$ rpki-client -vvf repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft File: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft (raw, json) Hash identifier: HykX1bxOydthhkTQUewN0o+gGLoGJcEZK8kB1A70brQ= Subject key identifier: FD:BA:21:01:C7:E3:C0:4A:FB:68:B7:A0:D7:EA:56:50:FA:75:C5:5C Authority key identifier: 2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C Certificate issuer: /CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Certificate serial: 1D7DF6C572032930CC48B9342CFD9CF3D790D93F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft Manifest number: 025C Signing time: Tue 24 Mar 2026 19:12:06 +0000 Manifest this update: Tue 24 Mar 2026 19:07:06 +0000 Manifest next update: Sat 28 Mar 2026 01:55:06 +0000 Files and hashes: 1: 2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl (hash: qWZ7zWn+rlFH7/zA3GUo/EamA8pzy1seCqF23ZlOviA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 01:55:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:7d:f6:c5:72:03:29:30:cc:48:b9:34:2c:fd:9c:f3:d7:90:d9:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C Validity Not Before: Mar 24 19:07:06 2026 GMT Not After : Mar 28 01:55:06 2026 GMT Subject: CN=FDBA2101C7E3C04AFB68B7A0D7EA5650FA75C55C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:b9:62:5b:f0:26:0d:9b:06:a2:70:9d:77: 53:7a:26:51:64:88:a7:fc:a8:ff:8f:1d:69:38:ef: d5:04:66:0b:de:ad:ba:6a:ed:19:30:20:33:5a:be: 8a:a5:84:ec:ea:2f:26:58:d1:58:36:67:09:7a:94: 97:f6:b6:fb:db:54:4a:8a:4c:a1:87:6a:1d:97:d1: 1d:18:7c:15:c2:77:d4:fb:1a:b7:ce:cc:42:1e:9e: 99:16:a8:d3:1f:90:af:7b:43:0e:e8:63:8c:9d:79: 1b:75:a6:23:92:16:5a:ea:9d:ea:d6:e1:bc:4d:bb: 3d:ec:ec:e9:aa:37:02:9d:50:3e:48:ef:79:d4:d3: 9c:fe:52:5b:52:1c:8b:b2:89:d1:93:bc:d1:0d:18: 9f:ed:c7:59:b1:69:e2:a7:6f:27:39:d0:73:8d:6b: c8:4b:07:ef:01:fc:b6:9d:58:c6:91:b2:79:c5:50: 1e:65:a6:08:53:c0:2c:a5:43:33:c4:ab:22:da:f0: 89:87:f3:8e:8e:7f:5e:77:66:95:45:f4:5f:a2:79: 5e:ba:58:62:83:2b:3b:fc:5b:d0:3c:6c:04:8c:04: 0c:36:c2:f8:32:16:13:e7:3e:f3:13:fc:a5:4d:7e: a1:d5:71:3e:93:76:2e:3f:07:cc:86:5f:07:8d:8e: dd:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:BA:21:01:C7:E3:C0:4A:FB:68:B7:A0:D7:EA:56:50:FA:75:C5:5C X509v3 Authority Key Identifier: keyid:2A:86:5C:A2:F4:F7:0C:CC:B0:3F:98:C2:B6:E1:7E:89:3A:B8:7D:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/902b78ad-df23-43e2-a94d-3b454cbc7fc5/0/2A865CA2F4F70CCCB03F98C2B6E17E893AB87D0C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:e2:a6:e3:82:1f:f4:cd:21:09:b7:a4:25:f1:17:18:98:37: 23:3a:5a:99:e3:d8:da:3a:84:60:46:7b:ec:7a:96:63:8e:7f: ee:4e:98:dd:ac:56:df:e5:6e:e3:17:e7:49:1c:79:2c:91:f5: b0:2c:ca:54:4b:2b:4d:83:03:36:c1:6a:25:55:e3:69:87:a5: a2:d2:c1:75:74:3e:b2:b2:ed:ee:89:c0:c9:81:1a:33:39:0a: 55:a2:1f:c9:32:f3:99:02:eb:4f:32:2f:ec:5e:15:c9:f4:ef: da:0e:c0:f8:68:5f:7d:9f:e8:f4:ba:98:d8:65:18:2a:fe:cc: a4:78:6b:59:aa:0a:a7:c3:1f:47:d8:0d:c1:56:6c:f9:fb:78: f4:97:ac:0d:bf:18:9d:78:34:dc:f3:09:93:d2:cf:ef:86:3d: 44:f9:5d:c0:7f:de:ed:39:56:03:78:28:db:1c:21:59:8f:a9: 69:47:f6:da:88:cb:94:1c:4e:1e:74:4e:fc:ce:7f:1f:be:0e: ce:2c:c3:ae:92:6d:c4:30:74:d0:d6:ad:de:41:7b:ef:7c:03: 8e:3e:cb:a8:3b:e4:8d:16:88:b5:dd:35:ee:8a:ee:f0:db:fd: 9e:fb:41:8a:97:53:1f:99:25:4f:9f:73:ff:1e:85:97:7a:51: 29:da:ce:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHX32xXIDKTDMSLk0LP2c89eQ2T8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkz QUI4N0QwQzAeFw0yNjAzMjQxOTA3MDZaFw0yNjAzMjgwMTU1MDZaMDMxMTAvBgNV BAMTKEZEQkEyMTAxQzdFM0MwNEFGQjY4QjdBMEQ3RUE1NjUwRkE3NUM1NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMbliW/AmDZsGonCdd1N6JlFk iKf8qP+PHWk479UEZgverbpq7RkwIDNavoqlhOzqLyZY0Vg2Zwl6lJf2tvvbVEqK TKGHah2X0R0YfBXCd9T7GrfOzEIenpkWqNMfkK97Qw7oY4ydeRt1piOSFlrqnerW 4bxNuz3s7OmqNwKdUD5I73nU05z+UltSHIuyidGTvNENGJ/tx1mxaeKnbyc50HON a8hLB+8B/LadWMaRsnnFUB5lpghTwCylQzPEqyLa8ImH846Of153ZpVF9F+ieV66 WGKDKzv8W9A8bASMBAw2wvgyFhPnPvMT/KVNfqHVcT6Tdi4/B8yGXweNjt0hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/bohAcfjwEr7aLeg1+pWUPp1xVwwHwYDVR0j BBgwFoAUKoZcovT3DMywP5jCtuF+iTq4fQwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDJiNzhhZC1kZjIzLTQzZTItYTk0ZC0zYjQ1NGNiYzdmYzUvMC8yQTg2NUNBMkY0 RjcwQ0NDQjAzRjk4QzJCNkUxN0U4OTNBQjg3RDBDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdFODkzQUI4 N0QwQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTAyYjc4YWQtZGYyMy00M2UyLWE5 NGQtM2I0NTRjYmM3ZmM1LzAvMkE4NjVDQTJGNEY3MENDQ0IwM0Y5OEMyQjZFMTdF ODkzQUI4N0QwQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzipuOCH/TNIQm3pCXxFxiYNyM6Wpnj2No6 hGBGe+x6lmOOf+5OmN2sVt/lbuMX50kceSyR9bAsylRLK02DAzbBaiVV42mHpaLS wXV0PrKy7e6JwMmBGjM5ClWiH8ky85kC608yL+xeFcn079oOwPhoX32f6PS6mNhl GCr+zKR4a1mqCqfDH0fYDcFWbPn7ePSXrA2/GJ14NNzzCZPSz++GPUT5XcB/3u05 VgN4KNscIVmPqWlH9tqIy5QcTh50TvzOfx++Ds4sw66SbcQwdNDWrd5Be+98A44+ y6g75I0WiLXdNe6K7vDb/Z77QYqXUx+ZJU+fc/8ehZd6USnazuE= -----END CERTIFICATE-----Generated at Thu Mar 26 05:38:08 2026 by rpki-client