$ rpki-client -vvf repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft File: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft (raw, json) Hash identifier: mM2XwWKchjz2cThf4OL1pzXWYskHz0QIG9ykljxrLqc= Subject key identifier: 70:50:A1:62:8B:1F:47:D2:B0:31:3E:50:8B:14:74:13:A5:69:DD:9A Authority key identifier: 2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 Certificate issuer: /CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Certificate serial: 4E1C5C55E82310E3B0E7042524DE16819B679249 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft Manifest number: 02B0 Signing time: Thu 26 Mar 2026 10:21:21 +0000 Manifest this update: Thu 26 Mar 2026 10:16:21 +0000 Manifest next update: Sun 29 Mar 2026 19:01:21 +0000 Files and hashes: 1: 2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl (hash: xskJ1cW1MGhg6hEVFL/sDTuBCaWMZWG8x94qtg8vnqU=) 2: 323430353a633863303a3a2f33322d3332203d3e20313339393831.roa (hash: T//zRmtqLINvFlblPvVcdCKW6AunVea7CBpb7QBQYXI=) 3: 3130332e3134382e32342e302f32332d3234203d3e20313339393831.roa (hash: uSzBN61VjNugxnFtdmn55QCfTiv4UjZL/cWrBYUaKgE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 19:01:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:1c:5c:55:e8:23:10:e3:b0:e7:04:25:24:de:16:81:9b:67:92:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1 Validity Not Before: Mar 26 10:16:21 2026 GMT Not After : Mar 29 19:01:21 2026 GMT Subject: CN=7050A1628B1F47D2B0313E508B147413A569DD9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:a2:50:a2:60:c5:2b:79:9d:5f:b7:52:90:af: 90:d3:c0:7b:0e:a8:80:23:7f:ec:8b:00:cc:18:e4: bb:9c:47:a2:4e:85:61:b4:1e:f2:9f:6b:39:48:f7: a1:01:7d:80:22:2b:fa:b6:6a:3b:ce:8e:51:75:c4: 7f:7f:0e:4c:6d:2a:c0:86:49:15:86:c8:d6:f9:e0: 6c:b4:20:7c:7a:9f:97:ba:2a:e8:c5:a4:e3:8a:47: 38:a9:1f:c7:85:0a:8f:15:f2:ed:c6:2c:9a:41:cc: 0a:aa:5f:8b:f0:b0:ef:df:bc:44:4e:14:91:f4:c4: b0:d6:0a:1d:be:e5:2d:68:75:65:38:50:d4:0e:c9: 69:78:f1:24:e6:f1:3e:b6:53:a3:34:ab:5f:f7:0d: 32:d0:3d:71:8c:5b:d1:e2:d7:da:9f:42:d0:ca:d4: ed:32:1d:80:42:47:de:5b:6e:17:58:63:9d:52:4e: 36:dc:9f:d2:bb:8e:27:64:55:f6:db:e3:b1:d9:69: eb:ea:56:0b:31:15:18:fd:bb:e1:8a:67:3e:d1:81: d3:91:c3:32:11:67:96:69:60:01:09:49:cf:ad:cc: 84:50:5c:b0:13:09:77:69:ed:cd:f4:7a:09:b1:8d: 5c:58:9d:78:63:db:37:c8:ec:7f:30:9f:4c:fb:44: c4:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:50:A1:62:8B:1F:47:D2:B0:31:3E:50:8B:14:74:13:A5:69:DD:9A X509v3 Authority Key Identifier: keyid:2A:F5:12:1C:D1:CF:A7:79:8C:C1:DD:77:7B:46:43:69:D1:DE:A6:C1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/592e07f8-1a48-4391-a6a5-8e4e39c8588a/0/2AF5121CD1CFA7798CC1DD777B464369D1DEA6C1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:f8:2f:f8:a4:05:60:dd:2f:34:eb:36:3e:39:e6:3b:ec:e8: 42:07:63:b3:d8:4e:2c:34:54:fc:60:6a:f8:0e:49:1e:fc:e2: 5a:8a:2f:0f:99:ac:4d:4e:c0:1f:19:35:f5:c1:3e:9c:53:53: f1:88:79:9f:8e:39:49:bf:cf:c6:89:b8:44:e8:5d:11:85:c9: cd:98:0d:00:88:6e:b8:1b:e8:a4:22:ad:e0:ad:eb:c8:b1:b3: 24:db:28:bd:1d:89:4d:b2:f8:67:b9:23:2f:f1:75:7e:57:5c: e1:c3:31:5b:3f:4f:38:06:65:78:29:2d:71:a1:6a:74:f0:76: 6d:d5:d5:78:26:b4:56:73:a8:0c:66:c9:e9:03:59:11:9f:83: db:d2:0c:9c:d2:54:d4:4f:48:2a:ff:3f:13:f4:1d:b8:3a:f3: e9:4c:1a:0c:91:71:f5:7e:90:53:64:63:7a:88:74:fd:ed:9e: cc:07:34:a5:c2:56:b1:06:b0:ff:92:df:31:00:6b:27:c1:1b: d8:7c:1d:e3:f8:d9:91:c8:fa:55:5c:c4:1e:0f:73:c8:32:a2: 42:29:b6:a0:da:41:4a:36:84:aa:6b:25:57:ba:db:a9:33:b4: 5c:3c:3b:1e:2f:75:60:78:91:83:f8:0f:cd:52:8b:59:91:1f: 6e:ff:51:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUThxcVegjEOOw5wQlJN4WgZtnkkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlE MURFQTZDMTAeFw0yNjAzMjYxMDE2MjFaFw0yNjAzMjkxOTAxMjFaMDMxMTAvBgNV BAMTKDcwNTBBMTYyOEIxRjQ3RDJCMDMxM0U1MDhCMTQ3NDEzQTU2OUREOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQolCiYMUreZ1ft1KQr5DTwHsO qIAjf+yLAMwY5LucR6JOhWG0HvKfazlI96EBfYAiK/q2ajvOjlF1xH9/DkxtKsCG SRWGyNb54Gy0IHx6n5e6KujFpOOKRzipH8eFCo8V8u3GLJpBzAqqX4vwsO/fvERO FJH0xLDWCh2+5S1odWU4UNQOyWl48STm8T62U6M0q1/3DTLQPXGMW9Hi19qfQtDK 1O0yHYBCR95bbhdYY51STjbcn9K7jidkVfbb47HZaevqVgsxFRj9u+GKZz7RgdOR wzIRZ5ZpYAEJSc+tzIRQXLATCXdp7c30egmxjVxYnXhj2zfI7H8wn0z7RMRDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcFChYosfR9KwMT5QixR0E6Vp3ZowHwYDVR0j BBgwFoAUKvUSHNHPp3mMwd13e0ZDadHepsEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OTJlMDdmOC0xYTQ4LTQzOTEtYTZhNS04ZTRlMzljODU4OGEvMC8yQUY1MTIxQ0Qx Q0ZBNzc5OENDMURENzc3QjQ2NDM2OUQxREVBNkMxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQzNjlEMURF QTZDMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTkyZTA3ZjgtMWE0OC00MzkxLWE2 YTUtOGU0ZTM5Yzg1ODhhLzAvMkFGNTEyMUNEMUNGQTc3OThDQzFERDc3N0I0NjQz NjlEMURFQTZDMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/4L/ikBWDdLzTrNj455jvs6EIHY7PYTiw0 VPxgavgOSR784lqKLw+ZrE1OwB8ZNfXBPpxTU/GIeZ+OOUm/z8aJuEToXRGFyc2Y DQCIbrgb6KQireCt68ixsyTbKL0diU2y+Ge5Iy/xdX5XXOHDMVs/TzgGZXgpLXGh anTwdm3V1XgmtFZzqAxmyekDWRGfg9vSDJzSVNRPSCr/PxP0Hbg68+lMGgyRcfV+ kFNkY3qIdP3tnswHNKXCVrEGsP+S3zEAayfBG9h8HeP42ZHI+lVcxB4Pc8gyokIp tqDaQUo2hKprJVe626kztFw8Ox4vdWB4kYP4D81Si1mRH27/UWg= -----END CERTIFICATE-----Generated at Thu Mar 26 23:50:25 2026 by rpki-client