$ rpki-client -vvf repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft File: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft (raw, json) Hash identifier: neeBEX5IyE31fFsHiGVSbVf9aONNjOmDa/VG1eqsNf8= Subject key identifier: FA:20:C7:5D:5B:47:94:F4:0C:75:C6:A5:F0:72:F0:60:AD:9F:CB:33 Authority key identifier: 2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C Certificate issuer: /CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Certificate serial: 5CF00A01FF9C10A7829F3A2974A5C86D2ED890A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft Manifest number: 0113 Signing time: Wed 25 Mar 2026 16:01:55 +0000 Manifest this update: Wed 25 Mar 2026 15:56:55 +0000 Manifest next update: Sat 28 Mar 2026 18:39:55 +0000 Files and hashes: 1: 2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl (hash: SJSU10RfhFDO8uLmTzo7qkWYAZvlMtZL0FJWHTmV/yM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 18:39:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:f0:0a:01:ff:9c:10:a7:82:9f:3a:29:74:a5:c8:6d:2e:d8:90:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C Validity Not Before: Mar 25 15:56:55 2026 GMT Not After : Mar 28 18:39:55 2026 GMT Subject: CN=FA20C75D5B4794F40C75C6A5F072F060AD9FCB33 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:b9:fa:c9:90:95:88:dc:25:74:f6:40:6e:d0: ad:70:92:5e:7f:4c:04:ca:0b:02:61:2e:02:8a:2d: 08:1e:cd:3e:39:d1:4d:31:7d:b2:10:e4:2b:9c:68: d3:99:60:73:95:3d:a0:57:2f:11:2f:36:c7:2a:b3: 8b:db:f2:2f:00:61:74:51:1d:2b:d4:cf:b2:60:07: b1:88:86:e5:c2:a3:34:8b:b4:c1:fb:02:d5:86:14: 82:90:84:95:9c:46:b2:b9:51:19:80:82:90:c4:8d: c0:20:ed:ab:ff:49:ef:64:89:01:49:60:05:b3:96: d4:fb:c1:dc:06:36:e8:f1:f4:fd:a1:43:3c:ed:c2: 14:b0:d7:5f:de:5e:f9:a6:6e:ae:02:f4:89:ee:fa: 89:c9:3e:2a:30:c6:45:22:95:13:11:9e:56:41:2f: 41:ad:ff:fe:fa:ae:34:be:45:1e:04:8f:a7:7f:09: ff:1c:0e:5c:b3:5f:cb:08:8f:2e:a8:a7:a3:ca:c8: 5f:31:1b:08:1f:41:24:08:9e:52:e7:5d:ec:af:5c: f0:93:d0:39:5d:83:9a:23:d9:5f:b0:ab:9f:35:5f: b8:e5:22:3f:fc:9f:14:4f:f8:24:39:bc:dc:15:e9: 89:37:59:b2:63:e4:15:4d:49:ba:8b:01:6e:40:93: 6a:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:20:C7:5D:5B:47:94:F4:0C:75:C6:A5:F0:72:F0:60:AD:9F:CB:33 X509v3 Authority Key Identifier: keyid:2A:57:5A:DD:64:4E:97:D6:1D:2E:BF:FF:2A:23:05:6B:78:EF:AE:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd354c1b-677e-41d6-ab0f-e96edfd92957/0/2A575ADD644E97D61D2EBFFF2A23056B78EFAE6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:c2:b6:e8:d0:5d:5c:7b:6c:43:1e:48:bc:f9:b0:bb:34:bb: 9f:df:42:12:c8:e1:ae:1a:c8:c3:42:6c:23:97:c5:da:f6:99: d5:d2:8a:79:02:06:83:70:eb:49:66:8b:cb:7d:af:f1:32:d1: 6e:ac:86:78:6f:8d:ca:ee:c8:8d:ba:e2:8b:74:04:f5:d9:86: 5f:ad:e3:66:8d:ee:bc:67:b7:71:de:7e:3b:4d:e1:a1:05:e3: f1:94:28:23:81:11:6a:61:87:8b:3b:b0:18:8c:fc:9a:2e:a7: bc:89:41:10:81:1d:35:9a:33:3c:5f:ea:8e:68:1a:63:92:dc: 23:16:9a:a0:6f:33:d8:fe:0b:46:55:84:67:34:67:d0:ca:12: d2:10:d4:cf:45:17:69:99:89:11:11:32:74:cc:00:ee:74:ac: 88:2d:73:9c:ad:4f:fc:56:0b:d9:ce:a3:9b:e8:80:47:07:f7: bf:e2:8a:26:3d:49:df:e2:f8:f6:1c:50:73:e6:f0:cc:0f:c8: bc:dd:9b:84:c8:b9:28:c4:07:b7:74:6d:6a:4c:af:b0:21:57: ec:70:f2:72:17:e5:d3:f4:a9:6d:96:65:e8:49:2b:a6:36:21: cc:bf:45:26:32:30:38:16:91:c7:e5:a5:78:71:d8:e9:ed:a7: 6b:e3:db:7f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXPAKAf+cEKeCnzopdKXIbS7YkKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3 OEVGQUU2QzAeFw0yNjAzMjUxNTU2NTVaFw0yNjAzMjgxODM5NTVaMDMxMTAvBgNV BAMTKEZBMjBDNzVENUI0Nzk0RjQwQzc1QzZBNUYwNzJGMDYwQUQ5RkNCMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJufrJkJWI3CV09kBu0K1wkl5/ TATKCwJhLgKKLQgezT450U0xfbIQ5CucaNOZYHOVPaBXLxEvNscqs4vb8i8AYXRR HSvUz7JgB7GIhuXCozSLtMH7AtWGFIKQhJWcRrK5URmAgpDEjcAg7av/Se9kiQFJ YAWzltT7wdwGNujx9P2hQzztwhSw11/eXvmmbq4C9Inu+onJPiowxkUilRMRnlZB L0Gt//76rjS+RR4Ej6d/Cf8cDlyzX8sIjy6op6PKyF8xGwgfQSQInlLnXeyvXPCT 0Dldg5oj2V+wq581X7jlIj/8nxRP+CQ5vNwV6Yk3WbJj5BVNSbqLAW5Ak2qLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+iDHXVtHlPQMdcal8HLwYK2fyzMwHwYDVR0j BBgwFoAUKlda3WROl9YdLr//KiMFa3jvrmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZDM1NGMxYi02NzdlLTQxZDYtYWIwZi1lOTZlZGZkOTI5NTcvMC8yQTU3NUFERDY0 NEU5N0Q2MUQyRUJGRkYyQTIzMDU2Qjc4RUZBRTZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1NkI3OEVG QUU2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmQzNTRjMWItNjc3ZS00MWQ2LWFi MGYtZTk2ZWRmZDkyOTU3LzAvMkE1NzVBREQ2NDRFOTdENjFEMkVCRkZGMkEyMzA1 NkI3OEVGQUU2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbCtujQXVx7bEMeSLz5sLs0u5/fQhLI4a4a yMNCbCOXxdr2mdXSinkCBoNw60lmi8t9r/Ey0W6shnhvjcruyI264ot0BPXZhl+t 42aN7rxnt3HefjtN4aEF4/GUKCOBEWphh4s7sBiM/Joup7yJQRCBHTWaMzxf6o5o GmOS3CMWmqBvM9j+C0ZVhGc0Z9DKEtIQ1M9FF2mZiRERMnTMAO50rIgtc5ytT/xW C9nOo5vogEcH97/iiiY9Sd/i+PYcUHPm8MwPyLzdm4TIuSjEB7d0bWpMr7AhV+xw 8nIX5dP0qW2WZehJK6Y2Icy/RSYyMDgWkcflpXhx2Ontp2vj238= -----END CERTIFICATE-----Generated at Thu Mar 26 15:18:17 2026 by rpki-client