$ rpki-client -vvf repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft File: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft (raw, json) Hash identifier: eTlkhnA+cAe8j4YNqbl6+k/4UIRiXYzhbmEOY+u2Om0= Subject key identifier: 33:64:A1:D4:3B:12:CE:6B:1A:DE:6B:EC:E2:A4:19:E7:6B:44:F8:DD Authority key identifier: 2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD Certificate issuer: /CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Certificate serial: 299158841480A2E9037ADF76E601213EA8097D80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft Manifest number: 0532 Signing time: Wed 25 Mar 2026 19:52:19 +0000 Manifest this update: Wed 25 Mar 2026 19:47:19 +0000 Manifest next update: Sat 28 Mar 2026 23:09:19 +0000 Files and hashes: 1: 2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl (hash: sofm6a7GNr5W4xXTs10O04V7Cqzx3Lu3ErGe5z4zlzM=) 2: 323430323a363938303a3a2f33322d3438203d3e203539323738.roa (hash: KRbdEJvKURW+VgG7P6m8/xbRP6/xVRqHAh+GE/ZxmJg=) 3: 323430323a363938303a323030303a3a2f34382d3438203d3e203539323738.roa (hash: D6GCo3ceVvJhAX1b+afxEUHTBD9rmTcpfSp7SCURViA=) 4: 3130332e35382e3136302e302f32322d3234203d3e203539323738.roa (hash: 3p6KpA6/uKsXu1iiVTHxP1H1aKBvRxURT7LJ3HzRuNw=) 5: 323430323a363938303a333030303a3a2f34382d3438203d3e203539323738.roa (hash: 1MuWl4R2LfAc9czxG6/QjtCE9g5QKK5BETiXC4FMLHs=) 6: 323430323a363938303a313030303a3a2f34382d3438203d3e203539323738.roa (hash: Cf4F1dHsLMAEwRXj/sLvggNAyN9aUktmarNyz8vl8uk=) 7: 3130332e3232372e3234302e302f32322d3234203d3e203539323738.roa (hash: pAsXLpsnvtFY9CiLQfO4MgBTQXdXjfq9fjmjjZL7V7Y=) 8: 323430323a363938303a343030303a3a2f34382d3438203d3e203539323738.roa (hash: LrRa5/YbMQIirnwavEqQmjlSXIv4GPDAL8XSH/RPz2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 23:09:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:91:58:84:14:80:a2:e9:03:7a:df:76:e6:01:21:3e:a8:09:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD Validity Not Before: Mar 25 19:47:19 2026 GMT Not After : Mar 28 23:09:19 2026 GMT Subject: CN=3364A1D43B12CE6B1ADE6BECE2A419E76B44F8DD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:e7:c4:3e:2c:b3:9a:c2:a6:91:fb:5b:2b:16: 2f:51:69:6d:68:ff:9b:9d:24:54:57:c8:e9:5b:14: cd:c4:c4:e4:05:ca:f1:47:75:8f:cb:ac:7f:3d:c2: 42:bb:95:2a:d7:c4:51:bd:99:d9:16:5f:75:21:4e: 74:5f:ba:51:ab:0b:73:26:96:ef:9e:06:70:30:4d: 20:0f:9a:fc:ce:c1:5a:e6:fa:52:06:5f:5c:db:36: 2a:99:95:c9:dd:b3:13:cd:5c:c4:e5:46:64:14:94: 6d:b8:2a:d6:51:18:ba:56:5b:07:4a:9f:00:35:02: 75:94:e4:ea:22:e0:45:76:90:a9:3d:9a:14:1b:e0: 1e:cc:bb:ac:10:c0:cd:aa:9f:de:85:5c:69:15:60: fa:c6:85:4e:29:b3:53:59:fd:25:49:e1:de:f1:59: 34:75:dc:14:9c:45:f5:20:1f:1b:0b:0d:75:0b:64: 8c:b7:af:7c:58:0e:8a:20:87:58:e1:c8:a1:d1:37: 07:99:6d:1e:7d:8f:e8:f8:98:f4:6c:16:95:0b:34: 07:d1:aa:cd:74:bb:c8:85:48:42:b1:b7:bf:30:e9: 04:c9:21:52:7c:93:21:43:bb:d1:88:e7:10:ed:03: ce:c7:d7:a2:b4:58:c9:03:8a:70:e7:e6:4a:7b:4e: c2:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:64:A1:D4:3B:12:CE:6B:1A:DE:6B:EC:E2:A4:19:E7:6B:44:F8:DD X509v3 Authority Key Identifier: keyid:2D:23:11:F5:63:DF:0A:F8:EB:EF:DA:21:87:16:26:B5:DD:78:C5:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/af1c79f1-264e-423f-9e08-0b2900da6949/0/2D2311F563DF0AF8EBEFDA21871626B5DD78C5BD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:0d:5f:f7:c1:2a:2b:fb:5e:26:a2:c8:08:30:8b:f6:ea:43: 25:7a:aa:43:4d:70:be:54:f3:a3:9e:33:d5:04:0a:2d:b6:1f: 3e:95:dd:7c:51:74:6e:72:87:44:ab:a2:8f:55:fd:19:3d:83: 09:ac:85:fd:ed:a5:68:6b:4c:ce:aa:18:29:3f:5a:16:1a:5d: 77:b7:88:57:1b:69:02:fb:8a:3e:b9:ca:b0:59:ee:14:de:9e: fa:8c:c2:94:a1:63:9c:17:f1:d4:94:b8:f9:24:c8:f9:eb:6c: ab:9d:ad:a7:93:9b:64:8f:b7:05:da:9e:e9:5c:0d:57:08:73: 72:40:b7:a2:73:ee:be:c8:fb:f0:9b:ee:22:06:99:e8:a8:76: 0a:76:dd:5f:e7:ae:c2:64:ea:4f:6f:02:29:58:95:69:4d:97: cb:fd:e0:40:24:ad:dd:6d:d1:f3:d2:92:fe:64:35:ba:b6:be: 4f:b3:c9:26:51:bb:d9:27:7f:79:58:6d:3e:69:dd:e2:cb:96: 3d:c4:e6:ca:85:63:7b:b2:69:97:1b:97:04:2b:f9:b3:92:65: d2:29:4d:95:d5:95:42:39:3f:ee:86:f6:72:e9:03:04:3f:64: 47:e5:51:fc:7a:47:46:e4:c6:e6:19:10:29:61:a5:32:2b:ca: 74:31:b1:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKZFYhBSAoukDet925gEhPqgJfYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVE RDc4QzVCRDAeFw0yNjAzMjUxOTQ3MTlaFw0yNjAzMjgyMzA5MTlaMDMxMTAvBgNV BAMTKDMzNjRBMUQ0M0IxMkNFNkIxQURFNkJFQ0UyQTQxOUU3NkI0NEY4REQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf58Q+LLOawqaR+1srFi9RaW1o /5udJFRXyOlbFM3ExOQFyvFHdY/LrH89wkK7lSrXxFG9mdkWX3UhTnRfulGrC3Mm lu+eBnAwTSAPmvzOwVrm+lIGX1zbNiqZlcndsxPNXMTlRmQUlG24KtZRGLpWWwdK nwA1AnWU5Ooi4EV2kKk9mhQb4B7Mu6wQwM2qn96FXGkVYPrGhU4ps1NZ/SVJ4d7x WTR13BScRfUgHxsLDXULZIy3r3xYDoogh1jhyKHRNweZbR59j+j4mPRsFpULNAfR qs10u8iFSEKxt78w6QTJIVJ8kyFDu9GI5xDtA87H16K0WMkDinDn5kp7TsLHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUM2Sh1DsSzmsa3mvs4qQZ52tE+N0wHwYDVR0j BBgwFoAULSMR9WPfCvjr79ohhxYmtd14xb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZjFjNzlmMS0yNjRlLTQyM2YtOWUwOC0wYjI5MDBkYTY5NDkvMC8yRDIzMTFGNTYz REYwQUY4RUJFRkRBMjE4NzE2MjZCNURENzhDNUJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2QjVERDc4 QzVCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWYxYzc5ZjEtMjY0ZS00MjNmLTll MDgtMGIyOTAwZGE2OTQ5LzAvMkQyMzExRjU2M0RGMEFGOEVCRUZEQTIxODcxNjI2 QjVERDc4QzVCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUNX/fBKiv7XiaiyAgwi/bqQyV6qkNNcL5U 86OeM9UECi22Hz6V3XxRdG5yh0Sroo9V/Rk9gwmshf3tpWhrTM6qGCk/WhYaXXe3 iFcbaQL7ij65yrBZ7hTenvqMwpShY5wX8dSUuPkkyPnrbKudraeTm2SPtwXanulc DVcIc3JAt6Jz7r7I+/Cb7iIGmeiodgp23V/nrsJk6k9vAilYlWlNl8v94EAkrd1t 0fPSkv5kNbq2vk+zySZRu9knf3lYbT5p3eLLlj3E5sqFY3uyaZcblwQr+bOSZdIp TZXVlUI5P+6G9nLpAwQ/ZEflUfx6R0bkxuYZEClhpTIrynQxseI= -----END CERTIFICATE-----Generated at Thu Mar 26 17:26:47 2026 by rpki-client