$ rpki-client -vvf repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft File: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft (raw, json) Hash identifier: GUNh9tip9e4ui1YrpCa0KNzKK0QCOJKigWVYj+KgA74= Subject key identifier: 76:28:BE:B6:7B:4E:61:61:5E:A7:D9:62:F0:4C:E4:60:9E:AC:4C:43 Authority key identifier: 2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 Certificate issuer: /CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Certificate serial: 026ABB5E6A4C352053427AF53BFF3288D6CF131B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft Manifest number: 038E Signing time: Tue 24 Mar 2026 12:42:15 +0000 Manifest this update: Tue 24 Mar 2026 12:37:15 +0000 Manifest next update: Fri 27 Mar 2026 12:46:15 +0000 Files and hashes: 1: 2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl (hash: MjABMPMPx0bVILYD+wMbXVpiW5qdLQdJkBMSL2QoRk4=) 2: 3130332e3136302e31322e302f32332d3234203d3e20313331313131.roa (hash: 2TjUbAwclmvFhuQfA5b8APF/xfL7qfTm8NzkksHu4ng=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:6a:bb:5e:6a:4c:35:20:53:42:7a:f5:3b:ff:32:88:d6:cf:13:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2CB21EF336B6AB4640E4619601E0F6488CB8FD52 Validity Not Before: Mar 24 12:37:15 2026 GMT Not After : Mar 27 12:46:15 2026 GMT Subject: CN=7628BEB67B4E61615EA7D962F04CE4609EAC4C43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:96:0d:d8:8a:18:ac:6a:70:3c:48:b5:79:29: 16:50:19:03:e4:fd:5c:9e:3d:50:1f:e4:19:7a:62: 11:ed:52:12:6e:f0:5c:16:99:f9:7d:35:0a:86:b7: ee:19:3a:a7:ac:bb:61:37:a6:6e:fb:47:42:c1:5e: 9d:06:28:71:cf:f1:07:37:fe:c5:7b:9d:43:09:13: df:9b:01:a5:f3:43:1e:d0:3f:e3:50:a9:d8:a6:41: de:b6:c6:0b:b2:ce:2b:0f:88:f2:19:0f:b2:73:2e: 7c:06:90:f4:97:1c:3f:9a:fc:72:50:9c:d8:7f:35: 9b:9b:67:f6:c6:5f:3d:c6:99:ea:ec:3c:84:e6:de: 00:e2:05:54:e4:37:a9:42:45:9f:b7:6a:8b:5b:fe: 72:94:e2:43:d5:0e:56:de:ef:33:90:92:c6:0e:5a: e7:65:b4:27:53:e7:5b:ce:81:0d:bc:14:74:bb:d7: a1:13:b2:4d:c2:b5:d3:90:5b:be:17:d9:2f:0f:f2: 07:15:19:99:c2:9f:1e:63:be:59:76:dc:fc:ce:11: dd:cb:9a:31:17:41:06:f3:2a:ce:b7:ef:d9:99:28: 4c:cf:92:4b:13:97:a1:18:d7:0f:68:e2:9b:09:c6: 80:19:10:13:bf:1f:1f:4c:15:28:0e:b0:48:e5:25: bc:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:28:BE:B6:7B:4E:61:61:5E:A7:D9:62:F0:4C:E4:60:9E:AC:4C:43 X509v3 Authority Key Identifier: keyid:2C:B2:1E:F3:36:B6:AB:46:40:E4:61:96:01:E0:F6:48:8C:B8:FD:52 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b4c6f770-686a-45ef-8dfb-0c3a87d3d8da/0/2CB21EF336B6AB4640E4619601E0F6488CB8FD52.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:f3:12:23:57:ab:b5:24:37:ab:24:31:87:41:25:78:52:0e: 16:a6:e1:c3:3e:36:34:62:39:0b:d7:ff:da:d6:6a:57:81:92: d4:51:cf:c4:d0:95:42:aa:74:41:c1:48:c7:ed:a6:30:fb:ee: 8b:21:23:8b:15:6d:e8:62:ba:e1:03:19:2b:d1:92:e4:65:10: bf:23:9d:bc:21:5d:f2:df:f0:b6:73:34:31:93:8f:6e:ea:1e: 49:4a:5a:88:9c:ac:64:d7:31:bb:f0:54:8c:26:17:62:56:1c: 8f:f5:f7:69:20:7f:50:84:33:4c:fc:f3:c6:21:ef:2d:63:2b: 72:55:8b:c5:f0:8f:94:27:5e:80:09:6d:73:65:19:1c:46:b4: 76:d0:33:64:e1:1d:28:78:ec:cf:79:b7:29:fa:17:98:2d:e4: ba:2b:56:8b:a9:05:bf:6a:81:39:a0:d6:36:88:00:35:ed:ff: e4:cf:6e:f3:db:e7:78:e4:ab:ae:3e:c6:c3:e0:20:b4:39:da: a3:6b:bd:45:32:03:da:27:d6:ef:c5:b0:68:48:c0:f6:ab:b5: 13:61:7a:1c:ad:06:73:ec:7d:28:77:ce:8c:13:b7:a1:cd:d9: ae:64:5e:90:9c:63:94:b2:f9:32:98:7d:f2:72:39:07:50:21: 5a:3d:db:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAmq7XmpMNSBTQnr1O/8yiNbPExswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4 Q0I4RkQ1MjAeFw0yNjAzMjQxMjM3MTVaFw0yNjAzMjcxMjQ2MTVaMDMxMTAvBgNV BAMTKDc2MjhCRUI2N0I0RTYxNjE1RUE3RDk2MkYwNENFNDYwOUVBQzRDNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4lg3YihisanA8SLV5KRZQGQPk /VyePVAf5Bl6YhHtUhJu8FwWmfl9NQqGt+4ZOqesu2E3pm77R0LBXp0GKHHP8Qc3 /sV7nUMJE9+bAaXzQx7QP+NQqdimQd62xguyzisPiPIZD7JzLnwGkPSXHD+a/HJQ nNh/NZubZ/bGXz3GmersPITm3gDiBVTkN6lCRZ+3aotb/nKU4kPVDlbe7zOQksYO WudltCdT51vOgQ28FHS716ETsk3CtdOQW74X2S8P8gcVGZnCnx5jvll23PzOEd3L mjEXQQbzKs6379mZKEzPkksTl6EY1w9o4psJxoAZEBO/Hx9MFSgOsEjlJbzxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdii+tntOYWFep9li8EzkYJ6sTEMwHwYDVR0j BBgwFoAULLIe8za2q0ZA5GGWAeD2SIy4/VIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i NGM2Zjc3MC02ODZhLTQ1ZWYtOGRmYi0wYzNhODdkM2Q4ZGEvMC8yQ0IyMUVGMzM2 QjZBQjQ2NDBFNDYxOTYwMUUwRjY0ODhDQjhGRDUyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2NDg4Q0I4 RkQ1Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjRjNmY3NzAtNjg2YS00NWVmLThk ZmItMGMzYTg3ZDNkOGRhLzAvMkNCMjFFRjMzNkI2QUI0NjQwRTQ2MTk2MDFFMEY2 NDg4Q0I4RkQ1Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC7zEiNXq7UkN6skMYdBJXhSDham4cM+NjRi OQvX/9rWaleBktRRz8TQlUKqdEHBSMftpjD77oshI4sVbehiuuEDGSvRkuRlEL8j nbwhXfLf8LZzNDGTj27qHklKWoicrGTXMbvwVIwmF2JWHI/192kgf1CEM0z888Yh 7y1jK3JVi8Xwj5QnXoAJbXNlGRxGtHbQM2ThHSh47M95tyn6F5gt5LorVoupBb9q gTmg1jaIADXt/+TPbvPb53jkq64+xsPgILQ52qNrvUUyA9on1u/FsGhIwPartRNh ehytBnPsfSh3zowTt6HN2a5kXpCcY5Sy+TKYffJyOQdQIVo920Q= -----END CERTIFICATE-----Generated at Thu Mar 26 07:35:15 2026 by rpki-client