$ rpki-client -vvf repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft File: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft (raw, json) Hash identifier: UV3r/b/YfKYuWyKFsqMgjrwQkyyNzz3zP01XFCXkXxw= Subject key identifier: A3:DA:ED:D4:5D:6F:C2:3D:C5:3C:E8:9F:4D:5C:8E:C4:83:80:F8:D6 Authority key identifier: 2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF Certificate issuer: /CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Certificate serial: 1A7BDA9AE037B928DDF2E6E2727299C94E347DC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft Manifest number: 035A Signing time: Wed 25 Mar 2026 12:02:12 +0000 Manifest this update: Wed 25 Mar 2026 11:57:12 +0000 Manifest next update: Sat 28 Mar 2026 17:03:12 +0000 Files and hashes: 1: 2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl (hash: pAtkHQz2qxPri3pqUJxSfowrBIe9b4HzY0kCxA4y8SE=) 2: 3130332e32352e3139322e302f32322d3234203d3e20313332363532.roa (hash: d+MQp3eqG/C/hSPziIw4OmNz4U3nA5FN+ZaHxiNIjvo=) 3: 323430313a313363303a3a2f33322d3336203d3e20313332363532.roa (hash: Zp5MkPoy+mcmuZyHWWPJeYcS5LhdUDlPA4O7bCCb+jQ=) 4: 3134362e3139362e34302e302f32322d3234203d3e20313332363532.roa (hash: n+xUq9a7n5f6ndT7big4scouCH78ut4B4QszfPAlm80=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 17:03:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:7b:da:9a:e0:37:b9:28:dd:f2:e6:e2:72:72:99:c9:4e:34:7d:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E19B97405D498D3B067A9A1009CDC1E02FB11CF Validity Not Before: Mar 25 11:57:12 2026 GMT Not After : Mar 28 17:03:12 2026 GMT Subject: CN=A3DAEDD45D6FC23DC53CE89F4D5C8EC48380F8D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8a:a7:e6:fa:46:e4:83:6a:5d:a1:a9:32:dc: 45:88:1d:da:76:55:bb:39:92:12:37:b7:04:7d:31: 82:2e:68:7b:16:4c:80:d3:c2:c6:3c:58:82:be:46: 04:73:47:37:4f:96:e9:3e:df:2b:0e:b5:47:06:e7: bf:70:b2:35:1e:61:6e:58:35:a6:96:94:3c:b3:cc: 18:46:90:5f:92:69:7e:7f:cf:d5:76:f1:ac:31:c0: 87:23:94:81:53:ef:3f:22:c0:09:c6:e3:4a:94:8c: 9a:da:e1:2c:1a:ee:75:0b:d0:1f:4f:3e:2a:12:8e: 1c:60:30:98:eb:a8:31:ea:eb:b3:1f:d6:4f:76:5d: 76:77:d6:d9:79:90:ae:60:71:fd:d2:3f:4d:d1:1f: 66:bf:82:14:d0:c9:dd:0b:5b:00:61:06:6f:63:48: 8c:4a:5d:04:9a:86:ed:4b:37:d1:70:a7:fd:1a:09: 93:e6:d3:49:a5:3f:c5:9e:d0:55:48:67:18:e0:6b: cd:2b:2f:77:18:9d:ff:0e:90:06:94:eb:f9:90:9c: 2d:5f:00:21:73:94:ef:a7:51:73:10:3e:96:c3:0a: a0:66:a0:bc:88:b6:5c:c7:cc:f1:a1:c8:e7:74:07: bc:8f:6f:68:7a:10:1e:30:03:8f:e3:63:f8:02:3c: c7:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DA:ED:D4:5D:6F:C2:3D:C5:3C:E8:9F:4D:5C:8E:C4:83:80:F8:D6 X509v3 Authority Key Identifier: keyid:2E:19:B9:74:05:D4:98:D3:B0:67:A9:A1:00:9C:DC:1E:02:FB:11:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b632a2c-406e-45d7-a028-260474c77038/0/2E19B97405D498D3B067A9A1009CDC1E02FB11CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:a7:cc:78:1c:3a:dc:e6:27:4a:d5:5c:0e:42:5b:85:90:1e: 6a:d6:d0:63:e0:e8:c6:c6:77:02:65:5e:f9:77:b0:9d:73:cf: f2:61:ee:f9:f5:7f:b9:f4:4b:dc:2b:12:ea:04:8b:1e:9c:e6: 58:f3:13:1b:c6:1a:19:96:c8:78:cc:ee:4d:40:c3:87:98:5b: 0f:b4:15:e6:63:97:87:9b:71:a2:eb:42:62:85:08:58:a9:c5: 52:d5:ae:eb:5d:c4:48:19:02:bd:00:db:d0:73:fe:b6:f0:35: c5:03:04:c1:9d:b6:25:86:bd:14:46:e6:81:5b:cc:dd:8d:57: 0d:09:dc:c4:17:5a:58:20:24:ac:7e:72:c4:2f:71:8a:4c:17: 62:ea:26:9c:30:e1:7c:ac:f4:1c:b6:c3:01:06:63:ea:26:ed: 2f:7f:7d:96:a9:f5:60:61:a6:29:be:03:c5:78:51:5f:c5:4f: 6f:31:9d:f5:fc:14:d4:4e:d0:17:9a:2f:19:10:c9:b0:39:58: e6:7e:22:c5:f5:38:c4:d7:f6:88:36:6e:3b:c6:65:e2:82:fa: 9b:d0:10:4d:73:b9:78:46:3e:bc:55:87:b6:91:08:fa:88:d3: ea:b3:f9:30:4e:bd:ee:0f:bf:94:93:6b:e1:17:88:7a:b9:ba: 52:e2:a7:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGnvamuA3uSjd8ubicnKZyU40fccwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUw MkZCMTFDRjAeFw0yNjAzMjUxMTU3MTJaFw0yNjAzMjgxNzAzMTJaMDMxMTAvBgNV BAMTKEEzREFFREQ0NUQ2RkMyM0RDNTNDRTg5RjRENUM4RUM0ODM4MEY4RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGiqfm+kbkg2pdoaky3EWIHdp2 Vbs5khI3twR9MYIuaHsWTIDTwsY8WIK+RgRzRzdPluk+3ysOtUcG579wsjUeYW5Y NaaWlDyzzBhGkF+SaX5/z9V28awxwIcjlIFT7z8iwAnG40qUjJra4Swa7nUL0B9P PioSjhxgMJjrqDHq67Mf1k92XXZ31tl5kK5gcf3SP03RH2a/ghTQyd0LWwBhBm9j SIxKXQSahu1LN9Fwp/0aCZPm00mlP8We0FVIZxjga80rL3cYnf8OkAaU6/mQnC1f ACFzlO+nUXMQPpbDCqBmoLyItlzHzPGhyOd0B7yPb2h6EB4wA4/jY/gCPMevAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUo9rt1F1vwj3FPOifTVyOxIOA+NYwHwYDVR0j BBgwFoAULhm5dAXUmNOwZ6mhAJzcHgL7Ec8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YjYzMmEyYy00MDZlLTQ1ZDctYTAyOC0yNjA0NzRjNzcwMzgvMC8yRTE5Qjk3NDA1 RDQ5OEQzQjA2N0E5QTEwMDlDREMxRTAyRkIxMUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RDMUUwMkZC MTFDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2I2MzJhMmMtNDA2ZS00NWQ3LWEw MjgtMjYwNDc0Yzc3MDM4LzAvMkUxOUI5NzQwNUQ0OThEM0IwNjdBOUExMDA5Q0RD MUUwMkZCMTFDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKWnzHgcOtzmJ0rVXA5CW4WQHmrW0GPg6MbG dwJlXvl3sJ1zz/Jh7vn1f7n0S9wrEuoEix6c5ljzExvGGhmWyHjM7k1Aw4eYWw+0 FeZjl4ebcaLrQmKFCFipxVLVrutdxEgZAr0A29Bz/rbwNcUDBMGdtiWGvRRG5oFb zN2NVw0J3MQXWlggJKx+csQvcYpMF2LqJpww4Xys9By2wwEGY+om7S9/fZap9WBh pim+A8V4UV/FT28xnfX8FNRO0BeaLxkQybA5WOZ+IsX1OMTX9og2bjvGZeKC+pvQ EE1zuXhGPrxVh7aRCPqI0+qz+TBOve4Pv5STa+EXiHq5ulLip3s= -----END CERTIFICATE-----Generated at Thu Mar 26 17:42:28 2026 by rpki-client