$ rpki-client -vvf repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft File: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft (raw, json) Hash identifier: rUDe5SnDb5Uxnju8VNCg9gFYDgSIYUbrvISikmj/mgw= Subject key identifier: B5:9F:94:D7:57:B6:45:8A:5A:93:BC:62:C2:2E:4B:03:3B:8C:84:6C Authority key identifier: 2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E Certificate issuer: /CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Certificate serial: 7B6EB9CADA21D8D68F67D2FCA437761E21250D5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft Manifest number: 03D8 Signing time: Tue 24 Mar 2026 03:52:17 +0000 Manifest this update: Tue 24 Mar 2026 03:47:17 +0000 Manifest next update: Fri 27 Mar 2026 07:04:17 +0000 Files and hashes: 1: 3130332e3136392e322e302f32332d3234203d3e203137393935.roa (hash: IRRwlFxdlw58Hq9FIW3eCT24cVIv6qhlkYjQet5GmTc=) 2: 2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl (hash: jxdj9z8ATYGH+Y0FF0n6NCYc6bfA5hGc176SwwKDik0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 07:04:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:6e:b9:ca:da:21:d8:d6:8f:67:d2:fc:a4:37:76:1e:21:25:0d:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E Validity Not Before: Mar 24 03:47:17 2026 GMT Not After : Mar 27 07:04:17 2026 GMT Subject: CN=B59F94D757B6458A5A93BC62C22E4B033B8C846C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:b7:4c:f4:61:94:5e:7c:b1:35:c6:2f:86:d6: 29:03:34:e8:ed:6d:b0:e4:8f:57:ca:64:8b:f3:1c: e8:4a:94:62:e3:3b:88:52:ae:6d:f3:e9:51:87:45: e5:0a:62:5b:fd:d5:e2:49:9d:59:f0:b3:12:3b:4e: d9:7a:de:6e:5d:30:d2:72:90:90:f9:56:84:d5:fe: db:f8:1f:87:b3:f4:4b:dd:fc:9e:7a:a7:3c:10:b4: d5:b5:5d:da:08:17:16:d9:d2:81:81:ce:66:b9:1b: cf:68:ba:3a:c8:f2:e2:ca:6f:b4:f8:03:95:e8:a5: af:06:60:97:95:2e:26:75:0c:e6:f5:d1:02:86:03: 74:aa:b8:7e:6d:1d:96:5e:dd:08:9e:c5:df:3a:12: 32:6a:a8:35:f9:dc:39:d7:86:cc:72:63:93:3e:d3: 5b:05:cc:5b:1e:9f:04:04:52:23:4a:df:d0:4d:c0: 55:8f:dd:32:fc:4e:aa:6c:cd:53:f3:65:c0:24:9e: ed:15:43:8c:b8:4a:f7:67:99:2d:31:28:ba:ce:d3: d2:e1:f4:73:a9:58:5e:6a:72:63:83:52:90:29:cc: 96:b4:04:21:7a:2e:27:06:b0:96:b3:48:16:92:47: 1c:24:4f:dc:71:4f:6c:b0:d7:67:4f:3c:0f:0f:63: 78:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:9F:94:D7:57:B6:45:8A:5A:93:BC:62:C2:2E:4B:03:3B:8C:84:6C X509v3 Authority Key Identifier: keyid:2B:DF:AF:A7:0A:11:BF:BF:6C:98:2B:BF:2C:2C:08:4D:E8:0E:03:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52cd9cea-3bf4-4a9c-aee6-00339c06550b/0/2BDFAFA70A11BFBF6C982BBF2C2C084DE80E034E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:b3:5c:79:1c:d5:f1:b4:39:85:fe:be:ed:7c:1d:20:f3:c8: d8:f5:92:56:15:92:8c:5b:ad:61:4b:cf:ad:fc:06:e5:c2:0c: 01:d4:51:11:6e:25:a0:4b:6c:79:cb:30:93:8a:3d:7c:95:db: bc:ef:fe:3e:e2:5c:3a:16:a9:8a:30:0e:11:c4:7c:dd:fc:ec: ad:0c:20:0d:ed:29:e3:0a:81:65:28:5b:7c:26:cf:21:72:c1: e9:6e:29:49:76:62:a3:05:89:a2:00:cf:7f:24:2d:d8:a7:e3: 83:c3:4b:8d:6d:b7:dd:5f:d6:2d:49:01:50:89:04:60:64:0b: 11:b2:a3:d0:61:2d:64:4e:23:3a:69:c4:92:eb:7e:57:e9:82: 3f:2c:25:14:cd:55:e3:3d:1f:e9:27:12:0b:4c:23:64:2c:d5: cd:fb:eb:6a:a8:3d:55:18:bb:ba:ab:eb:3b:67:0e:3c:61:19: 1a:17:1b:e6:ea:b5:92:20:45:d0:e6:6b:8b:99:44:30:97:63: ef:c8:46:47:6e:db:50:29:b7:14:df:a6:34:38:0a:cb:ca:dd: 72:47:a1:a3:a1:f6:9f:75:5b:fb:be:cf:63:f9:7f:7f:5b:c9: 2b:37:01:6e:72:87:ad:8f:5c:e8:99:8e:29:6b:62:ad:ed:5b: f1:68:67:b4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe265ytoh2NaPZ9L8pDd2HiElDVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERF ODBFMDM0RTAeFw0yNjAzMjQwMzQ3MTdaFw0yNjAzMjcwNzA0MTdaMDMxMTAvBgNV BAMTKEI1OUY5NEQ3NTdCNjQ1OEE1QTkzQkM2MkMyMkU0QjAzM0I4Qzg0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPt0z0YZRefLE1xi+G1ikDNOjt bbDkj1fKZIvzHOhKlGLjO4hSrm3z6VGHReUKYlv91eJJnVnwsxI7Ttl63m5dMNJy kJD5VoTV/tv4H4ez9Evd/J56pzwQtNW1XdoIFxbZ0oGBzma5G89oujrI8uLKb7T4 A5Xopa8GYJeVLiZ1DOb10QKGA3SquH5tHZZe3Qiexd86EjJqqDX53DnXhsxyY5M+ 01sFzFsenwQEUiNK39BNwFWP3TL8TqpszVPzZcAknu0VQ4y4SvdnmS0xKLrO09Lh 9HOpWF5qcmODUpApzJa0BCF6LicGsJazSBaSRxwkT9xxT2yw12dPPA8PY3hZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtZ+U11e2RYpak7xiwi5LAzuMhGwwHwYDVR0j BBgwFoAUK9+vpwoRv79smCu/LCwITegOA04wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MmNkOWNlYS0zYmY0LTRhOWMtYWVlNi0wMDMzOWMwNjU1MGIvMC8yQkRGQUZBNzBB MTFCRkJGNkM5ODJCQkYyQzJDMDg0REU4MEUwMzRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4NERFODBF MDM0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTJjZDljZWEtM2JmNC00YTljLWFl ZTYtMDAzMzljMDY1NTBiLzAvMkJERkFGQTcwQTExQkZCRjZDOTgyQkJGMkMyQzA4 NERFODBFMDM0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACizXHkc1fG0OYX+vu18HSDzyNj1klYVkoxb rWFLz638BuXCDAHUURFuJaBLbHnLMJOKPXyV27zv/j7iXDoWqYowDhHEfN387K0M IA3tKeMKgWUoW3wmzyFyweluKUl2YqMFiaIAz38kLdin44PDS41tt91f1i1JAVCJ BGBkCxGyo9BhLWROIzppxJLrflfpgj8sJRTNVeM9H+knEgtMI2Qs1c3762qoPVUY u7qr6ztnDjxhGRoXG+bqtZIgRdDma4uZRDCXY+/IRkdu21AptxTfpjQ4CsvK3XJH oaOh9p91W/u+z2P5f39bySs3AW5yh62PXOiZjilrYq3tW/FoZ7Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:34:30 2026 by rpki-client