$ rpki-client -vvf repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft File: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft (raw, json) Hash identifier: UN9qGsyvU5YfKeeo7zBzJzkaALQkNBGvMeHi1VZbDtM= Subject key identifier: 10:74:74:BF:E9:72:F9:02:67:D6:6D:27:34:5D:87:EF:03:CD:02:77 Authority key identifier: 2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD Certificate issuer: /CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Certificate serial: 3C0F165A94663CC6CEAD2CDCE90389D9D0DC1B60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft Manifest number: 0123 Signing time: Tue 24 Mar 2026 09:00:44 +0000 Manifest this update: Tue 24 Mar 2026 08:55:44 +0000 Manifest next update: Fri 27 Mar 2026 18:08:44 +0000 Files and hashes: 1: 3135372e36362e3132332e302f32342d3234203d3e20313532373731.roa (hash: U13ray6Q2sSoKG3Sl/JF9ePon4W14X24dzQnJX7hj3o=) 2: 2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl (hash: vHB1WCkxM9AjsAPxH1uh46NRS/V/o8daLLWkoFy+aTk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 18:08:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:0f:16:5a:94:66:3c:c6:ce:ad:2c:dc:e9:03:89:d9:d0:dc:1b:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD Validity Not Before: Mar 24 08:55:44 2026 GMT Not After : Mar 27 18:08:44 2026 GMT Subject: CN=107474BFE972F90267D66D27345D87EF03CD0277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:2d:3c:58:e4:f7:6f:ce:36:3b:b0:60:4a:93: fa:c4:bf:8a:fa:82:a5:0a:d4:b7:4b:a3:0d:4c:97: 97:84:ce:8d:dd:f6:d2:b5:5c:8e:08:ef:a5:e1:c3: ea:7a:1e:75:fa:ba:28:57:90:ac:d0:79:81:26:8d: 98:9e:7b:b2:43:46:58:de:2f:84:f7:f3:2e:5b:a6: a5:2d:d2:bf:eb:7c:15:7c:f5:b3:2b:43:83:4e:4d: e2:e7:bd:78:55:4d:cd:7d:67:12:5e:6e:01:ac:d8: 3a:87:e0:27:aa:0e:3a:33:7e:d4:64:c2:2c:9e:76: dc:ab:6e:df:ef:8a:5e:42:03:53:00:f0:d0:d3:8e: 3a:91:c3:03:85:81:e5:1f:18:e3:3f:33:03:0b:2c: ea:ea:c1:bf:77:53:cb:86:9b:42:fa:78:99:fe:34: 51:25:05:7d:68:06:ea:b4:c9:01:07:a8:70:ec:51: b1:f8:fa:ac:1f:38:2f:ef:1f:eb:9e:ab:32:22:7e: df:2e:81:2c:f4:a5:bb:f5:96:76:da:cd:0f:1f:51: 55:bf:a1:66:ec:37:c1:89:c4:c3:c6:4c:21:fa:64: 20:32:4c:b8:30:72:d1:f7:b5:eb:a5:1d:b9:49:fe: 6e:c2:b3:ae:2d:44:ff:9f:51:dd:a8:07:cc:a0:85: 81:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:74:74:BF:E9:72:F9:02:67:D6:6D:27:34:5D:87:EF:03:CD:02:77 X509v3 Authority Key Identifier: keyid:2A:62:B9:64:EC:86:44:7D:C2:2D:DE:70:DC:35:17:F0:CF:7C:9A:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c1b08845-df82-44c2-976d-6d74b81166f4/0/2A62B964EC86447DC22DDE70DC3517F0CF7C9ACD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:bf:72:97:e4:e6:33:4f:be:16:b7:b7:1b:77:aa:45:78:6e: 96:e9:4b:3d:84:9f:38:d7:30:1a:11:79:84:6a:c1:20:89:fa: 45:57:71:c4:f9:bb:d8:c0:ab:25:6a:ea:2d:d4:72:10:1d:2d: bd:4e:cf:48:75:56:1d:a7:7b:68:84:ee:11:15:d0:e6:d3:70: cb:1e:31:d0:5a:9b:9c:bb:c7:1a:44:fe:83:86:a5:04:4c:df: 65:5a:2d:66:bb:25:b9:82:92:0c:9d:0c:01:22:c2:46:f6:0b: 34:48:67:9c:36:45:d1:95:e6:48:55:42:d4:fa:25:1c:df:ae: af:b6:b3:06:15:0c:a7:4f:a9:ca:54:92:ac:3a:51:97:93:ff: 21:fa:04:83:5a:86:11:20:9d:ad:81:52:01:72:4e:eb:26:59: 96:29:e6:9e:7d:e1:57:0d:f9:6d:12:5b:18:05:5e:8e:32:aa: f0:cc:82:1d:b3:79:d7:5a:18:7a:8d:48:c4:81:13:67:48:2c: 7e:a5:ca:73:9e:0f:93:5a:4b:4b:dc:35:b8:a5:61:77:24:57: 19:03:be:8c:ae:8a:ec:2d:41:f3:f4:93:7e:a5:dc:16:7b:d6: 8e:c2:8a:35:0e:5f:33:84:58:32:85:78:3c:3c:54:49:4e:5a: c0:79:3e:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPA8WWpRmPMbOrSzc6QOJ2dDcG2AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBD RjdDOUFDRDAeFw0yNjAzMjQwODU1NDRaFw0yNjAzMjcxODA4NDRaMDMxMTAvBgNV BAMTKDEwNzQ3NEJGRTk3MkY5MDI2N0Q2NkQyNzM0NUQ4N0VGMDNDRDAyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzLTxY5PdvzjY7sGBKk/rEv4r6 gqUK1LdLow1Ml5eEzo3d9tK1XI4I76Xhw+p6HnX6uihXkKzQeYEmjZiee7JDRlje L4T38y5bpqUt0r/rfBV89bMrQ4NOTeLnvXhVTc19ZxJebgGs2DqH4CeqDjozftRk wiyedtyrbt/vil5CA1MA8NDTjjqRwwOFgeUfGOM/MwMLLOrqwb93U8uGm0L6eJn+ NFElBX1oBuq0yQEHqHDsUbH4+qwfOC/vH+ueqzIift8ugSz0pbv1lnbazQ8fUVW/ oWbsN8GJxMPGTCH6ZCAyTLgwctH3teulHblJ/m7Cs64tRP+fUd2oB8yghYELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEHR0v+ly+QJn1m0nNF2H7wPNAncwHwYDVR0j BBgwFoAUKmK5ZOyGRH3CLd5w3DUX8M98ms0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MWIwODg0NS1kZjgyLTQ0YzItOTc2ZC02ZDc0YjgxMTY2ZjQvMC8yQTYyQjk2NEVD ODY0NDdEQzIyRERFNzBEQzM1MTdGMENGN0M5QUNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3RjBDRjdD OUFDRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzFiMDg4NDUtZGY4Mi00NGMyLTk3 NmQtNmQ3NGI4MTE2NmY0LzAvMkE2MkI5NjRFQzg2NDQ3REMyMkRERTcwREMzNTE3 RjBDRjdDOUFDRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJO/cpfk5jNPvha3txt3qkV4bpbpSz2EnzjX MBoReYRqwSCJ+kVXccT5u9jAqyVq6i3UchAdLb1Oz0h1Vh2ne2iE7hEV0ObTcMse MdBam5y7xxpE/oOGpQRM32VaLWa7JbmCkgydDAEiwkb2CzRIZ5w2RdGV5khVQtT6 JRzfrq+2swYVDKdPqcpUkqw6UZeT/yH6BINahhEgna2BUgFyTusmWZYp5p594VcN +W0SWxgFXo4yqvDMgh2zeddaGHqNSMSBE2dILH6lynOeD5NaS0vcNbilYXckVxkD voyuiuwtQfP0k36l3BZ71o7CijUOXzOEWDKFeDw8VElOWsB5Pqg= -----END CERTIFICATE-----Generated at Thu Mar 26 13:55:09 2026 by rpki-client