$ rpki-client -vvf repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft File: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft (raw, json) Hash identifier: LPqqr60tWR5pa+qndD3tjSV8jj9WABxYJ+ID9pe+i24= Subject key identifier: CF:86:A7:BD:FE:6E:66:C7:F7:D6:EF:E0:D1:F6:69:C0:EC:E1:6A:93 Authority key identifier: 2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D Certificate issuer: /CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Certificate serial: 362076883082E3253DD1A4CD8819F7849206C7B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft Manifest number: 0204 Signing time: Wed 25 Mar 2026 07:20:48 +0000 Manifest this update: Wed 25 Mar 2026 07:15:48 +0000 Manifest next update: Sat 28 Mar 2026 11:56:48 +0000 Files and hashes: 1: 2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl (hash: y4ICLk6isGnDvJx8OC4JuTbFBrWeoEoOFdsZbxp/cc8=) 2: 3130332e3134312e3137302e302f32342d3234203d3e20313530353139.roa (hash: 2L7DCJfQuXYmkUJUsfdFqwDAT1SsF8x6dqI0f/qoYAI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 11:56:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:20:76:88:30:82:e3:25:3d:d1:a4:cd:88:19:f7:84:92:06:c7:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2780233BF2E06D533EC6B05F500206FBB06D6D Validity Not Before: Mar 25 07:15:48 2026 GMT Not After : Mar 28 11:56:48 2026 GMT Subject: CN=CF86A7BDFE6E66C7F7D6EFE0D1F669C0ECE16A93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:5b:85:b7:cf:b4:34:4f:49:ea:20:a4:36:04: 0f:ae:18:e2:3b:f9:cd:db:44:1b:70:43:f3:f3:00: d0:86:1b:9c:0e:00:89:f1:bf:e4:e1:3a:7d:6f:7e: 69:aa:ba:4e:fe:78:7f:62:a8:3c:f4:0e:9c:a7:88: 33:71:e8:bc:d1:01:3c:80:62:60:64:61:42:69:56: bf:9f:02:22:ac:a8:d0:8f:6d:d5:9f:b6:31:22:6b: e1:d4:a2:a9:64:0f:d1:bc:03:bd:68:aa:8c:11:ce: 3a:e7:f4:61:10:66:74:b0:16:ea:22:4c:53:0c:6f: 73:36:24:82:53:e4:f7:a7:7d:8c:8c:9e:00:75:3c: 16:c6:8f:7a:5e:63:0a:f5:d9:e1:59:66:94:64:3d: dd:ab:47:e7:31:a7:8a:b3:e5:37:35:e7:2e:c6:09: 05:6a:aa:3c:2c:31:78:0d:fd:02:90:d5:65:7a:db: 03:e1:61:0d:50:28:6e:23:23:d5:6c:02:db:26:25: ad:c1:ef:e1:72:46:77:49:4f:b8:e0:9d:d4:38:d4: 00:ea:dd:ae:92:c1:92:d1:a0:b5:17:b8:88:5a:a1: a9:bd:35:2e:4b:61:98:0d:4b:18:5d:0e:ac:0a:48: 66:b6:05:6c:06:19:89:cd:32:38:13:d9:f2:a6:c9: 25:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:86:A7:BD:FE:6E:66:C7:F7:D6:EF:E0:D1:F6:69:C0:EC:E1:6A:93 X509v3 Authority Key Identifier: keyid:2A:27:80:23:3B:F2:E0:6D:53:3E:C6:B0:5F:50:02:06:FB:B0:6D:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2780233BF2E06D533EC6B05F500206FBB06D6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c6f8c0a-e03f-4140-ba16-833ac2241afb/0/2A2780233BF2E06D533EC6B05F500206FBB06D6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:0a:7b:cd:4f:c0:07:b1:86:49:d2:39:17:59:a2:7f:b0:bd: c3:d0:f1:c9:79:4d:4b:dd:bc:2c:5d:ee:be:2f:d2:6a:de:49: 9a:f3:6f:57:72:e4:60:aa:17:0b:ec:fe:cf:96:7f:d1:f1:4a: 78:94:f8:d6:6e:cf:2b:6b:be:28:1f:97:99:c6:d6:13:8b:b6: 3a:c8:82:6c:19:65:f9:71:3b:00:0b:9c:80:c6:80:8d:73:91: 8c:d9:e9:5b:3e:ea:b0:ac:91:b4:2f:5d:2b:49:80:93:25:d6: 21:9a:b8:6e:97:ab:dc:68:5b:35:4a:26:1f:9f:bd:be:df:79: 88:d8:09:26:f0:79:1b:fa:42:f0:33:90:08:07:5d:f7:21:b4: 7f:d1:63:f5:5a:d2:30:69:c2:84:c0:78:63:b9:4c:ef:3e:75: a5:db:09:10:e6:d0:f6:f9:1e:80:f7:1a:f0:5c:de:95:5a:c7: 77:05:00:53:3f:61:05:07:6f:ec:96:4e:24:81:b9:6a:d2:59: 62:05:8f:f2:04:a1:21:37:d4:84:cc:71:4c:d8:81:2f:84:b4: 47:eb:3d:36:97:c8:4b:a4:bb:25:82:21:bb:45:1c:46:95:6e: 2d:54:f8:e8:d3:fd:45:e9:dc:47:09:19:4e:d3:1c:3e:72:76: 4f:4c:10:15 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNiB2iDCC4yU90aTNiBn3hJIGx7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZG QkIwNkQ2RDAeFw0yNjAzMjUwNzE1NDhaFw0yNjAzMjgxMTU2NDhaMDMxMTAvBgNV BAMTKENGODZBN0JERkU2RTY2QzdGN0Q2RUZFMEQxRjY2OUMwRUNFMTZBOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrW4W3z7Q0T0nqIKQ2BA+uGOI7 +c3bRBtwQ/PzANCGG5wOAInxv+ThOn1vfmmquk7+eH9iqDz0DpyniDNx6LzRATyA YmBkYUJpVr+fAiKsqNCPbdWftjEia+HUoqlkD9G8A71oqowRzjrn9GEQZnSwFuoi TFMMb3M2JIJT5PenfYyMngB1PBbGj3peYwr12eFZZpRkPd2rR+cxp4qz5Tc15y7G CQVqqjwsMXgN/QKQ1WV62wPhYQ1QKG4jI9VsAtsmJa3B7+FyRndJT7jgndQ41ADq 3a6SwZLRoLUXuIhaoam9NS5LYZgNSxhdDqwKSGa2BWwGGYnNMjgT2fKmySXdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUz4anvf5uZsf31u/g0fZpwOzhapMwHwYDVR0j BBgwFoAUKieAIzvy4G1TPsawX1ACBvuwbW0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YzZmOGMwYS1lMDNmLTQxNDAtYmExNi04MzNhYzIyNDFhZmIvMC8yQTI3ODAyMzNC RjJFMDZENTMzRUM2QjA1RjUwMDIwNkZCQjA2RDZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAyMDZGQkIw NkQ2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2M2ZjhjMGEtZTAzZi00MTQwLWJh MTYtODMzYWMyMjQxYWZiLzAvMkEyNzgwMjMzQkYyRTA2RDUzM0VDNkIwNUY1MDAy MDZGQkIwNkQ2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYKe81PwAexhknSORdZon+wvcPQ8cl5TUvd vCxd7r4v0mreSZrzb1dy5GCqFwvs/s+Wf9HxSniU+NZuzytrvigfl5nG1hOLtjrI gmwZZflxOwALnIDGgI1zkYzZ6Vs+6rCskbQvXStJgJMl1iGauG6Xq9xoWzVKJh+f vb7feYjYCSbweRv6QvAzkAgHXfchtH/RY/Va0jBpwoTAeGO5TO8+daXbCRDm0Pb5 HoD3GvBc3pVax3cFAFM/YQUHb+yWTiSBuWrSWWIFj/IEoSE31ITMcUzYgS+EtEfr PTaXyEukuyWCIbtFHEaVbi1U+OjT/UXp3EcJGU7THD5ydk9MEBU= -----END CERTIFICATE-----Generated at Thu Mar 26 14:15:33 2026 by rpki-client