$ rpki-client -vvf repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft File: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft (raw, json) Hash identifier: LpsBhhXONq24FjV3QNJJvsBFyRtWLDg8VWxxqxq8Lew= Subject key identifier: C7:62:DE:9B:B1:BC:10:6E:1A:FF:43:D6:E7:AA:84:ED:33:9C:92:4C Authority key identifier: 2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA Certificate issuer: /CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Certificate serial: 65B9CC50068A4E11A7D29D351DC5854B2C021272 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft Manifest number: 0160 Signing time: Wed 25 Mar 2026 01:41:34 +0000 Manifest this update: Wed 25 Mar 2026 01:36:34 +0000 Manifest next update: Sat 28 Mar 2026 07:39:34 +0000 Files and hashes: 1: 2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl (hash: GdPCifeOR8lFiTpKiNGkiQN7uqLuFebptJsn+WjPL9Y=) 2: 3130332e3138342e35372e302f32342d3234203d3e20313532333532.roa (hash: bpEdGaau57Ls0LX+FXCrBVL5qcwulWWQkMdNRaMhV9U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 07:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:b9:cc:50:06:8a:4e:11:a7:d2:9d:35:1d:c5:85:4b:2c:02:12:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2F24A2044806301EB7FA6CE5C8521FE03941B7BA Validity Not Before: Mar 25 01:36:34 2026 GMT Not After : Mar 28 07:39:34 2026 GMT Subject: CN=C762DE9BB1BC106E1AFF43D6E7AA84ED339C924C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:fd:0a:19:f8:e9:32:42:4b:72:a7:26:18:9f: c9:fe:24:49:89:06:5f:06:0a:76:a4:01:06:e8:12: 84:28:70:dc:d8:43:66:a8:d9:f0:17:60:53:71:d7: ff:2b:25:61:d9:bc:b2:1d:e2:cf:f9:36:8a:44:d0: db:f3:55:6d:8b:58:ab:21:4b:fa:10:f1:a5:a6:2d: c6:e3:de:3c:c6:72:5c:e8:dd:b5:b1:32:26:b8:1d: ba:04:8d:84:9c:d5:17:5f:69:a9:e9:23:bd:da:fa: fb:f7:71:08:ce:2b:43:a5:fb:94:cc:9c:bf:b1:f0: e9:a2:5a:bc:e6:35:3c:f6:42:2a:7d:4e:e9:d9:fb: 0f:80:76:e1:8f:b9:3f:9b:6c:02:10:de:59:e2:66: 25:30:6f:97:c8:f2:fb:d1:f5:75:f2:e2:66:bc:c4: e4:e3:dc:dd:b3:4d:28:ef:6c:09:b9:59:86:99:82: 32:fb:92:4d:67:60:de:da:51:02:5a:57:f9:04:ae: c6:01:d6:73:3e:09:60:e9:5a:75:d1:54:60:11:d1: 66:9a:74:aa:80:7a:87:f0:31:b7:79:25:a0:75:c6: 39:aa:b7:9e:c3:69:e9:4d:8b:02:7b:42:81:1f:ae: 76:0b:29:b2:ae:51:4e:eb:fc:01:2a:d0:64:03:c2: 8b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:62:DE:9B:B1:BC:10:6E:1A:FF:43:D6:E7:AA:84:ED:33:9C:92:4C X509v3 Authority Key Identifier: keyid:2F:24:A2:04:48:06:30:1E:B7:FA:6C:E5:C8:52:1F:E0:39:41:B7:BA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a2929c-6088-4cb5-83c6-f4a356b20f9d/0/2F24A2044806301EB7FA6CE5C8521FE03941B7BA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a5:2f:d9:ea:9a:cc:b2:68:42:ce:53:3f:60:df:b7:f1:de: 0c:db:3f:97:fd:53:80:09:7e:ac:97:4f:ab:bb:d0:34:dd:58: 21:83:c1:c5:ea:29:c5:28:cf:63:88:0e:27:f2:d9:35:f5:e9: 7e:fb:85:b5:d5:03:6b:26:5f:04:3e:f6:18:a5:9e:0a:f4:9e: 8d:a4:33:f9:fd:a9:43:0d:d0:1c:78:ea:f6:df:d1:40:be:fe: cb:ff:c0:5d:af:aa:e8:19:0f:bd:3a:e2:1e:0d:d0:5d:fb:d2: 15:68:25:24:14:e5:94:b9:d8:6e:b6:20:11:9e:53:7e:d0:4e: 76:25:01:be:51:84:2e:c2:de:d7:dc:60:92:33:66:cd:f0:f0: df:93:c3:d2:e5:a0:69:40:58:72:53:39:b4:1a:6e:d1:e3:e7: 0a:0a:5e:1b:88:2c:fc:af:eb:8e:8c:8e:e9:ee:8d:b5:a8:16: 68:63:5e:d2:ab:7c:16:b9:93:3e:52:b6:23:7a:e4:25:2c:5d: 1f:cd:d4:09:7f:53:b2:0b:85:b5:a6:3e:cd:07:3a:62:7e:b1: 29:06:03:92:c0:b7:46:32:11:dc:d2:4f:ea:0b:a1:8d:55:60: e0:68:2d:8f:72:d2:c8:b0:4d:6a:62:6b:5e:2e:b2:bf:33:2e: 12:ef:59:99 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZbnMUAaKThGn0p01HcWFSywCEnIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAz OTQxQjdCQTAeFw0yNjAzMjUwMTM2MzRaFw0yNjAzMjgwNzM5MzRaMDMxMTAvBgNV BAMTKEM3NjJERTlCQjFCQzEwNkUxQUZGNDNENkU3QUE4NEVEMzM5QzkyNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ/QoZ+OkyQktypyYYn8n+JEmJ Bl8GCnakAQboEoQocNzYQ2ao2fAXYFNx1/8rJWHZvLId4s/5NopE0NvzVW2LWKsh S/oQ8aWmLcbj3jzGclzo3bWxMia4HboEjYSc1RdfaanpI73a+vv3cQjOK0Ol+5TM nL+x8OmiWrzmNTz2Qip9TunZ+w+AduGPuT+bbAIQ3lniZiUwb5fI8vvR9XXy4ma8 xOTj3N2zTSjvbAm5WYaZgjL7kk1nYN7aUQJaV/kErsYB1nM+CWDpWnXRVGAR0Waa dKqAeofwMbd5JaB1xjmqt57DaelNiwJ7QoEfrnYLKbKuUU7r/AEq0GQDwosBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx2Lem7G8EG4a/0PW56qE7TOckkwwHwYDVR0j BBgwFoAULySiBEgGMB63+mzlyFIf4DlBt7owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWEyOTI5Yy02MDg4LTRjYjUtODNjNi1mNGEzNTZiMjBmOWQvMC8yRjI0QTIwNDQ4 MDYzMDFFQjdGQTZDRTVDODUyMUZFMDM5NDFCN0JBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFGRTAzOTQx QjdCQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFhMjkyOWMtNjA4OC00Y2I1LTgz YzYtZjRhMzU2YjIwZjlkLzAvMkYyNEEyMDQ0ODA2MzAxRUI3RkE2Q0U1Qzg1MjFG RTAzOTQxQjdCQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmlL9nqmsyyaELOUz9g37fx3gzbP5f9U4AJ fqyXT6u70DTdWCGDwcXqKcUoz2OIDify2TX16X77hbXVA2smXwQ+9hilngr0no2k M/n9qUMN0Bx46vbf0UC+/sv/wF2vqugZD7064h4N0F370hVoJSQU5ZS52G62IBGe U37QTnYlAb5RhC7C3tfcYJIzZs3w8N+Tw9LloGlAWHJTObQabtHj5woKXhuILPyv 646MjunujbWoFmhjXtKrfBa5kz5StiN65CUsXR/N1Al/U7ILhbWmPs0HOmJ+sSkG A5LAt0YyEdzST+oLoY1VYOBoLY9y0siwTWpia14usr8zLhLvWZk= -----END CERTIFICATE-----Generated at Fri Mar 27 03:05:59 2026 by rpki-client