$ rpki-client -vvf repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft File: C2E929DFB05F81B91880BC808154365AECAC27D2.mft (raw, json) Hash identifier: u+e5wHp0Rl7Mvldo4SSdtCnmsCsrWNg6TuC4B1wayoA= Subject key identifier: 29:26:0B:A6:BF:58:43:ED:A6:FC:84:85:9E:83:52:86:13:6A:71:49 Authority key identifier: C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 Certificate issuer: /CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Certificate serial: 1CCF085916581EA0F72255CD0FEEA5878CAFB670 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft Manifest number: 017E Signing time: Tue 24 Mar 2026 19:41:55 +0000 Manifest this update: Tue 24 Mar 2026 19:36:55 +0000 Manifest next update: Fri 27 Mar 2026 22:16:55 +0000 Files and hashes: 1: 3230322e34372e3138362e302f32342d3234203d3e20313532303234.roa (hash: dATjFz2GgCuZI7do22WaaBEM9mGMyqKI+2l7xnlR/rA=) 2: C2E929DFB05F81B91880BC808154365AECAC27D2.crl (hash: +Pfy+M5XmkMwFXQjWWOIqEgCsUt8AY4vOdZkcxrpzm8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 22:16:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:cf:08:59:16:58:1e:a0:f7:22:55:cd:0f:ee:a5:87:8c:af:b6:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C2E929DFB05F81B91880BC808154365AECAC27D2 Validity Not Before: Mar 24 19:36:55 2026 GMT Not After : Mar 27 22:16:55 2026 GMT Subject: CN=29260BA6BF5843EDA6FC84859E835286136A7149 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d2:b2:26:0d:c0:d0:09:ec:4d:5c:82:66:ee: 63:40:2a:9c:00:e7:52:c5:07:9e:a3:7c:30:3d:82: 99:d2:47:67:3e:4f:14:0a:65:63:f7:55:b5:09:35: 2b:dc:0a:23:35:86:ba:9a:0b:59:a6:ee:f6:38:1b: 08:af:d1:59:d9:f1:e9:92:47:71:22:b4:48:12:cb: ba:74:1b:7a:65:36:c1:c4:cb:38:5f:19:be:dd:bc: 27:25:24:cb:86:4a:66:fc:1a:af:88:5a:40:72:2c: 15:34:9d:4a:7a:78:98:c7:8f:50:a8:91:70:1e:4d: 62:b3:5b:4b:bb:fb:db:f0:63:75:ed:27:bf:6c:b3: 50:1e:58:75:22:8e:b3:d4:60:04:e9:4f:54:5e:1e: 6c:af:b1:64:79:ef:74:43:1d:53:12:0b:fe:8a:1d: 23:0d:9f:7f:c8:c0:3a:25:d4:4e:ef:8c:ba:58:43: 96:d4:53:c8:00:ca:6c:f0:89:d3:a1:76:aa:a3:ec: 97:f9:59:d8:7d:86:3d:7c:7b:87:31:d6:56:46:fc: 41:27:f4:dd:e1:f3:8c:c9:7e:c1:5c:d7:ca:29:c1: 0d:23:d6:28:5c:8f:c2:99:56:27:d4:92:54:7c:ca: 1f:12:0a:ba:f2:22:70:7e:7f:86:d1:00:02:96:52: 80:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:26:0B:A6:BF:58:43:ED:A6:FC:84:85:9E:83:52:86:13:6A:71:49 X509v3 Authority Key Identifier: keyid:C2:E9:29:DF:B0:5F:81:B9:18:80:BC:80:81:54:36:5A:EC:AC:27:D2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C2E929DFB05F81B91880BC808154365AECAC27D2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d6ffad2-20bc-4246-8293-44666ce1cfe0/0/C2E929DFB05F81B91880BC808154365AECAC27D2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:3b:00:03:1b:4d:c7:7a:c1:ff:70:e5:4b:83:8c:0b:68:29: c6:91:9b:53:64:b0:91:99:69:e7:cf:7e:47:b8:93:4f:8f:f2: 75:fc:fc:a3:e3:60:e7:98:5b:79:e2:b1:c7:58:c9:4d:40:5c: fe:89:ce:c2:67:a8:35:c2:a0:d4:96:6f:30:3c:9c:49:ba:fa: 68:7e:ff:cb:06:89:5f:08:aa:d0:39:9c:cc:34:c8:8a:5b:08: f1:23:a4:1c:1c:d7:71:9c:22:f1:3d:90:61:6e:d4:49:bf:e5: 66:10:24:67:9b:f0:07:8a:c9:d8:4f:68:15:27:5f:97:37:d0: 16:f6:36:b3:be:9f:94:20:21:17:bd:2c:fa:bd:c7:6e:8a:a4: 8f:a4:a2:eb:49:da:8c:ee:15:f3:6f:b3:c0:ae:bc:5a:62:ba: f9:d8:56:f7:4f:6e:4b:d7:64:22:ea:7f:83:58:c9:2a:3c:2c: 55:97:47:b1:cf:2f:60:be:b8:6f:22:92:91:e8:8a:5e:05:01: 29:7e:3a:69:fe:98:d1:6f:58:6d:4d:be:7e:69:35:81:99:37: d3:26:35:46:94:74:33:46:89:5a:09:a9:9a:6d:c0:5e:43:67: 19:6d:dd:33:a7:25:cd:e9:b2:d4:3b:6b:88:c2:4e:cf:bb:f6: b1:88:82:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHM8IWRZYHqD3IlXND+6lh4yvtnAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFF Q0FDMjdEMjAeFw0yNjAzMjQxOTM2NTVaFw0yNjAzMjcyMjE2NTVaMDMxMTAvBgNV BAMTKDI5MjYwQkE2QkY1ODQzRURBNkZDODQ4NTlFODM1Mjg2MTM2QTcxNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa0rImDcDQCexNXIJm7mNAKpwA 51LFB56jfDA9gpnSR2c+TxQKZWP3VbUJNSvcCiM1hrqaC1mm7vY4Gwiv0VnZ8emS R3EitEgSy7p0G3plNsHEyzhfGb7dvCclJMuGSmb8Gq+IWkByLBU0nUp6eJjHj1Co kXAeTWKzW0u7+9vwY3XtJ79ss1AeWHUijrPUYATpT1ReHmyvsWR573RDHVMSC/6K HSMNn3/IwDol1E7vjLpYQ5bUU8gAymzwidOhdqqj7Jf5Wdh9hj18e4cx1lZG/EEn 9N3h84zJfsFc18opwQ0j1ihcj8KZVifUklR8yh8SCrryInB+f4bRAAKWUoDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKSYLpr9YQ+2m/ISFnoNShhNqcUkwHwYDVR0j BBgwFoAUwukp37BfgbkYgLyAgVQ2WuysJ9IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDZmZmFkMi0yMGJjLTQyNDYtODI5My00NDY2NmNlMWNmZTAvMC9DMkU5MjlERkIw NUY4MUI5MTg4MEJDODA4MTU0MzY1QUVDQUMyN0QyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2NUFFQ0FD MjdEMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQ2ZmZhZDItMjBiYy00MjQ2LTgy OTMtNDQ2NjZjZTFjZmUwLzAvQzJFOTI5REZCMDVGODFCOTE4ODBCQzgwODE1NDM2 NUFFQ0FDMjdEMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAw7AAMbTcd6wf9w5UuDjAtoKcaRm1NksJGZ aefPfke4k0+P8nX8/KPjYOeYW3niscdYyU1AXP6JzsJnqDXCoNSWbzA8nEm6+mh+ /8sGiV8IqtA5nMw0yIpbCPEjpBwc13GcIvE9kGFu1Em/5WYQJGeb8AeKydhPaBUn X5c30Bb2NrO+n5QgIRe9LPq9x26KpI+koutJ2ozuFfNvs8CuvFpiuvnYVvdPbkvX ZCLqf4NYySo8LFWXR7HPL2C+uG8ikpHoil4FASl+Omn+mNFvWG1Nvn5pNYGZN9Mm NUaUdDNGiVoJqZptwF5DZxlt3TOnJc3pstQ7a4jCTs+79rGIgj0= -----END CERTIFICATE-----Generated at Thu Mar 26 17:37:57 2026 by rpki-client