$ rpki-client -vvf repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft File: 2A2E185B12379871494114828D5D5D713982E469.mft (raw, json) Hash identifier: qQIN1PtcYdcoKCYYQrKG7GkLXPz60M4l1SflkmqV2Dw= Subject key identifier: AD:2A:9E:FB:96:6A:B4:D9:E2:B1:42:5B:88:15:06:0E:40:14:4A:D3 Authority key identifier: 2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 Certificate issuer: /CN=2A2E185B12379871494114828D5D5D713982E469 Certificate serial: 4A25B7BE8003B5314D758853C8FFD9CC8B32D6A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject info access: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft Manifest number: 015A Signing time: Wed 25 Mar 2026 11:30:54 +0000 Manifest this update: Wed 25 Mar 2026 11:25:54 +0000 Manifest next update: Sat 28 Mar 2026 19:32:54 +0000 Files and hashes: 1: 3135372e32302e32342e302f32342d3234203d3e203633353036.roa (hash: sTQiXQPTUn8HIqNQ+b3wvUaJvQWDXNesHzrzHQ54ZJs=) 2: 2A2E185B12379871494114828D5D5D713982E469.crl (hash: zcWZLM0kBBHeKntUeDJxlh5Mp5uEr0T9rBY8UpJkSgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 19:32:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:25:b7:be:80:03:b5:31:4d:75:88:53:c8:ff:d9:cc:8b:32:d6:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2E185B12379871494114828D5D5D713982E469 Validity Not Before: Mar 25 11:25:54 2026 GMT Not After : Mar 28 19:32:54 2026 GMT Subject: CN=AD2A9EFB966AB4D9E2B1425B8815060E40144AD3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:28:a1:a9:b7:02:ca:d0:24:f6:bc:0d:15:ee: 24:00:1d:66:23:83:0e:e5:e7:2d:d1:42:66:09:02: b6:2f:f3:1b:c9:cc:d5:08:27:00:f6:8b:74:09:77: 2f:92:4b:4d:65:df:7f:c4:42:87:b6:7b:65:a8:2c: 1c:47:5f:4e:fa:14:b8:d5:96:95:34:cc:d9:44:12: c1:7c:9c:7f:d4:a9:b1:77:bf:d4:88:8f:8a:85:e8: cc:e0:5d:91:91:f1:47:2e:08:d3:a2:e3:3d:c6:cf: b4:97:8d:89:a9:55:ad:33:d7:91:fc:41:ae:d4:19: 63:b0:eb:4e:2b:4f:9d:0e:7b:e4:82:e7:6d:90:96: 20:18:a5:32:26:a6:5c:b2:b3:9f:22:f2:be:fa:22: 36:52:5d:f8:02:d9:ff:62:03:88:90:77:33:c0:7e: 9f:19:02:ad:02:e5:60:ab:91:43:e1:6b:de:5c:3d: f0:bd:cd:d5:bd:5d:fb:55:4e:5b:dc:c2:ad:f4:4b: 83:18:d2:94:41:72:35:ce:c3:88:8a:ef:5a:fa:7f: e9:64:d6:6a:44:e6:0e:b5:bb:91:48:e2:d1:ca:d5: a6:e6:0e:b8:e9:26:97:9c:85:0e:77:56:37:7e:72: 87:9e:a8:71:6f:d0:9a:97:47:1b:e8:58:1c:a0:9d: 41:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:2A:9E:FB:96:6A:B4:D9:E2:B1:42:5B:88:15:06:0E:40:14:4A:D3 X509v3 Authority Key Identifier: keyid:2A:2E:18:5B:12:37:98:71:49:41:14:82:8D:5D:5D:71:39:82:E4:69 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A2E185B12379871494114828D5D5D713982E469.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/15bae30c-b363-407b-a0ab-3154eb309ae9/0/2A2E185B12379871494114828D5D5D713982E469.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:46:c2:ca:df:e2:38:c8:90:3e:d0:c6:b2:8a:95:1e:cc:e4: c6:da:fe:5f:8d:6a:f6:20:5f:51:8c:4b:b3:1f:73:d9:32:1a: 51:13:a8:58:c4:9b:ae:56:eb:83:1f:23:b7:a6:9e:4b:3f:66: b0:42:f2:34:fa:5b:c9:7a:2b:e7:95:0b:08:38:bc:b2:c4:5c: 5e:20:f5:29:1c:7a:67:50:b9:dc:75:d9:b3:41:fe:94:2c:a2: 3f:1c:dc:8e:c3:16:36:cb:b9:8a:b2:8d:de:e0:b3:88:c5:e6: 0b:6e:0f:e0:b8:b1:0a:50:a3:40:80:47:8d:bf:55:5d:93:e4: 5c:06:64:54:30:17:df:8e:ea:62:58:ec:4f:da:be:c2:fc:0c: a4:69:94:39:73:b8:05:b7:00:5e:cb:cf:b5:3d:dc:75:dd:2e: 5b:05:bf:7e:c3:72:ba:26:95:ca:48:7d:0e:b2:b3:ce:9a:28: 53:55:00:dd:4c:10:d2:6a:13:39:7f:60:3f:e8:c0:26:3f:07: 21:d0:af:9b:85:a6:c3:ed:4a:f9:b6:5b:a0:de:19:68:cd:b4: 58:48:d2:b3:26:d2:c9:00:54:2f:6a:fc:d7:f3:ba:e7:9e:3e: 2b:b0:b3:22:00:4c:0f:9d:99:6b:75:6c:fe:48:b9:7f:9a:60: e6:17:e6:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSiW3voADtTFNdYhTyP/ZzIsy1qYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEz OTgyRTQ2OTAeFw0yNjAzMjUxMTI1NTRaFw0yNjAzMjgxOTMyNTRaMDMxMTAvBgNV BAMTKEFEMkE5RUZCOTY2QUI0RDlFMkIxNDI1Qjg4MTUwNjBFNDAxNDRBRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClKKGptwLK0CT2vA0V7iQAHWYj gw7l5y3RQmYJArYv8xvJzNUIJwD2i3QJdy+SS01l33/EQoe2e2WoLBxHX076FLjV lpU0zNlEEsF8nH/UqbF3v9SIj4qF6MzgXZGR8UcuCNOi4z3Gz7SXjYmpVa0z15H8 Qa7UGWOw604rT50Oe+SC522QliAYpTImplyys58i8r76IjZSXfgC2f9iA4iQdzPA fp8ZAq0C5WCrkUPha95cPfC9zdW9XftVTlvcwq30S4MY0pRBcjXOw4iK71r6f+lk 1mpE5g61u5FI4tHK1abmDrjpJpechQ53Vjd+coeeqHFv0JqXRxvoWBygnUENAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrSqe+5ZqtNnisUJbiBUGDkAUStMwHwYDVR0j BBgwFoAUKi4YWxI3mHFJQRSCjV1dcTmC5GkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NWJhZTMwYy1iMzYzLTQwN2ItYTBhYi0zMTU0ZWIzMDlhZTkvMC8yQTJFMTg1QjEy Mzc5ODcxNDk0MTE0ODI4RDVENUQ3MTM5ODJFNDY5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVENzEzOTgy RTQ2OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTViYWUzMGMtYjM2My00MDdiLWEw YWItMzE1NGViMzA5YWU5LzAvMkEyRTE4NUIxMjM3OTg3MTQ5NDExNDgyOEQ1RDVE NzEzOTgyRTQ2OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEVGwsrf4jjIkD7QxrKKlR7M5Mba/l+NavYg X1GMS7Mfc9kyGlETqFjEm65W64MfI7emnks/ZrBC8jT6W8l6K+eVCwg4vLLEXF4g 9SkcemdQudx12bNB/pQsoj8c3I7DFjbLuYqyjd7gs4jF5gtuD+C4sQpQo0CAR42/ VV2T5FwGZFQwF9+O6mJY7E/avsL8DKRplDlzuAW3AF7Lz7U93HXdLlsFv37Dcrom lcpIfQ6ys86aKFNVAN1MENJqEzl/YD/owCY/ByHQr5uFpsPtSvm2W6DeGWjNtFhI 0rMm0skAVC9q/NfzuueePiuwsyIATA+dmWt1bP5IuX+aYOYX5tk= -----END CERTIFICATE-----Generated at Thu Mar 26 18:24:57 2026 by rpki-client