$ rpki-client -vvf repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft File: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft (raw, json) Hash identifier: NT1wAf6iFiX74boApei+bkf9r46Gpbb/qNfBVtlvNrM= Subject key identifier: CF:1B:49:AC:D0:BB:2D:A0:8E:3F:40:B5:66:78:DC:4C:C8:71:62:50 Authority key identifier: 2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F Certificate issuer: /CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Certificate serial: 7B92249398358B0C2A43B9A1A6B8B2DBDA4815A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft Manifest number: 014B Signing time: Thu 26 Mar 2026 08:41:00 +0000 Manifest this update: Thu 26 Mar 2026 08:36:00 +0000 Manifest next update: Sun 29 Mar 2026 15:05:00 +0000 Files and hashes: 1: 3130332e3135362e3131302e302f32342d3234203d3e20313431303839.roa (hash: lTXXqDvVb99/4yIHlkQaywB5MQKhKyYSxakzkjkU+yg=) 2: 2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl (hash: cZDle/RnGqYN5JDqjquLXdI6MJelU48XfBCMonKXTt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 15:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:92:24:93:98:35:8b:0c:2a:43:b9:a1:a6:b8:b2:db:da:48:15:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D517DC024CEFCFAF80CF7FD392246894E94F12F Validity Not Before: Mar 26 08:36:00 2026 GMT Not After : Mar 29 15:05:00 2026 GMT Subject: CN=CF1B49ACD0BB2DA08E3F40B56678DC4CC8716250 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:55:e0:81:c7:91:a3:3a:a3:86:84:b2:62:0b: a0:59:e3:18:bc:fa:03:7a:4f:e8:73:1e:79:d1:5e: df:7c:81:0d:49:3a:4b:3e:66:63:d6:2c:c7:0a:6c: 35:a6:9a:33:3a:e8:84:c3:4f:d3:86:4d:d1:57:b4: da:3c:33:51:dc:a6:88:c0:b4:d1:ef:86:b7:10:7d: c9:3e:b3:76:92:f8:28:ca:92:3c:0d:a4:44:ad:95: ec:58:23:b5:2e:ac:1d:59:c4:30:1f:f8:72:fb:df: 71:0d:98:85:dd:1f:95:36:57:21:e3:a3:b6:03:8b: 24:24:9e:9c:2b:f5:3a:02:cf:7e:69:07:a0:16:10: 5e:fd:01:0b:f1:09:69:40:62:59:7d:e4:d9:e9:01: fb:01:ba:89:1a:80:70:a7:44:bb:a1:6f:21:9e:4f: d1:48:97:07:12:51:18:73:26:55:89:25:cc:c8:2a: e2:8c:86:16:c6:16:dd:2f:16:6a:03:bd:fa:e8:83: 88:e6:2a:88:d3:41:f6:65:6c:0d:5e:1c:a4:f1:6b: 44:81:4b:60:b5:16:b9:8b:cd:a9:46:10:d9:5e:9c: 5e:ee:72:6f:3c:8c:9a:5d:ae:5f:f3:ad:a1:63:ef: 14:cf:aa:3a:65:d4:17:f0:7f:47:2a:26:a1:b4:69: 69:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:1B:49:AC:D0:BB:2D:A0:8E:3F:40:B5:66:78:DC:4C:C8:71:62:50 X509v3 Authority Key Identifier: keyid:2D:51:7D:C0:24:CE:FC:FA:F8:0C:F7:FD:39:22:46:89:4E:94:F1:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D517DC024CEFCFAF80CF7FD392246894E94F12F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1433a1c6-0f70-4c98-96b0-cab58126ab94/0/2D517DC024CEFCFAF80CF7FD392246894E94F12F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:3e:d5:a1:f7:29:48:00:bb:ca:10:5a:c9:2a:b7:42:b0:61: da:9f:6c:c9:e7:f0:65:66:fd:61:85:64:e0:7f:2e:05:9e:4c: 31:2e:58:73:65:9a:1a:1a:4a:73:95:b9:a6:63:8a:f0:9b:16: f5:1f:54:72:e0:a8:b3:e4:1b:03:48:8c:97:18:20:a6:29:f1: b5:ee:0a:e8:9c:c6:e5:92:25:74:46:20:54:d0:d4:56:95:82: 96:67:17:88:ed:a1:fe:cb:8c:04:b1:3a:23:8d:6c:70:3d:a3: b2:42:7f:35:00:5a:86:52:79:10:28:ae:f2:88:32:07:b9:e5: e7:03:1c:16:07:82:57:ba:5b:53:c1:36:34:5e:da:f2:9f:9d: 49:e9:95:62:63:78:71:27:04:8f:09:89:2b:11:ef:57:f0:82: 22:5b:02:5e:72:4b:66:c9:82:5b:1e:96:e6:04:52:88:a4:bb: 50:3d:5a:00:6d:f5:7f:08:74:5a:e4:7a:8d:b0:3e:d7:ad:20: 0f:db:7c:9c:9d:af:e8:01:26:57:bb:be:ac:52:58:51:33:58: 10:7f:46:0c:1c:84:78:bf:3e:59:92:72:4d:a9:b6:31:5f:9a: 5b:4e:af:85:24:4a:1e:1a:08:42:08:6c:57:17:26:c2:7d:e6: fe:d7:0d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe5Ikk5g1iwwqQ7mhpriy29pIFaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0 RTk0RjEyRjAeFw0yNjAzMjYwODM2MDBaFw0yNjAzMjkxNTA1MDBaMDMxMTAvBgNV BAMTKENGMUI0OUFDRDBCQjJEQTA4RTNGNDBCNTY2NzhEQzRDQzg3MTYyNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5VeCBx5GjOqOGhLJiC6BZ4xi8 +gN6T+hzHnnRXt98gQ1JOks+ZmPWLMcKbDWmmjM66ITDT9OGTdFXtNo8M1HcpojA tNHvhrcQfck+s3aS+CjKkjwNpEStlexYI7UurB1ZxDAf+HL733ENmIXdH5U2VyHj o7YDiyQknpwr9ToCz35pB6AWEF79AQvxCWlAYll95NnpAfsBuokagHCnRLuhbyGe T9FIlwcSURhzJlWJJczIKuKMhhbGFt0vFmoDvfrog4jmKojTQfZlbA1eHKTxa0SB S2C1FrmLzalGENlenF7ucm88jJpdrl/zraFj7xTPqjpl1Bfwf0cqJqG0aWn7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzxtJrNC7LaCOP0C1ZnjcTMhxYlAwHwYDVR0j BBgwFoAULVF9wCTO/Pr4DPf9OSJGiU6U8S8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDMzYTFjNi0wZjcwLTRjOTgtOTZiMC1jYWI1ODEyNmFiOTQvMC8yRDUxN0RDMDI0 Q0VGQ0ZBRjgwQ0Y3RkQzOTIyNDY4OTRFOTRGMTJGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2ODk0RTk0 RjEyRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQzM2ExYzYtMGY3MC00Yzk4LTk2 YjAtY2FiNTgxMjZhYjk0LzAvMkQ1MTdEQzAyNENFRkNGQUY4MENGN0ZEMzkyMjQ2 ODk0RTk0RjEyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIs+1aH3KUgAu8oQWskqt0KwYdqfbMnn8GVm /WGFZOB/LgWeTDEuWHNlmhoaSnOVuaZjivCbFvUfVHLgqLPkGwNIjJcYIKYp8bXu CuicxuWSJXRGIFTQ1FaVgpZnF4jtof7LjASxOiONbHA9o7JCfzUAWoZSeRAorvKI Mge55ecDHBYHgle6W1PBNjRe2vKfnUnplWJjeHEnBI8JiSsR71fwgiJbAl5yS2bJ glseluYEUoiku1A9WgBt9X8IdFrkeo2wPtetIA/bfJydr+gBJle7vqxSWFEzWBB/ RgwchHi/PlmSck2ptjFfmltOr4UkSh4aCEIIbFcXJsJ95v7XDRw= -----END CERTIFICATE-----Generated at Thu Mar 26 13:36:40 2026 by rpki-client