$ rpki-client -vvf repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft File: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft (raw, json) Hash identifier: ro49TBgP3b0ikLuUjnOA9zDJcP4fMjuMq2nWZwaQAv4= Subject key identifier: 02:14:37:22:FC:C8:CF:3F:D6:F2:DF:ED:B2:15:FF:0F:B6:7C:F3:D0 Authority key identifier: 2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B Certificate issuer: /CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Certificate serial: 0A6E600DE8B52B15A0143AE5DB7BC345CDE0EF66 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft Manifest number: 055E Signing time: Wed 25 Mar 2026 01:20:57 +0000 Manifest this update: Wed 25 Mar 2026 01:15:57 +0000 Manifest next update: Sat 28 Mar 2026 08:18:57 +0000 Files and hashes: 1: 3130332e3134352e3234322e302f32332d3234203d3e20313339343534.roa (hash: D2W67nt589wKu+2Bfg+V0s/E2/ZjISUp5pz9rbCWuK0=) 2: 2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl (hash: 2XgWVTf7HM+t89NE1orGWR0csXW0tN9hmtxrJuhzwFk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 28 Mar 2026 08:18:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:6e:60:0d:e8:b5:2b:15:a0:14:3a:e5:db:7b:c3:45:cd:e0:ef:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B Validity Not Before: Mar 25 01:15:57 2026 GMT Not After : Mar 28 08:18:57 2026 GMT Subject: CN=02143722FCC8CF3FD6F2DFEDB215FF0FB67CF3D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:8a:35:2b:1e:91:c4:2b:58:cf:b7:ba:56:11: 38:fd:df:fe:84:5d:c4:b9:5f:b6:a3:d1:59:5e:6f: f6:6e:a2:99:65:66:fa:7f:39:a2:3f:a4:60:a9:30: ac:ef:87:9f:1c:38:7b:d1:9f:0b:12:29:a7:07:a5: ff:80:ac:88:2d:5e:1a:7e:ff:bb:13:b9:f1:1f:bf: 74:df:0a:37:1d:f9:23:92:86:ea:56:c6:36:39:ba: 8a:d6:0e:1f:05:43:de:8d:02:b0:e7:80:35:25:6c: 99:c1:d0:7e:85:d7:af:19:53:81:f9:bc:b5:b6:ab: 7a:dc:8b:99:0c:97:8e:2e:34:be:8c:5a:0e:5d:24: b8:4e:a3:38:cf:00:24:3c:77:bd:27:8b:43:d0:04: 5d:9b:cb:e3:0d:4a:60:0a:8d:42:1b:d9:f5:48:2c: 77:54:c4:e9:e7:0e:9b:3f:a6:ef:9b:71:c4:fd:49: 0c:3e:51:8d:02:a3:65:f2:3d:6f:ed:e3:c9:85:1c: 4e:92:59:c0:2a:33:dd:85:b8:d5:d5:a5:de:dc:bc: 1d:b1:40:69:c6:f8:17:0e:8d:15:aa:f1:8f:e1:b3: 4e:4b:8b:f0:60:3c:49:ec:25:6b:54:41:07:f0:3b: 03:3c:ea:f1:a1:17:63:a9:40:f6:77:e0:5e:80:f9: a1:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:14:37:22:FC:C8:CF:3F:D6:F2:DF:ED:B2:15:FF:0F:B6:7C:F3:D0 X509v3 Authority Key Identifier: keyid:2A:2A:BC:86:29:3A:3D:A3:60:2C:0D:FB:CE:D7:D9:92:4F:E5:A5:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d750a651-1a1a-4501-a8bc-9591e1109a27/0/2A2ABC86293A3DA3602C0DFBCED7D9924FE5A58B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:3f:4a:11:27:37:49:b8:c0:fa:d4:d1:ce:55:06:4e:8f:e7: c3:47:1f:f5:da:b1:2f:e0:b7:d4:82:e3:8a:29:da:5c:d9:5a: 4c:dd:6d:cd:74:ef:87:75:6f:b5:0a:de:72:bb:08:82:4c:32: 2b:bb:08:17:b8:12:51:0d:c0:51:c1:da:b0:99:48:1c:e9:09: 2d:14:d3:4e:03:c7:76:c5:94:0e:f7:b8:f6:57:ee:af:e3:2b: d0:d1:b1:d2:75:50:e2:af:32:f5:4b:f1:22:b4:12:a2:cc:32: 6f:4e:86:08:f8:40:a0:65:fc:47:8c:61:c8:7c:85:e6:bd:02: 2d:a2:65:46:87:9b:c4:a6:65:e9:7d:56:87:38:99:1c:e5:c1: 2d:29:8e:c8:20:f0:e0:50:92:a5:17:bb:d0:0d:d4:52:af:e0: 18:44:46:51:74:9a:d6:3e:29:12:2d:f2:6e:f2:72:75:60:7c: c9:03:55:99:66:9b:3f:88:af:b4:c0:1f:72:a3:f3:e1:dc:e4: fa:8f:aa:b9:38:e4:b2:1c:df:e3:9a:f1:5e:bc:88:6f:6e:84: 3b:b2:d5:e6:79:99:9b:ee:5a:16:6d:ff:72:cf:89:5c:79:45: 1b:1e:5a:b7:4a:05:8b:85:92:c6:cb:0d:d3:ba:b9:c1:6c:1b: 07:d7:d9:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCm5gDei1KxWgFDrl23vDRc3g72YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0 RkU1QTU4QjAeFw0yNjAzMjUwMTE1NTdaFw0yNjAzMjgwODE4NTdaMDMxMTAvBgNV BAMTKDAyMTQzNzIyRkNDOENGM0ZENkYyREZFREIyMTVGRjBGQjY3Q0YzRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvijUrHpHEK1jPt7pWETj93/6E XcS5X7aj0Vleb/ZuopllZvp/OaI/pGCpMKzvh58cOHvRnwsSKacHpf+ArIgtXhp+ /7sTufEfv3TfCjcd+SOShupWxjY5uorWDh8FQ96NArDngDUlbJnB0H6F168ZU4H5 vLW2q3rci5kMl44uNL6MWg5dJLhOozjPACQ8d70ni0PQBF2by+MNSmAKjUIb2fVI LHdUxOnnDps/pu+bccT9SQw+UY0Co2XyPW/t48mFHE6SWcAqM92FuNXVpd7cvB2x QGnG+BcOjRWq8Y/hs05Li/BgPEnsJWtUQQfwOwM86vGhF2OpQPZ34F6A+aFfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAhQ3IvzIzz/W8t/tshX/D7Z889AwHwYDVR0j BBgwFoAUKiq8hik6PaNgLA37ztfZkk/lpYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzUwYTY1MS0xYTFhLTQ1MDEtYThiYy05NTkxZTExMDlhMjcvMC8yQTJBQkM4NjI5 M0EzREEzNjAyQzBERkJDRUQ3RDk5MjRGRTVBNThCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5OTI0RkU1 QTU4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc1MGE2NTEtMWExYS00NTAxLWE4 YmMtOTU5MWUxMTA5YTI3LzAvMkEyQUJDODYyOTNBM0RBMzYwMkMwREZCQ0VEN0Q5 OTI0RkU1QTU4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKM/ShEnN0m4wPrU0c5VBk6P58NHH/XasS/g t9SC44op2lzZWkzdbc1074d1b7UK3nK7CIJMMiu7CBe4ElENwFHB2rCZSBzpCS0U 004Dx3bFlA73uPZX7q/jK9DRsdJ1UOKvMvVL8SK0EqLMMm9Ohgj4QKBl/EeMYch8 hea9Ai2iZUaHm8SmZel9Voc4mRzlwS0pjsgg8OBQkqUXu9AN1FKv4BhERlF0mtY+ KRIt8m7ycnVgfMkDVZlmmz+Ir7TAH3Kj8+Hc5PqPqrk45LIc3+Oa8V68iG9uhDuy 1eZ5mZvuWhZt/3LPiVx5RRseWrdKBYuFksbLDdO6ucFsGwfX2Sk= -----END CERTIFICATE-----Generated at Thu Mar 26 13:32:52 2026 by rpki-client