDRkE1M0Q1NzhERUE3REM4 NDM4M0E2MzNENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5FLRckDf/Nev/kS8Sl0NC4YCKsbPOT1LzW Eey5MpE2hidKsvd9NV+VD8Fm0Nn8EUWpbnm4VQxPYQa0XRvqY+DPVeI3z+WD6OiL LSBNoom0VCl9CtQOXD9Kb5pYelZZHV0CzELR9Ml4fIZdeY7Ej8BhWRMBgzc+noSj V3ONnXdKGzfCSHw6klQmxOlsHtdshIFV74tE9c2yNT6rGzWqqofp7jW85tbK/VTG aHd5TsMfm53TxCR+jfBPmOzwjYtt3cqPz8LPSmyMx90s6lcR1L3H/YVMcleZmKAz KaP5aUY6xyXYdJCeKrsyfUuFBTsdaVRxdElMoVlsWSTJmQmVhoo= -----END CERTIFICATE-----Generated at Mon Mar 2 02:13:02 2026 by rpki-client