$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft File: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft (raw, json) Hash identifier: bJD3LprIG9OPVbNStpoIhA7U4CmmTjZZefqmm77za9w= Subject key identifier: ED:D1:B1:69:51:B6:99:EE:68:F5:57:CC:E1:2D:A9:A6:ED:D3:19:03 Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E Certificate issuer: /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Certificate serial: 259D9429358F70D6F7F65662A72F987005A542AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft Manifest number: 0182 Signing time: Wed 25 Mar 2026 22:32:32 +0000 Manifest this update: Wed 25 Mar 2026 22:27:32 +0000 Manifest next update: Sun 29 Mar 2026 07:44:32 +0000 Files and hashes: 1: 3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (hash: dNnoIXKVhmyapC9qepVTmmkVYB2sWKjzCXWE7DAeobc=) 2: 2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl (hash: hVN6DoU/RO0N60oCO/285DeNVB+rcGkRdl0dJLVrof4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 07:44:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:9d:94:29:35:8f:70:d6:f7:f6:56:62:a7:2f:98:70:05:a5:42:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E Validity Not Before: Mar 25 22:27:32 2026 GMT Not After : Mar 29 07:44:32 2026 GMT Subject: CN=EDD1B16951B699EE68F557CCE12DA9A6EDD31903 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:40:d4:ba:0e:2d:b2:6d:e0:0c:62:9c:4a:ab: 1a:e0:a8:f2:72:49:05:fa:01:86:2a:d5:4a:58:67: de:36:6e:e9:b3:ae:bc:76:0e:ae:7f:76:2c:20:03: 68:c9:3f:86:46:6b:6d:fd:11:4c:ba:ac:5f:54:7e: ab:3f:48:48:32:b4:4c:46:30:9b:a1:77:8e:7e:9d: 46:00:59:36:78:c6:93:d6:2c:44:71:31:ed:d2:a8: f2:f8:85:bb:a8:c1:35:f7:c6:b0:16:80:68:99:c2: c3:c2:b2:57:c4:bd:67:86:c7:16:2d:28:bf:b1:90: 3c:c2:fe:1c:62:54:9d:13:9b:10:9c:90:f2:a1:0e: ac:af:c1:b6:c8:01:cb:14:a7:80:a0:2f:67:4f:e8: 29:90:91:b2:0d:c5:60:5c:a6:9b:f0:f3:39:cd:ae: 09:b3:b2:55:ce:18:95:69:1c:14:44:5c:97:93:64: e7:36:eb:aa:cc:3e:14:d0:69:e7:31:2a:d6:b2:89: ac:68:ed:26:80:7d:2d:04:7a:6a:30:21:36:6f:37: f1:18:73:75:00:04:96:6d:45:bf:05:91:11:be:ac: 46:51:28:e9:e1:0a:f6:1a:be:76:ea:57:0c:c1:2b: f0:d3:5a:af:7f:3a:19:db:8c:6b:5b:f8:2f:fe:f9: 56:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:D1:B1:69:51:B6:99:EE:68:F5:57:CC:E1:2D:A9:A6:ED:D3:19:03 X509v3 Authority Key Identifier: keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:c2:12:3c:95:90:3c:ad:75:8b:c3:e5:ec:88:9c:11:4a:ca: d7:fc:aa:e0:29:64:26:e1:c7:54:db:10:66:79:8d:4b:27:9e: ca:49:46:f2:3f:ec:35:76:3f:96:53:10:9e:4c:10:78:8a:16: bd:93:72:de:29:a2:42:95:c4:9a:88:21:85:26:85:99:74:16: 03:d7:31:6f:4f:7d:c8:f7:ed:19:0f:5e:46:4e:46:cf:c3:3f: 09:75:cf:be:32:35:d0:67:5d:2b:ba:07:0a:4a:b3:37:9b:21: 87:7f:bf:5f:ef:6f:7a:d0:a5:a7:08:72:42:ab:45:ee:72:93: 67:1f:76:cb:ad:4a:cb:b2:53:f7:2c:a7:7a:7a:da:1e:98:d1: 75:b4:5a:2b:a4:49:cf:95:06:7e:94:71:e9:26:28:b4:48:4e: 71:04:6b:73:d9:01:3a:b8:f9:58:ca:25:9d:a3:fa:86:72:f3: 87:0a:ec:26:3f:95:5c:c4:1a:2f:7d:0b:93:e8:68:16:ca:c0: c1:d3:58:2b:07:2b:4a:d3:4c:30:5e:44:1c:f8:04:e3:54:ce: 2b:c2:3f:67:70:d9:77:d2:2e:d1:f1:7a:75:38:24:90:c6:af: e4:b7:9b:49:cf:d7:db:df:f4:79:de:d9:19:35:0d:d5:8a:d8: fe:9c:05:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJZ2UKTWPcNb39lZipy+YcAWlQq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE OEE0QUM0RTAeFw0yNjAzMjUyMjI3MzJaFw0yNjAzMjkwNzQ0MzJaMDMxMTAvBgNV BAMTKEVERDFCMTY5NTFCNjk5RUU2OEY1NTdDQ0UxMkRBOUE2RUREMzE5MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiQNS6Di2ybeAMYpxKqxrgqPJy SQX6AYYq1UpYZ942bumzrrx2Dq5/diwgA2jJP4ZGa239EUy6rF9Ufqs/SEgytExG MJuhd45+nUYAWTZ4xpPWLERxMe3SqPL4hbuowTX3xrAWgGiZwsPCslfEvWeGxxYt KL+xkDzC/hxiVJ0TmxCckPKhDqyvwbbIAcsUp4CgL2dP6CmQkbINxWBcppvw8znN rgmzslXOGJVpHBREXJeTZOc266rMPhTQaecxKtayiaxo7SaAfS0EemowITZvN/EY c3UABJZtRb8FkRG+rEZRKOnhCvYavnbqVwzBK/DTWq9/OhnbjGtb+C/++VZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7dGxaVG2me5o9VfM4S2ppu3TGQMwHwYDVR0j BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3 MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0 QUM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI1YTQ3YjYtNTUxMy00NjEwLTk0 Y2YtMWZlZWM0ZWVlY2YzLzAvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0 RjdEOEE0QUM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKPCEjyVkDytdYvD5eyInBFKytf8quApZCbh x1TbEGZ5jUsnnspJRvI/7DV2P5ZTEJ5MEHiKFr2Tct4pokKVxJqIIYUmhZl0FgPX MW9Pfcj37RkPXkZORs/DPwl1z74yNdBnXSu6BwpKszebIYd/v1/vb3rQpacIckKr Re5yk2cfdsutSsuyU/csp3p62h6Y0XW0WiukSc+VBn6UcekmKLRITnEEa3PZATq4 +VjKJZ2j+oZy84cK7CY/lVzEGi99C5PoaBbKwMHTWCsHK0rTTDBeRBz4BONUzivC P2dw2XfSLtHxenU4JJDGr+S3m0nP19vf9Hne2Rk1DdWK2P6cBUI= -----END CERTIFICATE-----Generated at Fri Mar 27 00:44:29 2026 by rpki-client