$ rpki-client -vvf repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft File: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft (raw, json) Hash identifier: Zfy9bveDU4dUgUoSETLeZg+xzioYcaSRIRWbdeNyOCg= Subject key identifier: B7:08:6D:A6:D2:44:24:9E:09:34:B5:37:D0:FF:27:85:FF:5F:0D:64 Authority key identifier: 2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 Certificate issuer: /CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Certificate serial: 24BB3A05888642C5A1FACBD3C1F0E4CE64884D54 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft Manifest number: 04C0 Signing time: Wed 25 Mar 2026 17:31:19 +0000 Manifest this update: Wed 25 Mar 2026 17:26:19 +0000 Manifest next update: Sun 29 Mar 2026 00:10:19 +0000 Files and hashes: 1: 2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl (hash: Ng7E9eaZb4cmYzsqYfLLBirGqZk4sN0+ujR5yM+7M9M=) 2: 323030313a6466353a653238303a3a2f34382d3438203d3e20313431363430.roa (hash: 4Nyf95sTRdqoKN64WuRTyc5m5hoROhK6oFKdH03e8KY=) 3: 3130332e3136322e31392e302f32342d3234203d3e20313431363430.roa (hash: 9ih//U/iPAsPFZQIcxukFDIuvhJTLAD0tRGBXhc3tOc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 00:10:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:bb:3a:05:88:86:42:c5:a1:fa:cb:d3:c1:f0:e4:ce:64:88:4d:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994 Validity Not Before: Mar 25 17:26:19 2026 GMT Not After : Mar 29 00:10:19 2026 GMT Subject: CN=B7086DA6D244249E0934B537D0FF2785FF5F0D64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:f8:6e:df:24:9c:71:bd:47:40:e3:86:9a:86: 04:29:9e:ef:bc:8d:aa:af:c4:74:0a:2d:ab:2e:9e: 2d:06:3b:11:fe:9b:f2:f6:53:75:bc:e0:60:14:b0: 04:88:86:0c:c3:e4:96:fc:19:f2:7c:ab:87:21:84: e6:ac:27:06:17:6c:ea:be:9b:eb:b3:c0:80:9d:01: 39:1c:a3:9c:cb:db:13:0a:70:78:56:3d:c3:4b:43: b7:88:b4:40:59:bf:ed:e6:75:8c:9c:b2:a2:41:7d: 2a:ac:34:7f:ce:56:22:de:4f:a6:64:57:3f:1a:f2: 7f:a8:3c:b3:71:b9:4d:c8:a8:da:ad:7b:c8:73:e7: bf:44:7a:4f:07:df:b0:f1:c1:1a:03:4c:41:ee:74: a0:a0:49:66:96:15:a5:75:3d:db:f5:f7:4b:cb:2f: 65:ba:0c:57:4e:ca:87:62:88:d7:78:f8:00:e1:68: 61:9f:9e:1e:9a:c5:ca:20:df:10:48:c0:5f:96:0a: 14:25:eb:50:49:47:30:30:9d:43:b2:1f:3d:5b:22: 02:63:43:23:4e:4a:86:7f:0d:24:9e:f6:9a:23:d3: 0f:5d:aa:38:60:66:37:c3:2b:91:28:31:a8:a8:96: ef:c2:2f:4b:c4:65:db:fc:2a:f7:e1:c9:67:45:d5: 5e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:08:6D:A6:D2:44:24:9E:09:34:B5:37:D0:FF:27:85:FF:5F:0D:64 X509v3 Authority Key Identifier: keyid:2B:69:EA:50:8D:C6:2D:34:C2:B3:CA:4F:BA:57:BF:3A:FF:FD:49:94 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc637bd-5971-4264-997a-749d804a6858/0/2B69EA508DC62D34C2B3CA4FBA57BF3AFFFD4994.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:59:a0:50:ff:86:d5:ac:f8:0f:33:27:af:95:29:51:de:a1: 4c:a9:38:10:f6:d8:54:ef:9c:3a:a1:10:06:a1:3d:bc:5a:76: 1c:98:0a:a1:01:ce:69:19:18:5e:62:07:81:f8:26:cf:ef:72: d4:c5:68:9f:48:e5:f6:54:ac:e1:f9:76:7e:97:88:c9:0d:36: c1:06:af:40:59:b0:95:a1:27:89:7b:a4:75:11:01:11:68:53: d4:fd:35:c8:65:19:d7:f0:c3:b1:82:b9:62:79:36:a2:e6:48: ac:dd:8f:70:07:8d:05:d2:38:af:44:78:d8:4e:9f:57:0d:17: c4:c0:82:9b:f3:f1:ae:b5:55:34:f4:30:97:cf:ba:71:2d:d7: 7e:99:2d:81:8c:e0:32:99:56:10:43:d2:60:1f:f6:af:ae:cd: 71:96:0a:a1:2c:05:22:69:a9:5f:cd:02:10:4c:87:8a:ee:d5: 65:3d:b2:52:12:96:86:8d:79:92:5d:42:f5:28:a1:c4:0e:62: 36:30:2c:5f:b1:46:1b:16:fb:c2:5b:91:1d:67:e3:83:05:32: d8:62:3e:bc:44:e3:ba:5f:4e:95:1c:e1:95:31:03:b8:62:05: 95:dc:af:23:92:c2:1b:43:ca:50:4c:5d:ca:4c:00:de:89:6f: e4:29:db:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJLs6BYiGQsWh+svTwfDkzmSITVQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FG RkZENDk5NDAeFw0yNjAzMjUxNzI2MTlaFw0yNjAzMjkwMDEwMTlaMDMxMTAvBgNV BAMTKEI3MDg2REE2RDI0NDI0OUUwOTM0QjUzN0QwRkYyNzg1RkY1RjBENjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt+G7fJJxxvUdA44aahgQpnu+8 jaqvxHQKLasuni0GOxH+m/L2U3W84GAUsASIhgzD5Jb8GfJ8q4chhOasJwYXbOq+ m+uzwICdATkco5zL2xMKcHhWPcNLQ7eItEBZv+3mdYycsqJBfSqsNH/OViLeT6Zk Vz8a8n+oPLNxuU3IqNqte8hz579Eek8H37DxwRoDTEHudKCgSWaWFaV1Pdv190vL L2W6DFdOyodiiNd4+ADhaGGfnh6axcog3xBIwF+WChQl61BJRzAwnUOyHz1bIgJj QyNOSoZ/DSSe9poj0w9dqjhgZjfDK5EoMaiolu/CL0vEZdv8KvfhyWdF1V5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtwhtptJEJJ4JNLU30P8nhf9fDWQwHwYDVR0j BBgwFoAUK2nqUI3GLTTCs8pPule/Ov/9SZQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2MzdiZC01OTcxLTQyNjQtOTk3YS03NDlkODA0YTY4NTgvMC8yQjY5RUE1MDhE QzYyRDM0QzJCM0NBNEZCQTU3QkYzQUZGRkQ0OTk0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JGM0FGRkZE NDk5NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNjM3YmQtNTk3MS00MjY0LTk5 N2EtNzQ5ZDgwNGE2ODU4LzAvMkI2OUVBNTA4REM2MkQzNEMyQjNDQTRGQkE1N0JG M0FGRkZENDk5NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGZZoFD/htWs+A8zJ6+VKVHeoUypOBD22FTv nDqhEAahPbxadhyYCqEBzmkZGF5iB4H4Js/vctTFaJ9I5fZUrOH5dn6XiMkNNsEG r0BZsJWhJ4l7pHURARFoU9T9NchlGdfww7GCuWJ5NqLmSKzdj3AHjQXSOK9EeNhO n1cNF8TAgpvz8a61VTT0MJfPunEt136ZLYGM4DKZVhBD0mAf9q+uzXGWCqEsBSJp qV/NAhBMh4ru1WU9slISloaNeZJdQvUoocQOYjYwLF+xRhsW+8JbkR1n44MFMthi PrxE47pfTpUc4ZUxA7hiBZXcryOSwhtDylBMXcpMAN6Jb+Qp26Y= -----END CERTIFICATE-----Generated at Thu Mar 26 20:11:07 2026 by rpki-client