$ rpki-client -vvf repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft File: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft (raw, json) Hash identifier: EQEtx6ZXrsdDNeYUhbXVtlw7JytnKbDKKQAHlUCCLiw= Subject key identifier: 51:20:4D:C7:B6:2A:9A:F7:0B:9D:B5:CA:2D:16:32:A5:08:08:06:FF Authority key identifier: 2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E Certificate issuer: /CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Certificate serial: 3A4C9C2BDD1FB1A3B9B017D1E353C874654AC450 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft Manifest number: E1 Signing time: Wed 25 Mar 2026 13:32:08 +0000 Manifest this update: Wed 25 Mar 2026 13:27:08 +0000 Manifest next update: Sat 28 Mar 2026 22:43:08 +0000 Files and hashes: 1: 3136302e3138372e3137342e302f32342d3234203d3e20313533313335.roa (hash: XfY4we6jzKf244te76Sh5o4SXguYwnH8MGIYft8mlas=) 2: 2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl (hash: a9WgamXIdVJSm+rKdX+Z2lpMyb2kkSENmYZvz12akyo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 22:43:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:4c:9c:2b:dd:1f:b1:a3:b9:b0:17:d1:e3:53:c8:74:65:4a:c4:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2EC721F6FC616A1BE2D938F21EAF2E82E805981E Validity Not Before: Mar 25 13:27:08 2026 GMT Not After : Mar 28 22:43:08 2026 GMT Subject: CN=51204DC7B62A9AF70B9DB5CA2D1632A5080806FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:0f:9d:37:ff:fd:a9:2f:13:ed:f0:b9:b6:f1: ec:29:44:8d:85:2f:4f:f2:96:59:12:81:a2:f1:8e: 6c:21:34:87:39:87:63:33:58:47:85:e3:e6:f6:62: 2a:06:59:d4:39:cc:16:81:e4:c8:6c:ce:53:3e:db: 83:01:ee:bc:75:f9:a0:ef:7f:ea:6e:0c:17:11:83: 17:d1:54:90:ba:7e:92:58:25:02:06:de:d9:bc:78: ee:30:c7:92:1e:7f:92:db:f2:bc:c5:e7:66:3c:34: ef:60:7c:03:40:29:0a:27:48:01:cc:b7:e0:61:16: 9b:5c:6d:b9:a7:a7:01:41:e5:f2:74:0b:bb:2d:8b: 56:84:98:66:02:59:89:75:09:e7:88:6e:2c:5e:98: 8f:a9:e8:9e:15:94:e5:f4:6b:84:1e:5c:ca:ae:ba: 6b:34:27:b8:ab:47:df:23:c6:d5:a8:bb:e7:3b:46: cb:ca:21:98:47:c5:51:c6:9f:8c:d8:e0:67:af:3e: 1a:f2:01:72:b5:6c:25:83:91:88:82:5a:12:a4:25: e6:af:0e:dc:0d:8f:61:fd:7b:75:89:e1:51:77:41: 6a:60:ae:43:16:d8:49:ab:b6:92:36:c7:5b:94:4f: 25:1f:2b:4d:2f:34:6d:cd:67:43:fc:02:b9:b9:25: c9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:20:4D:C7:B6:2A:9A:F7:0B:9D:B5:CA:2D:16:32:A5:08:08:06:FF X509v3 Authority Key Identifier: keyid:2E:C7:21:F6:FC:61:6A:1B:E2:D9:38:F2:1E:AF:2E:82:E8:05:98:1E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98853aab-8d6c-457f-9d57-484acacea9d8/0/2EC721F6FC616A1BE2D938F21EAF2E82E805981E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:95:80:68:78:b0:d7:6a:3b:d9:9c:f4:98:24:a9:d1:b7:39: 52:b4:f8:08:1d:5b:a2:fc:11:fe:69:91:2c:eb:d2:d5:14:1c: 9f:c4:99:21:01:01:7e:cb:55:2e:25:b1:a6:27:4d:66:31:e5: 4c:1d:60:3c:ba:45:46:88:fc:44:74:d5:cd:6f:db:f6:09:9c: 94:48:1f:dc:f0:d0:77:1b:76:b9:85:9c:58:14:a6:26:ff:9d: 8e:79:80:d4:de:da:c0:90:16:1b:fc:59:cb:01:f3:a3:8b:1b: e0:98:de:36:45:27:4a:09:33:a3:52:18:d4:c5:ee:61:23:86: 45:68:42:e9:13:9e:9b:76:d5:31:30:3e:c8:20:b9:e5:2f:62: f1:63:7c:b2:5d:3c:43:52:f1:c3:61:3d:03:4e:9b:7e:85:5c: a0:67:72:be:4a:4f:1c:bf:66:67:17:5b:d6:88:8a:8c:c6:c3: 4a:7f:b2:f7:85:58:d4:22:0c:84:e2:13:cc:cb:c2:4d:38:27: d0:47:a0:fa:ac:ac:db:52:6f:1c:df:80:6e:11:80:cb:0f:c8: eb:bd:e4:c7:9b:ab:a9:06:3f:b5:d9:62:08:b0:a1:2e:91:59: 5f:b7:c7:77:3c:54:d2:8e:8c:0c:87:93:65:a8:22:aa:1e:65: 54:74:81:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkycK90fsaO5sBfR41PIdGVKxFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJF ODA1OTgxRTAeFw0yNjAzMjUxMzI3MDhaFw0yNjAzMjgyMjQzMDhaMDMxMTAvBgNV BAMTKDUxMjA0REM3QjYyQTlBRjcwQjlEQjVDQTJEMTYzMkE1MDgwODA2RkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQD503//2pLxPt8Lm28ewpRI2F L0/yllkSgaLxjmwhNIc5h2MzWEeF4+b2YioGWdQ5zBaB5MhszlM+24MB7rx1+aDv f+puDBcRgxfRVJC6fpJYJQIG3tm8eO4wx5Ief5Lb8rzF52Y8NO9gfANAKQonSAHM t+BhFptcbbmnpwFB5fJ0C7sti1aEmGYCWYl1CeeIbixemI+p6J4VlOX0a4QeXMqu ums0J7irR98jxtWou+c7RsvKIZhHxVHGn4zY4GevPhryAXK1bCWDkYiCWhKkJeav DtwNj2H9e3WJ4VF3QWpgrkMW2EmrtpI2x1uUTyUfK00vNG3NZ0P8Arm5JclVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUSBNx7YqmvcLnbXKLRYypQgIBv8wHwYDVR0j BBgwFoAULsch9vxhahvi2TjyHq8ugugFmB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODg1M2FhYi04ZDZjLTQ1N2YtOWQ1Ny00ODRhY2FjZWE5ZDgvMC8yRUM3MjFGNkZD NjE2QTFCRTJEOTM4RjIxRUFGMkU4MkU4MDU5ODFFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJFODJFODA1 OTgxRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTg4NTNhYWItOGQ2Yy00NTdmLTlk NTctNDg0YWNhY2VhOWQ4LzAvMkVDNzIxRjZGQzYxNkExQkUyRDkzOEYyMUVBRjJF ODJFODA1OTgxRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALSVgGh4sNdqO9mc9JgkqdG3OVK0+AgdW6L8 Ef5pkSzr0tUUHJ/EmSEBAX7LVS4lsaYnTWYx5UwdYDy6RUaI/ER01c1v2/YJnJRI H9zw0HcbdrmFnFgUpib/nY55gNTe2sCQFhv8WcsB86OLG+CY3jZFJ0oJM6NSGNTF 7mEjhkVoQukTnpt21TEwPsggueUvYvFjfLJdPENS8cNhPQNOm36FXKBncr5KTxy/ ZmcXW9aIiozGw0p/sveFWNQiDITiE8zLwk04J9BHoPqsrNtSbxzfgG4RgMsPyOu9 5Mebq6kGP7XZYgiwoS6RWV+3x3c8VNKOjAyHk2WoIqoeZVR0gaA= -----END CERTIFICATE-----Generated at Thu Mar 26 13:52:30 2026 by rpki-client