$ rpki-client -vvf repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft File: 2993EFF92300988A33773DD8C4B502F74B907112.mft (raw, json) Hash identifier: /NGiK1CS3KCOeoDJCD8Y+cFUSngkFni4K6K1plPGoNY= Subject key identifier: 21:54:25:FB:E3:CD:3E:DA:E2:FD:FC:19:74:34:75:09:07:C3:B4:B5 Authority key identifier: 29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 Certificate issuer: /CN=2993EFF92300988A33773DD8C4B502F74B907112 Certificate serial: 45B5430F392F34CFE588ACC5F9B31193448C82FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject info access: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft Manifest number: 023F Signing time: Tue 24 Mar 2026 13:12:36 +0000 Manifest this update: Tue 24 Mar 2026 13:07:36 +0000 Manifest next update: Fri 27 Mar 2026 22:56:36 +0000 Files and hashes: 1: 323430323a326334303a3a2f34382d3438203d3e20313336383734.roa (hash: u1/FWvhkUX8NdpjOfCEzIQ83rh9KfgiQw+mbq+Uaf5Y=) 2: 3130332e3130352e37362e302f32342d3234203d3e20313336383734.roa (hash: MQCiIDyqzNBQYpoR0MRnkXubNFQEv31SOdbwjwRhFAI=) 3: 3130332e3130352e37362e302f32332d3234203d3e20313336383734.roa (hash: JCzAZhJKrjcnXPRUzXNAKrf8B2XJvFX+OCG60Nl0Dgk=) 4: 323430323a326334303a3a2f34382d3438203d3e203535363736.roa (hash: 9H4P2m2Q86+wvaB6C5BWHbuw5/CMaL6D8SYn5Utxj3g=) 5: 3130332e3130352e37392e302f32342d3234203d3e203535363736.roa (hash: 8akbgTHcBzy09cH/zWkvU4LNiBkusQqjKfIeLuC7DA4=) 6: 3130332e3130352e37382e302f32342d3234203d3e203535363736.roa (hash: jFVbs/Ft4bO73kf8lHPUr8+y5jJNNuINBps0Q/t8tqg=) 7: 3130332e3130352e37372e302f32342d3234203d3e203535363736.roa (hash: /T3q0aKMlccwCqwpvQMGCHEcfpAgRAD32J67j3q+a2M=) 8: 3130332e3130352e37362e302f32342d3234203d3e203535363736.roa (hash: nyiH5XZRu3exSPXepkvkOwB2m2ULxFRKVzAk8qvL/Rg=) 9: 3130332e3130352e37382e302f32342d3234203d3e20313336383734.roa (hash: 8FISrQYbnFOpjiQHBztskExqHRou9e+XROYZoHoylq0=) 10: 2993EFF92300988A33773DD8C4B502F74B907112.crl (hash: 3emZekWmopUaOG2zg5LHhdhl/W7OR7sNVTEpO37Y8Pk=) 11: 3130332e3130352e37392e302f32342d3234203d3e20313336383734.roa (hash: dcc/bwTW1oTsN+Z0h/Aw94q6mQUdzuyzIAdCoesD/EQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:56:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:b5:43:0f:39:2f:34:cf:e5:88:ac:c5:f9:b3:11:93:44:8c:82:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2993EFF92300988A33773DD8C4B502F74B907112 Validity Not Before: Mar 24 13:07:36 2026 GMT Not After : Mar 27 22:56:36 2026 GMT Subject: CN=215425FBE3CD3EDAE2FDFC197434750907C3B4B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:8b:02:fa:e2:cd:80:db:91:49:de:00:bd:da: 96:55:5e:2d:13:6d:c3:a7:07:c9:44:31:59:a6:e6: 17:ff:7e:22:7a:ad:48:cb:4a:4d:d7:bd:8c:52:03: db:2f:aa:62:d3:cd:c2:26:fc:13:21:d0:e2:90:49: a3:02:9c:0c:7b:f0:83:f3:c8:78:76:4d:e0:26:60: 2c:1d:61:b1:a7:87:3a:68:24:74:31:3a:a9:da:2d: ab:f8:e3:37:ff:f8:04:e5:91:a2:c6:99:8f:a7:79: f8:b1:69:88:a8:ee:7c:b1:e4:f9:2c:30:e0:67:d2: bb:b1:7d:38:b5:e9:c8:0f:1a:38:17:3a:c8:2b:93: 41:b1:f8:54:93:83:b2:71:1a:78:e0:7c:cf:a1:d2: 3e:6a:c5:a0:da:70:51:57:bf:e0:e7:a3:8e:c7:b7: dd:53:05:40:10:88:45:e2:d8:2a:92:56:6d:e6:39: 63:2e:15:53:2e:1d:21:2d:d2:d1:81:ce:04:9f:a8: 88:fb:7a:16:dc:7c:b8:d0:4a:5b:a0:f0:f2:f0:c0: a0:35:ca:47:41:e6:33:d9:77:a3:4a:07:c7:a9:23: 51:d4:78:20:f0:d6:16:5f:8a:4d:6b:d7:f8:f7:07: 39:1b:18:44:9e:d1:c7:4a:17:bd:cb:32:2a:2f:9a: e9:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:54:25:FB:E3:CD:3E:DA:E2:FD:FC:19:74:34:75:09:07:C3:B4:B5 X509v3 Authority Key Identifier: keyid:29:93:EF:F9:23:00:98:8A:33:77:3D:D8:C4:B5:02:F7:4B:90:71:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2993EFF92300988A33773DD8C4B502F74B907112.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/477bc3d2-4ab3-4cfb-9222-66c6ea9447e3/0/2993EFF92300988A33773DD8C4B502F74B907112.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:6c:94:ab:00:6c:8b:f3:42:7f:e3:8d:94:41:ef:24:53:f3: 17:34:83:4c:a6:b9:f4:2a:53:e4:8c:88:61:c5:3f:13:1b:9f: 34:31:55:9f:81:7c:6d:0c:f2:0a:78:67:ee:e7:18:a5:e8:6a: 2f:c5:ae:21:d1:4e:b9:b4:ce:8c:e0:b9:cf:b2:5a:55:c8:9e: 64:b8:f2:da:dc:7e:e5:b6:d2:b3:5d:c8:df:82:24:9c:69:89: 8a:6e:1c:4a:5b:d9:02:17:6c:ee:bb:04:0e:e0:93:7d:90:44: fd:bc:80:d5:99:b7:55:05:3c:cb:37:e2:9d:40:7a:01:4c:49: d8:a4:68:bb:74:65:d7:7c:14:47:48:7d:39:fb:21:5a:8d:51: 19:5f:36:a3:92:67:02:c3:60:95:6d:fa:54:3e:9d:b2:0a:fb: b5:94:5e:b1:f0:e8:a0:0c:72:d5:74:a6:76:f7:04:3c:7f:f1: ae:bf:04:5c:fa:5d:5b:26:b9:12:9b:34:ca:52:7e:02:ba:17: 1e:5e:3d:83:59:8b:1e:f5:a5:65:59:95:2c:d1:fd:af:68:93: 4e:fc:83:8a:57:5b:bc:9a:62:28:17:d3:cc:9f:8c:e6:94:6b: 52:67:19:af:f5:e1:45:b7:b9:a1:52:ed:c0:79:68:a8:3e:3b: 25:61:1e:72 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURbVDDzkvNM/liKzF+bMRk0SMgv4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0 QjkwNzExMjAeFw0yNjAzMjQxMzA3MzZaFw0yNjAzMjcyMjU2MzZaMDMxMTAvBgNV BAMTKDIxNTQyNUZCRTNDRDNFREFFMkZERkMxOTc0MzQ3NTA5MDdDM0I0QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgiwL64s2A25FJ3gC92pZVXi0T bcOnB8lEMVmm5hf/fiJ6rUjLSk3XvYxSA9svqmLTzcIm/BMh0OKQSaMCnAx78IPz yHh2TeAmYCwdYbGnhzpoJHQxOqnaLav44zf/+ATlkaLGmY+nefixaYio7nyx5Pks MOBn0ruxfTi16cgPGjgXOsgrk0Gx+FSTg7JxGnjgfM+h0j5qxaDacFFXv+Dno47H t91TBUAQiEXi2CqSVm3mOWMuFVMuHSEt0tGBzgSfqIj7ehbcfLjQSlug8PLwwKA1 ykdB5jPZd6NKB8epI1HUeCDw1hZfik1r1/j3BzkbGESe0cdKF73LMiovmumLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVQl++PNPtri/fwZdDR1CQfDtLUwHwYDVR0j BBgwFoAUKZPv+SMAmIozdz3YxLUC90uQcRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzdiYzNkMi00YWIzLTRjZmItOTIyMi02NmM2ZWE5NDQ3ZTMvMC8yOTkzRUZGOTIz MDA5ODhBMzM3NzNERDhDNEI1MDJGNzRCOTA3MTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAyRjc0Qjkw NzExMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc3YmMzZDItNGFiMy00Y2ZiLTky MjItNjZjNmVhOTQ0N2UzLzAvMjk5M0VGRjkyMzAwOTg4QTMzNzczREQ4QzRCNTAy Rjc0QjkwNzExMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEJslKsAbIvzQn/jjZRB7yRT8xc0g0ymufQq U+SMiGHFPxMbnzQxVZ+BfG0M8gp4Z+7nGKXoai/FriHRTrm0zozguc+yWlXInmS4 8trcfuW20rNdyN+CJJxpiYpuHEpb2QIXbO67BA7gk32QRP28gNWZt1UFPMs34p1A egFMSdikaLt0Zdd8FEdIfTn7IVqNURlfNqOSZwLDYJVt+lQ+nbIK+7WUXrHw6KAM ctV0pnb3BDx/8a6/BFz6XVsmuRKbNMpSfgK6Fx5ePYNZix71pWVZlSzR/a9ok078 g4pXW7yaYigX08yfjOaUa1JnGa/14UW3uaFS7cB5aKg+OyVhHnI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:58:29 2026 by rpki-client