$ rpki-client -vvf repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft File: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft (raw, json) Hash identifier: OUHhvRkyxP+jSeLocrL8N4PdihWwXKe3Q4p5+37APEs= Subject key identifier: 97:93:BE:68:21:A9:10:6D:1B:25:19:31:97:F0:C5:BA:B3:2C:23:F1 Authority key identifier: 2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D Certificate issuer: /CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Certificate serial: 62A6D0C0076A8F8811774F235EA9735DAFAA49DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft Manifest number: 02A6 Signing time: Tue 24 Mar 2026 11:02:10 +0000 Manifest this update: Tue 24 Mar 2026 10:57:10 +0000 Manifest next update: Fri 27 Mar 2026 12:45:10 +0000 Files and hashes: 1: 3130332e3138312e3235302e302f32332d3233203d3e2039333431.roa (hash: BFfPGawHeoQ/eOFBPTAudUOh1OvlQi2pQ6d0UuAg2ps=) 2: 3130332e3138312e3235312e302f32342d3234203d3e2039333431.roa (hash: /BgsaX/1HfoPmyJKSyHQQlcpArcrtr8zEFIAjI32KOA=) 3: 3130332e3138312e3235302e302f32342d3234203d3e2039333431.roa (hash: Vmie2s+Au9bD7oUrSucjO7WCyj2PVNNegBmJmg18JCw=) 4: 2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl (hash: st3+irpb9lFCg59teZnb3QPI4Z+S0MH64vhdbly/WpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 27 Mar 2026 12:45:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:a6:d0:c0:07:6a:8f:88:11:77:4f:23:5e:a9:73:5d:af:aa:49:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2E2D926932C5C7E296931D881908A4BB1E98EB6D Validity Not Before: Mar 24 10:57:10 2026 GMT Not After : Mar 27 12:45:10 2026 GMT Subject: CN=9793BE6821A9106D1B25193197F0C5BAB32C23F1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:72:b5:21:05:00:e0:cd:ce:1a:ed:a8:e4:f9: 0c:cd:9e:87:c4:6e:af:b2:2a:a6:76:a9:eb:f8:1e: 4f:22:ae:e7:8e:6a:ab:3f:96:29:25:9a:0c:6c:01: 7b:84:48:b3:71:db:a7:db:77:ba:07:fe:e2:69:6d: 44:ab:48:de:9a:3f:a0:46:4b:68:58:44:ad:ea:53: 96:5f:96:aa:24:ef:62:0d:01:6d:fb:9c:a2:45:cd: 87:a7:62:c3:6f:11:21:ec:b1:b7:64:ea:b3:33:75: bb:e9:87:27:fc:13:c2:05:09:6b:36:84:a9:c3:9d: db:71:58:64:42:68:cf:14:a7:12:5b:d2:9a:84:6c: 3d:4c:3f:6e:de:47:18:be:b8:9b:97:b5:ec:c8:56: 65:7b:da:50:9f:61:a2:94:07:6f:b8:22:71:4e:17: b6:fe:70:39:4b:48:a9:b6:15:f5:3f:8a:70:05:79: 99:9f:56:a1:30:f5:fe:8a:43:04:7f:a7:9d:cb:77: da:ec:9e:22:12:e0:c0:5f:e7:f9:69:d3:59:0f:b2: a1:ac:1b:9d:dd:89:b4:1b:83:16:3d:74:d8:0d:59: 39:84:41:df:91:ae:aa:2e:47:03:4b:07:8d:23:b5: dd:a7:a3:fe:be:d8:d6:0a:57:80:21:c4:74:97:e9: 18:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:93:BE:68:21:A9:10:6D:1B:25:19:31:97:F0:C5:BA:B3:2C:23:F1 X509v3 Authority Key Identifier: keyid:2E:2D:92:69:32:C5:C7:E2:96:93:1D:88:19:08:A4:BB:1E:98:EB:6D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E2D926932C5C7E296931D881908A4BB1E98EB6D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfa589ef-9f3d-43bc-ba30-fa326b71f787/0/2E2D926932C5C7E296931D881908A4BB1E98EB6D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:b2:f1:a2:85:6e:36:88:c9:6b:dc:a6:af:97:5a:a5:c9:a6: 88:85:26:bd:c2:23:e2:9b:4c:68:74:9a:64:d2:5e:58:2a:76: ab:fa:06:4f:7d:a3:de:c6:6c:23:7b:47:60:b3:55:79:e6:89: 0a:c8:ec:3d:9f:8d:43:83:f1:55:7f:25:4e:90:d7:8e:88:20: 1b:5b:24:60:b6:da:62:f5:50:24:a5:d8:34:f9:c2:71:c4:81: 17:08:b9:41:b9:e7:d9:06:e7:f8:fb:12:d7:3a:81:79:fa:d7: e2:e3:bd:24:5f:09:e0:ee:50:5b:59:a2:2e:71:bb:e2:c4:f1: d7:60:09:2a:54:fc:29:79:26:98:8c:98:40:f2:c0:ca:dc:1d: 8c:3a:64:87:26:68:83:bf:8d:b2:17:6e:a3:66:6f:4a:5e:e2: 05:29:4e:8e:7c:a3:b9:88:3a:d0:de:26:50:d9:47:1d:9e:f8: ae:a9:21:60:f9:42:51:3d:2e:cc:36:d0:12:1f:cb:d7:e7:01: 89:a0:31:ea:ae:c7:2d:1e:ff:e0:ad:27:63:6e:41:f3:19:68: a6:f1:bc:ab:db:9e:a0:63:c3:e7:74:e6:c4:c9:0b:ad:20:35: a0:29:9a:e2:5e:d7:9b:d1:52:7d:e0:64:0e:55:5a:44:f9:96: ca:a3:1c:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYqbQwAdqj4gRd08jXqlzXa+qSd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIx RTk4RUI2RDAeFw0yNjAzMjQxMDU3MTBaFw0yNjAzMjcxMjQ1MTBaMDMxMTAvBgNV BAMTKDk3OTNCRTY4MjFBOTEwNkQxQjI1MTkzMTk3RjBDNUJBQjMyQzIzRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3crUhBQDgzc4a7ajk+QzNnofE bq+yKqZ2qev4Hk8irueOaqs/liklmgxsAXuESLNx26fbd7oH/uJpbUSrSN6aP6BG S2hYRK3qU5Zflqok72INAW37nKJFzYenYsNvESHssbdk6rMzdbvphyf8E8IFCWs2 hKnDndtxWGRCaM8UpxJb0pqEbD1MP27eRxi+uJuXtezIVmV72lCfYaKUB2+4InFO F7b+cDlLSKm2FfU/inAFeZmfVqEw9f6KQwR/p53Ld9rsniIS4MBf5/lp01kPsqGs G53dibQbgxY9dNgNWTmEQd+RrqouRwNLB40jtd2no/6+2NYKV4AhxHSX6RgTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl5O+aCGpEG0bJRkxl/DFurMsI/EwHwYDVR0j BBgwFoAULi2SaTLFx+KWkx2IGQikux6Y620wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ZmE1ODllZi05ZjNkLTQzYmMtYmEzMC1mYTMyNmI3MWY3ODcvMC8yRTJEOTI2OTMy QzVDN0UyOTY5MzFEODgxOTA4QTRCQjFFOThFQjZELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0QkIxRTk4 RUI2RC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGZhNTg5ZWYtOWYzZC00M2JjLWJh MzAtZmEzMjZiNzFmNzg3LzAvMkUyRDkyNjkzMkM1QzdFMjk2OTMxRDg4MTkwOEE0 QkIxRTk4RUI2RC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAyy8aKFbjaIyWvcpq+XWqXJpoiFJr3CI+Kb TGh0mmTSXlgqdqv6Bk99o97GbCN7R2CzVXnmiQrI7D2fjUOD8VV/JU6Q146IIBtb JGC22mL1UCSl2DT5wnHEgRcIuUG559kG5/j7Etc6gXn61+LjvSRfCeDuUFtZoi5x u+LE8ddgCSpU/Cl5JpiMmEDywMrcHYw6ZIcmaIO/jbIXbqNmb0pe4gUpTo58o7mI OtDeJlDZRx2e+K6pIWD5QlE9Lsw20BIfy9fnAYmgMequxy0e/+CtJ2NuQfMZaKbx vKvbnqBjw+d05sTJC60gNaApmuJe15vRUn3gZA5VWkT5lsqjHE8= -----END CERTIFICATE-----Generated at Thu Mar 26 13:41:08 2026 by rpki-client