$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft File: 2E11A39B0B99F143E3419363EC55A676EC6370BC.mft (raw, json) Hash identifier: JMjPfS3H0cEr6rpBXA6rGiUCOp/8aiK7WqiOrmIkHeE= Subject key identifier: 0B:03:21:A8:6C:FB:99:E0:01:83:96:C0:E4:DD:11:56:51:D2:76:2E Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC Certificate issuer: /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Certificate serial: 3ECE08F1309249B9623DB2F2155F7A099BEA6C57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft Manifest number: 0560 Signing time: Thu 26 Mar 2026 06:51:54 +0000 Manifest this update: Thu 26 Mar 2026 06:46:54 +0000 Manifest next update: Sun 29 Mar 2026 13:31:54 +0000 Files and hashes: 1: 3130332e38302e38302e302f32322d3232203d3e203634333030.roa (hash: 8iuIG2kR3x4gf/GZSAlI495McobmmAtNYPV980fT5EY=) 2: 323430303a346563303a3a2f33322d3438203d3e203634333030.roa (hash: WFSq7EdUO7iYHzvWu7weXGdBROPfBC5/jmBLNZxL5ks=) 3: 3130332e38302e38302e302f32322d3234203d3e203634333030.roa (hash: BXR6vNTwNlKUvnSM97zzd2f+Cr3MUu6Hwhw8OUAKk1E=) 4: 3130332e38302e38302e302f32332d3233203d3e203634333030.roa (hash: /CTQUrM2f8W+rQ2Xe6BhyP3xlKDevWwEft1AHizqJrk=) 5: 2E11A39B0B99F143E3419363EC55A676EC6370BC.crl (hash: 3COGHTv7hgVX2SIR2V3vM9Atp2HUsRtLzRLaSQ4SaVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 13:31:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:ce:08:f1:30:92:49:b9:62:3d:b2:f2:15:5f:7a:09:9b:ea:6c:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC Validity Not Before: Mar 26 06:46:54 2026 GMT Not After : Mar 29 13:31:54 2026 GMT Subject: CN=0B0321A86CFB99E0018396C0E4DD115651D2762E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d7:89:c1:5e:d9:a9:be:f2:72:f5:fe:c4:e4: 1e:a3:82:3f:83:c5:ca:fa:33:75:ea:cb:1b:74:74: f3:7b:86:3e:6b:55:6f:75:b4:26:f1:5c:52:c9:37: 6a:88:3d:67:aa:f4:09:3d:b9:3e:6e:da:e2:10:94: 1c:d1:24:78:5d:35:27:f8:f0:77:d2:10:30:77:0d: 87:5f:4c:f0:be:b8:fe:b6:f7:7c:83:1c:aa:12:56: 43:57:2b:07:6a:3c:c6:ec:fe:a6:31:a7:d5:bc:cc: 9b:9d:63:b4:45:e3:11:64:5c:90:e3:b9:e7:82:c4: 78:da:2e:9e:63:69:fc:24:1d:c4:ac:5a:17:1a:07: d5:0b:0a:12:ec:64:b2:bc:17:89:f3:8a:a1:67:f5: ce:27:d3:d7:42:38:46:ad:65:e2:e0:04:ca:73:aa: b0:3a:d0:75:a1:ed:b2:f4:2f:68:39:0e:ec:cb:2f: ad:fd:50:f2:7f:72:57:aa:60:c9:79:4b:d2:1d:d1: c3:c8:09:28:d3:d4:c0:83:89:ec:e7:80:52:3c:7c: b9:41:65:2e:8e:24:bc:40:b5:c7:1d:26:15:f3:40: a6:42:07:5d:3d:d6:b3:bc:78:c1:49:6e:cc:8b:a6: 0e:ad:99:b7:56:a4:c6:71:be:45:1c:ee:39:98:38: 0c:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:03:21:A8:6C:FB:99:E0:01:83:96:C0:E4:DD:11:56:51:D2:76:2E X509v3 Authority Key Identifier: keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:49:d0:3f:c4:91:4e:e3:5a:50:44:08:3e:93:70:94:ea:fa: b7:3b:b9:ff:0f:0a:0e:a4:a8:16:35:5d:70:4b:25:a5:6a:a4: 4b:f4:e6:3d:81:3a:cc:c2:9c:d8:e3:9c:cd:ce:5c:89:72:bf: a8:52:c2:2b:08:6a:08:e3:9b:69:69:1a:9b:e7:96:4a:76:2a: 89:aa:c2:e1:54:df:9a:43:bc:e6:b8:61:71:7e:1a:d5:6d:3c: 22:7e:0a:a2:76:fd:ed:48:60:17:ee:c5:f5:59:a1:73:06:41: 42:46:f4:45:7c:1f:9c:80:fd:0d:d8:69:76:c7:c7:df:df:61: 92:45:1a:e7:ff:2e:f2:53:74:e1:d4:40:d9:05:a6:85:cf:18: 79:03:00:23:b7:c2:a9:4d:cb:f9:9c:52:4a:c6:bc:17:21:af: 63:e9:fc:1d:44:90:8c:7a:81:50:a0:3f:6c:0f:78:b3:f5:e5: 3e:61:f3:f1:cc:28:7b:29:d1:b7:02:4f:cf:f2:87:c8:28:20: 7b:52:c4:d9:94:15:45:14:00:7a:ba:c9:92:bd:7d:c7:cb:cc: dd:34:9b:40:54:5d:e4:8b:c5:5b:33:0a:01:a3:09:b3:46:f2: dd:c2:b8:96:82:19:47:9e:1c:6d:d2:43:cf:69:0f:22:a8:0f: ed:1e:95:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPs4I8TCSSbliPbLyFV96CZvqbFcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF QzYzNzBCQzAeFw0yNjAzMjYwNjQ2NTRaFw0yNjAzMjkxMzMxNTRaMDMxMTAvBgNV BAMTKDBCMDMyMUE4NkNGQjk5RTAwMTgzOTZDMEU0REQxMTU2NTFEMjc2MkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD14nBXtmpvvJy9f7E5B6jgj+D xcr6M3Xqyxt0dPN7hj5rVW91tCbxXFLJN2qIPWeq9Ak9uT5u2uIQlBzRJHhdNSf4 8HfSEDB3DYdfTPC+uP6293yDHKoSVkNXKwdqPMbs/qYxp9W8zJudY7RF4xFkXJDj ueeCxHjaLp5jafwkHcSsWhcaB9ULChLsZLK8F4nziqFn9c4n09dCOEatZeLgBMpz qrA60HWh7bL0L2g5DuzLL639UPJ/cleqYMl5S9Id0cPICSjT1MCDiezngFI8fLlB ZS6OJLxAtccdJhXzQKZCB1091rO8eMFJbsyLpg6tmbdWpMZxvkUc7jmYOAzlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCwMhqGz7meABg5bA5N0RVlHSdi4wHwYDVR0j BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz NzBCQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTg2ZDM2MzctOTJiNC00YWM3LWE3 NWItOTljYjBiMDU2NWIwLzAvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2 NzZFQzYzNzBCQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtJ0D/EkU7jWlBECD6TcJTq+rc7uf8PCg6k qBY1XXBLJaVqpEv05j2BOszCnNjjnM3OXIlyv6hSwisIagjjm2lpGpvnlkp2Komq wuFU35pDvOa4YXF+GtVtPCJ+CqJ2/e1IYBfuxfVZoXMGQUJG9EV8H5yA/Q3YaXbH x9/fYZJFGuf/LvJTdOHUQNkFpoXPGHkDACO3wqlNy/mcUkrGvBchr2Pp/B1EkIx6 gVCgP2wPeLP15T5h8/HMKHsp0bcCT8/yh8goIHtSxNmUFUUUAHq6yZK9fcfLzN00 m0BUXeSLxVszCgGjCbNG8t3CuJaCGUeeHG3SQ89pDyKoD+0elb0= -----END CERTIFICATE-----Generated at Thu Mar 26 19:05:09 2026 by rpki-client