$ rpki-client -vvf repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft File: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft (raw, json) Hash identifier: cmrLrNOTr4CAC6GIDrfpzWa6A8ufjduieZnewlOUTDs= Subject key identifier: 3E:E3:8C:85:ED:3C:A4:9F:5E:F9:48:FE:63:11:F0:F0:0C:96:5A:5E Authority key identifier: 2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 Certificate issuer: /CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Certificate serial: 7211DB476B79719297F1E8D47807C603DDF9472B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft Manifest number: 0183 Signing time: Tue 24 Mar 2026 17:20:58 +0000 Manifest this update: Tue 24 Mar 2026 17:15:58 +0000 Manifest next update: Fri 27 Mar 2026 19:50:58 +0000 Files and hashes: 1: 2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl (hash: 5NJ7QSf+EyNxYJoBEbkzqHdZqPvBY9VwLw7Agn4Q88Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 19:50:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:11:db:47:6b:79:71:92:97:f1:e8:d4:78:07:c6:03:dd:f9:47:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E8BAC7E81911F08A189CA9FDD32A643C88E05B7 Validity Not Before: Mar 24 17:15:58 2026 GMT Not After : Mar 27 19:50:58 2026 GMT Subject: CN=3EE38C85ED3CA49F5EF948FE6311F0F00C965A5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:e6:b6:03:0f:08:b2:6f:bf:59:cf:a3:0a:2c: b6:c8:af:76:bf:ce:e4:bc:e6:42:f8:85:f1:55:9b: c9:ff:ea:12:9b:9e:84:29:33:f5:0d:28:de:1a:65: 1c:e8:09:8d:13:10:1a:6a:be:61:69:5c:a6:48:e4: 0b:9e:da:60:31:6b:87:de:4c:91:2b:f6:e4:bf:ac: da:dd:6a:d7:da:e0:bd:fa:70:53:2f:92:64:d8:09: 78:34:8c:5c:3f:ca:1c:2b:36:60:71:81:d2:15:d7: ca:c9:6a:d6:4d:d7:36:97:be:65:07:4f:59:3f:7a: 2a:02:eb:7e:77:0a:6f:d8:47:1b:31:28:60:45:e5: 50:ed:d4:46:37:a5:e2:10:cc:2e:e5:48:ba:07:28: d7:48:25:ca:67:a3:22:8b:50:6e:df:89:ee:7b:a7: db:00:48:34:9b:aa:6d:5d:fb:e4:20:d3:a6:3c:74: 21:28:00:08:4c:1d:f5:48:4c:5e:39:39:b6:25:66: 20:6d:e4:c6:8d:50:1d:23:02:13:38:c6:ec:b5:35: ac:5e:44:f0:ed:b9:39:33:8b:22:7a:9e:ad:bb:f6: 5d:4d:c6:e7:89:a4:73:bd:c6:8a:d8:92:54:37:8d: 45:fe:61:2b:24:64:03:cb:ee:0d:1c:88:5b:9d:61: cb:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:E3:8C:85:ED:3C:A4:9F:5E:F9:48:FE:63:11:F0:F0:0C:96:5A:5E X509v3 Authority Key Identifier: keyid:2E:8B:AC:7E:81:91:1F:08:A1:89:CA:9F:DD:32:A6:43:C8:8E:05:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b28626e0-29fe-4e86-84d6-68478c5cd9ed/0/2E8BAC7E81911F08A189CA9FDD32A643C88E05B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:d4:9e:89:5d:e5:7c:64:e2:47:c6:97:5f:09:13:3f:f8:82: cb:b5:cb:d0:d9:7d:f6:05:b0:f7:a1:70:6d:24:0b:17:70:4c: 44:39:b4:9d:14:b6:f0:47:a2:0d:25:ef:9c:60:ac:1d:57:c9: 2e:77:3a:6a:86:50:eb:15:5d:cf:8c:6a:fb:ff:9b:0e:1f:a9: 98:68:5a:ce:be:3f:e0:13:e8:3e:a3:c4:be:7e:cb:f8:2b:74: 03:fa:17:e8:94:82:e5:42:96:19:8b:a0:66:2b:24:95:e0:1a: a6:95:97:41:13:8f:65:e8:ab:b5:5e:83:0e:97:3a:e6:97:3a: a5:c0:e2:47:39:ab:fc:32:ef:fe:a8:4d:0c:6c:1a:21:a9:89: ad:bf:72:d7:ae:75:e2:da:e0:fb:84:7c:b9:af:ff:e1:28:0f: 5c:3d:4d:a3:26:2e:25:66:86:e1:af:b0:10:f6:ea:57:7f:a2: 18:54:49:4b:11:6b:9a:f8:95:82:cb:cf:89:97:21:33:03:cf: 4d:4d:4c:c7:87:ed:f9:a1:5b:aa:70:ec:62:64:1e:3c:36:32: 7b:94:24:2d:91:b2:ce:43:96:0c:62:5a:d6:bf:bd:ff:0b:b5: b8:e8:50:7d:6d:1d:1b:4c:7b:c1:33:8f:6c:67:4e:d5:3b:73: 72:ac:36:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUchHbR2t5cZKX8ejUeAfGA935RyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDND ODhFMDVCNzAeFw0yNjAzMjQxNzE1NThaFw0yNjAzMjcxOTUwNThaMDMxMTAvBgNV BAMTKDNFRTM4Qzg1RUQzQ0E0OUY1RUY5NDhGRTYzMTFGMEYwMEM5NjVBNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCy5rYDDwiyb79Zz6MKLLbIr3a/ zuS85kL4hfFVm8n/6hKbnoQpM/UNKN4aZRzoCY0TEBpqvmFpXKZI5Aue2mAxa4fe TJEr9uS/rNrdatfa4L36cFMvkmTYCXg0jFw/yhwrNmBxgdIV18rJatZN1zaXvmUH T1k/eioC6353Cm/YRxsxKGBF5VDt1EY3peIQzC7lSLoHKNdIJcpnoyKLUG7fie57 p9sASDSbqm1d++Qg06Y8dCEoAAhMHfVITF45ObYlZiBt5MaNUB0jAhM4xuy1Naxe RPDtuTkziyJ6nq279l1NxueJpHO9xorYklQ3jUX+YSskZAPL7g0ciFudYcuFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPuOMhe08pJ9e+Uj+YxHw8AyWWl4wHwYDVR0j BBgwFoAULousfoGRHwihicqf3TKmQ8iOBbcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i Mjg2MjZlMC0yOWZlLTRlODYtODRkNi02ODQ3OGM1Y2Q5ZWQvMC8yRThCQUM3RTgx OTExRjA4QTE4OUNBOUZERDMyQTY0M0M4OEUwNUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2NDNDODhF MDVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjI4NjI2ZTAtMjlmZS00ZTg2LTg0 ZDYtNjg0NzhjNWNkOWVkLzAvMkU4QkFDN0U4MTkxMUYwOEExODlDQTlGREQzMkE2 NDNDODhFMDVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEPUnold5Xxk4kfGl18JEz/4gsu1y9DZffYF sPehcG0kCxdwTEQ5tJ0UtvBHog0l75xgrB1XyS53OmqGUOsVXc+Mavv/mw4fqZho Ws6+P+AT6D6jxL5+y/grdAP6F+iUguVClhmLoGYrJJXgGqaVl0ETj2Xoq7Vegw6X OuaXOqXA4kc5q/wy7/6oTQxsGiGpia2/cteudeLa4PuEfLmv/+EoD1w9TaMmLiVm huGvsBD26ld/ohhUSUsRa5r4lYLLz4mXITMDz01NTMeH7fmhW6pw7GJkHjw2MnuU JC2Rss5DlgxiWta/vf8LtbjoUH1tHRtMe8Ezj2xnTtU7c3KsNlU= -----END CERTIFICATE-----Generated at Thu Mar 26 09:04:52 2026 by rpki-client