$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft File: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft (raw, json) Hash identifier: NW/BYskOtAWIMmCjjeOS2cP2p6E0o3X8F//fb+IJ0s0= Subject key identifier: F6:AF:3B:17:B4:B7:A2:02:A6:19:6D:99:EB:AF:5F:2C:68:23:DB:DC Authority key identifier: 2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 Certificate issuer: /CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Certificate serial: 1B578E29C1E74CFB8A048A309FD88DDCB3C4D6DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft Manifest number: 012C Signing time: Thu 26 Mar 2026 06:22:20 +0000 Manifest this update: Thu 26 Mar 2026 06:17:20 +0000 Manifest next update: Sun 29 Mar 2026 14:07:20 +0000 Files and hashes: 1: 3136302e32322e36322e302f32342d3234203d3e20313439373230.roa (hash: YoRi0wh2sw9GoYCOeEcjR9q///J9GRgGfI+RYp9E7Ao=) 2: 3136302e32322e36332e302f32342d3234203d3e20313439373138.roa (hash: bvQkvMV312x+cD6F+RgPImc6lo1lROIFQ1YOPKTkJvY=) 3: 2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl (hash: V6aI44rB8EFyCRV5AaTozXwDLiyFkdT88uIOdEG/kkM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 14:07:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:57:8e:29:c1:e7:4c:fb:8a:04:8a:30:9f:d8:8d:dc:b3:c4:d6:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AD789EBFC58C1F0E4F87390781D38CB0D580210 Validity Not Before: Mar 26 06:17:20 2026 GMT Not After : Mar 29 14:07:20 2026 GMT Subject: CN=F6AF3B17B4B7A202A6196D99EBAF5F2C6823DBDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b1:74:b6:e2:2c:fb:16:80:a4:d4:fa:68:8e: 2d:f1:e2:c9:0d:7c:56:31:f6:12:a6:87:95:56:67: 83:89:a6:08:79:ef:fc:fb:15:43:78:fb:c3:a5:79: b9:99:b6:f8:54:e1:d0:e7:7c:07:79:2d:66:0e:fa: f3:dc:9f:1c:7d:82:f6:f2:ea:83:27:64:a1:26:a0: 6f:3d:eb:10:7c:21:b3:e9:32:f1:c6:d0:8f:d8:90: e8:e6:22:c9:f5:c4:24:f0:cd:62:ed:08:96:c1:86: 40:5b:19:17:a0:62:97:0e:ac:c5:e6:17:3f:5c:4c: ed:b3:f6:d5:11:1e:02:93:ff:df:f3:79:ca:99:bb: b8:f5:88:81:d1:57:c0:80:e1:65:c7:0c:f0:dd:71: 83:bd:a5:e7:94:e9:0a:d1:a7:b8:83:79:72:80:fb: 8a:cb:df:25:ec:2d:c4:cc:60:22:da:9b:0a:19:b5: 43:03:37:b9:13:7e:89:95:ec:2a:ad:18:61:68:5c: cf:60:bb:e4:b2:56:85:60:46:1d:96:da:70:f0:e2: fe:38:cc:37:2c:62:8d:16:87:e5:67:7b:39:8a:fb: d8:dc:82:f1:22:e8:eb:8b:cc:a5:08:60:11:68:6b: ac:68:35:9c:40:fa:2b:f1:30:87:52:cc:be:3e:ac: 55:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:AF:3B:17:B4:B7:A2:02:A6:19:6D:99:EB:AF:5F:2C:68:23:DB:DC X509v3 Authority Key Identifier: keyid:2A:D7:89:EB:FC:58:C1:F0:E4:F8:73:90:78:1D:38:CB:0D:58:02:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2AD789EBFC58C1F0E4F87390781D38CB0D580210.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/0/2AD789EBFC58C1F0E4F87390781D38CB0D580210.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:ef:df:e4:3b:8a:77:9e:fb:6a:e1:5d:3d:e4:30:00:4c:d5: 96:da:14:88:97:59:6f:8e:c9:f6:02:ac:96:4a:60:87:99:42: 21:31:55:c2:e5:b1:87:d6:06:75:23:43:f9:4a:21:bd:5e:02: e2:80:0f:99:01:8e:54:9d:68:29:cc:44:8f:9b:78:30:0c:1e: f7:10:76:2f:4d:44:f2:9b:1e:23:bd:8a:77:0f:ba:b0:d7:f3: 4b:c9:07:01:94:d5:dc:c8:48:fa:83:5d:0d:1c:89:af:38:b1: c1:6a:d9:81:a6:73:fe:ad:af:57:9c:61:59:f8:d9:43:47:df: df:d6:37:28:0d:73:2c:ed:d1:81:e4:15:68:18:c4:df:29:15: 0d:69:a7:a6:27:68:23:8c:7b:64:45:a0:7b:ef:6c:c8:ed:bd: 8a:da:e7:18:f5:9a:51:d9:c0:0e:c7:1e:d5:56:40:c7:9e:b5: d4:f4:ca:1a:f8:53:0a:bc:a4:d3:1f:fb:bf:90:6d:a6:19:f4: 57:11:02:0a:0d:82:ce:3d:10:2b:58:19:0d:7e:7b:7b:70:5a: 72:cd:c1:16:8c:69:60:e9:db:32:c3:52:36:0d:ef:b3:94:e3: 49:58:05:18:4b:b4:34:d6:5c:14:ab:f4:69:c4:fa:aa:a4:09: e3:7f:4c:fc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG1eOKcHnTPuKBIown9iN3LPE1t0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0Iw RDU4MDIxMDAeFw0yNjAzMjYwNjE3MjBaFw0yNjAzMjkxNDA3MjBaMDMxMTAvBgNV BAMTKEY2QUYzQjE3QjRCN0EyMDJBNjE5NkQ5OUVCQUY1RjJDNjgyM0RCREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sXS24iz7FoCk1Ppoji3x4skN fFYx9hKmh5VWZ4OJpgh57/z7FUN4+8OlebmZtvhU4dDnfAd5LWYO+vPcnxx9gvby 6oMnZKEmoG896xB8IbPpMvHG0I/YkOjmIsn1xCTwzWLtCJbBhkBbGRegYpcOrMXm Fz9cTO2z9tURHgKT/9/zecqZu7j1iIHRV8CA4WXHDPDdcYO9peeU6QrRp7iDeXKA +4rL3yXsLcTMYCLamwoZtUMDN7kTfomV7CqtGGFoXM9gu+SyVoVgRh2W2nDw4v44 zDcsYo0Wh+VnezmK+9jcgvEi6OuLzKUIYBFoa6xoNZxA+ivxMIdSzL4+rFWtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9q87F7S3ogKmGW2Z669fLGgj29wwHwYDVR0j BBgwFoAUKteJ6/xYwfDk+HOQeB04yw1YAhAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMC8yQUQ3ODlFQkZD NThDMUYwRTRGODczOTA3ODFEMzhDQjBENTgwMjEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4Q0IwRDU4 MDIxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzAvMkFENzg5RUJGQzU4QzFGMEU0Rjg3MzkwNzgxRDM4 Q0IwRDU4MDIxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHTv3+Q7inee+2rhXT3kMABM1ZbaFIiXWW+O yfYCrJZKYIeZQiExVcLlsYfWBnUjQ/lKIb1eAuKAD5kBjlSdaCnMRI+beDAMHvcQ di9NRPKbHiO9incPurDX80vJBwGU1dzISPqDXQ0cia84scFq2YGmc/6tr1ecYVn4 2UNH39/WNygNcyzt0YHkFWgYxN8pFQ1pp6YnaCOMe2RFoHvvbMjtvYra5xj1mlHZ wA7HHtVWQMeetdT0yhr4Uwq8pNMf+7+QbaYZ9FcRAgoNgs49ECtYGQ1+e3twWnLN wRaMaWDp2zLDUjYN77OU40lYBRhLtDTWXBSr9GnE+qqkCeN/TPw= -----END CERTIFICATE-----Generated at Thu Mar 26 12:24:21 2026 by rpki-client