$ rpki-client -vvf repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft File: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft (raw, json) Hash identifier: NkIbwTuunC9TZefYV91LENIYcQjbl6i61vDkyZI22/M= Subject key identifier: FC:DA:D8:95:5F:3E:2E:98:39:C7:F6:90:76:DF:14:7C:31:97:AA:17 Authority key identifier: 2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 Certificate issuer: /CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Certificate serial: 1E1B8CD96047F817C86CD8C2F157B48ADB356A11 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft Manifest number: 0262 Signing time: Thu 26 Mar 2026 00:21:00 +0000 Manifest this update: Thu 26 Mar 2026 00:16:00 +0000 Manifest next update: Sun 29 Mar 2026 08:47:00 +0000 Files and hashes: 1: 3130332e3139312e36312e302f32342d3234203d3e20313430343233.roa (hash: 0aiQ+HFFp3E4Ul7yjl9vQqZoXMc39/Rc/wytdZ1Fqvc=) 2: 3130332e3139312e36302e302f32332d3234203d3e20313430343233.roa (hash: yYJNqR/G5sUAXMOF0IPap8wZFYolAZMC0i9H8SllRlI=) 3: 2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl (hash: 0zu5zGOzSzFcXtxFrZoKw8Z1KkYAYG0QVBPfkuaQsOQ=) 4: 3130332e3139312e36302e302f32342d3234203d3e20313430343233.roa (hash: X3HIEEwQlR4yfqmx+zkvxJkm3aSOmIor+tLiUzbXopk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 29 Mar 2026 06:12:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:1b:8c:d9:60:47:f8:17:c8:6c:d8:c2:f1:57:b4:8a:db:35:6a:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5 Validity Not Before: Mar 26 00:16:00 2026 GMT Not After : Mar 29 08:47:00 2026 GMT Subject: CN=FCDAD8955F3E2E9839C7F69076DF147C3197AA17 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:84:53:05:36:4b:bb:11:0d:43:00:22:66:8b: 2d:04:3f:fb:9f:29:91:94:9e:bd:bf:63:0a:01:e1: 68:9b:54:cc:7e:10:cd:00:ee:d8:40:ac:2e:b2:fd: 93:1b:2b:04:82:91:c5:a0:e8:71:f0:78:c2:b5:59: cc:1b:ba:17:1d:63:18:65:d7:a3:38:f1:33:fc:10: d9:f5:f4:53:b7:55:45:1f:f3:82:0d:92:e2:57:62: a0:7c:ec:75:c2:9c:61:17:bc:0b:20:54:23:8a:95: 95:74:7a:7f:06:ce:ec:8f:26:63:ab:ae:d4:92:83: 73:33:0b:71:c8:80:84:ab:a9:48:bf:b0:75:84:99: e1:53:f5:01:85:56:56:b3:aa:89:1b:b7:6a:b6:eb: 9f:b7:6c:bf:52:52:c8:74:96:38:e2:7f:02:63:11: dc:f0:36:ea:62:6f:ad:8d:e1:98:21:df:ec:89:6a: 26:74:bf:fe:23:92:f0:5e:b2:e6:8a:3a:af:16:10: 16:2b:a4:0b:65:f1:44:2c:dd:6b:8d:37:d2:1d:cd: f7:fe:13:d4:37:02:34:ba:a2:10:2b:bb:2b:f6:57: 39:ff:f0:ea:d3:07:62:70:85:bb:91:1c:28:70:07: 92:3a:b1:39:f3:34:f4:c5:3c:82:fc:f4:3c:2b:ac: ae:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:DA:D8:95:5F:3E:2E:98:39:C7:F6:90:76:DF:14:7C:31:97:AA:17 X509v3 Authority Key Identifier: keyid:2D:6F:96:FA:63:0E:A7:AE:0A:2B:12:2B:6F:04:CC:4F:5F:32:CE:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae34d2d8-34af-4757-8ad9-92da35d92168/0/2D6F96FA630EA7AE0A2B122B6F04CC4F5F32CEB5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:56:37:45:6b:76:92:2f:d4:e7:d7:1d:68:11:bd:50:81:83: 66:57:e6:21:34:7a:7c:71:80:65:92:4e:9e:e4:e1:ec:e0:5a: ba:50:20:a4:8b:8a:68:8b:6a:14:44:9e:d0:99:32:02:9a:bf: 6d:50:cd:cb:a5:e2:f8:3e:70:ef:95:d3:d7:f1:6f:21:8c:7e: 08:bc:a9:f5:f4:cf:63:bc:22:ca:d3:ba:49:8e:94:9f:6a:17: d9:fb:f3:2a:3b:87:a7:5d:5b:a7:ea:26:09:3a:fe:47:1a:1a: dc:c3:2b:0c:60:e6:5c:8d:2a:89:5e:61:0e:00:fb:79:16:54: cd:3c:cd:27:91:7a:2f:00:b0:e1:35:5f:1a:7a:6c:c2:59:42: 88:eb:ae:43:77:c8:82:b5:48:83:bb:3b:06:8f:07:74:1c:3b: 79:12:88:02:88:1e:11:b3:cc:df:11:72:ce:1e:f4:24:01:f9: 81:1b:d6:0b:28:51:00:b9:76:a7:69:7a:21:1b:1d:b3:63:67: 5f:7c:c6:d7:35:74:3d:df:a9:13:f0:30:3f:e6:77:06:60:9a: 47:ac:48:fc:d6:ee:43:e3:07:ff:2c:50:b5:62:d7:3f:69:ac: 64:3c:73:86:f5:85:e2:46:89:e3:6a:99:7c:88:d6:08:fe:8e: 8a:d0:2e:fa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHhuM2WBH+BfIbNjC8Ve0its1ahEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1 RjMyQ0VCNTAeFw0yNjAzMjYwMDE2MDBaFw0yNjAzMjkwODQ3MDBaMDMxMTAvBgNV BAMTKEZDREFEODk1NUYzRTJFOTgzOUM3RjY5MDc2REYxNDdDMzE5N0FBMTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHhFMFNku7EQ1DACJmiy0EP/uf KZGUnr2/YwoB4WibVMx+EM0A7thArC6y/ZMbKwSCkcWg6HHweMK1WcwbuhcdYxhl 16M48TP8ENn19FO3VUUf84INkuJXYqB87HXCnGEXvAsgVCOKlZV0en8GzuyPJmOr rtSSg3MzC3HIgISrqUi/sHWEmeFT9QGFVlazqokbt2q265+3bL9SUsh0ljjifwJj EdzwNupib62N4Zgh3+yJaiZ0v/4jkvBesuaKOq8WEBYrpAtl8UQs3WuNN9Idzff+ E9Q3AjS6ohAruyv2Vzn/8OrTB2JwhbuRHChwB5I6sTnzNPTFPIL89DwrrK4TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/NrYlV8+Lpg5x/aQdt8UfDGXqhcwHwYDVR0j BBgwFoAULW+W+mMOp64KKxIrbwTMT18yzrUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTM0ZDJkOC0zNGFmLTQ3NTctOGFkOS05MmRhMzVkOTIxNjgvMC8yRDZGOTZGQTYz MEVBN0FFMEEyQjEyMkI2RjA0Q0M0RjVGMzJDRUI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNENDNEY1RjMy Q0VCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWUzNGQyZDgtMzRhZi00NzU3LThh ZDktOTJkYTM1ZDkyMTY4LzAvMkQ2Rjk2RkE2MzBFQTdBRTBBMkIxMjJCNkYwNEND NEY1RjMyQ0VCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5WN0VrdpIv1OfXHWgRvVCBg2ZX5iE0enxx gGWSTp7k4ezgWrpQIKSLimiLahREntCZMgKav21Qzcul4vg+cO+V09fxbyGMfgi8 qfX0z2O8IsrTukmOlJ9qF9n78yo7h6ddW6fqJgk6/kcaGtzDKwxg5lyNKoleYQ4A +3kWVM08zSeRei8AsOE1Xxp6bMJZQojrrkN3yIK1SIO7OwaPB3QcO3kSiAKIHhGz zN8Rcs4e9CQB+YEb1gsoUQC5dqdpeiEbHbNjZ198xtc1dD3fqRPwMD/mdwZgmkes SPzW7kPjB/8sULVi1z9prGQ8c4b1heJGieNqmXyI1gj+jorQLvo= -----END CERTIFICATE-----Generated at Thu Mar 26 05:46:21 2026 by rpki-client